Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
File:                     9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft (raw, json)
Hash identifier:          rrx9cOpFIefub9tCS6tZ/8Ijg/3Cvvm+gJDWqPUlr8k=
Subject key identifier:   C2:18:F4:23:A2:C5:E5:FD:F4:5B:11:0E:FE:DA:F5:F9:86:04:D1:14
Authority key identifier: 93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E
Certificate issuer:       /CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E
Certificate serial:       327373CFCE290720127CDF73FC3453D09526D414
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
Manifest number:          3C
Signing time:             Thu 01 May 2025 19:40:46 +0000
Manifest this update:     Thu 01 May 2025 19:35:46 +0000
Manifest next update:     Fri 02 May 2025 21:31:46 +0000
Files and hashes:         1: 323830343a353436343a3a2f33322d3438203d3e20323638363437.roa (hash: RwIMfdEJPJO5aLK6dYjXlYp2huiKi2TGMfKiAB8zUAE=)
                          2: 9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl (hash: L7dFkj+coRD0dYuTZAMZcX0HKPGIHUtwGTxnBnsDD8s=)
                          3: 34352e3136342e3234302e302f32322d3234203d3e20323638363437.roa (hash: 1qeqlxD4i8ErlWYs5BtorIleXavb6sm/ubmG51/SqMA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl
                          rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 21:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:73:cf:ce:29:07:20:12:7c:df:73:fc:34:53:d0:95:26:d4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E
        Validity
            Not Before: May  1 19:35:46 2025 GMT
            Not After : May  2 21:31:46 2025 GMT
        Subject: CN=C218F423A2C5E5FDF45B110EFEDAF5F98604D114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:51:88:dc:ae:45:66:77:e7:5c:2a:f5:7f:04:
                    da:09:c7:08:08:7b:91:aa:7d:65:f6:fc:45:09:12:
                    99:d7:ee:fd:d6:bc:c4:e3:86:5b:1a:77:81:f8:16:
                    12:ab:4a:0d:3e:a9:0d:25:4f:5b:8f:05:cf:de:b7:
                    83:e1:a9:1e:0a:d1:7f:0d:0e:ef:7e:86:70:9d:65:
                    f7:f2:ba:c0:9b:f5:06:44:f9:e8:fa:ab:b7:9e:14:
                    56:38:ca:2e:31:60:c3:af:b5:79:4c:43:32:25:4b:
                    c9:19:b5:10:0e:97:2f:bb:82:1b:62:6e:be:0a:c9:
                    58:e6:09:bc:33:bb:ff:16:95:7f:a5:24:5d:3c:fc:
                    0c:03:ec:2a:a3:7e:5b:4c:a6:93:4e:c2:a4:13:c1:
                    96:a2:a0:18:3d:43:9c:31:4c:6e:09:dc:20:67:5c:
                    1a:92:39:b0:91:a8:30:eb:79:72:6d:50:ec:27:f3:
                    53:93:b1:e0:e0:4a:c0:4f:80:cd:bb:50:c7:b6:e1:
                    62:d1:69:a4:50:4c:29:f6:ef:c6:b9:df:80:5f:40:
                    5f:16:9b:49:c5:29:49:b3:3d:c2:97:dd:5a:a2:d6:
                    b4:2a:83:10:0d:5f:af:b3:2a:d0:8b:9c:28:49:6f:
