Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File:                     3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier:          PeofbifJB6nsf+mV+AzARxaV4ylP7EiR+3dNbTJ2Woo=
Subject key identifier:   C4:05:30:8B:FC:73:3A:9E:E8:C9:7F:9C:B8:73:A7:34:CE:D4:06:60
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       3CCB61909E7B813FFC45262E8E0049DBF1E3D1A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number:          021B
Signing time:             Mon 12 May 2025 03:44:34 +0000
Manifest this update:     Mon 12 May 2025 03:39:34 +0000
Manifest next update:     Tue 13 May 2025 04:55:34 +0000
Files and hashes:         1: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=)
                          2: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=)
                          3: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: S0725VMgrl64RZCZqVVhC/hbV9kU2chgG7/79EGSOIM=)
                          4: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=)
                          5: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=)
                          6: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=)
                          7: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=)
                          8: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=)
                          9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 04:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:61:90:9e:7b:81:3f:fc:45:26:2e:8e:00:49:db:f1:e3:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: May 12 03:39:34 2025 GMT
            Not After : May 13 04:55:34 2025 GMT
        Subject: CN=C405308BFC733A9EE8C97F9CB873A734CED40660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:b1:27:be:c9:f8:8a:62:b4:66:72:4a:79:
                    ff:56:a3:b3:2f:5c:59:9f:f8:da:a5:3c:f8:9c:2c:
                    ce:0b:5f:94:ad:23:30:55:d7:03:23:67:26:99:2b:
                    99:6f:eb:5b:62:9b:ce:c6:77:32:d9:ae:fd:30:6f:
                    a4:2c:b9:24:2b:77:44:10:a2:ec:cd:f3:b1:31:07:
                    16:c6:9b:b7:46:c4:6f:8d:a1:1c:6e:44:6c:50:80:
                    69:e2:fe:42:a6:e8:ea:6a:46:ae:19:98:f2:55:0d:
                    6d:be:60:74:3a:9c:a7:90:58:aa:44:ea:e4:23:a5:
                    01:d9:62:bc:5b:5e:1b:d5:a6:f0:31:c6:75:3c:80:
                    42:cb:1d:cb:4c:5b:0f:3b:09:a7:70:36:a8:84:6f:
                    ee:64:cf:cd:43:1d:d8:66:aa:12:90:be:8a:aa:52:
                    76:35:c5:b6:4a:1a:0c:58:b3:71:75:6b:45:b2:b7:
                    30:d7:34:53:bc:be:23:ff:76:f2:b2:26:2a:7f:c0:
                    1f:f5:59:b4:49:33:be:26:f5:d6:70:29:6b:c5:be:
                    b7:06:25:21:29:30:36:69:45:a5:fd:d4:1f:5d:57:
                    68:b4:19:2b:a3:46:8e:a8:fc:6c:07:d1:95:cb:2c:
                    ff:44:03:55:92:10:e2:ec:39:ed:41:3e:76:8b:ee:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:05:30:8B:FC:73:3A:9E:E8:C9:7F:9C:B8:73:A7:34:CE:D4:06:60
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:85:c4:3a:81:13:d5:02:38:65:77:a2:20:57:27:e5:dd:
         9e:c8:c6:87:86:91:7c:61:1b:6b:35:26:bb:3e:92:8e:4f:1d:
         6e:03:64:ea:ab:79:48:51:3a:2c:4f:3b:81:ca:30:e2:d9:53:
         1d:12:5d:f6:dc:79:d9:b6:80:fa:61:59:7d:9c:1e:4c:bd:8b:
         9d:af:29:fc:d6:3a:e3:36:4c:bc:2d:f2:12:88:98:36:4a:f6:
         11:e9:26:d8:da:18:ec:2d:68:3c:24:5b:e0:ba:12:27:a9:15:
         66:c2:46:2c:15:87:6d:b3:ab:8d:4d:00:2c:ba:d1:62:8d:90:
         5c:06:25:be:cc:cb:36:ec:3a:b0:0e:d1:15:50:ba:37:e1:bb:
         09:36:cd:e3:2e:91:b0:eb:e1:21:09:81:30:21:bf:19:58:55:
         82:aa:de:d4:47:d1:e5:89:59:5b:c9:e3:54:13:00:6c:63:96:
         79:81:d9:7b:8d:08:0a:bd:65:d1:97:e0:d1:3b:9f:df:a7:a7:
         dd:43:14:40:e6:07:c9:b0:9a:94:37:9a:ad:a5:5e:e7:e3:96:
         d1:35:fd:61:45:f7:47:3d:88:82:e1:9d:2c:e0:95:ad:42:20:
         ae:4c:ac:c8:c0:a0:d0:73:89:d0:69:a9:d2:84:f1:84:6b:33:
         f4:d9:6a:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPMthkJ57gT/8RSYujgBJ2/Hj0agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0
QjQxNDBEMTAeFw0yNTA1MTIwMzM5MzRaFw0yNTA1MTMwNDU1MzRaMDMxMTAvBgNV
BAMTKEM0MDUzMDhCRkM3MzNBOUVFOEM5N0Y5Q0I4NzNBNzM0Q0VENDA2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDni7Envsn4imK0ZnJKef9Wo7Mv
XFmf+NqlPPicLM4LX5StIzBV1wMjZyaZK5lv61tim87GdzLZrv0wb6QsuSQrd0QQ
ouzN87ExBxbGm7dGxG+NoRxuRGxQgGni/kKm6OpqRq4ZmPJVDW2+YHQ6nKeQWKpE
6uQjpQHZYrxbXhvVpvAxxnU8gELLHctMWw87CadwNqiEb+5kz81DHdhmqhKQvoqq
UnY1xbZKGgxYs3F1a0WytzDXNFO8viP/dvKyJip/wB/1WbRJM74m9dZwKWvFvrcG
JSEpMDZpRaX91B9dV2i0GSujRo6o/GwH0ZXLLP9EA1WSEOLsOe1BPnaL7n9PAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxAUwi/xzOp7oyX+cuHOnNM7UBmAwHwYDVR0j
BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K
Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE
MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z
Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ2qFxDqBE9UCOGV3oiBXJ+XdnsjGh4aRfGEbazUmuz6Sjk8dbgNk6qt5SFE6
LE87gcow4tlTHRJd9tx52baA+mFZfZweTL2Lna8p/NY64zZMvC3yEoiYNkr2Eekm
2NoY7C1oPCRb4LoSJ6kVZsJGLBWHbbOrjU0ALLrRYo2QXAYlvszLNuw6sA7RFVC6
N+G7CTbN4y6RsOvhIQmBMCG/GVhVgqre1EfR5YlZW8njVBMAbGOWeYHZe40ICr1l
0Zfg0Tuf36en3UMUQOYHybCalDearaVe5+OW0TX9YUX3Rz2IguGdLOCVrUIgrkys
yMCg0HOJ0Gmp0oTxhGsz9Nlqfw==
-----END CERTIFICATE-----
Generated at Mon May 12 15:25:19 2025 by rpki-client