Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
File:                     CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft (raw, json)
Hash identifier:          bBfEbzMjvMmFIULZ5MwEqqxenKUDGI7l+bpMRUkuolA=
Subject key identifier:   0F:36:F9:41:B1:51:D2:C5:09:F8:0F:94:71:CE:43:B7:76:07:18:46
Authority key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E
Certificate issuer:       /CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
Certificate serial:       1B2945883CB146ED599ACC62BDE9135FE9445C0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
Manifest number:          0214
Signing time:             Wed 07 May 2025 00:30:01 +0000
Manifest this update:     Wed 07 May 2025 00:25:01 +0000
Manifest next update:     Thu 08 May 2025 03:07:01 +0000
Files and hashes:         1: 3137392e3130372e31342e302f32342d3234203d3e20323633323635.roa (hash: /QUMWfA6nHsUm1cg8sfCs+Hj74uTJJqoMscr9tN7IOg=)
                          2: 323830343a313631303a3a2f33322d3332203d3e20323633323635.roa (hash: k/J6tQPF/CXjiGH8+gY8m4h/OH5XvwFsWCKQELdqmUA=)
                          3: 3137392e3130372e31352e302f32342d3234203d3e20323633323635.roa (hash: KwPZVpGnEMa1RgS3pFV/WZ2KE+rl/S3PUuRBVuOSYkM=)
                          4: 3137392e3130372e31302e302f32342d3234203d3e20323633323635.roa (hash: J9QWkOcLV1RISjAfdc5cuhYAAgPTtzjs5xLr3Vxey6M=)
                          5: 3137392e3130372e31332e302f32342d3234203d3e20323633323635.roa (hash: G/7JiVxjWhICsRjaF9f8hDWcCmq2BQGFjV67E1R+cHc=)
                          6: CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl (hash: fJBNnkmY18GoWGgHbDQJ2DdPtRVUuko8ODCLH7M9eNk=)
                          7: 3137392e3130372e31322e302f32342d3234203d3e20323633323635.roa (hash: qcuGRsxtxZYxCJmwSpcPF2z48Om/S1tE56SJKDRFS8Y=)
                          8: 3137392e3130372e31312e302f32342d3234203d3e20323633323635.roa (hash: FrQUfyIsBKQ14hmz9VnRQb1f9iBUaQYQLXVWs8pk94E=)
                          9: 3137392e3130372e382e302f32312d3231203d3e20323633323635.roa (hash: ceZmWWEXOnSEWuexWkFljrMZW1NHHbsX871JU0Ny81M=)
                          10: 3137392e3130372e392e302f32342d3234203d3e20323633323635.roa (hash: IQDo1K6XTxQ+CtxcmhdNM7BU9XHYg3ry2QkStU+Av6U=)
                          11: 3137392e3130372e382e302f32342d3234203d3e20323633323635.roa (hash: b5RHh/m+mtnjVsGrdwL+I17gR87m9BV3TdeZN6eJQA0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl
                          rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 03:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:45:88:3c:b1:46:ed:59:9a:cc:62:bd:e9:13:5f:e9:44:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E
        Validity
            Not Before: May  7 00:25:01 2025 GMT
            Not After : May  8 03:07:01 2025 GMT
        Subject: CN=0F36F941B151D2C509F80F9471CE43B776071846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:d0:19:ca:b7:f6:08:aa:be:d7:24:f8:3a:
                    e1:38:1a:a8:ec:f9:2d:80:d1:72:dc:42:eb:8a:d2:
                    fb:ec:e6:ea:50:bb:d3:d5:af:32:04:ef:f5:f7:28:
                    14:ce:3a:b2:26:a8:9e:42:02:6c:c6:cd:be:39:50:
                    3a:1c:32:93:c5:10:f7:01:70:61:08:92:ec:30:1e:
                    44:d8:47:24:f9:9d:16:b2:cf:eb:b3:80:95:cf:1c:
                    49:e7:37:87:77:75:34:a1:bb:c9:50:72:7d:ce:f5:
                    39:c0:35:66:39:a0:26:e5:a1:a7:d4:8b:e3:50:6e:
                    6c:33:78:e9:7c:ee:1e:00:e5:ff:91:78:7b:e0:ca:
                    f6:be:45:7b:83:e6:bb:69:c2:cd:a8:3f:3f:aa:8c:
                    bc:df:83:a6:69:04:ec:05:7b:9a:0e:9a:47:e2:8f:
                    75:e5:79:e7:0f:a6:7a:0f:85:74:c2:67:36:22:2d:
                    07:54:9a:12:37:1e:83:42:c2:73:ed:ac:d3:65:9b:
                    8f:4f:55:54:b4:d8:5f:68:75:91:bb:02:6e:09:49:
                    63:85:17:5c:59:fc:f2:a0:b6:27:a1:88:cc:b3:5e:
                    dd:19:05:b3:68:ef:d9:e1:75:51:a7:53:ea:f3:8c:
                    98:21:d8:01:b4:af:72:2a:ef:95:28:0c:da:90:df:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:36:F9:41:B1:51:D2:C5:09:F8:0F:94:71:CE:43:B7:76:07:18:46
            X509v3 Authority Key Identifier:
                keyid:CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:cb:4b:37:12:4b:8a:19:35:b5:d4:61:4c:ed:89:4f:f6:6e:
         fd:83:ae:e4:36:a8:55:d3:63:00:5e:cf:b8:03:1e:9f:61:aa:
         12:f0:d6:25:08:91:53:71:e9:93:b3:c4:71:4e:20:65:dc:ff:
         01:a6:1c:58:10:00:da:7e:32:b9:8c:7f:e4:9c:24:68:98:9e:
         39:a7:15:77:c0:01:db:67:90:3e:d2:0f:0e:21:27:67:bc:e9:
         d8:3c:db:2e:82:ff:4c:93:51:00:09:91:f4:88:ee:c9:f8:d6:
         b9:5d:a7:17:91:a2:eb:36:9f:8e:cd:70:09:d4:10:cf:0f:1d:
         bb:11:ae:89:4d:6c:f7:28:86:ad:08:0b:c9:04:fc:16:8a:38:
         4b:1e:31:98:f2:32:e9:66:d8:0b:e1:1f:e8:15:04:28:96:86:
         45:b8:12:4f:bc:d2:e5:74:59:32:07:08:30:76:4b:55:3d:d0:
         eb:d9:05:17:e0:51:af:b2:c8:16:44:93:4b:3d:c5:46:c8:c7:
         54:99:06:9a:70:2b:42:a6:ef:85:23:19:be:85:97:6e:26:0b:
         8a:03:7e:ee:28:f7:10:1f:04:45:c3:be:63:c2:5d:d3:b8:a9:
         ff:e9:75:60:dd:4d:1b:13:87:1a:a0:d9:fb:bf:c5:7a:8b:3f:
         07:96:1b:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGylFiDyxRu1ZmsxivekTX+lEXA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1OUUyNDFGRkFBQzU5RkEwQkExRDA4RDk4RkI4MUE4
N0M1RDE3RTAeFw0yNTA1MDcwMDI1MDFaFw0yNTA1MDgwMzA3MDFaMDMxMTAvBgNV
BAMTKDBGMzZGOTQxQjE1MUQyQzUwOUY4MEY5NDcxQ0U0M0I3NzYwNzE4NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8NAZyrf2CKq+1yT4OuE4Gqjs
+S2A0XLcQuuK0vvs5upQu9PVrzIE7/X3KBTOOrImqJ5CAmzGzb45UDocMpPFEPcB
cGEIkuwwHkTYRyT5nRayz+uzgJXPHEnnN4d3dTShu8lQcn3O9TnANWY5oCbloafU
i+NQbmwzeOl87h4A5f+ReHvgyva+RXuD5rtpws2oPz+qjLzfg6ZpBOwFe5oOmkfi
j3XleecPpnoPhXTCZzYiLQdUmhI3HoNCwnPtrNNlm49PVVS02F9odZG7Am4JSWOF
F1xZ/PKgtiehiMyzXt0ZBbNo79nhdVGnU+rzjJgh2AG0r3Iq75UoDNqQ31EfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDzb5QbFR0sUJ+A+Ucc5Dt3YHGEYwHwYDVR0j
BBgwFoAUy1niQf+qxZ+guh0I2Y+4GofF0X4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1h
VXovMS9DQjU5RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTlFMjQxRkZBQUM1OUZB
MEJBMUQwOEQ5OEZCODFBODdDNUQxN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHkybzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMS9D
QjU5RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzstLNxJLihk1tdRhTO2JT/Zu/YOu5DaoVdNjAF7PuAMen2GqEvDWJQiRU3Hp
k7PEcU4gZdz/AaYcWBAA2n4yuYx/5JwkaJieOacVd8AB22eQPtIPDiEnZ7zp2Dzb
LoL/TJNRAAmR9IjuyfjWuV2nF5Gi6zafjs1wCdQQzw8duxGuiU1s9yiGrQgLyQT8
Foo4Sx4xmPIy6WbYC+Ef6BUEKJaGRbgST7zS5XRZMgcIMHZLVT3Q69kFF+BRr7LI
FkSTSz3FRsjHVJkGmnArQqbvhSMZvoWXbiYLigN+7ij3EB8ERcO+Y8Jd07ip/+l1
YN1NGxOHGqDZ+7/Feos/B5YbLA==
-----END CERTIFICATE-----
Generated at Wed May 7 13:29:22 2025 by rpki-client