Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
File:                     CA70F9A507FA2985459107906414142C8199804F.mft (raw, json)
Hash identifier:          DZ/ckiPtoSF0fYJICq1QwsFbpAXiQPQQSaUtoTcG68g=
Subject key identifier:   A2:27:E6:6E:4D:E3:24:A2:EB:B9:9F:78:00:14:BE:97:7F:9F:89:22
Authority key identifier: CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F
Certificate issuer:       /CN=CA70F9A507FA2985459107906414142C8199804F
Certificate serial:       5074C3360A7D693A260C9B3321F470FCB61DB43A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
Manifest number:          31
Signing time:             Thu 19 Jun 2025 12:03:40 +0000
Manifest this update:     Thu 19 Jun 2025 11:58:40 +0000
Manifest next update:     Fri 20 Jun 2025 12:59:40 +0000
Files and hashes:         1: CA70F9A507FA2985459107906414142C8199804F.crl (hash: GzaOzn4gZaQ/gbdv7XYJ5+5OvsEE7FZDjPBoHNRTnfQ=)
                          2: 323830343a393363343a3a2f33322d3334203d3e20323734373939.roa (hash: t/gZ4cjylinH0ISO1oFP4SuwOPt3V4e2F5CZjsTQlcU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl
                          rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:c3:36:0a:7d:69:3a:26:0c:9b:33:21:f4:70:fc:b6:1d:b4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA70F9A507FA2985459107906414142C8199804F
        Validity
            Not Before: Jun 19 11:58:40 2025 GMT
            Not After : Jun 20 12:59:40 2025 GMT
        Subject: CN=A227E66E4DE324A2EBB99F780014BE977F9F8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:e9:62:20:e2:4c:b6:96:d1:86:42:bf:b0:
                    1e:9b:d8:a8:7f:b2:5b:45:25:ad:f1:01:13:36:18:
                    d1:1d:3f:2a:2a:21:17:cc:14:bd:d1:ce:42:2f:a2:
                    59:3d:97:a9:5c:ff:ef:55:99:2a:50:ec:5d:50:a0:
                    e6:51:78:c4:ef:7f:10:55:38:83:ef:46:12:71:8e:
                    8a:20:08:6b:4b:89:db:00:0c:34:d9:b6:88:fc:f2:
                    b7:99:99:99:ec:61:b8:35:98:34:66:a6:cb:35:e0:
                    16:3d:3c:c2:24:45:71:89:3f:77:a1:d8:55:b6:94:
                    e5:19:a4:14:77:c9:c5:3a:ea:ed:fa:2a:56:52:91:
                    38:e1:4f:3f:b3:7e:29:ea:49:db:3a:f1:a3:73:29:
                    da:25:03:b0:2e:62:59:3e:b3:f2:04:80:32:ac:98:
                    25:88:f7:c9:22:34:2c:54:7a:3f:64:21:9f:b9:de:
                    cd:25:be:e8:0d:30:11:74:39:be:1c:3b:2e:d6:13:
                    aa:6b:a3:e8:2e:61:2d:ea:12:b9:c5:f7:62:f8:5a:
                    78:67:b5:83:0a:26:b0:0d:15:fb:41:02:25:40:e3:
                    7f:77:6c:5b:2a:97:e2:b1:a0:41:17:61:a6:df:99:
                    4d:9f:7f:96:34:ec:21:08:4a:c5:61:0d:14:b6:d9:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:E6:6E:4D:E3:24:A2:EB:B9:9F:78:00:14:BE:97:7F:9F:89:22
