Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
File:                     37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft (raw, json)
Hash identifier:          jc90GfbRoPqd2Ll+Ssd9YoCYaBvEUU3C3mb70+jXO38=
Subject key identifier:   29:4C:E1:E6:86:3E:83:93:04:6F:01:32:A0:57:E2:E3:73:99:24:C4
Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Certificate issuer:       /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
Certificate serial:       5A3D3B90709A395C72A7F73E920931E379BA7667
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
Manifest number:          020C
Signing time:             Tue 29 Apr 2025 01:18:26 +0000
Manifest this update:     Tue 29 Apr 2025 01:13:26 +0000
Manifest next update:     Wed 30 Apr 2025 04:38:26 +0000
Files and hashes:         1: 3133312e3232312e3136302e302f32342d3234203d3e20323634343334.roa (hash: /Ol+nstKOPbAyTlwUldOXDOrGMN75r/88sj46+MnQnw=)
                          2: 323830343a316538383a3a2f33322d3430203d3e20323634343334.roa (hash: wNinhcPrdFMvYhOWJ8gB4SrNB1vCwm5ZSdl8rs8N49k=)
                          3: 37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl (hash: vdmDXn3LC0GevjJDMKrh07IezhVLvBxkK8wScKoNPGo=)
                          4: 3133312e3232312e3136322e302f32342d3234203d3e20323634343334.roa (hash: 1pW/P7or0RCOclhXk8N80e0IxnRuOGx0ryoIdM97yUc=)
                          5: 3133312e3232312e3136332e302f32342d3234203d3e20323634343334.roa (hash: GcM6w1z3JJAHA+XkU7xINE57dV8OwPq6Uu7IVJacN40=)
                          6: 3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa (hash: lpobNvcgxtYSmbp+LIo40qwcmHv6Q5ovdSP9yu24PUk=)
                          7: 3133312e3232312e3136312e302f32342d3234203d3e20323634343334.roa (hash: kDHDc5IYq/3VW2mYkE2K198q34y+Xyx59YwWlH1LDUM=)
                          8: 3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa (hash: Ji9jAy9TXinZ+CA8IJwCfrBN8hpU2KS6agAu3U2tZZw=)
                          9: 3133312e3232312e3136302e302f32332d3233203d3e20323634343334.roa (hash: OQoCbnBgv7XcdgmywYrFhVw2M1KMjWth34rhGEGXTqc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl
                          rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 03:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3d:3b:90:70:9a:39:5c:72:a7:f7:3e:92:09:31:e3:79:ba:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Validity
            Not Before: Apr 29 01:13:26 2025 GMT
            Not After : Apr 30 04:38:26 2025 GMT
        Subject: CN=294CE1E6863E8393046F0132A057E2E3739924C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:6a:1c:c8:d8:c7:73:91:76:9c:c0:1e:6a:
                    d8:88:96:20:dc:ee:c4:3e:2e:df:54:64:fd:22:f3:
                    94:61:95:35:08:0f:f4:b6:8b:c5:36:37:4a:af:2c:
                    18:ef:98:e1:f3:e4:ba:7f:8a:7f:96:e3:03:94:8b:
                    5f:85:fe:8f:39:e4:36:9e:c0:f1:c8:80:47:4b:c1:
                    60:f3:f0:e1:79:06:61:59:76:e6:31:ad:40:e4:dc:
                    ed:7f:b4:4e:f7:32:8c:61:20:ab:66:1c:0e:dc:e4:
                    84:02:83:3d:25:8f:b3:5f:d6:98:e8:36:10:28:fc:
                    d5:13:dd:a8:66:08:82:ff:e4:ba:85:df:a3:05:6a:
                    71:ce:68:44:62:00:08:18:6a:dd:1d:1d:dc:b1:c3:
                    32:00:c8:60:5e:37:f9:af:3f:56:f9:38:bf:95:e4:
                    64:d4:8f:4e:f8:63:f6:83:b1:e3:83:a7:ea:00:b3:
                    37:de:22:d0:a8:5a:64:9e:bf:ed:99:de:f6:85:59:
                    0d:50:91:8a:f6:c6:58:9f:fe:e2:d9:a5:17:e6:7b:
                    b7:cd:0c:4a:77:bd:11:e8:fd:9e:a8:3d:09:71:15:
                    9c:ea:e0:7d:be:4c:9a:c2:66:e1:0f:f0:4d:dd:ba:
                    cf:e5:f7:45:12:07:16:83:e9:6f:4a:8c:37:9b:a8:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:E1:E6:86:3E:83:93:04:6F:01:32:A0:57:E2:E3:73:99:24:C4
            X509v3 Authority Key Identifier:
                keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:13:0d:fe:fd:9d:c5:1c:8e:f8:8a:48:90:12:6a:ca:3c:22:
         6e:56:6e:7f:52:dc:93:76:29:3a:79:72:a5:38:b8:d5:5c:48:
         fb:36:b9:9b:30:b0:5a:a5:7e:be:78:ba:40:a7:21:1a:7e:76:
         d7:e8:68:49:ce:2e:27:46:97:40:60:8d:aa:6d:84:c9:c3:2f:
         dc:2f:19:a6:cc:30:98:49:67:71:17:5b:a9:21:a8:6c:cc:37:
         ae:0b:bd:31:cf:74:05:78:81:69:80:7b:7b:12:aa:d7:e4:ce:
         87:f0:5a:b6:92:60:ff:40:98:e4:4f:66:8e:41:73:6a:15:35:
         75:8e:1f:db:ca:7d:1e:be:a7:0a:c3:56:c2:83:95:21:e4:ca:
         61:1f:1d:b0:5f:1d:2f:c2:b7:5e:f3:95:86:5b:a8:e4:63:24:
         ff:5d:1a:7c:4f:4f:d4:d5:a7:eb:e8:7e:55:04:e2:44:0f:44:
         f4:91:7f:78:8f:22:22:cc:ab:ce:db:bf:57:0c:b4:bc:15:0f:
         7e:63:87:db:a7:5d:3c:10:6a:b2:62:e6:ec:b7:52:1c:6a:f1:
         6a:ba:2f:8e:10:5e:b2:61:7b:99:e2:55:04:a7:be:31:83:4c:
         43:34:bc:08:a3:1a:b1:8c:dc:d8:13:14:68:b3:1b:97:44:fe:
         0e:8c:37:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWj07kHCaOVxyp/c+kgkx43m6dmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdCMENFNzhEODM4QjIwQjkxNUQ0M0ExQTZCN0Y0OEQz
QUIxQjJBMzAeFw0yNTA0MjkwMTEzMjZaFw0yNTA0MzAwNDM4MjZaMDMxMTAvBgNV
BAMTKDI5NENFMUU2ODYzRTgzOTMwNDZGMDEzMkEwNTdFMkUzNzM5OTI0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E2ocyNjHc5F2nMAeatiIliDc
7sQ+Lt9UZP0i85RhlTUID/S2i8U2N0qvLBjvmOHz5Lp/in+W4wOUi1+F/o855Dae
wPHIgEdLwWDz8OF5BmFZduYxrUDk3O1/tE73MoxhIKtmHA7c5IQCgz0lj7Nf1pjo
NhAo/NUT3ahmCIL/5LqF36MFanHOaERiAAgYat0dHdyxwzIAyGBeN/mvP1b5OL+V
5GTUj074Y/aDseODp+oAszfeItCoWmSev+2Z3vaFWQ1QkYr2xlif/uLZpRfme7fN
DEp3vRHo/Z6oPQlxFZzq4H2+TJrCZuEP8E3dus/l90USBxaD6W9KjDebqHptAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKUzh5oY+g5MEbwEyoFfi43OZJMQwHwYDVR0j
BBgwFoAUN7DOeNg4sguRXUOhprf0jTqxsqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZkcUJlNWN5Q1g3ZXFoOWI5ZFJyaWZ5Wll1NldxUENyelp3NEJMVGJD
Q0cvMS8zN0IwQ0U3OEQ4MzhCMjBCOTE1RDQzQTFBNkI3RjQ4RDNBQjFCMkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3QjBDRTc4RDgzOEIyMEI5
MTVENDNBMUE2QjdGNDhEM0FCMUIyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkZkcUJlNWN5Q1g3ZXFoOWI5ZFJyaWZ5Wll1NldxUENyelp3NEJMVGJDQ0cvMS8z
N0IwQ0U3OEQ4MzhCMjBCOTE1RDQzQTFBNkI3RjQ4RDNBQjFCMkEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmRMN/v2dxRyO+IpIkBJqyjwiblZuf1Lck3YpOnlypTi41VxI+za5mzCwWqV+
vni6QKchGn521+hoSc4uJ0aXQGCNqm2EycMv3C8ZpswwmElncRdbqSGobMw3rgu9
Mc90BXiBaYB7exKq1+TOh/BatpJg/0CY5E9mjkFzahU1dY4f28p9Hr6nCsNWwoOV
IeTKYR8dsF8dL8K3XvOVhluo5GMk/10afE9P1NWn6+h+VQTiRA9E9JF/eI8iIsyr
ztu/Vwy0vBUPfmOH26ddPBBqsmLm7LdSHGrxarovjhBesmF7meJVBKe+MYNMQzS8
CKMasYzc2BMUaLMbl0T+Dow3sQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:16 2025 by rpki-client