Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
File:                     36E2592A4F09731FA90CEA56F7F8D410522525DE.mft (raw, json)
Hash identifier:          K1cBWa7UuG/1BfmKr7FSfEJpyLKCXyLoUHAdXYOBbqU=
Subject key identifier:   1D:2F:75:69:B7:E3:41:C6:88:A0:C1:77:84:BA:02:98:0E:FC:5C:4B
Authority key identifier: 36:E2:59:2A:4F:09:73:1F:A9:0C:EA:56:F7:F8:D4:10:52:25:25:DE
Certificate issuer:       /CN=36E2592A4F09731FA90CEA56F7F8D410522525DE
Certificate serial:       1BF361B20FD3543BEFB7F514D1E3B4756FFA4C5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
Manifest number:          024B
Signing time:             Wed 18 Jun 2025 14:53:43 +0000
Manifest this update:     Wed 18 Jun 2025 14:48:43 +0000
Manifest next update:     Thu 19 Jun 2025 18:12:43 +0000
Files and hashes:         1: 36E2592A4F09731FA90CEA56F7F8D410522525DE.crl (hash: YW6ttQ1EhDvF4oKL/0tATY93zWsS97+RjISIsxZaDKY=)
                          2: 323830343a383136343a3a2f33322d3438203d3e20323732343531.roa (hash: PIb1AFjKsTG5y3uOzt5RREgcFTzCOpgsKV8/8VMRWio=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.crl
                          rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 18:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:61:b2:0f:d3:54:3b:ef:b7:f5:14:d1:e3:b4:75:6f:fa:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E2592A4F09731FA90CEA56F7F8D410522525DE
        Validity
            Not Before: Jun 18 14:48:43 2025 GMT
            Not After : Jun 19 18:12:43 2025 GMT
        Subject: CN=1D2F7569B7E341C688A0C17784BA02980EFC5C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:d5:06:28:d9:b1:95:d2:5e:c7:fa:c2:14:
                    a1:a0:c2:96:9d:7e:87:9c:ce:db:b0:75:a4:f0:aa:
                    2d:36:ee:18:4d:1e:3d:ec:19:a8:61:a9:4c:16:b0:
                    4c:27:13:86:9b:40:a5:be:b4:56:5a:d3:64:42:07:
                    5c:51:9c:22:15:53:e4:e4:65:24:04:7f:19:9b:b7:
                    2d:5e:91:b7:ea:7e:6b:46:9d:c9:ae:4a:3f:89:35:
                    7a:23:e1:64:41:f9:1d:a0:44:59:4f:da:8b:34:85:
                    81:a9:66:87:d5:b7:d9:1f:cb:7d:34:a5:d3:3b:3e:
                    4a:22:cb:f9:49:c2:6f:54:71:91:13:6b:60:2e:79:
                    9f:f3:0b:d5:4a:0c:c5:9a:bf:80:b7:0a:1a:33:90:
                    66:47:94:36:94:7e:be:cf:b8:5e:8c:38:47:d0:b2:
                    ea:97:4c:d3:4b:24:26:90:bf:5a:af:1e:0f:88:ba:
                    6c:90:5e:e4:46:a6:18:28:97:84:44:8d:05:a3:ab:
                    09:4b:da:d2:a4:6e:be:64:a4:47:2a:eb:62:90:cb:
                    2c:c3:d3:51:b2:1e:29:50:bb:75:d7:b5:a8:dc:79:
                    a8:7c:9c:31:0f:24:bf:87:0b:17:bc:21:ac:4e:5b:
                    73:d2:86:73:0b:72:28:4c:22:6b:ee:3f:ea:6b:54:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:75:69:B7:E3:41:C6:88:A0:C1:77:84:BA:02:98:0E:FC:5C:4B
            X509v3 Authority Key Identifier:
