Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
File:                     91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json)
Hash identifier:          ZXs0NR+SoOtNYwp55FSWeF2hGq9hxakoKqaG4t3Uvp4=
Subject key identifier:   10:07:59:09:10:A5:3C:6E:33:F3:49:3E:1E:70:D8:40:40:4A:42:CB
Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
Certificate issuer:       /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Certificate serial:       418653866419EB660D21DCC11CB66C124B98A2BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
Manifest number:          D9
Signing time:             Mon 16 Jun 2025 20:38:38 +0000
Manifest this update:     Mon 16 Jun 2025 20:33:38 +0000
Manifest next update:     Tue 17 Jun 2025 23:31:38 +0000
Files and hashes:         1: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=)
                          2: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=)
                          3: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=)
                          4: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=)
                          5: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=)
                          6: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=)
                          7: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: zT0ilYy1QuzugzArN+FdBQg6Jy3dkLGP9Aocoz0Rb6k=)
                          8: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=)
                          9: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 23:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:86:53:86:64:19:eb:66:0d:21:dc:c1:1c:b6:6c:12:4b:98:a2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
        Validity
            Not Before: Jun 16 20:33:38 2025 GMT
            Not After : Jun 17 23:31:38 2025 GMT
        Subject: CN=1007590910A53C6E33F3493E1E70D840404A42CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:53:87:f7:15:4e:f8:27:29:46:21:04:d7:
                    40:38:06:ca:cc:14:84:e0:dc:69:d9:5f:08:67:61:
                    9d:b6:1d:60:54:c0:d1:33:6f:af:3e:c4:30:19:cc:
                    ea:cc:ff:5f:73:43:55:50:03:f1:c9:5f:ac:62:20:
                    a7:12:34:a5:bc:32:3d:1b:22:14:b1:5f:18:3b:94:
                    e5:5e:c7:32:83:cc:fd:54:b2:03:02:ae:c1:b5:79:
                    51:95:97:64:04:2c:f5:4d:97:6b:91:8e:63:85:c8:
                    04:fd:0b:9d:d2:47:55:ba:aa:ef:76:5a:f0:a3:bc:
                    b1:ca:23:60:36:0f:09:0a:ea:37:30:95:3e:be:a4:
                    ad:84:69:1f:01:13:d0:a8:86:c3:f3:17:af:6d:79:
                    2f:a9:fd:91:93:f7:60:a7:fe:49:f1:b8:c2:27:fa:
                    72:60:08:c5:0c:7d:01:9f:0d:d5:8c:f7:9e:65:e5:
                    02:e4:56:61:ad:8f:2c:79:0d:fd:62:04:06:e4:40:
                    c0:76:66:f0:1b:52:60:2f:a3:67:d9:1c:d7:3f:0f:
                    77:38:b4:21:66:0a:c5:a4:c7:06:43:e5:e4:75:35:
                    b0:c1:88:85:a7:26:23:80:c8:89:9f:25:56:90:8b:
                    42:95:22:32:c7:c4:a9:75:e6:be:21:a5:15:cb:64:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:59:09:10:A5:3C:6E:33:F3:49:3E:1E:70:D8:40:40:4A:42:CB
            X509v3 Authority Key Identifier:
                keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:89:43:ff:2c:7c:93:ae:24:23:84:1c:ff:7f:44:11:14:76:
         99:29:96:54:e6:07:01:24:ad:d3:a7:f9:df:46:84:be:a0:1b:
         5f:69:01:c7:42:24:08:1b:ba:0b:f5:d9:7b:6c:3d:bc:8a:ef:
         8e:99:25:cf:98:3d:1d:a3:10:1c:92:b0:22:be:b2:68:88:06:
         4c:9a:f4:db:75:0d:6f:e6:0a:65:38:98:ad:a3:ec:a1:2e:1e:
         c2:05:a6:ad:d0:5a:3d:1d:5c:02:c9:8b:a4:71:42:d0:75:3b:
         a0:57:1a:d4:39:f0:2c:26:59:f1:75:ed:95:81:28:46:07:2b:
         76:73:73:00:94:c7:a6:cb:97:40:a4:7f:d0:2c:28:8c:9a:35:
         a7:45:38:5e:89:c7:f9:c4:40:09:86:9b:2a:a4:6b:28:46:59:
         27:a4:e4:fd:c8:be:f3:6f:ae:55:fd:c3:5a:6c:f5:b4:47:60:
         cf:ac:1a:07:54:35:3f:5a:ef:0e:d2:c6:bc:71:76:4c:15:82:
         92:e1:f9:7d:64:f4:99:9c:c3:9f:34:8f:79:b5:3c:3f:36:a3:
         ed:90:02:56:2a:f8:38:a8:6f:90:c6:de:24:03:73:be:13:23:
         6a:f5:2b:ce:cf:35:3c:4b:0f:27:92:19:0f:a4:4e:f7:ed:55:
         95:5c:16:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQYZThmQZ62YNIdzBHLZsEkuYorswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2
MEVDQzVDMDAeFw0yNTA2MTYyMDMzMzhaFw0yNTA2MTcyMzMxMzhaMDMxMTAvBgNV
BAMTKDEwMDc1OTA5MTBBNTNDNkUzM0YzNDkzRTFFNzBEODQwNDA0QTQyQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6FOH9xVO+CcpRiEE10A4BsrM
FITg3GnZXwhnYZ22HWBUwNEzb68+xDAZzOrM/19zQ1VQA/HJX6xiIKcSNKW8Mj0b
IhSxXxg7lOVexzKDzP1UsgMCrsG1eVGVl2QELPVNl2uRjmOFyAT9C53SR1W6qu92
WvCjvLHKI2A2DwkK6jcwlT6+pK2EaR8BE9CohsPzF69teS+p/ZGT92Cn/knxuMIn
+nJgCMUMfQGfDdWM955l5QLkVmGtjyx5Df1iBAbkQMB2ZvAbUmAvo2fZHNc/D3c4
tCFmCsWkxwZD5eR1NbDBiIWnJiOAyImfJVaQi0KVIjLHxKl15r4hpRXLZC3lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEAdZCRClPG4z80k+HnDYQEBKQsswHwYDVR0j
BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO
QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG
M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hOQkwvMC85
MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR4lD/yx8k64kI4Qc/39EERR2mSmWVOYHASSt06f530aEvqAbX2kBx0IkCBu6
C/XZe2w9vIrvjpklz5g9HaMQHJKwIr6yaIgGTJr023UNb+YKZTiYraPsoS4ewgWm
rdBaPR1cAsmLpHFC0HU7oFca1DnwLCZZ8XXtlYEoRgcrdnNzAJTHpsuXQKR/0Cwo
jJo1p0U4XonH+cRACYabKqRrKEZZJ6Tk/ci+82+uVf3DWmz1tEdgz6waB1Q1P1rv
DtLGvHF2TBWCkuH5fWT0mZzDnzSPebU8Pzaj7ZACVir4OKhvkMbeJANzvhMjavUr
zs81PEsPJ5IZD6RO9+1VlVwWvA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 09:07:30 2025 by rpki-client