$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft File: CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json) Hash identifier: W+sUzqwAMZkakNOwdUl9Nn2GOk8/6KNb787jrcvnVLw= Subject key identifier: 05:86:D8:19:5C:F1:9B:2B:29:3D:6B:D3:E9:69:92:83:AB:56:7B:5E Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Certificate serial: 16FF2A473DDF1CB82B5B113DBBD1490A5FFB403B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft Manifest number: 0218 Signing time: Thu 24 Apr 2025 20:09:03 +0000 Manifest this update: Thu 24 Apr 2025 20:04:03 +0000 Manifest next update: Fri 25 Apr 2025 22:45:03 +0000 Files and hashes: 1: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=) 2: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=) 3: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: 5p8Hsr5nxYJ6fYnH60aa7mIQsLYrIVu633svoIMUrmM=) 4: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: bOpaIkAXXsKIN+Ct+fHUeGfiD988enjiann3sdq8QpE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ff:2a:47:3d:df:1c:b8:2b:5b:11:3d:bb:d1:49:0a:5f:fb:40:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6 Validity Not Before: Apr 24 20:04:03 2025 GMT Not After : Apr 25 22:45:03 2025 GMT Subject: CN=0586D8195CF19B2B293D6BD3E9699283AB567B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e9:66:f7:0e:b8:1c:c0:22:69:c0:33:df:69: d2:dc:8b:05:52:ff:e8:fa:98:62:7b:42:d7:5a:28: a8:d7:15:e0:03:d8:86:bc:3d:96:44:ed:8e:c1:9d: c5:42:8c:e7:24:38:10:13:36:c7:9b:a5:18:3a:4f: 00:6a:0c:75:c3:23:b0:4e:b6:d2:0a:c6:57:22:fc: 8b:1c:96:e1:0d:89:80:55:91:27:37:2d:b6:a2:e1: fe:8a:f3:1a:54:ff:31:98:db:94:6e:70:be:3c:16: 24:0a:b7:dd:c5:49:3d:59:9c:d7:e0:6c:a6:24:cd: e4:0b:6f:cc:98:c8:1e:59:68:de:75:5b:04:81:60: 51:a0:4a:1d:4e:5c:44:42:64:d5:09:b6:88:3e:16: 84:ef:15:04:1f:39:10:00:53:e8:ba:f1:81:06:5f: af:da:ca:52:7c:9c:70:45:99:80:80:7a:12:f7:b8: fb:3d:6d:dc:59:46:ea:78:9f:4b:c0:84:f8:ae:9f: d8:76:1d:96:70:a6:ef:8d:7c:72:75:03:57:76:b8: 1a:98:9a:75:22:e8:e5:23:ac:33:10:66:19:6e:eb: 15:0d:45:bc:57:cc:83:3d:46:6a:fc:c1:06:9e:81: c5:9f:dc:87:34:2e:40:2e:5c:e6:6d:70:e1:1b:e9: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:86:D8:19:5C:F1:9B:2B:29:3D:6B:D3:E9:69:92:83:AB:56:7B:5E X509v3 Authority Key Identifier: keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:34:26:c5:92:f1:df:c8:ec:1a:78:ed:06:4b:df:3d:a2:0d: 3d:7f:53:7e:f1:98:60:c0:cd:80:29:72:94:dc:86:fe:cc:f6: bd:06:d2:20:97:b4:3f:28:02:b0:aa:d0:16:3b:17:26:f0:52: be:d7:2f:69:ff:2e:e9:df:fa:31:c4:fc:81:45:a1:1d:76:fa: 84:60:b2:f5:d3:d5:e2:11:d0:a7:da:06:35:f8:3f:71:92:09: bd:bd:9b:75:41:88:fb:ae:bf:86:0f:92:81:c7:43:63:45:4b: d2:93:d9:93:4e:fd:4b:28:67:19:18:9e:52:94:c4:79:17:d8: 6a:89:76:f7:67:3c:a3:ab:b4:80:8a:e5:36:dd:81:10:92:30: 1c:ec:95:91:1a:93:fb:45:aa:17:b3:c8:24:62:33:8e:b1:97: b0:ee:2f:44:2f:23:bf:ba:12:f4:d0:79:9f:5c:50:e4:ba:28: cd:d9:9e:47:97:87:01:ff:9f:82:1a:56:0b:54:31:34:8b:d7: 7e:25:e1:d9:da:6e:c5:ee:44:b1:8f:06:fd:9d:b7:fc:13:50: 2c:98:42:50:96:0d:83:59:86:9b:e6:ac:4a:85:bc:be:43:8e: a5:29:81:05:0c:06:d9:53:de:f0:a4:fa:ab:00:dc:41:f0:28: 85:fc:6c:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFv8qRz3fHLgrWxE9u9FJCl/7QDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2 QkJCRENDNjAeFw0yNTA0MjQyMDA0MDNaFw0yNTA0MjUyMjQ1MDNaMDMxMTAvBgNV BAMTKDA1ODZEODE5NUNGMTlCMkIyOTNENkJEM0U5Njk5MjgzQUI1NjdCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz6Wb3DrgcwCJpwDPfadLciwVS /+j6mGJ7QtdaKKjXFeAD2Ia8PZZE7Y7BncVCjOckOBATNsebpRg6TwBqDHXDI7BO ttIKxlci/IscluENiYBVkSc3Lbai4f6K8xpU/zGY25RucL48FiQKt93FST1ZnNfg bKYkzeQLb8yYyB5ZaN51WwSBYFGgSh1OXERCZNUJtog+FoTvFQQfORAAU+i68YEG X6/aylJ8nHBFmYCAehL3uPs9bdxZRup4n0vAhPiun9h2HZZwpu+NfHJ1A1d2uBqY mnUi6OUjrDMQZhlu6xUNRbxXzIM9Rmr8wQaegcWf3Ic0LkAuXOZtcOEb6eCvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBYbYGVzxmyspPWvT6WmSg6tWe14wHwYDVR0j BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1 MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkxa0ovMC9D QTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTQmxZLx38jsGnjtBkvfPaINPX9TfvGYYMDNgClylNyG/sz2vQbSIJe0PygC sKrQFjsXJvBSvtcvaf8u6d/6McT8gUWhHXb6hGCy9dPV4hHQp9oGNfg/cZIJvb2b dUGI+66/hg+SgcdDY0VL0pPZk079SyhnGRieUpTEeRfYaol292c8o6u0gIrlNt2B EJIwHOyVkRqT+0WqF7PIJGIzjrGXsO4vRC8jv7oS9NB5n1xQ5LoozdmeR5eHAf+f ghpWC1QxNIvXfiXh2dpuxe5EsY8G/Z23/BNQLJhCUJYNg1mGm+asSoW8vkOOpSmB BQwG2VPe8KT6qwDcQfAohfxsQA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:53 2025 by rpki-client on console.sobornost.net