Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          +GHRuNXGqw+NngONagsgz9znvhQxMJouWlGScmaBak0=
Subject key identifier:   8A:9A:83:B2:2C:6C:8B:AF:8D:EF:54:06:CA:16:FA:3C:06:38:FC:AF
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       381F4CDADE3FF4684C19C34FC66EAB2EBC28AEAC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          024D
Signing time:             Fri 20 Jun 2025 20:11:50 +0000
Manifest this update:     Fri 20 Jun 2025 20:06:50 +0000
Manifest next update:     Sat 21 Jun 2025 22:20:50 +0000
Files and hashes:         1: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: /CBOzGSo3loJCL4J+JUGeubAJr+11A+LVtEkvNlfqGw=)
                          2: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: 4GQ/E7VV56Ol3xxhC9TMbA3YpQ3M5NRiojxyY0Guucg=)
                          3: 3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (hash: txjM31afppCmHo0SCDmaG63Ukdjv41N7lGDrF1rfe0Y=)
                          4: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: kDbGCqNSUdmZakDCg1TiRYt/RRqjxxGDsDnwDF9XOCM=)
                          5: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: qEv9QRFbUud8wjmrI7Mg7gB/+7PH00kn4BfGK/NSz1Y=)
                          6: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: mylTXmhuTTm2hr4D6b5vfiKs8MjHwQHS8CbX1aJ8+DQ=)
                          7: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: N21bgywY1x4r1vLZaPh96X/eWqYiw39UYsCfaNuehUU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 22:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1f:4c:da:de:3f:f4:68:4c:19:c3:4f:c6:6e:ab:2e:bc:28:ae:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Jun 20 20:06:50 2025 GMT
            Not After : Jun 21 22:20:50 2025 GMT
        Subject: CN=8A9A83B22C6C8BAF8DEF5406CA16FA3C0638FCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:d3:a9:b5:d2:08:a8:53:c2:6b:0c:55:dc:
                    a0:a4:17:c7:d9:16:94:7a:19:f7:b5:63:de:95:ff:
                    e3:d6:2e:24:2e:d2:9d:67:e5:e3:e5:d2:07:10:c4:
                    03:dc:ea:a4:d5:d9:05:88:92:23:88:00:24:3f:30:
                    3f:ee:77:69:63:79:b0:04:86:77:72:e8:3d:9c:8d:
                    a4:bf:42:c1:7e:fe:30:dc:83:d4:c6:71:17:00:4f:
                    11:3c:ac:d1:fc:c4:2f:80:c7:27:0e:6e:54:57:a0:
                    3a:8e:eb:80:2d:09:aa:77:0d:a7:ab:a6:5a:a5:40:
                    25:a9:ff:6f:3f:93:db:13:28:e9:42:34:71:d7:88:
                    5a:1d:76:24:b7:c2:26:73:23:5e:ba:e3:81:9e:28:
                    2e:d5:cc:a0:ec:a4:e6:32:88:65:df:d4:c5:63:b6:
                    26:71:e3:94:be:1b:0f:2c:72:9e:15:f4:37:61:ed:
                    96:66:18:6c:5f:f7:1a:13:7a:61:77:e8:72:98:33:
                    0f:bb:2c:d3:f2:bb:85:ae:46:10:20:19:fd:35:63:
                    ac:bf:e6:54:9d:92:81:4e:7e:42:90:90:36:f8:16:
                    9b:ef:13:0c:3f:91:c7:e0:a4:1c:f3:de:44:2a:39:
                    39:53:fd:14:28:6d:bc:6b:18:4e:00:90:b6:36:10:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:83:B2:2C:6C:8B:AF:8D:EF:54:06:CA:16:FA:3C:06:38:FC:AF
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:b4:44:ab:d3:42:e9:18:46:69:80:55:6b:8c:51:a5:fa:
         cc:d3:8c:b8:f2:ad:5c:4c:2a:ed:74:58:60:1a:bc:d1:b8:28:
         cd:9a:62:4d:78:f8:1c:53:4a:9a:28:d6:94:e3:91:e6:3f:35:
         84:47:86:11:5b:58:82:ee:23:cc:34:e5:62:3d:d7:44:58:65:
         9c:79:20:17:d3:8a:32:99:ed:0e:b4:c8:56:5b:94:95:47:ee:
         94:7e:d0:17:c7:92:17:de:e5:c7:29:d5:c6:73:2a:40:cc:83:
         d9:9a:45:40:e5:3c:f9:bd:5b:75:7a:de:3f:99:12:11:e4:fb:
         d8:31:86:99:6a:1d:d6:b7:cf:82:ff:2e:22:97:21:6e:92:62:
         6f:8d:31:dd:a4:98:72:ea:40:31:f6:14:05:69:9d:36:25:03:
         44:c5:83:d6:44:4c:8f:5d:1b:c4:f6:1c:bd:55:61:9f:5a:71:
         32:88:a5:c9:2f:36:e1:67:01:7d:4e:a9:eb:55:ca:5d:2b:b4:
         a4:3f:51:50:7a:48:a1:ed:6a:94:f7:1a:43:cc:f2:ea:27:78:
         fb:05:ca:7c:19:06:2f:0e:e0:97:b5:b7:81:da:25:04:4b:2b:
         87:c3:f5:24:9b:60:c0:79:48:ba:7c:4f:b4:de:c5:93:64:20:
         e4:40:82:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOB9M2t4/9GhMGcNPxm6rLrworqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIzQUVBM0JGOTY4NkQ3OTQ5NjdCRUNBQzIyNkZBOTY0
ODg3Njg3MDAeFw0yNTA2MjAyMDA2NTBaFw0yNTA2MjEyMjIwNTBaMDMxMTAvBgNV
BAMTKDhBOUE4M0IyMkM2QzhCQUY4REVGNTQwNkNBMTZGQTNDMDYzOEZDQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk9OptdIIqFPCawxV3KCkF8fZ
FpR6Gfe1Y96V/+PWLiQu0p1n5ePl0gcQxAPc6qTV2QWIkiOIACQ/MD/ud2ljebAE
hndy6D2cjaS/QsF+/jDcg9TGcRcATxE8rNH8xC+AxycOblRXoDqO64AtCap3Daer
plqlQCWp/28/k9sTKOlCNHHXiFoddiS3wiZzI16644GeKC7VzKDspOYyiGXf1MVj
tiZx45S+Gw8scp4V9Ddh7ZZmGGxf9xoTemF36HKYMw+7LNPyu4WuRhAgGf01Y6y/
5lSdkoFOfkKQkDb4FpvvEww/kcfgpBzz3kQqOTlT/RQobbxrGE4AkLY2EHQLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUipqDsixsi6+N71QGyhb6PAY4/K8wHwYDVR0j
BBgwFoAU0jrqO/lobXlJZ77Kwib6lkiHaHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlM2MWM3cWZxN3NCR3h2cWE0NDdoblUyZmttbU13SzZKUkhBazZaZ3JI
a3UvMS9EMjNBRUEzQkY5Njg2RDc5NDk2N0JFQ0FDMjI2RkE5NjQ4ODc2ODcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0FFQTNCRjk2ODZENzk0
OTY3QkVDQUMyMjZGQTk2NDg4NzY4NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NlM2MWM3cWZxN3NCR3h2cWE0NDdoblUyZmttbU13SzZKUkhBazZaZ3JIa3UvMS9E
MjNBRUEzQkY5Njg2RDc5NDk2N0JFQ0FDMjI2RkE5NjQ4ODc2ODcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV520RKvTQukYRmmAVWuMUaX6zNOMuPKtXEwq7XRYYBq80bgozZpiTXj4HFNK
mijWlOOR5j81hEeGEVtYgu4jzDTlYj3XRFhlnHkgF9OKMpntDrTIVluUlUfulH7Q
F8eSF97lxynVxnMqQMyD2ZpFQOU8+b1bdXreP5kSEeT72DGGmWod1rfPgv8uIpch
bpJib40x3aSYcupAMfYUBWmdNiUDRMWD1kRMj10bxPYcvVVhn1pxMoilyS824WcB
fU6p61XKXSu0pD9RUHpIoe1qlPcaQ8zy6id4+wXKfBkGLw7gl7W3gdolBEsrh8P1
JJtgwHlIunxPtN7Fk2Qg5ECCCw==
-----END CERTIFICATE-----
Generated at Sat Jun 21 03:26:16 2025 by rpki-client