Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File:                     6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier:          pA89biigd0gBOBDbEaYgkEO9qikFrVAONTVU2Gp9dKc=
Subject key identifier:   C1:20:BE:7B:D4:1F:83:4E:10:ED:A8:8F:98:20:A5:9F:16:0A:AD:4D
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       3F7F05A45F927EF797B681419D4A9FC8EF66C67E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number:          0209
Signing time:             Sun 27 Apr 2025 02:10:50 +0000
Manifest this update:     Sun 27 Apr 2025 02:05:50 +0000
Manifest next update:     Mon 28 Apr 2025 04:28:50 +0000
Files and hashes:         1: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: Ot1EWApvBmh4FPs84Z1lY3kwhdYkbmmnY60dPj9p9ec=)
                          2: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: ISLR/SHc5/TU+SqtFt9tn8WBaID+aj52PKr8f09VylI=)
                          3: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: zCJ9NcAZgKh2r/gHTI/+9ji8xjgt5SZ/Um8SDcvF4VI=)
                          4: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: aayLUxa+4PtSzKbXdlcEV5j5+uegyNKpZJNgf1xFsc4=)
                          5: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: jwGypfEcZTI1iJl0YRFLhbSSCMtq7GuPrRa/9uXHV5g=)
                          6: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: YHLrw22ihutPUNd9BxRl0QS4TkPEc/vmPOTHqth4DFI=)
                          7: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: x1fh8Im0YnWWmcnOAuC9cPeB7Ehll5MkqguZlMFOKaE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7f:05:a4:5f:92:7e:f7:97:b6:81:41:9d:4a:9f:c8:ef:66:c6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Apr 27 02:05:50 2025 GMT
            Not After : Apr 28 04:28:50 2025 GMT
        Subject: CN=C120BE7BD41F834E10EDA88F9820A59F160AAD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:fe:8d:0a:20:ba:1d:ac:ae:cb:e0:bb:b3:
                    36:1a:57:0d:ea:55:94:9f:53:13:fb:cf:4f:11:1b:
                    66:51:f2:57:99:0e:5c:30:3b:53:f7:92:14:d2:da:
                    db:a7:69:8d:de:4f:f8:bf:7e:e2:c5:a1:6e:7f:f9:
                    24:9f:32:d5:70:a9:ad:ba:5d:5c:ae:ba:c0:29:9c:
                    df:82:20:51:17:93:2e:5f:ba:30:fd:bd:7f:0b:15:
                    f8:09:2a:85:fd:16:57:ec:29:58:4d:3c:43:fb:2f:
                    d1:00:ef:02:04:56:7a:9e:5e:f7:e8:a3:52:fd:4b:
                    22:87:27:28:93:78:0b:5b:3c:25:af:0b:c9:37:b0:
                    44:49:b4:29:34:cf:9f:2c:42:39:7b:f8:8b:06:e2:
                    93:5a:4c:15:6a:75:1f:c1:af:12:29:ef:78:e1:72:
                    b3:f4:8d:e3:c5:06:ce:f3:93:eb:d3:72:2b:2b:22:
                    37:fa:c9:0a:ef:98:cf:eb:53:a3:82:3a:75:2e:97:
                    e4:28:46:9a:d2:78:4e:bb:3e:62:d4:d3:ef:68:fb:
                    46:30:cd:a3:25:fd:25:f7:af:fd:e3:29:15:48:fd:
                    49:22:75:98:d1:50:c9:6f:47:2c:7a:45:14:d4:2e:
