$ rpki-client -vvf rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft File: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft (raw, json) Hash identifier: /o46MTarce12nfrtVebUePP2sWrTGztWjNHHtoc8wrg= Subject key identifier: 5D:63:E4:64:61:89:E6:E1:8A:21:F5:93:98:A6:47:F5:F0:1D:A2:29 Authority key identifier: 68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 Certificate issuer: /CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2 Certificate serial: 0961580F4E01436F0319CA444EA1E0E4A14D4D8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft Manifest number: 0200 Signing time: Mon 28 Apr 2025 04:04:26 +0000 Manifest this update: Mon 28 Apr 2025 03:59:26 +0000 Manifest next update: Tue 29 Apr 2025 06:36:26 +0000 Files and hashes: 1: 323830343a353836343a3a2f33322d3333203d3e20323638313236.roa (hash: sJDjg3v90oDmxBogDwc4XYt8NQH4xKEXHTR91axSuGY=) 2: 6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl (hash: 5yPomv9uLgRDgoz/PDOVrvy2SRETRaix1ZiiZpd4I/E=) 3: 34352e3136392e3232382e302f32322d3234203d3e20323638313236.roa (hash: F7/ozPUiAu1ckfZa+qHreWcvCrOKiMYktnT8pnpwbMA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:61:58:0f:4e:01:43:6f:03:19:ca:44:4e:a1:e0:e4:a1:4d:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6897E867CE6150039D0FAD4F6122F7AE3156D5A2 Validity Not Before: Apr 28 03:59:26 2025 GMT Not After : Apr 29 06:36:26 2025 GMT Subject: CN=5D63E4646189E6E18A21F59398A647F5F01DA229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:da:db:7a:81:44:4b:4f:f6:b5:ee:20:9a: 5a:9f:22:3a:02:05:aa:42:6a:a5:65:e7:a6:8e:77: 0e:5e:52:ba:d3:0d:ba:ae:dd:8e:6a:7e:76:ec:80: 18:f0:46:6e:a8:7d:cc:90:8d:3a:c3:29:85:40:bb: 60:6b:e0:ff:5c:91:3f:a0:10:a1:3b:27:a1:2f:d5: e8:04:e5:90:4c:11:a4:23:e1:3f:cc:2b:ef:18:1b: 40:ae:0d:cc:3b:d0:fd:aa:85:d1:3c:95:4b:f4:60: f8:8a:01:0d:c1:01:7f:1b:3c:a5:48:f4:58:d6:ff: f8:13:85:3a:fa:9d:80:ea:c0:2c:d5:58:51:c3:e0: 7f:f7:3b:3a:42:fa:53:5b:be:71:50:cc:eb:16:11: 73:4c:cd:60:2d:b1:81:e3:2b:46:c4:20:a7:0d:27: 3c:16:b0:7e:19:7a:be:1b:6a:bc:30:f1:87:6a:82: 4c:d4:b5:79:45:36:18:82:29:35:8e:90:84:ab:c3: 6a:27:e9:cf:8e:24:87:35:ed:fc:9b:3d:d8:6e:16: 12:9a:fc:55:1d:6f:fe:a1:50:be:c8:12:e3:c2:3d: f8:1e:6e:21:0f:39:09:ed:5f:7a:9d:be:84:c0:1b: c0:89:98:e9:f8:09:be:09:9c:fa:77:c8:06:44:83: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:63:E4:64:61:89:E6:E1:8A:21:F5:93:98:A6:47:F5:F0:1D:A2:29 X509v3 Authority Key Identifier: keyid:68:97:E8:67:CE:61:50:03:9D:0F:AD:4F:61:22:F7:AE:31:56:D5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/2/6897E867CE6150039D0FAD4F6122F7AE3156D5A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7c:f3:93:dc:88:4f:f6:21:88:e7:2a:47:bf:bd:7e:ba:7b: 7b:ad:69:d5:a2:4c:3a:b4:5b:3c:b3:45:67:4a:2f:91:a1:17: 23:5a:2c:5e:88:2a:19:ed:ea:ca:c8:93:42:c3:4e:62:72:04: 47:ad:8f:d4:42:07:43:9e:21:c7:54:5e:92:45:6a:18:ae:38: ba:35:7a:77:df:bb:40:9a:c1:11:88:da:43:c5:bd:4c:7f:5d: 26:8c:72:69:c7:70:57:b7:c4:5d:23:aa:af:42:41:3a:5f:1f: e1:58:d5:33:1d:ca:76:76:27:df:ec:f3:d7:5c:9b:cd:6d:e9: 0d:74:a9:48:8b:03:2e:b4:95:5a:65:5e:ab:08:80:66:ce:5c: 58:43:3b:25:b9:68:0b:04:81:fe:32:31:cf:2f:1b:90:c4:a5: d6:5a:5c:b6:c1:73:50:13:1c:c2:8e:09:a8:7d:db:cc:71:61: 28:70:1e:1b:8d:17:1c:f8:3b:73:57:44:b2:0a:93:0f:06:cb: c9:d3:48:25:46:b5:17:5e:8f:ee:d5:68:c6:5d:69:ff:cf:4e: de:8f:93:7c:1b:22:79:30:24:1e:e3:49:61:fd:4d:e5:3e:b4: 8e:46:e5:fa:7c:2b:ba:da:f2:c3:f9:89:83:58:9a:df:ec:3f: ff:5e:e4:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCWFYD04BQ28DGcpETqHg5KFNTYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg5N0U4NjdDRTYxNTAwMzlEMEZBRDRGNjEyMkY3QUUz MTU2RDVBMjAeFw0yNTA0MjgwMzU5MjZaFw0yNTA0MjkwNjM2MjZaMDMxMTAvBgNV BAMTKDVENjNFNDY0NjE4OUU2RTE4QTIxRjU5Mzk4QTY0N0Y1RjAxREEyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWdrbeoFES0/2te4gmlqfIjoC BapCaqVl56aOdw5eUrrTDbqu3Y5qfnbsgBjwRm6ofcyQjTrDKYVAu2Br4P9ckT+g EKE7J6Ev1egE5ZBMEaQj4T/MK+8YG0CuDcw70P2qhdE8lUv0YPiKAQ3BAX8bPKVI 9FjW//gThTr6nYDqwCzVWFHD4H/3OzpC+lNbvnFQzOsWEXNMzWAtsYHjK0bEIKcN JzwWsH4Zer4barww8YdqgkzUtXlFNhiCKTWOkISrw2on6c+OJIc17fybPdhuFhKa /FUdb/6hUL7IEuPCPfgebiEPOQntX3qdvoTAG8CJmOn4Cb4JnPp3yAZEg/c7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXWPkZGGJ5uGKIfWTmKZH9fAdoikwHwYDVR0j BBgwFoAUaJfoZ85hUAOdD61PYSL3rjFW1aIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1Vh akEvMi82ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTdFODY3Q0U2MTUwMDM5 RDBGQUQ0RjYxMjJGN0FFMzE1NkQ1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXdNcWZ6WVBIWXJtY2tVYlAxZHRNUXluOFR4M1F1aDU3TlNhMkZna1VhakEvMi82 ODk3RTg2N0NFNjE1MDAzOUQwRkFENEY2MTIyRjdBRTMxNTZENUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXzzk9yIT/YhiOcqR7+9frp7e61p1aJMOrRbPLNFZ0ovkaEXI1osXogqGe3q ysiTQsNOYnIER62P1EIHQ54hx1RekkVqGK44ujV6d9+7QJrBEYjaQ8W9TH9dJoxy acdwV7fEXSOqr0JBOl8f4VjVMx3KdnYn3+zz11ybzW3pDXSpSIsDLrSVWmVeqwiA Zs5cWEM7JbloCwSB/jIxzy8bkMSl1lpctsFzUBMcwo4JqH3bzHFhKHAeG40XHPg7 c1dEsgqTDwbLydNIJUa1F16P7tVoxl1p/89O3o+TfBsieTAkHuNJYf1N5T60jkbl +nwrutryw/mJg1ia3+w//17kKQ== -----END CERTIFICATE-----Generated at Mon Apr 28 06:00:05 2025 by rpki-client on console.sobornost.net