Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
File:                     C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft (raw, json)
Hash identifier:          soGn65DVPds0gIneATA1ptnV1t3ZaSFLuSI+m+cUMnE=
Subject key identifier:   22:4D:D3:09:99:69:B2:F4:05:25:4C:B8:77:AB:A7:D6:85:F8:59:1D
Authority key identifier: C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F
Certificate issuer:       /CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
Certificate serial:       6464FE982642B9FF6956C1094FDDCC4F95EBE945
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
Manifest number:          020A
Signing time:             Thu 01 May 2025 21:06:17 +0000
Manifest this update:     Thu 01 May 2025 21:01:17 +0000
Manifest next update:     Fri 02 May 2025 21:07:17 +0000
Files and hashes:         1: C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl (hash: fJIF2V4VopYauCAUWGPtzrbEOq3b7psPBrlJnYSz5aE=)
                          2: 3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa (hash: C1Do8lr28o/0LX0JVYTO/jyL9WyQkZOixXtNZIMTbig=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl
                          rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 21:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:64:fe:98:26:42:b9:ff:69:56:c1:09:4f:dd:cc:4f:95:eb:e9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
        Validity
            Not Before: May  1 21:01:17 2025 GMT
            Not After : May  2 21:07:17 2025 GMT
        Subject: CN=224DD3099969B2F405254CB877ABA7D685F8591D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:e1:80:8b:90:7b:38:8f:f3:4c:e5:f8:e4:
                    aa:1c:5d:92:c5:5c:0e:dd:1d:30:8f:cb:72:98:e4:
                    af:d1:fd:71:19:81:1f:95:e7:7d:4c:a3:f7:9e:50:
                    b5:1e:bc:0b:6f:1c:ca:e3:44:22:e7:80:71:aa:10:
                    d3:82:b0:3d:6a:d5:3f:2a:54:6f:a7:d9:4c:63:5f:
                    43:63:68:20:0b:6b:a0:9d:ea:ab:1d:fc:b5:4b:e8:
                    51:81:2c:ca:c2:94:6c:9f:e3:9f:a1:67:1a:1b:09:
                    ff:a3:5d:bc:cb:fc:6f:e4:f7:19:0b:54:3b:5a:39:
                    78:18:0b:72:34:fb:47:37:ea:9f:44:46:fc:04:55:
                    5d:8f:db:76:97:4c:42:80:63:e5:44:23:47:97:c3:
                    f0:7d:2c:b2:36:dd:28:d4:e4:6f:46:73:0e:6d:ad:
                    41:48:18:b0:de:e4:d8:15:fa:de:89:2e:86:fb:6f:
                    7d:90:73:11:8c:1d:5d:cf:31:9f:eb:04:0a:4d:5c:
                    bd:f3:c7:93:54:df:c6:3e:c4:b8:cb:0b:d6:cf:bf:
                    4a:53:7c:32:db:af:b7:9f:ec:e1:8e:d0:42:f4:8b:
                    2b:25:bb:bb:41:45:95:f5:ad:fd:b6:6f:ac:ba:ba:
                    5d:10:8a:19:90:3b:38:10:b9:ff:70:2e:27:65:3d:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:D3:09:99:69:B2:F4:05:25:4C:B8:77:AB:A7:D6:85:F8:59:1D
