Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft
File:                     04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft (raw, json)
Hash identifier:          LF2lz5OuH39uemUfdub7kfrzzyE4F4LrFSQxDE7fGmI=
Subject key identifier:   A4:2C:C2:12:3F:01:CA:38:28:17:BD:29:D3:53:26:34:18:72:85:5C
Authority key identifier: 04:85:1B:77:FE:9F:63:49:AB:1D:A1:95:8A:F1:E8:14:1B:03:C6:AA
Certificate issuer:       /CN=04851B77FE9F6349AB1DA1958AF1E8141B03C6AA
Certificate serial:       3B0898697C306F1C7BF996A61FCE3B4A792B0A1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft
Manifest number:          01D8
Signing time:             Wed 18 Jun 2025 13:07:58 +0000
Manifest this update:     Wed 18 Jun 2025 13:02:58 +0000
Manifest next update:     Thu 19 Jun 2025 14:39:58 +0000
Files and hashes:         1: 3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa (hash: +NGL+JopawVntgv3xkxZJooBrR0gAYf17xfpLylqE9E=)
                          2: 04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.crl (hash: MkcRcu94n2aVVIh9WhEPDlgh6uUFAEAqtoXLqHzZ2tw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.crl
                          rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:08:98:69:7c:30:6f:1c:7b:f9:96:a6:1f:ce:3b:4a:79:2b:0a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04851B77FE9F6349AB1DA1958AF1E8141B03C6AA
        Validity
            Not Before: Jun 18 13:02:58 2025 GMT
            Not After : Jun 19 14:39:58 2025 GMT
        Subject: CN=A42CC2123F01CA382817BD29D35326341872855C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:a8:fe:dd:19:11:96:0d:8c:65:3d:73:9a:
                    c0:d3:59:cb:06:97:8a:50:0f:1c:78:20:53:3f:c6:
                    96:9c:ad:d2:6d:31:d9:e9:f3:ef:2c:27:2d:eb:3a:
                    a2:47:d3:a0:16:07:cb:fb:97:40:30:21:46:14:19:
                    4f:1b:fe:80:7a:3b:0e:a0:cd:be:a0:94:c6:5d:68:
                    d4:38:eb:c1:14:d5:2e:dd:19:8a:b8:2b:f5:dd:cf:
                    bd:67:11:91:4c:89:90:77:25:b0:f4:cd:bc:84:9a:
                    82:0f:99:4f:24:4c:52:e1:fd:99:bc:f8:5d:0e:19:
                    ff:a4:7e:ac:45:3b:1d:9d:1d:cf:ed:a6:a0:db:2f:
                    b5:67:d3:f1:ed:70:b7:84:15:69:6e:eb:bc:af:9b:
                    dd:06:53:a8:c1:10:5e:d9:25:00:8e:ee:b0:6b:58:
                    23:ae:38:b8:cb:aa:99:26:47:d9:c1:8b:89:4a:5b:
                    e1:37:da:2b:99:9d:0f:d4:c6:ea:5b:ef:42:b7:c5:
                    0a:4e:2e:43:d2:7e:1d:91:40:2a:77:ba:98:63:38:
                    6d:6f:0c:ac:f7:37:83:17:21:8a:d5:40:84:11:cb:
                    3c:7f:3b:30:10:99:9e:d5:b9:1e:4c:c3:e3:de:db:
                    ce:e2:84:6b:73:b4:07:35:ad:cd:d4:9e:d9:15:3e:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:C2:12:3F:01:CA:38:28:17:BD:29:D3:53:26:34:18:72:85:5C
