Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          ri7OhKaJrIzN7e4UgwZ5oJbYPWz6rEIBPCxUBF+7m1c=
Subject key identifier:   85:B9:5D:48:2E:9C:B0:49:FF:BD:26:3C:6F:36:65:65:45:E8:5B:2E
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       706DD1F4B0BA7ACE8289DE4D99FDED19BB243C9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          021B
Signing time:             Tue 13 May 2025 20:49:40 +0000
Manifest this update:     Tue 13 May 2025 20:44:40 +0000
Manifest next update:     Thu 15 May 2025 00:16:40 +0000
Files and hashes:         1: 323830343a386230303a3a2f33322d3335203d3e20323733373036.roa (hash: 6TL5vKPSaKqQE4gIGwSgvsrJrF+N73V7cP4sGVuVr+A=)
                          2: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: BLZiC5myjewKMyksFTUbpvXZvyWYdI1NIEEbqEqPNNo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 00:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:d1:f4:b0:ba:7a:ce:82:89:de:4d:99:fd:ed:19:bb:24:3c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: May 13 20:44:40 2025 GMT
            Not After : May 15 00:16:40 2025 GMT
        Subject: CN=85B95D482E9CB049FFBD263C6F36656545E85B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:61:f0:95:c0:20:45:f7:e5:74:f7:15:44:
                    98:46:32:7c:f6:b3:98:64:37:c5:e3:49:4c:0e:04:
                    a1:82:2d:cc:ea:cb:4a:ae:2f:a9:40:e1:49:7e:a9:
                    2e:14:4d:3f:03:c4:a8:51:5a:ff:30:a5:d7:8c:a1:
                    55:fb:3d:b0:95:6a:0f:91:42:8b:b8:7b:34:da:d2:
                    87:78:3a:be:0f:7a:fc:61:02:4f:0a:a0:e0:a4:54:
                    5c:67:c6:ad:d4:79:c3:0d:f5:fe:f6:60:a6:89:3c:
                    3e:33:47:9c:fe:41:ba:49:68:de:d0:1d:0e:a2:13:
                    ca:9e:8c:80:ca:b3:4e:d9:fd:47:e7:d2:64:8c:55:
                    59:fa:19:8b:a2:8a:80:e4:b0:df:61:16:cb:22:88:
                    80:15:ed:b5:3a:ba:30:81:b6:37:05:a4:6d:aa:6e:
                    d5:f9:ac:c1:b8:3a:06:97:3e:0a:e5:d2:98:dd:8e:
                    a1:fb:bd:90:0f:67:2f:f6:a8:27:c2:03:6c:96:52:
                    03:c6:f1:48:d5:45:86:6c:d4:67:8c:5b:87:8b:c5:
                    24:98:3c:fa:40:4a:59:83:33:30:5e:df:84:16:c3:
                    01:09:57:3e:2c:0a:40:55:ef:d8:33:cd:ff:40:65:
                    4b:83:b3:c7:70:e5:8e:2d:fe:08:14:3f:48:92:72:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:5D:48:2E:9C:B0:49:FF:BD:26:3C:6F:36:65:65:45:E8:5B:2E
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:7f:ff:5b:1a:f4:07:3e:3f:c0:25:5b:5d:14:0a:bc:bc:
         d8:cb:31:82:35:02:78:37:bd:52:d0:05:b9:3e:27:59:0a:6b:
         38:63:00:ef:a8:33:ab:2f:58:ee:67:78:97:e1:37:95:cc:69:
         62:6b:31:7d:8d:cb:c7:e7:b8:9f:78:86:04:3c:21:f2:f8:10:
         38:2c:f9:d7:7f:34:fb:b0:b7:10:b6:c5:b1:44:a5:08:77:b3:
         e3:52:24:cf:91:b5:07:b3:67:db:7c:ae:36:a2:03:0f:30:56:
         5e:20:1e:22:46:4d:92:34:3a:f2:61:42:60:84:2d:84:94:8b:
         39:ac:2c:e9:a4:89:67:6c:a2:c3:92:aa:71:6a:ed:9a:dc:e4:
         4d:da:2b:5d:d8:58:d7:61:30:b8:d0:55:96:9d:3a:11:16:30:
         47:0f:e4:26:32:af:db:01:ff:17:b2:67:94:33:35:2a:fa:b5:
         1a:f9:b5:c8:6e:98:13:7d:8c:59:75:3d:a2:08:db:53:b7:21:
         5b:58:5a:a3:e0:a9:12:40:78:09:98:e8:10:40:17:f5:33:1d:
         b4:8a:e2:9b:55:a5:44:a6:ab:64:a2:d0:51:62:47:84:93:ac:
         8d:2c:74:a0:9d:f2:ed:5a:fd:c9:a6:5d:42:6d:8c:a3:1f:a0:
         d5:f7:f4:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcG3R9LC6es6Cid5Nmf3tGbskPJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1
RjcyM0IzRDAeFw0yNTA1MTMyMDQ0NDBaFw0yNTA1MTUwMDE2NDBaMDMxMTAvBgNV
BAMTKDg1Qjk1RDQ4MkU5Q0IwNDlGRkJEMjYzQzZGMzY2NTY1NDVFODVCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVomHwlcAgRffldPcVRJhGMnz2
s5hkN8XjSUwOBKGCLczqy0quL6lA4Ul+qS4UTT8DxKhRWv8wpdeMoVX7PbCVag+R
Qou4ezTa0od4Or4PevxhAk8KoOCkVFxnxq3UecMN9f72YKaJPD4zR5z+QbpJaN7Q
HQ6iE8qejIDKs07Z/Ufn0mSMVVn6GYuiioDksN9hFssiiIAV7bU6ujCBtjcFpG2q
btX5rMG4OgaXPgrl0pjdjqH7vZAPZy/2qCfCA2yWUgPG8UjVRYZs1GeMW4eLxSSY
PPpASlmDMzBe34QWwwEJVz4sCkBV79gzzf9AZUuDs8dw5Y4t/ggUP0iScmI5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhbldSC6csEn/vSY8bzZlZUXoWy4wHwYDVR0j
BBgwFoAU39Qgvu6GZYxpv3vwJaves19yOz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0
V3YvMS9ERkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRDQyMEJFRUU4NjY1OEM2
OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS9E
RkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADgN//1sa9Ac+P8AlW10UCry82MsxgjUCeDe9UtAFuT4nWQprOGMA76gzqy9Y
7md4l+E3lcxpYmsxfY3Lx+e4n3iGBDwh8vgQOCz51380+7C3ELbFsUSlCHez41Ik
z5G1B7Nn23yuNqIDDzBWXiAeIkZNkjQ68mFCYIQthJSLOaws6aSJZ2yiw5KqcWrt
mtzkTdorXdhY12EwuNBVlp06ERYwRw/kJjKv2wH/F7JnlDM1Kvq1Gvm1yG6YE32M
WXU9ogjbU7chW1hao+CpEkB4CZjoEEAX9TMdtIrim1WlRKarZKLQUWJHhJOsjSx0
oJ3y7Vr9yaZdQm2Mox+g1ff04A==
-----END CERTIFICATE-----
Generated at Wed May 14 13:37:13 2025 by rpki-client