            X509v3 Authority Key Identifier:
                keyid:CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:e7:8c:ca:5a:26:0e:48:91:c0:fe:43:d3:a6:c1:01:e3:
         3b:30:b9:d1:62:34:c0:fd:dc:d6:b8:b4:0f:2c:d7:18:88:c2:
         7c:fe:43:7f:d4:01:c6:8e:6f:e3:ca:88:2e:06:b9:55:4e:12:
         4e:37:d1:8c:5d:5b:2d:86:81:e9:77:99:67:f8:59:f5:ac:af:
         6f:75:60:87:f1:b4:fd:0f:a1:8f:58:99:0e:76:be:93:bd:e3:
         5b:2f:4d:46:08:29:9e:6e:a6:d5:ab:46:64:3c:79:ea:e7:95:
         82:22:78:1f:e8:15:62:27:8f:97:af:4d:a7:58:39:9c:4f:72:
         0e:14:91:e8:bd:45:0f:c5:4e:df:37:a3:9d:e0:62:67:6d:55:
         97:d3:97:29:21:f4:01:d7:c3:e1:fb:d5:08:2b:24:7d:e2:a7:
         97:d5:e6:bb:bb:7f:5a:4e:b7:7b:f4:0f:2d:9d:e1:71:94:ea:
         44:b8:d8:3e:3a:97:d9:49:46:e0:29:fc:dc:da:bd:25:e2:3d:
         a2:71:a3:18:53:bf:a9:9c:27:3a:0b:74:cb:d6:8b:01:8c:d9:
         6b:c8:49:b7:a0:fb:4c:a2:28:60:e8:a9:52:70:3b:56:4d:39:
         a8:70:81:72:41:b1:0a:e5:86:82:d4:c4:64:b8:5d:02:51:bd:
         19:c4:89:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUHTDNgp9aTomDJszIfRw/LYdtDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E3MEY5QTUwN0ZBMjk4NTQ1OTEwNzkwNjQxNDE0MkM4
MTk5ODA0RjAeFw0yNTA2MTkxMTU4NDBaFw0yNTA2MjAxMjU5NDBaMDMxMTAvBgNV
BAMTKEEyMjdFNjZFNERFMzI0QTJFQkI5OUY3ODAwMTRCRTk3N0Y5Rjg5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUR+liIOJMtpbRhkK/sB6b2Kh/
sltFJa3xARM2GNEdPyoqIRfMFL3RzkIvolk9l6lc/+9VmSpQ7F1QoOZReMTvfxBV
OIPvRhJxjoogCGtLidsADDTZtoj88reZmZnsYbg1mDRmpss14BY9PMIkRXGJP3eh
2FW2lOUZpBR3ycU66u36KlZSkTjhTz+zfinqSds68aNzKdolA7AuYlk+s/IEgDKs
mCWI98kiNCxUej9kIZ+53s0lvugNMBF0Ob4cOy7WE6pro+guYS3qErnF92L4Wnhn
tYMKJrANFftBAiVA4393bFsql+KxoEEXYabfmU2ff5Y07CEISsVhDRS22cCNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoifmbk3jJKLruZ94ABS+l3+fiSIwHwYDVR0j
BBgwFoAUynD5pQf6KYVFkQeQZBQULIGZgE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy
c1kvMC9DQTcwRjlBNTA3RkEyOTg1NDU5MTA3OTA2NDE0MTQyQzgxOTk4MDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzBGOUE1MDdGQTI5ODU0
NTkxMDc5MDY0MTQxNDJDODE5OTgwNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC9D
QTcwRjlBNTA3RkEyOTg1NDU5MTA3OTA2NDE0MTQyQzgxOTk4MDRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVW/njMpaJg5IkcD+Q9OmwQHjOzC50WI0wP3c1ri0DyzXGIjCfP5Df9QBxo5v
48qILga5VU4STjfRjF1bLYaB6XeZZ/hZ9ayvb3Vgh/G0/Q+hj1iZDna+k73jWy9N
Rggpnm6m1atGZDx56ueVgiJ4H+gVYiePl69Np1g5nE9yDhSR6L1FD8VO3zejneBi
Z21Vl9OXKSH0AdfD4fvVCCskfeKnl9Xmu7t/Wk63e/QPLZ3hcZTqRLjYPjqX2UlG
4Cn83Nq9JeI9onGjGFO/qZwnOgt0y9aLAYzZa8hJt6D7TKIoYOipUnA7Vk05qHCB
ckGxCuWGgtTEZLhdAlG9GcSJ5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:55:38 2025 by rpki-client