Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          4OApXgzS8PAAwPLH6W7mY29NYQAZ3scBtyCMj8flwSE=
Subject key identifier:   5C:27:88:81:3C:16:3C:38:D7:5E:98:92:7F:5B:9C:35:D4:D3:52:6F
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       1EB543D09CB0C219C9A9DBCCB703FFE459905961
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          024A
Signing time:             Mon 28 Apr 2025 18:50:00 +0000
Manifest this update:     Mon 28 Apr 2025 18:45:00 +0000
Manifest next update:     Tue 29 Apr 2025 18:50:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: MDxWGO+xsU/zrtpU3Gsvhlv5yzu2hFVtrQosTujvtY4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b5:43:d0:9c:b0:c2:19:c9:a9:db:cc:b7:03:ff:e4:59:90:59:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Apr 28 18:45:00 2025 GMT
            Not After : May  5 18:50:00 2025 GMT
        Subject: CN=3082010A0282010100E23A097A497F7EAA6F2F7E369FF3115B3C1949B7EC7CA356C4F49F3BCB29C934D2A704D2AFA3033BF41629BD11E84040386316D8EE338B8D14B10321939005556FBF8B84F197FF02944CAABAF252361B2E1E52568322E043A2C9870EE7631A2474E16AA736068D72F3C116356887FCC3E10B314365F77FE4B5146A74931A2CB894A5C778A2D634653F530B5F56D0420DF2CF831A522CF85CE5C2BEAC84C32BB3FC52A41E155AA0AF898E978D40A8BFADD40E6A7634C6FB88377B9E9979CF1FA01EC63453FD15316A05376DF71D4BFAE2F31BDFB39322389B186357AD4431A7C79126A9E2ECBD065387B33916FCE8A237907B9D42C0D9D86D8A9792CAA1E91D410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:09:7a:49:7f:7e:aa:6f:2f:7e:36:9f:f3:
                    11:5b:3c:19:49:b7:ec:7c:a3:56:c4:f4:9f:3b:cb:
                    29:c9:34:d2:a7:04:d2:af:a3:03:3b:f4:16:29:bd:
                    11:e8:40:40:38:63:16:d8:ee:33:8b:8d:14:b1:03:
                    21:93:90:05:55:6f:bf:8b:84:f1:97:ff:02:94:4c:
                    aa:ba:f2:52:36:1b:2e:1e:52:56:83:22:e0:43:a2:
                    c9:87:0e:e7:63:1a:24:74:e1:6a:a7:36:06:8d:72:
                    f3:c1:16:35:68:87:fc:c3:e1:0b:31:43:65:f7:7f:
                    e4:b5:14:6a:74:93:1a:2c:b8:94:a5:c7:78:a2:d6:
                    34:65:3f:53:0b:5f:56:d0:42:0d:f2:cf:83:1a:52:
                    2c:f8:5c:e5:c2:be:ac:84:c3:2b:b3:fc:52:a4:1e:
                    15:5a:a0:af:89:8e:97:8d:40:a8:bf:ad:d4:0e:6a:
                    76:34:c6:fb:88:37:7b:9e:99:79:cf:1f:a0:1e:c6:
                    34:53:fd:15:31:6a:05:37:6d:f7:1d:4b:fa:e2:f3:
                    1b:df:b3:93:22:38:9b:18:63:57:ad:44:31:a7:c7:
                    91:26:a9:e2:ec:bd:06:53:87:b3:39:16:fc:e8:a2:
                    37:90:7b:9d:42:c0:d9:d8:6d:8a:97:92:ca:a1:e9:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:88:81:3C:16:3C:38:D7:5E:98:92:7F:5B:9C:35:D4:D3:52:6F
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:d1:3b:6d:1a:42:71:31:16:2f:7b:90:53:90:be:b9:fe:
         8c:88:04:d6:00:bc:85:6d:ac:ea:ed:d0:d2:aa:67:92:85:70:
         2b:b2:6f:5a:7e:6a:2d:f3:38:4d:54:78:82:9f:9a:9c:33:37:
         2d:b5:dd:8f:66:4e:ed:ae:0b:d0:54:27:51:21:84:e0:12:86:
         ef:bc:52:38:e2:9b:7b:d8:5a:c0:83:4d:d8:b7:11:0c:d4:43:
         30:f7:7a:66:d3:dd:0c:b2:e6:96:ed:f6:c0:e0:d8:ad:60:ad:
         e4:36:d2:b8:d5:ab:6c:9a:03:fb:36:68:cf:d4:8c:12:8a:f6:
         7b:02:02:94:b9:8a:5b:8b:31:02:0d:28:2b:9a:8a:05:23:85:
         88:33:cf:71:e9:6d:20:de:a7:6e:6a:44:0f:44:6a:d0:a5:7c:
         fe:6b:a4:ba:84:7c:03:83:1f:db:22:da:62:c7:6b:91:d0:26:
         fc:21:39:a2:68:ff:d6:4a:b1:47:a0:c2:67:30:cc:1d:17:5a:
         b5:15:9f:7e:1c:1c:c9:02:2b:80:dc:27:79:4a:a3:08:83:96:
         02:9b:a1:0c:47:19:bc:1c:e7:7d:a6:71:e7:f6:3e:cc:8b:48:
         51:19:87:71:97:9a:6a:48:ff:c5:b8:28:47:ab:ac:4a:9d:52:
         89:e6:22:5e
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUHrVD0JywwhnJqdvMtwP/5FmQWWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5MzM1RTU4RDdGRDFG
ODI2MzgzMDAeFw0yNTA0MjgxODQ1MDBaFw0yNTA1MDUxODUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTIzQTA5N0E0OTdGN0VBQTZG
MkY3RTM2OUZGMzExNUIzQzE5NDlCN0VDN0NBMzU2QzRGNDlGM0JDQjI5QzkzNEQy
QTcwNEQyQUZBMzAzM0JGNDE2MjlCRDExRTg0MDQwMzg2MzE2RDhFRTMzOEI4RDE0
QjEwMzIxOTM5MDA1NTU2RkJGOEI4NEYxOTdGRjAyOTQ0Q0FBQkFGMjUyMzYxQjJF
MUU1MjU2ODMyMkUwNDNBMkM5ODcwRUU3NjMxQTI0NzRFMTZBQTczNjA2OEQ3MkYz
QzExNjM1Njg4N0ZDQzNFMTBCMzE0MzY1Rjc3RkU0QjUxNDZBNzQ5MzFBMkNCODk0
QTVDNzc4QTJENjM0NjUzRjUzMEI1RjU2RDA0MjBERjJDRjgzMUE1MjJDRjg1Q0U1
QzJCRUFDODRDMzJCQjNGQzUyQTQxRTE1NUFBMEFGODk4RTk3OEQ0MEE4QkZBREQ0
MEU2QTc2MzRDNkZCODgzNzdCOUU5OTc5Q0YxRkEwMUVDNjM0NTNGRDE1MzE2QTA1
Mzc2REY3MUQ0QkZBRTJGMzFCREZCMzkzMjIzODlCMTg2MzU3QUQ0NDMxQTdDNzkx
MjZBOUUyRUNCRDA2NTM4N0IzMzkxNkZDRThBMjM3OTA3QjlENDJDMEQ5RDg2RDhB
OTc5MkNBQTFFOTFENDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4joJekl/fqpvL342n/MRWzwZSbfsfKNWxPSfO8spyTTSpwTSr6MD
O/QWKb0R6EBAOGMW2O4zi40UsQMhk5AFVW+/i4Txl/8ClEyquvJSNhsuHlJWgyLg
Q6LJhw7nYxokdOFqpzYGjXLzwRY1aIf8w+ELMUNl93/ktRRqdJMaLLiUpcd4otY0
ZT9TC19W0EIN8s+DGlIs+Fzlwr6shMMrs/xSpB4VWqCviY6XjUCov63UDmp2NMb7
iDd7npl5zx+gHsY0U/0VMWoFN233HUv64vMb37OTIjibGGNXrUQxp8eRJqni7L0G
U4ezORb86KI3kHudQsDZ2G2Kl5LKoekdQQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFwniIE8Fjw4116Ykn9bnDXU01JvMB8GA1UdIwQYMBaAFC12Z6qj67cgSKeTNeWN
f9H4JjgwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNr
dDdaYWdSNGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcy
MDQ4QTc5MzM1RTU4RDdGRDFGODI2MzgzMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRDc2NjdBQUEzRUJCNzIwNDhBNzkzMzVFNThEN0ZEMUY4MjYz
ODMwLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNrdDdaYWdS
NGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5
MzM1RTU4RDdGRDFGODI2MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGio0TttGkJxMRYve5BTkL65
/oyIBNYAvIVtrOrt0NKqZ5KFcCuyb1p+ai3zOE1UeIKfmpwzNy213Y9mTu2uC9BU
J1EhhOAShu+8Ujjim3vYWsCDTdi3EQzUQzD3embT3Qyy5pbt9sDg2K1greQ20rjV
q2yaA/s2aM/UjBKK9nsCApS5iluLMQINKCuaigUjhYgzz3HpbSDep25qRA9EatCl
fP5rpLqEfAODH9si2mLHa5HQJvwhOaJo/9ZKsUegwmcwzB0XWrUVn34cHMkCK4Dc
J3lKowiDlgKboQxHGbwc532mcef2PsyLSFEZh3GXmmpI/8W4KEerrEqdUonmIl4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:23 2025 by rpki-client