Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
File:                     0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft (raw, json)
Hash identifier:          KotNXHue7skndJRSGd+NW3n80upp9JaqVPqdEWegOFQ=
Subject key identifier:   2D:C2:BA:FE:01:07:EB:54:D6:58:AC:3D:33:29:C2:A1:BB:8D:44:85
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Certificate issuer:       /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial:       211E78B609521875DEC544027BD8C810C19D283E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
Manifest number:          017F
Signing time:             Sun 27 Apr 2025 17:22:55 +0000
Manifest this update:     Sun 27 Apr 2025 17:17:55 +0000
Manifest next update:     Mon 28 Apr 2025 18:41:55 +0000
Files and hashes:         1: 323830343a313839343a3a2f33322d313238203d3e203631393431.roa (hash: Z03kjJanckckkzDLT8EhqtZ2Kty2w9Fkj4To6RJFSBE=)
                          2: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: HCi+ozGlqJMe2RL+xtVfmo+Hw9xdMOf7nagtA6lPQDY=)
                          3: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl (hash: HVyelrGUFR1FPANrRKsiQNLZQ+QAR7nkI+s37MpZU1I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
                          rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:78:b6:09:52:18:75:de:c5:44:02:7b:d8:c8:10:c1:9d:28:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
        Validity
            Not Before: Apr 27 17:17:55 2025 GMT
            Not After : Apr 28 18:41:55 2025 GMT
        Subject: CN=2DC2BAFE0107EB54D658AC3D3329C2A1BB8D4485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:a8:9f:7e:51:2d:8f:b0:9c:0b:6e:a5:93:
                    dc:28:68:96:0c:c2:e9:95:10:67:08:bd:88:af:5d:
                    52:a8:b1:fe:69:12:5e:0d:43:66:5e:c9:eb:5d:52:
                    8e:2e:51:e1:c9:11:b6:14:0b:ce:22:50:3e:32:d2:
                    e1:3f:7e:25:9b:a0:5b:01:3f:44:25:01:c5:9b:77:
                    55:9c:74:ad:67:b1:2b:a0:d7:8d:5f:78:d7:dc:bc:
                    bf:e0:49:33:11:7e:a1:a3:39:25:5b:eb:1e:56:c0:
                    d5:b0:30:3e:65:ef:be:d5:4e:4f:92:45:4d:96:79:
                    8e:3e:4a:e4:7e:3a:8e:c2:73:17:95:c8:79:73:58:
                    30:39:82:6a:0f:05:7a:45:70:bc:fb:c7:fc:99:bd:
                    11:bf:32:43:d9:97:2b:b1:db:c6:87:d0:2f:c7:d3:
                    2b:ee:b7:4a:d7:9c:83:c2:52:66:9d:21:62:34:f5:
                    64:b2:fd:08:ce:1d:36:a8:79:1a:37:10:0b:c0:16:
                    25:68:8a:fa:73:a8:58:27:fa:24:c8:a1:93:05:d5:
                    6a:9e:84:7d:f7:15:bb:8f:dd:b8:c1:24:97:25:38:
                    86:28:bb:0b:ac:a7:4f:70:64:f4:83:81:3b:ed:9b:
                    dd:e5:e2:b0:17:15:07:35:8d:44:53:2c:5a:2f:1d:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C2:BA:FE:01:07:EB:54:D6:58:AC:3D:33:29:C2:A1:BB:8D:44:85
