Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
File:                     0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft (raw, json)
Hash identifier:          //NgbmvJNHLMXXHNTj5GHGETrwlROpuFc8gb19EszA4=
Subject key identifier:   74:DB:24:B9:05:5F:E4:BC:A9:A5:FF:14:77:98:ED:4B:D3:38:02:08
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       3B45BCD8A77D9A5B63BCF66696A0329F689853D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
Manifest number:          0290
Signing time:             Fri 08 Aug 2025 09:25:16 +0000
Manifest this update:     Fri 08 Aug 2025 09:20:16 +0000
Manifest next update:     Sat 09 Aug 2025 12:08:16 +0000
Files and hashes:         1: 3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (hash: xKIUrVIggq7PIZczk4fzn7vaaRw+Y/bqcfY/oeOEoz0=)
                          2: 3137372e38362e3132322e302f32342d3234203d3e203532383532.roa (hash: HsiIwALd4tolhIyRRdXJFFrfj5mRkrWXsIJxc0JaYdw=)
                          3: 3137372e38362e3132312e302f32342d3234203d3e203532383532.roa (hash: sMUaBw/U3QIknbNpcxKL23aoE9bmswQ93xvAZKSkfHE=)
                          4: 0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl (hash: OvKI+Z3bTPNeDi8kmBxEMOpSajMu4VNWvGIqA75OQXU=)
                          5: 3137372e38362e3132332e302f32342d3234203d3e203532383532.roa (hash: V8CtQ5Zq95IJWpTwL89tfgGHZMz+x4t3OvkK650zzMM=)
                          6: 323830343a3833303a3a2f33322d3336203d3e203532383532.roa (hash: vq/3tDCm2OEcOZcNyM6+v/n+6ppGUA9V8sl8SrBtXhA=)
                          7: 3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (hash: 96VF9Staauf3dsuRt8r4pCvMBn17yhiWg+mTczALVx4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 12:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:45:bc:d8:a7:7d:9a:5b:63:bc:f6:66:96:a0:32:9f:68:98:53:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Aug  8 09:20:16 2025 GMT
            Not After : Aug  9 12:08:16 2025 GMT
        Subject: CN=74DB24B9055FE4BCA9A5FF147798ED4BD3380208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:44:6c:87:e4:f8:2b:31:a1:7d:16:b4:83:
                    b1:70:5e:2b:9a:6b:9a:d0:25:39:be:55:a9:b3:f7:
                    fe:89:62:ec:f5:0e:05:a9:f2:f5:77:b5:ea:b2:4a:
                    7e:54:26:a7:41:7b:2b:5d:f9:b6:ff:ef:6a:ec:f7:
                    07:8b:fc:bc:1d:35:24:d3:78:21:ec:f9:b9:df:5c:
                    84:61:ff:a0:40:46:46:18:c2:3d:e9:a5:e2:a6:66:
                    39:bf:0e:42:ec:f5:c6:2a:51:b2:90:5d:e5:35:86:
                    3e:0c:2a:99:ee:ee:d2:c8:91:6a:6e:7e:68:72:66:
                    c9:aa:74:52:e8:c4:fb:bf:c9:d2:03:4a:3c:42:93:
                    eb:21:00:51:fc:bd:e2:0d:85:40:b1:3a:0b:96:23:
                    a2:fc:74:01:cb:bd:70:2a:a7:24:f5:88:22:d4:3b:
                    8e:57:82:ea:46:eb:86:71:6d:d7:71:f6:c2:b4:6f:
                    6e:da:37:83:bf:ca:44:b2:67:cc:4b:ec:97:14:55:
                    9b:3b:dc:0b:23:79:22:87:19:bd:9a:e2:89:81:f9:
                    ee:7e:52:48:f5:6e:b3:79:a5:33:c2:11:18:a7:86:
                    95:46:a3:8d:db:6a:9e:09:2e:43:26:05:80:fd:8d:
                    76:15:48:d1:31:e2:17:2a:4b:9e:90:ab:68:ef:7e:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DB:24:B9:05:5F:E4:BC:A9:A5:FF:14:77:98:ED:4B:D3:38:02:08
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c7:d4:09:c3:aa:36:1c:73:98:b5:d0:86:19:5f:46:95:fd:
         f2:07:3c:6a:91:3c:cf:72:7b:bc:75:e9:f3:16:63:5c:ed:14:
         39:84:a3:ac:57:df:28:62:15:46:ec:28:e2:c3:60:e1:6e:e5:
         5d:e6:04:b4:a0:8f:c3:97:1a:73:f9:25:52:f3:18:6b:50:1e:
         b8:03:04:b4:d6:3f:d7:b0:79:42:68:e8:04:50:67:5c:c9:76:
         ac:b7:41:ce:f4:40:83:c0:16:03:e4:70:65:e1:df:0d:ef:4e:
         0f:82:fd:95:33:51:62:e6:12:bb:9c:c8:e0:f9:90:58:43:53:
         fe:d1:a1:c0:e9:70:3c:4e:86:f3:c4:38:a3:4d:e2:d8:89:8e:
         45:39:9e:0e:37:3a:06:40:a9:e8:55:82:a7:e6:24:7f:2c:41:
         f4:79:a0:50:8a:f6:54:56:e6:9d:cb:dd:d9:47:03:f7:3d:b5:
         f5:fa:5f:da:d0:d1:b0:46:b1:2b:e5:4b:62:69:41:12:17:a6:
         ab:f2:b9:7a:78:6b:e2:94:63:cd:73:06:22:b1:1a:c3:20:52:
         62:3d:2e:6e:06:79:ea:50:d6:55:e9:03:ce:3f:d5:43:5a:94:
         ec:18:30:fb:14:6e:aa:26:a3:4e:24:fe:71:03:d1:f4:65:a3:
         9b:f4:b4:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO0W82Kd9mltjvPZmlqAyn2iYU9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0ODNCMDgyNUIzRTg4QzY0Mzc2OTNGQjlFQzI2RTQ1
RUFBQ0YyMTAeFw0yNTA4MDgwOTIwMTZaFw0yNTA4MDkxMjA4MTZaMDMxMTAvBgNV
BAMTKDc0REIyNEI5MDU1RkU0QkNBOUE1RkYxNDc3OThFRDRCRDMzODAyMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXkRsh+T4KzGhfRa0g7FwXiua
a5rQJTm+Vamz9/6JYuz1DgWp8vV3teqySn5UJqdBeytd+bb/72rs9weL/LwdNSTT
eCHs+bnfXIRh/6BARkYYwj3ppeKmZjm/DkLs9cYqUbKQXeU1hj4MKpnu7tLIkWpu
fmhyZsmqdFLoxPu/ydIDSjxCk+shAFH8veINhUCxOguWI6L8dAHLvXAqpyT1iCLU
O45XgupG64Zxbddx9sK0b27aN4O/ykSyZ8xL7JcUVZs73AsjeSKHGb2a4omB+e5+
Ukj1brN5pTPCERinhpVGo43bap4JLkMmBYD9jXYVSNEx4hcqS56Qq2jvfpg3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdNskuQVf5Lyppf8Ud5jtS9M4AggwHwYDVR0j
BBgwFoAUDUg7CCWz6IxkN2k/uewm5F6qzyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1jTWkyR3RKaWY2SmlDVGNoczNEdzJ3ekRyUXZDY0FDMXJiMkI1OVh2
UE4vMS8wRDQ4M0IwODI1QjNFODhDNjQzNzY5M0ZCOUVDMjZFNDVFQUFDRjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDgzQjA4MjVCM0U4OEM2
NDM3NjkzRkI5RUMyNkU0NUVBQUNGMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nk1jTWkyR3RKaWY2SmlDVGNoczNEdzJ3ekRyUXZDY0FDMXJiMkI1OVh2UE4vMS8w
RDQ4M0IwODI1QjNFODhDNjQzNzY5M0ZCOUVDMjZFNDVFQUFDRjIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqcfUCcOqNhxzmLXQhhlfRpX98gc8apE8z3J7vHXp8xZjXO0UOYSjrFffKGIV
Ruwo4sNg4W7lXeYEtKCPw5cac/klUvMYa1AeuAMEtNY/17B5QmjoBFBnXMl2rLdB
zvRAg8AWA+RwZeHfDe9OD4L9lTNRYuYSu5zI4PmQWENT/tGhwOlwPE6G88Q4o03i
2ImORTmeDjc6BkCp6FWCp+YkfyxB9HmgUIr2VFbmncvd2UcD9z219fpf2tDRsEax
K+VLYmlBEhemq/K5enhr4pRjzXMGIrEawyBSYj0ubgZ56lDWVekDzj/VQ1qU7Bgw
+xRuqiajTiT+cQPR9GWjm/S0Hw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:05 2025 by rpki-client