Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft
File:                     F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft (raw, json)
Hash identifier:          bbtwAiHsSF+QdGROgDbnCPbADfcwn8I9ecyDYKDuYkY=
Subject key identifier:   F6:6C:FD:AD:65:48:3E:B4:1E:82:8C:99:97:56:A1:C4:21:C3:3F:BC
Authority key identifier: F9:F4:1A:62:53:E1:A1:77:16:D9:8D:5D:A2:EF:1A:E9:61:D9:82:AC
Certificate issuer:       /CN=F9F41A6253E1A17716D98D5DA2EF1AE961D982AC
Certificate serial:       58B324661B708AB18D78D46D501F28760B440DEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft
Manifest number:          2F
Signing time:             Tue 29 Apr 2025 05:44:41 +0000
Manifest this update:     Tue 29 Apr 2025 05:39:41 +0000
Manifest next update:     Wed 30 Apr 2025 09:19:41 +0000
Files and hashes:         1: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: 2YiJUQd/WVlxbIkuGViT0lmtK7DSkEDe0YFLqjRiUw0=)
                          2: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: KLIrLqynYRHYIDyJCSUZiurC91KhWU6h0dCEReuTdwc=)
                          3: F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.crl (hash: PVJPhkQ7RznUHn0SP7oteCmFmi83jt5tdaLsQKlcfqg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 09:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b3:24:66:1b:70:8a:b1:8d:78:d4:6d:50:1f:28:76:0b:44:0d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F41A6253E1A17716D98D5DA2EF1AE961D982AC
        Validity
            Not Before: Apr 29 05:39:41 2025 GMT
            Not After : Apr 30 09:19:41 2025 GMT
        Subject: CN=F66CFDAD65483EB41E828C999756A1C421C33FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:d3:ed:e0:fb:49:93:bd:3e:48:8d:56:f3:
                    fb:29:9a:90:8f:23:b3:35:02:cc:db:09:44:4a:e4:
                    40:f5:36:8f:7e:62:a9:49:cc:c8:ab:0a:e5:0e:0a:
                    de:28:89:21:de:59:af:ef:c0:69:b9:5e:8a:ca:78:
                    56:c7:2a:d0:0a:2e:12:07:ae:5c:6d:8f:82:0a:88:
                    fc:15:14:0e:7e:76:79:e1:05:f5:8a:ac:55:c2:32:
                    25:c6:f3:b1:2a:e4:40:c7:3f:8e:7f:a0:75:f6:c0:
                    09:b5:9f:b7:2e:f0:83:b3:f1:e9:56:06:d8:3f:8d:
                    df:bf:2e:db:14:19:a7:f5:be:00:c9:06:e9:e7:b3:
                    8d:7a:70:69:76:06:cc:d1:89:83:fc:b1:12:97:5f:
                    a7:f1:98:06:60:c3:90:46:28:63:be:fb:71:f4:15:
                    8c:a7:6a:08:49:63:30:5a:ac:28:eb:3b:1c:e6:43:
                    4a:b5:91:49:ac:cc:f5:c7:2a:86:e6:19:d8:ec:44:
                    73:75:f4:60:60:6b:b3:58:03:0a:82:c4:d5:6d:f6:
                    4d:38:e2:b7:7b:04:19:c5:d4:45:65:85:00:9d:0d:
                    32:5c:5c:7e:e8:26:c4:4c:5c:bd:7d:77:0a:f7:23:
                    bd:cf:82:4e:73:e3:00:10:56:38:cf:86:73:66:7d:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:FD:AD:65:48:3E:B4:1E:82:8C:99:97:56:A1:C4:21:C3:3F:BC
            X509v3 Authority Key Identifier:
                keyid:F9:F4:1A:62:53:E1:A1:77:16:D9:8D:5D:A2:EF:1A:E9:61:D9:82:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:69:bb:cb:f3:34:6e:79:80:fb:1c:c7:1d:58:32:43:a1:
         91:b9:d2:47:b0:41:d4:50:82:7e:0c:f9:3a:1d:59:5c:37:1b:
         f5:33:e5:60:db:24:b0:f6:fe:87:08:65:34:77:2b:ac:36:e9:
         b3:e1:f6:e4:dd:c6:b7:33:9f:07:73:3c:3e:8b:bb:b5:cf:92:
         9a:93:83:49:7c:35:5a:7d:39:63:02:9a:77:b0:8c:71:79:6a:
         05:27:0d:c2:76:2b:04:c2:3a:54:f2:02:c5:b0:3d:e0:85:4b:
         f2:ea:4c:c2:26:48:8b:de:04:16:e0:64:1a:73:70:af:19:a5:
         a6:7d:33:ed:02:6f:3d:9b:0f:6c:ab:e8:e8:88:42:2f:54:fd:
         03:78:9c:d0:f5:89:f5:c5:23:db:ff:37:e6:ee:c3:13:7b:64:
         cc:48:5a:ab:5c:7b:fd:df:fd:22:ee:15:9a:24:fa:1e:bb:bd:
         c2:45:7f:85:ac:44:9c:fc:18:78:2f:96:16:ca:f5:d6:6d:4b:
         6c:b5:9e:6c:8c:7b:3b:c8:61:b4:da:2b:fd:e6:6a:a3:f4:08:
         55:a3:2c:6d:f8:d0:ec:4f:05:43:72:ef:8a:a3:2f:09:0d:2a:
         f9:ab:65:1f:94:4c:cf:37:ce:fc:5f:fa:ae:f2:1d:cd:27:69:
         2a:3c:52:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWLMkZhtwirGNeNRtUB8odgtEDe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGNDFBNjI1M0UxQTE3NzE2RDk4RDVEQTJFRjFBRTk2
MUQ5ODJBQzAeFw0yNTA0MjkwNTM5NDFaFw0yNTA0MzAwOTE5NDFaMDMxMTAvBgNV
BAMTKEY2NkNGREFENjU0ODNFQjQxRTgyOEM5OTk3NTZBMUM0MjFDMzNGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qtPt4PtJk70+SI1W8/spmpCP
I7M1AszbCURK5ED1No9+YqlJzMirCuUOCt4oiSHeWa/vwGm5XorKeFbHKtAKLhIH
rlxtj4IKiPwVFA5+dnnhBfWKrFXCMiXG87Eq5EDHP45/oHX2wAm1n7cu8IOz8elW
Btg/jd+/LtsUGaf1vgDJBunns416cGl2BszRiYP8sRKXX6fxmAZgw5BGKGO++3H0
FYynaghJYzBarCjrOxzmQ0q1kUmszPXHKobmGdjsRHN19GBga7NYAwqCxNVt9k04
4rd7BBnF1EVlhQCdDTJcXH7oJsRMXL19dwr3I73Pgk5z4wAQVjjPhnNmff4HAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9mz9rWVIPrQegoyZl1ahxCHDP7wwHwYDVR0j
BBgwFoAU+fQaYlPhoXcW2Y1dou8a6WHZgqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC9GOUY0MUE2MjUzRTFBMTc3MTZEOThENURBMkVGMUFFOTYxRDk4MkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RjQxQTYyNTNFMUExNzcx
NkQ5OEQ1REEyRUYxQUU5NjFEOTgyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC9G
OUY0MUE2MjUzRTFBMTc3MTZEOThENURBMkVGMUFFOTYxRDk4MkFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ9Jpu8vzNG55gPscxx1YMkOhkbnSR7BB1FCCfgz5Oh1ZXDcb9TPlYNsksPb+
hwhlNHcrrDbps+H25N3GtzOfB3M8Pou7tc+SmpODSXw1Wn05YwKad7CMcXlqBScN
wnYrBMI6VPICxbA94IVL8upMwiZIi94EFuBkGnNwrxmlpn0z7QJvPZsPbKvo6IhC
L1T9A3ic0PWJ9cUj2/835u7DE3tkzEhaq1x7/d/9Iu4VmiT6Hru9wkV/haxEnPwY
eC+WFsr11m1LbLWebIx7O8hhtNor/eZqo/QIVaMsbfjQ7E8FQ3LviqMvCQ0q+atl
H5RMzzfO/F/6rvIdzSdpKjxSfg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:08:15 2025 by rpki-client