$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: ZDGebr/ObfDmE5U6L8ltv0/nk11uZEGJieSjRpCxyLA= Subject key identifier: 18:28:6C:CA:33:85:F8:63:5C:95:1D:CA:88:B6:DD:5A:40:CC:49:B4 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 37B92CD0D81A0929F3033A5E00726C99E7A15DD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 8E Signing time: Fri 02 May 2025 05:40:06 +0000 Manifest this update: Fri 02 May 2025 05:35:06 +0000 Manifest next update: Sat 03 May 2025 09:11:06 +0000 Files and hashes: 1: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) 2: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) 3: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) 4: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: wuSg0RhWugniDUeVOUZksMphs4I+CyZcov/b1Quvz00=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 09:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b9:2c:d0:d8:1a:09:29:f3:03:3a:5e:00:72:6c:99:e7:a1:5d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: May 2 05:35:06 2025 GMT Not After : May 3 09:11:06 2025 GMT Subject: CN=18286CCA3385F8635C951DCA88B6DD5A40CC49B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:74:a5:f5:6f:e0:10:61:c3:8a:0e:17:22: bb:ad:48:5c:37:70:36:71:d7:5d:75:b1:59:c8:9c: 9d:72:04:e9:6e:6b:84:91:f3:52:5c:d5:ec:21:93: d6:20:73:09:29:19:92:70:6f:c3:fb:3b:7b:60:11: f9:cb:3a:3c:05:85:ad:f9:f1:55:e0:a6:db:e0:4c: a8:70:a0:68:ea:4a:64:86:bc:4c:30:d1:c3:3b:c4: 7d:44:bc:af:9b:7d:0f:a6:38:eb:7c:ec:96:7b:cc: 63:6d:a4:b9:a4:2a:cf:dd:38:7b:d7:ca:cd:00:9c: 54:4f:ee:47:e1:c6:a3:4f:8c:02:bc:0e:9b:6b:c2: 1c:9d:43:e0:44:60:47:70:a9:06:aa:1f:fa:dc:51: c1:5a:18:25:ed:37:da:ad:ea:4e:20:53:eb:c9:6e: 38:44:51:67:b2:44:08:31:b9:48:5b:f7:ff:5d:95: 47:0c:f9:58:22:54:a1:cd:00:39:d6:39:9d:67:d4: 3e:cc:f2:95:b1:f3:db:e6:65:2b:4e:ea:3f:7c:24: ec:8e:f2:c4:52:08:77:d1:84:0a:b4:88:25:19:9a: b8:8f:3e:b6:41:1d:04:87:08:87:33:31:64:7d:0b: a5:7b:ca:20:8e:cb:4b:9f:98:01:90:b6:d0:bd:e3: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:6C:CA:33:85:F8:63:5C:95:1D:CA:88:B6:DD:5A:40:CC:49:B4 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e3:ab:59:5c:7f:05:53:dc:dc:34:f5:3b:d9:26:30:07:ef: 9b:40:3c:c9:dd:d6:cf:dd:dd:6e:96:34:26:79:6b:32:b2:64: b5:87:75:48:9d:15:f8:25:d3:e9:71:51:81:23:e8:fe:2a:7c: c1:9c:04:c4:84:2b:de:9a:9f:3b:74:ae:69:af:55:9c:c2:49: 2a:ad:c2:71:b3:31:b3:a1:8c:7b:56:9e:d2:72:af:8c:c2:d2: db:3b:7e:ee:39:f0:bf:c9:06:8d:48:4d:05:57:3b:3c:90:9a: eb:ca:30:52:48:34:1c:e6:4d:e3:14:66:8f:36:4b:cc:91:08: 9d:9f:9d:88:8a:5a:de:ad:23:e8:83:00:7e:eb:6d:6f:ad:a8: 19:f5:96:cc:92:f2:3f:54:87:14:b6:3d:17:56:7d:8f:91:a0: 29:18:e2:5f:06:58:40:18:d8:64:f9:8d:63:37:18:d4:6f:95: b1:57:25:d1:1d:3b:7c:f8:4e:03:9a:df:21:79:6f:3f:e0:fb: 1f:b9:ee:71:e1:b2:92:fb:11:83:f5:d6:ea:62:3b:35:37:fb: 9b:47:39:6d:e8:33:b0:46:1e:9f:05:71:cb:f1:bb:dd:0e:ed: a8:f2:e4:1f:8b:cf:fd:a4:0b:4a:57:bc:ba:38:ed:3e:b4:58: 8c:21:66:dd -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUN7ks0NgaCSnzAzpeAHJsmeehXdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTA1MDIwNTM1MDZaFw0yNTA1MDMwOTExMDZaMDMxMTAvBgNV BAMTKDE4Mjg2Q0NBMzM4NUY4NjM1Qzk1MURDQTg4QjZERDVBNDBDQzQ5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchXSl9W/gEGHDig4XIrutSFw3 cDZx1111sVnInJ1yBOlua4SR81Jc1ewhk9YgcwkpGZJwb8P7O3tgEfnLOjwFha35 8VXgptvgTKhwoGjqSmSGvEww0cM7xH1EvK+bfQ+mOOt87JZ7zGNtpLmkKs/dOHvX ys0AnFRP7kfhxqNPjAK8DptrwhydQ+BEYEdwqQaqH/rcUcFaGCXtN9qt6k4gU+vJ bjhEUWeyRAgxuUhb9/9dlUcM+VgiVKHNADnWOZ1n1D7M8pWx89vmZStO6j98JOyO 8sRSCHfRhAq0iCUZmriPPrZBHQSHCIczMWR9C6V7yiCOy0ufmAGQttC940MJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUGChsyjOF+GNclR3KiLbdWkDMSbQwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA BOOrWVx/BVPc3DT1O9kmMAfvm0A8yd3Wz93dbpY0JnlrMrJktYd1SJ0V+CXT6XFR gSPo/ip8wZwExIQr3pqfO3Suaa9VnMJJKq3CcbMxs6GMe1ae0nKvjMLS2zt+7jnw v8kGjUhNBVc7PJCa68owUkg0HOZN4xRmjzZLzJEInZ+diIpa3q0j6IMAfuttb62o GfWWzJLyP1SHFLY9F1Z9j5GgKRjiXwZYQBjYZPmNYzcY1G+VsVcl0R07fPhOA5rf IXlvP+D7H7nuceGykvsRg/XW6mI7NTf7m0c5begzsEYenwVxy/G73Q7tqPLkH4vP /aQLSle8ujjtPrRYjCFm3Q== -----END CERTIFICATE-----Generated at Sat May 3 01:49:42 2025 by rpki-client