                    bb:e5:1b:d6:02:39:30:99:0e:6d:95:46:12:18:82:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:18:F4:23:A2:C5:E5:FD:F4:5B:11:0E:FE:DA:F5:F9:86:04:D1:14
            X509v3 Authority Key Identifier:
                keyid:93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:d3:fb:ef:3c:c1:13:66:e3:2c:f4:5e:96:c3:71:36:75:
         dc:50:f3:26:7f:ad:d9:4e:85:47:f8:78:19:30:a3:47:3c:04:
         db:8a:10:d1:58:1f:b7:1b:0c:25:1e:c0:77:2a:de:21:c8:46:
         e8:68:18:6a:87:b6:a7:d8:cc:90:c9:65:f7:f3:37:1e:3e:6c:
         53:88:a7:58:50:c5:bd:3e:81:41:c1:1b:ae:3b:76:f0:4e:fb:
         39:31:dc:c0:74:e4:b7:ec:5d:56:7c:c6:28:82:49:a3:bf:a9:
         b9:d2:2c:48:e4:3e:8c:f9:24:ee:91:23:ec:44:6f:3e:31:d3:
         55:65:38:3d:9f:64:3b:96:58:45:f1:ff:43:37:41:8e:62:d7:
         77:c8:9b:d2:33:46:bf:03:54:e1:31:57:01:67:c8:1e:9c:a0:
         68:41:1e:74:aa:05:1e:f7:64:55:f6:da:c6:3c:93:da:76:3a:
         ca:c0:81:dd:bf:2a:46:f8:53:11:5b:b1:d7:f2:9f:5a:e3:71:
         3d:aa:40:c3:0e:91:3a:0f:cc:6e:c0:58:66:64:39:d6:0a:57:
         94:02:7b:eb:f7:d2:7f:d4:95:f0:49:ca:55:3d:26:19:b0:60:
         0d:b6:5e:af:84:56:74:60:81:70:21:e4:2a:42:1f:03:4a:69:
         02:fc:73:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMnNzz84pByASfN9z/DRT0JUm1BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1NEJGMDFFREJFMzNGRkZEQjg3NTgwRkIzQ0IxQURF
REYwNEQ2RTAeFw0yNTA1MDExOTM1NDZaFw0yNTA1MDIyMTMxNDZaMDMxMTAvBgNV
BAMTKEMyMThGNDIzQTJDNUU1RkRGNDVCMTEwRUZFREFGNUY5ODYwNEQxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUYjcrkVmd+dcKvV/BNoJxwgI
e5GqfWX2/EUJEpnX7v3WvMTjhlsad4H4FhKrSg0+qQ0lT1uPBc/et4PhqR4K0X8N
Du9+hnCdZffyusCb9QZE+ej6q7eeFFY4yi4xYMOvtXlMQzIlS8kZtRAOly+7ghti
br4KyVjmCbwzu/8WlX+lJF08/AwD7CqjfltMppNOwqQTwZaioBg9Q5wxTG4J3CBn
XBqSObCRqDDreXJtUOwn81OTseDgSsBPgM27UMe24WLRaaRQTCn278a534BfQF8W
m0nFKUmzPcKX3Vqi1rQqgxANX6+zKtCLnChJb7vlG9YCOTCZDm2VRhIYgs+5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwhj0I6LF5f30WxEO/tr1+YYE0RQwHwYDVR0j
BBgwFoAUk1S/Ae2+M//9uHWA+zyxre3wTW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjhCN1J6TTFIZ0RkVFNES0piR2ltcFRybnRZeVNzN2dYQTU4OTNBRmFq
Z28vMC85MzU0QkYwMUVEQkUzM0ZGRkRCODc1ODBGQjNDQjFBREVERjA0RDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTRCRjAxRURCRTMzRkZG
REI4NzU4MEZCM0NCMUFERURGMDRENkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjhCN1J6TTFIZ0RkVFNES0piR2ltcFRybnRZeVNzN2dYQTU4OTNBRmFqZ28vMC85
MzU0QkYwMUVEQkUzM0ZGRkRCODc1ODBGQjNDQjFBREVERjA0RDZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhCzT++88wRNm4yz0XpbDcTZ13FDzJn+t2U6FR/h4GTCjRzwE24oQ0VgftxsM
JR7AdyreIchG6GgYaoe2p9jMkMll9/M3Hj5sU4inWFDFvT6BQcEbrjt28E77OTHc
wHTkt+xdVnzGKIJJo7+pudIsSOQ+jPkk7pEj7ERvPjHTVWU4PZ9kO5ZYRfH/QzdB
jmLXd8ib0jNGvwNU4TFXAWfIHpygaEEedKoFHvdkVfbaxjyT2nY6ysCB3b8qRvhT
EVux1/KfWuNxPapAww6ROg/MbsBYZmQ51gpXlAJ76/fSf9SV8EnKVT0mGbBgDbZe
r4RWdGCBcCHkKkIfA0ppAvxzvA==
-----END CERTIFICATE-----
Generated at Fri May 2 05:31:31 2025 by rpki-client