            X509v3 Authority Key Identifier:
                keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:98:ac:7c:44:d4:70:fe:ac:37:47:3c:56:04:39:77:6e:ef:
         7d:c7:26:f5:d5:b8:29:b7:93:19:bd:46:99:cf:57:cc:f5:ce:
         95:8b:9d:dd:dd:64:7d:6f:e9:65:cf:42:df:06:ff:3b:6e:9c:
         8d:51:1e:0a:f0:53:c3:30:d4:a5:cd:5c:b7:db:af:d1:f3:d0:
         f8:ba:d2:65:3a:ab:65:a3:4c:2b:97:1e:c9:86:18:97:25:ce:
         54:87:6b:93:09:0c:d8:c5:0c:d4:58:c5:93:19:01:6a:2b:51:
         a0:84:f0:0a:f9:ef:47:d0:fa:3d:fa:18:a4:ad:68:35:c2:af:
         59:a6:fb:09:77:16:90:15:5b:1d:da:88:eb:7d:4a:a6:64:b1:
         8f:8b:fb:d1:87:b0:07:cc:6d:3e:f1:e3:ff:65:4c:07:f3:f3:
         24:45:04:7a:ce:13:73:e4:4e:8b:4e:e9:bb:fc:48:b3:c7:c7:
         22:c2:39:f0:5d:34:8b:eb:da:8a:5d:66:46:54:66:a1:dd:25:
         6b:86:7e:ee:e4:68:24:9b:70:ec:a1:4f:5d:7d:2c:5e:3a:62:
         26:49:3e:ed:df:b1:f8:35:a7:35:fd:a9:eb:2e:ed:ff:25:9a:
         2a:a4:20:82:63:a3:c9:4a:de:ef:b8:fa:da:bf:e1:71:93:d5:
         83:c1:1d:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIR54tglSGHXexUQCe9jIEMGdKD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZBMjIxNTUyMTkzODQ2RjVBRDIyRDZBM0RBQkRERDZE
NDhGQjY3NjAeFw0yNTA0MjcxNzE3NTVaFw0yNTA0MjgxODQxNTVaMDMxMTAvBgNV
BAMTKDJEQzJCQUZFMDEwN0VCNTRENjU4QUMzRDMzMjlDMkExQkI4RDQ0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lqifflEtj7CcC26lk9woaJYM
wumVEGcIvYivXVKosf5pEl4NQ2ZeyetdUo4uUeHJEbYUC84iUD4y0uE/fiWboFsB
P0QlAcWbd1WcdK1nsSug141feNfcvL/gSTMRfqGjOSVb6x5WwNWwMD5l777VTk+S
RU2WeY4+SuR+Oo7CcxeVyHlzWDA5gmoPBXpFcLz7x/yZvRG/MkPZlyux28aH0C/H
0yvut0rXnIPCUmadIWI09WSy/QjOHTaoeRo3EAvAFiVoivpzqFgn+iTIoZMF1Wqe
hH33FbuP3bjBJJclOIYouwusp09wZPSDgTvtm93l4rAXFQc1jURTLFovHQvjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULcK6/gEH61TWWKw9MynCobuNRIUwHwYDVR0j
BBgwFoAUD6IhVSGThG9a0i1qPavd1tSPtnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHZzWkprM3c4M0pFamtYaTlzRFNpYWY0UnFvc1JBZWZpVkdYNGpVYW9r
VUUvMC8wRkEyMjE1NTIxOTM4NDZGNUFEMjJENkEzREFCRERENkQ0OEZCNjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGQTIyMTU1MjE5Mzg0NkY1
QUQyMkQ2QTNEQUJEREQ2RDQ4RkI2NzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHZzWkprM3c4M0pFamtYaTlzRFNpYWY0UnFvc1JBZWZpVkdYNGpVYW9rVUUvMC8w
RkEyMjE1NTIxOTM4NDZGNUFEMjJENkEzREFCRERENkQ0OEZCNjc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5isfETUcP6sN0c8VgQ5d27vfccm9dW4KbeTGb1Gmc9XzPXOlYud3d1kfW/p
Zc9C3wb/O26cjVEeCvBTwzDUpc1ct9uv0fPQ+LrSZTqrZaNMK5ceyYYYlyXOVIdr
kwkM2MUM1FjFkxkBaitRoITwCvnvR9D6PfoYpK1oNcKvWab7CXcWkBVbHdqI631K
pmSxj4v70YewB8xtPvHj/2VMB/PzJEUEes4Tc+ROi07pu/xIs8fHIsI58F00i+va
il1mRlRmod0la4Z+7uRoJJtw7KFPXX0sXjpiJkk+7d+x+DWnNf2p6y7t/yWaKqQg
gmOjyUre77j62r/hcZPVg8Edqw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:06:15 2025 by rpki-client