                keyid:36:E2:59:2A:4F:09:73:1F:A9:0C:EA:56:F7:F8:D4:10:52:25:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXy4Asq7odjvWx5kB85Hj5ZZjqsu5y2RPKgeF3rRoP3f/1/36E2592A4F09731FA90CEA56F7F8D410522525DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:42:bc:9a:34:c2:cb:b6:29:2d:74:87:0e:d2:b2:8e:be:
         75:34:0e:02:0b:bc:86:61:dc:99:41:88:49:b6:c3:c6:c4:54:
         02:fd:74:f9:36:7a:cd:bc:09:50:d1:1d:29:ae:1d:4d:d6:8f:
         7d:70:5e:ed:f1:52:0b:6a:e7:43:4a:fa:ba:af:ad:79:0e:6b:
         60:40:00:7c:07:81:57:63:f7:55:90:12:30:2f:c8:34:98:1e:
         89:65:66:ca:f3:f0:ec:14:0d:3b:72:ce:ed:24:ac:57:9b:7b:
         35:95:fc:b1:e3:27:52:48:59:3c:b1:c8:22:d4:73:75:0c:05:
         27:03:19:f3:a2:28:ae:66:99:b1:0a:dd:07:ec:23:4f:c3:ee:
         3c:c9:6d:29:48:97:a7:9a:aa:97:25:7d:a0:bf:ff:67:6d:ee:
         a0:2c:a5:1c:df:c6:66:d1:14:5e:93:7b:fe:08:81:81:b3:3e:
         90:74:84:03:d6:c2:fc:d8:80:17:b9:95:d5:cb:11:2b:c0:a7:
         4e:7b:d7:ed:0c:1c:5e:c0:e9:4d:d2:69:79:39:0f:52:95:c7:
         4b:d9:9a:04:39:88:23:20:1b:c2:d7:ad:bb:a2:98:b7:7d:71:
         ff:87:4f:5a:eb:82:d3:c3:9d:0e:8f:80:e9:f8:bd:48:20:d5:
         e2:46:57:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG/Nhsg/TVDvvt/UU0eO0dW/6TFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFMjU5MkE0RjA5NzMxRkE5MENFQTU2RjdGOEQ0MTA1
MjI1MjVERTAeFw0yNTA2MTgxNDQ4NDNaFw0yNTA2MTkxODEyNDNaMDMxMTAvBgNV
BAMTKDFEMkY3NTY5QjdFMzQxQzY4OEEwQzE3Nzg0QkEwMjk4MEVGQzVDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB69UGKNmxldJex/rCFKGgwpad
foecztuwdaTwqi027hhNHj3sGahhqUwWsEwnE4abQKW+tFZa02RCB1xRnCIVU+Tk
ZSQEfxmbty1ekbfqfmtGncmuSj+JNXoj4WRB+R2gRFlP2os0hYGpZofVt9kfy300
pdM7Pkoiy/lJwm9UcZETa2AueZ/zC9VKDMWav4C3ChozkGZHlDaUfr7PuF6MOEfQ
suqXTNNLJCaQv1qvHg+IumyQXuRGphgol4REjQWjqwlL2tKkbr5kpEcq62KQyyzD
01GyHilQu3XXtajceah8nDEPJL+HCxe8IaxOW3PShnMLcihMImvuP+prVE2zAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHS91abfjQcaIoMF3hLoCmA78XEswHwYDVR0j
BBgwFoAUNuJZKk8Jcx+pDOpW9/jUEFIlJd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlh5NEFzcTdvZGp2V3g1a0I4NUhqNVpaanFzdTV5MlJQS2dlRjNyUm9Q
M2YvMS8zNkUyNTkyQTRGMDk3MzFGQTkwQ0VBNTZGN0Y4RDQxMDUyMjUyNURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RTI1OTJBNEYwOTczMUZB
OTBDRUE1NkY3RjhENDEwNTIyNTI1REUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qlh5NEFzcTdvZGp2V3g1a0I4NUhqNVpaanFzdTV5MlJQS2dlRjNyUm9QM2YvMS8z
NkUyNTkyQTRGMDk3MzFGQTkwQ0VBNTZGN0Y4RDQxMDUyMjUyNURFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTRCvJo0wsu2KS10hw7Sso6+dTQOAgu8hmHcmUGISbbDxsRUAv10+TZ6zbwJ
UNEdKa4dTdaPfXBe7fFSC2rnQ0r6uq+teQ5rYEAAfAeBV2P3VZASMC/INJgeiWVm
yvPw7BQNO3LO7SSsV5t7NZX8seMnUkhZPLHIItRzdQwFJwMZ86IormaZsQrdB+wj
T8PuPMltKUiXp5qqlyV9oL//Z23uoCylHN/GZtEUXpN7/giBgbM+kHSEA9bC/NiA
F7mV1csRK8CnTnvX7QwcXsDpTdJpeTkPUpXHS9maBDmIIyAbwtetu6KYt31x/4dP
WuuC08OdDo+A6fi9SCDV4kZX1g==
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:10:48 2025 by rpki-client