            X509v3 Authority Key Identifier:
                keyid:C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:f9:0c:85:fb:3f:59:51:34:87:af:06:32:87:7d:0c:55:
         9e:89:ad:b4:fc:19:5f:00:d0:83:28:c3:56:1a:06:e0:8b:7f:
         42:b5:c2:ae:23:6f:ff:3e:7e:e7:4a:72:4d:f6:39:11:49:3b:
         56:69:3e:88:cf:72:4d:58:93:49:0f:12:76:d6:ed:61:9b:ba:
         b1:17:d9:1a:83:37:ed:3d:c9:ac:36:a6:8d:d0:c0:dd:53:10:
         2d:60:71:42:f2:4c:9d:a5:53:80:f6:40:b7:43:b5:b8:05:cd:
         ff:cd:71:6a:61:be:80:2d:ac:53:fd:9e:a4:33:4f:f8:be:8f:
         d6:81:24:e0:f4:33:de:1b:2d:7d:45:e1:75:b1:18:25:6f:e3:
         b7:be:4c:76:bb:02:94:6b:11:d7:80:55:e3:43:b2:a4:42:53:
         85:e8:0e:2c:47:96:a0:58:68:23:e5:82:09:ad:9a:9b:aa:96:
         ec:21:88:d9:da:a6:d7:19:9f:81:58:52:41:54:2e:ac:95:f3:
         52:09:ec:e1:5d:fb:93:e5:99:b4:be:b0:38:0e:30:07:d7:16:
         d0:ff:16:50:4d:9a:2d:0e:b3:a2:5d:54:2c:41:46:8e:88:c7:
         e9:32:2e:55:dd:b6:58:e2:db:d2:5e:fd:b8:3a:ce:7b:18:a1:
         31:dc:88:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZGT+mCZCuf9pVsEJT93MT5Xr6UUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwNkMxOTFEOEFFMzFGOURGMTRENkMxMTQ3NEJDRTU4
ODQxQUQwRjAeFw0yNTA1MDEyMTAxMTdaFw0yNTA1MDIyMTA3MTdaMDMxMTAvBgNV
BAMTKDIyNEREMzA5OTk2OUIyRjQwNTI1NENCODc3QUJBN0Q2ODVGODU5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzuGAi5B7OI/zTOX45KocXZLF
XA7dHTCPy3KY5K/R/XEZgR+V531Mo/eeULUevAtvHMrjRCLngHGqENOCsD1q1T8q
VG+n2UxjX0NjaCALa6Cd6qsd/LVL6FGBLMrClGyf45+hZxobCf+jXbzL/G/k9xkL
VDtaOXgYC3I0+0c36p9ERvwEVV2P23aXTEKAY+VEI0eXw/B9LLI23SjU5G9Gcw5t
rUFIGLDe5NgV+t6JLob7b32QcxGMHV3PMZ/rBApNXL3zx5NU38Y+xLjLC9bPv0pT
fDLbr7ef7OGO0EL0iyslu7tBRZX1rf22b6y6ul0QihmQOzgQuf9wLidlPVopAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIk3TCZlpsvQFJUy4d6un1oX4WR0wHwYDVR0j
BBgwFoAUxwbBkdiuMfnfFNbBFHS85YhBrQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm4yVUdITWNZSGprQ3NQcEFBaGhwR2NTOXVpVmdDM3ZleDFSVFhLeHJM
VzYvMS9DNzA2QzE5MUQ4QUUzMUY5REYxNEQ2QzExNDc0QkNFNTg4NDFBRDBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MDZDMTkxRDhBRTMxRjlE
RjE0RDZDMTE0NzRCQ0U1ODg0MUFEMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nm4yVUdITWNZSGprQ3NQcEFBaGhwR2NTOXVpVmdDM3ZleDFSVFhLeHJMVzYvMS9D
NzA2QzE5MUQ4QUUzMUY5REYxNEQ2QzExNDc0QkNFNTg4NDFBRDBGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD8P5DIX7P1lRNIevBjKHfQxVnomttPwZXwDQgyjDVhoG4It/QrXCriNv/z5+
50pyTfY5EUk7Vmk+iM9yTViTSQ8SdtbtYZu6sRfZGoM37T3JrDamjdDA3VMQLWBx
QvJMnaVTgPZAt0O1uAXN/81xamG+gC2sU/2epDNP+L6P1oEk4PQz3hstfUXhdbEY
JW/jt75MdrsClGsR14BV40OypEJThegOLEeWoFhoI+WCCa2am6qW7CGI2dqm1xmf
gVhSQVQurJXzUgns4V37k+WZtL6wOA4wB9cW0P8WUE2aLQ6zol1ULEFGjojH6TIu
Vd22WOLb0l79uDrOexihMdyIvA==
-----END CERTIFICATE-----
Generated at Fri May 2 09:46:54 2025 by rpki-client