            X509v3 Authority Key Identifier:
                keyid:04:85:1B:77:FE:9F:63:49:AB:1D:A1:95:8A:F1:E8:14:1B:03:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:8a:58:1f:e1:72:c8:07:e2:1a:75:ec:c3:c9:8a:c1:2f:1f:
         e7:c2:91:83:cf:1a:66:00:b0:8d:c8:03:1c:94:3c:86:3b:f7:
         87:d6:c0:67:e6:5d:e5:49:82:e2:da:5a:98:05:c6:e6:af:48:
         79:fc:3d:c6:26:03:30:b3:00:39:24:02:8f:31:f7:54:ae:a0:
         54:3f:00:08:d0:58:59:1b:85:37:8f:22:76:a7:0a:e4:ba:7b:
         ea:6f:17:6d:72:92:5f:3c:75:6a:27:f9:f4:ff:77:7f:ea:d9:
         33:fd:fb:13:6a:b0:cf:22:02:c5:7e:24:56:d2:23:13:30:23:
         62:46:38:36:4c:1b:ea:c7:c0:8b:ed:63:9b:56:1e:dd:c0:d7:
         86:25:b2:8c:8a:15:f7:e8:1f:f5:0d:08:a2:a0:27:fa:ba:d7:
         58:11:4b:ac:e5:0f:7e:4a:0b:e3:de:09:bd:4b:8b:49:15:5b:
         6b:95:3f:ee:f8:b1:de:d6:40:c3:af:55:58:13:be:a2:fa:9e:
         4b:1b:a4:01:a2:09:c9:5a:2a:85:49:a5:0e:ad:4b:34:24:ec:
         43:ce:1f:ef:95:7e:15:a5:74:a5:4e:13:eb:9f:d6:0f:3c:5e:
         62:b0:81:1e:c9:a9:71:42:a0:47:de:e8:ae:78:f2:b9:3e:85:
         7f:7c:9c:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOwiYaXwwbxx7+ZamH847SnkrChswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4NTFCNzdGRTlGNjM0OUFCMURBMTk1OEFGMUU4MTQx
QjAzQzZBQTAeFw0yNTA2MTgxMzAyNThaFw0yNTA2MTkxNDM5NThaMDMxMTAvBgNV
BAMTKEE0MkNDMjEyM0YwMUNBMzgyODE3QkQyOUQzNTMyNjM0MTg3Mjg1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYc6j+3RkRlg2MZT1zmsDTWcsG
l4pQDxx4IFM/xpacrdJtMdnp8+8sJy3rOqJH06AWB8v7l0AwIUYUGU8b/oB6Ow6g
zb6glMZdaNQ468EU1S7dGYq4K/Xdz71nEZFMiZB3JbD0zbyEmoIPmU8kTFLh/Zm8
+F0OGf+kfqxFOx2dHc/tpqDbL7Vn0/HtcLeEFWlu67yvm90GU6jBEF7ZJQCO7rBr
WCOuOLjLqpkmR9nBi4lKW+E32iuZnQ/Uxupb70K3xQpOLkPSfh2RQCp3uphjOG1v
DKz3N4MXIYrVQIQRyzx/OzAQmZ7VuR5Mw+Pe287ihGtztAc1rc3UntkVPhS7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpCzCEj8ByjgoF70p01MmNBhyhVwwHwYDVR0j
BBgwFoAUBIUbd/6fY0mrHaGVivHoFBsDxqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ2Y1NLYWVLTDhVR2dvUXdOdXdjdjF2WjI1bmVVUUVEd3V6dEhVY0NS
ZWUvMC8wNDg1MUI3N0ZFOUY2MzQ5QUIxREExOTU4QUYxRTgxNDFCMDNDNkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODUxQjc3RkU5RjYzNDlB
QjFEQTE5NThBRjFFODE0MUIwM0M2QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHZ2Y1NLYWVLTDhVR2dvUXdOdXdjdjF2WjI1bmVVUUVEd3V6dEhVY0NSZWUvMC8w
NDg1MUI3N0ZFOUY2MzQ5QUIxREExOTU4QUYxRTgxNDFCMDNDNkFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASIpYH+FyyAfiGnXsw8mKwS8f58KRg88aZgCwjcgDHJQ8hjv3h9bAZ+Zd5UmC
4tpamAXG5q9Iefw9xiYDMLMAOSQCjzH3VK6gVD8ACNBYWRuFN48idqcK5Lp76m8X
bXKSXzx1aif59P93f+rZM/37E2qwzyICxX4kVtIjEzAjYkY4Nkwb6sfAi+1jm1Ye
3cDXhiWyjIoV9+gf9Q0IoqAn+rrXWBFLrOUPfkoL494JvUuLSRVba5U/7vix3tZA
w69VWBO+ovqeSxukAaIJyVoqhUmlDq1LNCTsQ84f75V+FaV0pU4T65/WDzxeYrCB
HsmpcUKgR97ornjyuT6Ff3ycqg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:03:32 2025 by rpki-client