                    32:fe:13:e0:7d:5a:7d:98:db:91:01:11:07:72:73:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:BE:7B:D4:1F:83:4E:10:ED:A8:8F:98:20:A5:9F:16:0A:AD:4D
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:ec:ad:f4:7f:2d:fc:79:27:38:52:4a:4f:e6:f1:21:11:
         78:7c:23:a3:40:14:b2:9a:e9:05:ee:d6:0a:73:9e:6a:c2:6e:
         11:8c:9f:14:04:3e:ee:e8:7e:1a:ad:49:7a:f4:12:85:3c:81:
         25:f8:eb:34:8f:ca:58:a6:46:90:53:35:48:28:f1:31:ca:4c:
         15:d0:4a:35:7b:36:7d:1b:38:a9:0e:28:e1:1b:b4:01:78:cb:
         29:9c:43:32:75:5d:d1:92:05:77:a4:b1:43:f4:e4:c8:a4:59:
         4d:22:5b:00:c1:67:d5:10:10:12:79:74:4a:76:52:0d:36:bd:
         f0:81:34:0f:50:58:64:05:a8:52:cf:23:91:a9:64:c2:5f:d2:
         46:b5:dc:e0:e1:be:c5:f4:48:96:41:57:9c:bc:e6:dd:08:dd:
         65:f4:74:48:d9:60:04:dc:3a:78:35:a5:38:f8:71:ad:63:dc:
         8a:01:2b:77:d9:74:d4:bd:21:e9:e2:c5:96:30:e9:78:d4:50:
         7d:9c:04:ae:6e:fe:46:2b:ca:29:a7:a4:01:20:e1:fa:21:da:
         57:fe:88:53:b1:12:90:80:3b:05:1e:09:06:3f:ce:74:e2:cf:
         2f:62:12:26:db:98:23:1e:28:62:31:db:ce:d4:b2:ca:1d:e5:
         e2:72:e1:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP38FpF+SfveXtoFBnUqfyO9mxn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzOEEyQjVCNDlGMzcyNTk4RDAwREY0QjA0MEVCRUM2
QkREMTc2QzAeFw0yNTA0MjcwMjA1NTBaFw0yNTA0MjgwNDI4NTBaMDMxMTAvBgNV
BAMTKEMxMjBCRTdCRDQxRjgzNEUxMEVEQTg4Rjk4MjBBNTlGMTYwQUFENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uv6NCiC6Hayuy+C7szYaVw3q
VZSfUxP7z08RG2ZR8leZDlwwO1P3khTS2tunaY3eT/i/fuLFoW5/+SSfMtVwqa26
XVyuusApnN+CIFEXky5fujD9vX8LFfgJKoX9FlfsKVhNPEP7L9EA7wIEVnqeXvfo
o1L9SyKHJyiTeAtbPCWvC8k3sERJtCk0z58sQjl7+IsG4pNaTBVqdR/BrxIp73jh
crP0jePFBs7zk+vTcisrIjf6yQrvmM/rU6OCOnUul+QoRprSeE67PmLU0+9o+0Yw
zaMl/SX3r/3jKRVI/UkidZjRUMlvRyx6RRTULjL+E+B9Wn2Y25EBEQdyc+f7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwSC+e9Qfg04Q7aiPmCClnxYKrU0wHwYDVR0j
BBgwFoAUbziitbSfNyWY0A30sEDr7GvdF2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2ZNRTZIaE1vS05HMzNBMmNldWhaS3I4VktEU2VEbkpWRzZRVUV0YThO
akgvMS82RjM4QTJCNUI0OUYzNzI1OThEMDBERjRCMDQwRUJFQzZCREQxNzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzhBMkI1QjQ5RjM3MjU5
OEQwMERGNEIwNDBFQkVDNkJERDE3NkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2ZNRTZIaE1vS05HMzNBMmNldWhaS3I4VktEU2VEbkpWRzZRVUV0YThOakgvMS82
RjM4QTJCNUI0OUYzNzI1OThEMDBERjRCMDQwRUJFQzZCREQxNzZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtxnsrfR/Lfx5JzhSSk/m8SEReHwjo0AUsprpBe7WCnOeasJuEYyfFAQ+7uh+
Gq1JevQShTyBJfjrNI/KWKZGkFM1SCjxMcpMFdBKNXs2fRs4qQ4o4Ru0AXjLKZxD
MnVd0ZIFd6SxQ/TkyKRZTSJbAMFn1RAQEnl0SnZSDTa98IE0D1BYZAWoUs8jkalk
wl/SRrXc4OG+xfRIlkFXnLzm3QjdZfR0SNlgBNw6eDWlOPhxrWPcigErd9l01L0h
6eLFljDpeNRQfZwErm7+RivKKaekASDh+iHaV/6IU7ESkIA7BR4JBj/OdOLPL2IS
JtuYIx4oYjHbztSyyh3l4nLhFQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:17 2025 by rpki-client