Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
File:                     EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json)
Hash identifier:          MjNOoXHSK0E2SlYVRoDE2IQSVrUhJFEm5LcD5WLCFT0=
Subject key identifier:   94:7A:C6:27:88:53:C6:E8:53:6F:62:84:4B:38:9E:DE:62:4F:70:CE
Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Certificate issuer:       /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Certificate serial:       3D67874DD8A32A22660060605747CE1A35EFBBA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
Manifest number:          0254
Signing time:             Mon 23 Jun 2025 10:30:00 +0000
Manifest this update:     Mon 23 Jun 2025 10:25:00 +0000
Manifest next update:     Tue 24 Jun 2025 13:04:00 +0000
Files and hashes:         1: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=)
                          2: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: t0e0hVoAdXQ5oyDSTs8A4WMMljS+8yaE37B2uUUga4A=)
                          3: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl
                          rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 10:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:67:87:4d:d8:a3:2a:22:66:00:60:60:57:47:ce:1a:35:ef:bb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Validity
            Not Before: Jun 23 10:25:00 2025 GMT
            Not After : Jun 24 13:04:00 2025 GMT
        Subject: CN=947AC6278853C6E8536F62844B389EDE624F70CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:c9:cd:fb:a3:44:84:cc:63:79:be:04:de:
                    b1:67:6a:e6:a1:54:c2:e2:da:ae:d9:fd:c4:da:e1:
                    eb:af:7a:4f:ec:68:77:77:ba:63:7f:c3:02:75:29:
                    fb:86:b6:dc:d3:72:1f:7f:0a:c6:72:a1:2e:f9:e0:
                    d4:bd:bf:92:bd:7a:62:b0:57:02:24:41:eb:88:ea:
                    51:f2:12:41:21:bb:4a:e1:cd:53:14:a1:95:46:17:
                    e6:74:29:cb:7f:50:9f:9f:30:40:ac:0a:a7:8d:99:
                    ec:c6:48:16:ee:25:cb:02:d5:1d:6f:43:45:20:25:
                    9c:3e:a7:56:2c:c0:1f:11:40:51:5f:22:65:26:47:
                    eb:d1:52:b0:1a:33:84:6a:2f:46:7b:9f:b8:8b:24:
                    a3:2b:17:d8:93:36:a0:7c:c2:c1:56:27:6d:6f:0e:
                    9c:5f:4b:bb:50:34:fa:9a:50:ed:83:98:d5:91:ac:
                    e7:2a:71:a6:6a:2a:04:ad:e4:2b:23:85:22:7b:b5:
                    1f:44:0c:ce:d1:4d:cc:87:af:a6:d3:8e:4a:bc:d2:
                    48:62:4c:a6:4a:6d:e7:0d:18:a7:b5:8d:f4:55:62:
                    71:0c:48:93:4d:fb:58:7d:30:d5:68:43:40:43:43:
                    b4:0d:12:0b:ad:31:85:c3:b2:e4:c5:c2:1d:3e:a5:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7A:C6:27:88:53:C6:E8:53:6F:62:84:4B:38:9E:DE:62:4F:70:CE
            X509v3 Authority Key Identifier:
                keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:9f:7f:15:ca:f5:64:4b:eb:9e:f3:a5:60:20:78:b3:ee:
         0c:ac:44:82:be:98:66:0a:2d:cf:0e:af:21:28:03:a1:53:d0:
         2f:11:60:ed:71:d2:65:e1:8c:77:07:f0:b1:30:3a:3f:f3:3c:
         5b:49:b6:3d:38:02:31:7a:96:4d:77:32:f3:93:43:29:f3:fb:
         16:1b:b0:a5:10:36:2c:79:ce:3c:3f:07:8d:2c:c0:f5:7f:ac:
         61:24:85:06:b9:69:4a:9b:5f:71:b1:f2:83:31:7c:52:7e:40:
         34:07:09:2f:a0:a7:fe:3a:55:db:2a:71:fe:ba:fe:26:5b:4e:
         55:c5:4c:27:a3:68:21:54:49:5f:ad:31:1d:f6:c9:a9:1d:ca:
         8a:aa:e3:74:da:ac:ef:90:ed:c6:2c:74:5d:cd:69:bb:fa:16:
         48:93:60:44:61:ee:d1:20:4f:5a:aa:77:a3:8f:b6:8b:e6:5b:
         9e:3d:50:97:4b:60:8c:f7:03:25:a9:69:68:05:fc:e1:31:33:
         54:c8:57:59:34:11:e5:61:96:99:00:ec:e5:4e:63:a1:7c:44:
         f8:ad:3f:47:a9:e7:dc:18:55:33:4c:f0:f4:d4:48:b8:ac:e2:
         99:6b:60:85:3d:27:de:24:ea:3c:f0:34:d6:ca:58:81:18:72:
         81:b2:32:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPWeHTdijKiJmAGBgV0fOGjXvu6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1
MUY5MEU3MzAeFw0yNTA2MjMxMDI1MDBaFw0yNTA2MjQxMzA0MDBaMDMxMTAvBgNV
BAMTKDk0N0FDNjI3ODg1M0M2RTg1MzZGNjI4NDRCMzg5RURFNjI0RjcwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGsnN+6NEhMxjeb4E3rFnauah
VMLi2q7Z/cTa4euvek/saHd3umN/wwJ1KfuGttzTch9/CsZyoS754NS9v5K9emKw
VwIkQeuI6lHyEkEhu0rhzVMUoZVGF+Z0Kct/UJ+fMECsCqeNmezGSBbuJcsC1R1v
Q0UgJZw+p1YswB8RQFFfImUmR+vRUrAaM4RqL0Z7n7iLJKMrF9iTNqB8wsFWJ21v
DpxfS7tQNPqaUO2DmNWRrOcqcaZqKgSt5CsjhSJ7tR9EDM7RTcyHr6bTjkq80khi
TKZKbecNGKe1jfRVYnEMSJNN+1h9MNVoQ0BDQ7QNEgutMYXDsuTFwh0+pePNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlHrGJ4hTxuhTb2KESzie3mJPcM4wHwYDVR0j
BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h
bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1
QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F
QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPUaffxXK9WRL657zpWAgeLPuDKxEgr6YZgotzw6vISgDoVPQLxFg7XHSZeGM
dwfwsTA6P/M8W0m2PTgCMXqWTXcy85NDKfP7FhuwpRA2LHnOPD8HjSzA9X+sYSSF
BrlpSptfcbHygzF8Un5ANAcJL6Cn/jpV2ypx/rr+JltOVcVMJ6NoIVRJX60xHfbJ
qR3KiqrjdNqs75Dtxix0Xc1pu/oWSJNgRGHu0SBPWqp3o4+2i+Zbnj1Ql0tgjPcD
JalpaAX84TEzVMhXWTQR5WGWmQDs5U5joXxE+K0/R6nn3BhVM0zw9NRIuKzimWtg
hT0n3iTqPPA01spYgRhygbIyXQ==
-----END CERTIFICATE-----
Generated at Mon Jun 23 13:07:48 2025 by rpki-client