Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
File:                     9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft (raw, json)
Hash identifier:          FagNoHSL37U+BSgR1fktkpo5NTWTL4njwnuy+FnJTtQ=
Subject key identifier:   C9:66:C7:93:10:82:8D:F4:0B:42:1B:92:99:FA:A5:F2:7A:AF:CC:55
Authority key identifier: 92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB
Certificate issuer:       /CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
Certificate serial:       5ECAFE81548981371DF855CEE018074E16C6C9D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
Manifest number:          03
Signing time:             Sun 27 Apr 2025 11:20:36 +0000
Manifest this update:     Sun 27 Apr 2025 11:15:36 +0000
Manifest next update:     Mon 28 Apr 2025 12:12:36 +0000
Files and hashes:         1: 34352e3233312e3132312e302f32342d3234203d3e20323637323131.roa (hash: iFjWGW2wsuTHYcVZKi4BmaWBAxygP+CD2RJuxvyFXXA=)
                          2: 34352e3233312e3132322e302f32332d3233203d3e20323637323131.roa (hash: fGfiIQx8IGoNdAz62bgecZ58p4JrC2xl6Dsp7BoXc0U=)
                          3: 9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl (hash: OIYf3N4zkZ3vPYSARM+WC5z9BQwOiUhExd/rYM2vlF4=)
                          4: 34352e3233312e3132322e302f32342d3234203d3e20323637323131.roa (hash: 2QT40wjDP2a1e2mgr9R45aVDZs5BQ7idYM9V2kEpV8k=)
                          5: 34352e3233312e3132302e302f32332d3233203d3e20323637323131.roa (hash: CyCgQgSZjuv4wVb9P7eMVerpprnry+KDzCk9mtKJajs=)
                          6: 34352e3233312e3132302e302f32342d3234203d3e20323637323131.roa (hash: eucSio1ZgqQSEYIbgZh+U5b+dT6QL7rVvfizHWjky80=)
                          7: 34352e3233312e3132332e302f32342d3234203d3e20323637323131.roa (hash: y4PAY1WdI9s0IpVA+5L9Wk1gUhm4EjMzYQVHzhs28Mg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl
                          rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ca:fe:81:54:89:81:37:1d:f8:55:ce:e0:18:07:4e:16:c6:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB
        Validity
            Not Before: Apr 27 11:15:36 2025 GMT
            Not After : Apr 28 12:12:36 2025 GMT
        Subject: CN=C966C79310828DF40B421B9299FAA5F27AAFCC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:ea:42:94:d9:78:a7:87:ca:49:49:01:97:
                    d7:da:96:8e:d8:50:13:dc:1a:89:76:c5:12:84:d5:
                    0b:bc:4f:7c:d0:ae:6a:d5:02:b1:95:61:ae:f8:77:
                    14:32:7c:10:d9:fa:54:b9:c9:78:5a:30:a2:5b:5d:
                    76:07:30:96:78:57:1d:81:11:1a:a8:f2:95:11:fd:
                    a5:36:4f:df:8f:c7:e3:c9:19:0b:65:b1:05:e4:1f:
                    f5:2c:fc:ef:72:6c:ac:db:2a:c8:2f:00:4a:ef:53:
                    18:74:c8:2e:05:64:0e:a3:b1:40:ad:78:b1:79:9a:
                    d0:e6:25:a4:87:1a:99:1d:db:31:ed:4e:9c:7d:7f:
                    f1:22:1d:a6:38:3a:62:bb:ab:cd:74:73:0f:0f:56:
                    02:bd:e7:c2:04:cf:ce:f7:87:f4:32:4d:26:25:ed:
                    8b:fc:55:08:42:8a:b7:c8:72:21:7f:6a:1a:2c:85:
                    65:41:bc:45:c3:b1:02:83:08:15:4e:57:40:07:eb:
                    6b:e5:dd:02:8d:78:e2:92:41:3a:4f:c2:8b:b2:93:
                    22:2a:e4:4d:cb:10:7a:bc:f9:62:62:d7:03:c9:a7:
                    28:4d:a2:3f:dc:2d:3e:bc:3d:ea:b5:c0:53:3e:19:
                    cd:1c:33:06:b8:e8:98:4f:98:67:de:7b:13:1c:79:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:C7:93:10:82:8D:F4:0B:42:1B:92:99:FA:A5:F2:7A:AF:CC:55
            X509v3 Authority Key Identifier:
                keyid:92:32:ED:E3:02:5B:8A:F5:6A:C9:4A:C5:A4:DD:34:BC:00:DB:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VAGgBqJ954d6zA1YYU19HAhWXshNyQWizyBDFi234vQ/0/9232EDE3025B8AF56AC94AC5A4DD34BC00DB91CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:e2:24:e3:a3:09:ec:6b:97:60:02:c5:6c:2c:cf:ed:87:
         d1:7b:c7:bf:45:69:ed:6b:fb:bf:9c:dc:d5:11:3e:2e:44:2c:
         46:c4:11:94:dd:c4:bb:ae:05:bd:df:bd:b0:a2:bb:57:42:1f:
         05:6d:72:4b:36:2d:c5:88:16:c5:63:67:9c:1e:d6:48:a9:9c:
         0e:58:48:3e:a1:d1:fe:5f:82:6f:0f:d5:a7:6a:31:62:4b:9f:
         16:2c:af:68:91:1b:f4:c9:42:a2:75:60:8e:28:1f:45:69:84:
         5f:1a:65:61:a6:f9:20:d3:c4:be:88:ce:91:03:9f:1f:32:19:
         88:8e:2a:e2:bb:d8:46:16:79:33:71:65:84:4c:09:2f:9e:dd:
         15:cd:a3:46:b0:c3:03:ba:f1:f0:6e:03:67:8a:a0:4d:61:36:
         b1:97:7e:2e:89:31:4d:22:2c:fd:f3:0b:bf:44:4b:6f:47:3d:
         98:a5:cf:fd:0a:8b:72:7d:e6:2c:f3:76:68:1a:54:86:9a:04:
         a0:a5:7f:aa:37:87:3e:35:41:bc:b3:ae:fd:7a:a3:64:ba:08:
         9b:a8:89:3e:3e:1d:55:3e:31:5a:6a:c7:98:03:09:fa:66:74:
         aa:4c:7b:21:64:13:bd:ac:83:c1:ac:cd:34:79:db:4b:b7:f3:
         81:b9:fb:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXsr+gVSJgTcd+FXO4BgHThbGydgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzMkVERTMwMjVCOEFGNTZBQzk0QUM1QTRERDM0QkMw
MERCOTFDQjAeFw0yNTA0MjcxMTE1MzZaFw0yNTA0MjgxMjEyMzZaMDMxMTAvBgNV
BAMTKEM5NjZDNzkzMTA4MjhERjQwQjQyMUI5Mjk5RkFBNUYyN0FBRkNDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIOpClNl4p4fKSUkBl9falo7Y
UBPcGol2xRKE1Qu8T3zQrmrVArGVYa74dxQyfBDZ+lS5yXhaMKJbXXYHMJZ4Vx2B
ERqo8pUR/aU2T9+Px+PJGQtlsQXkH/Us/O9ybKzbKsgvAErvUxh0yC4FZA6jsUCt
eLF5mtDmJaSHGpkd2zHtTpx9f/EiHaY4OmK7q810cw8PVgK958IEz873h/QyTSYl
7Yv8VQhCirfIciF/ahoshWVBvEXDsQKDCBVOV0AH62vl3QKNeOKSQTpPwouykyIq
5E3LEHq8+WJi1wPJpyhNoj/cLT68Peq1wFM+Gc0cMwa46JhPmGfeexMceYQ9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyWbHkxCCjfQLQhuSmfql8nqvzFUwHwYDVR0j
BBgwFoAUkjLt4wJbivVqyUrFpN00vADbkcswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZBR2dCcUo5NTRkNnpBMVlZVTE5SEFoV1hzaE55UVdpenlCREZpMjM0
dlEvMC85MjMyRURFMzAyNUI4QUY1NkFDOTRBQzVBNEREMzRCQzAwREI5MUNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMzJFREUzMDI1QjhBRjU2
QUM5NEFDNUE0REQzNEJDMDBEQjkxQ0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFZBR2dCcUo5NTRkNnpBMVlZVTE5SEFoV1hzaE55UVdpenlCREZpMjM0dlEvMC85
MjMyRURFMzAyNUI4QUY1NkFDOTRBQzVBNEREMzRCQzAwREI5MUNCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOfDiJOOjCexrl2ACxWwsz+2H0XvHv0Vp7Wv7v5zc1RE+LkQsRsQRlN3Eu64F
vd+9sKK7V0IfBW1ySzYtxYgWxWNnnB7WSKmcDlhIPqHR/l+Cbw/Vp2oxYkufFiyv
aJEb9MlConVgjigfRWmEXxplYab5INPEvojOkQOfHzIZiI4q4rvYRhZ5M3FlhEwJ
L57dFc2jRrDDA7rx8G4DZ4qgTWE2sZd+LokxTSIs/fMLv0RLb0c9mKXP/QqLcn3m
LPN2aBpUhpoEoKV/qjeHPjVBvLOu/XqjZLoIm6iJPj4dVT4xWmrHmAMJ+mZ0qkx7
IWQTvayDwazNNHnbS7fzgbn74Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:48 2025 by rpki-client