Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft
File:                     CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft (raw, json)
Hash identifier:          yEjE4xAnDHh26FRvhK2xXHWExnq2JDTAzlKhxKp8pXc=
Subject key identifier:   83:0E:50:67:EC:A5:2B:68:3A:BA:86:33:72:01:11:0A:69:AC:54:A2
Authority key identifier: CF:0C:59:4A:DB:BA:27:C9:8F:AB:59:92:C2:3C:09:8D:D0:3A:C6:31
Certificate issuer:       /CN=CF0C594ADBBA27C98FAB5992C23C098DD03AC631
Certificate serial:       066173B7CF6D873E552B793021904A1E3CE5451D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft
Manifest number:          3A
Signing time:             Mon 16 Jun 2025 13:20:39 +0000
Manifest this update:     Mon 16 Jun 2025 13:15:39 +0000
Manifest next update:     Tue 17 Jun 2025 17:16:39 +0000
Files and hashes:         1: 3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (hash: cQxOJ7j3iGeDhCompFgNXRr7pumm4PWOCBel6j69AVk=)
                          2: CF0C594ADBBA27C98FAB5992C23C098DD03AC631.crl (hash: QyN78UrBioxPuYoyMms690MRcELq/ZaphDtucZflOAI=)
                          3: 323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (hash: 1ySdZ1xTTHDZtG5MnfAtB3df0xOUm1AlzE0inu0dv0U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 17:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:61:73:b7:cf:6d:87:3e:55:2b:79:30:21:90:4a:1e:3c:e5:45:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF0C594ADBBA27C98FAB5992C23C098DD03AC631
        Validity
            Not Before: Jun 16 13:15:39 2025 GMT
            Not After : Jun 17 17:16:39 2025 GMT
        Subject: CN=830E5067ECA52B683ABA86337201110A69AC54A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:35:c1:95:de:87:0c:b0:15:bd:e7:55:8e:
                    b9:1e:28:85:be:ee:89:a3:21:08:86:64:5e:f4:7c:
                    d6:74:e9:46:46:a1:0d:dd:85:96:3f:01:5a:87:86:
                    88:7b:aa:ec:0b:31:22:8c:38:a1:9c:d0:6a:3f:07:
                    96:09:e4:6b:22:27:e1:74:5c:12:17:28:f4:2c:e4:
                    86:23:a6:3d:6a:8b:7e:a1:26:75:88:e1:4e:ab:90:
                    06:24:39:d5:a3:d8:46:29:68:af:79:75:0a:84:f2:
                    53:c8:92:33:c3:64:86:7a:53:91:38:3a:1c:47:4e:
                    82:cc:62:2c:cc:23:ea:7f:46:e1:86:e5:d8:71:4b:
                    c1:bc:9d:a3:48:08:f8:88:32:6f:8a:8d:d3:35:58:
                    63:a7:10:dd:3c:85:25:a0:74:73:2a:e4:7f:7f:0d:
                    f7:ba:08:b8:54:c2:bd:4b:1a:63:6b:1f:2b:2d:a6:
                    24:d8:c1:8d:d2:b6:63:30:3a:69:02:85:6d:78:27:
                    ed:ba:a4:77:21:87:2d:72:c0:ec:66:e4:f9:fd:dd:
                    c2:03:6a:6e:18:cb:04:77:ba:9b:71:36:ca:d3:0d:
                    5a:f2:dd:b6:0b:9d:c2:22:4a:9e:45:c5:63:d3:b9:
                    07:6a:7e:3c:27:8d:da:7a:f4:e9:6d:b1:6c:7e:82:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:50:67:EC:A5:2B:68:3A:BA:86:33:72:01:11:0A:69:AC:54:A2
            X509v3 Authority Key Identifier:
                keyid:CF:0C:59:4A:DB:BA:27:C9:8F:AB:59:92:C2:3C:09:8D:D0:3A:C6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0b:ff:67:36:b4:55:6f:06:ba:86:ee:af:97:04:0a:2b:73:
         bf:fa:a0:c5:8a:5e:8f:1f:15:ea:52:9e:56:e1:79:52:c2:b9:
         22:d8:50:5d:ff:62:95:75:5e:86:18:a3:e4:14:44:9d:fb:8d:
         59:5a:90:0a:4b:e8:40:8f:15:ff:c4:53:39:74:a6:fc:5a:ee:
         dd:29:5e:ea:5e:3b:45:98:b3:25:13:e1:c1:40:b3:0a:21:a1:
         f9:82:76:19:8c:c3:52:50:5d:e7:9b:61:99:69:8a:86:96:a9:
         83:13:b6:26:73:7e:e7:12:a0:e1:5b:ca:50:4a:67:39:9a:5a:
         5a:b7:03:7f:2f:41:25:00:ec:aa:8e:eb:6f:fc:76:4b:8a:1c:
         af:f4:2e:b6:5e:15:07:a5:0b:0a:b4:e4:3a:ef:2d:88:48:89:
         d5:db:09:dc:38:ed:36:bd:ca:e0:f4:00:b0:47:ec:36:a0:a6:
         1d:17:d7:75:21:bb:a9:e7:9d:a6:09:ae:f3:1c:6b:71:d2:0d:
         0f:81:91:cc:e9:25:ee:70:98:05:66:79:4a:39:3a:fa:51:c5:
         44:97:53:c2:c7:ed:9d:f3:a6:c1:11:10:68:d7:a6:96:b7:db:
         fa:67:b0:a6:97:f0:a6:7b:ef:cd:fd:62:d7:a7:20:3b:da:f9:
         fe:cb:79:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBmFzt89thz5VK3kwIZBKHjzlRR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YwQzU5NEFEQkJBMjdDOThGQUI1OTkyQzIzQzA5OERE
MDNBQzYzMTAeFw0yNTA2MTYxMzE1MzlaFw0yNTA2MTcxNzE2MzlaMDMxMTAvBgNV
BAMTKDgzMEU1MDY3RUNBNTJCNjgzQUJBODYzMzcyMDExMTBBNjlBQzU0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXDXBld6HDLAVvedVjrkeKIW+
7omjIQiGZF70fNZ06UZGoQ3dhZY/AVqHhoh7quwLMSKMOKGc0Go/B5YJ5GsiJ+F0
XBIXKPQs5IYjpj1qi36hJnWI4U6rkAYkOdWj2EYpaK95dQqE8lPIkjPDZIZ6U5E4
OhxHToLMYizMI+p/RuGG5dhxS8G8naNICPiIMm+KjdM1WGOnEN08hSWgdHMq5H9/
Dfe6CLhUwr1LGmNrHystpiTYwY3StmMwOmkChW14J+26pHchhy1ywOxm5Pn93cID
am4YywR3uptxNsrTDVry3bYLncIiSp5FxWPTuQdqfjwnjdp69OltsWx+gsJvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgw5QZ+ylK2g6uoYzcgERCmmsVKIwHwYDVR0j
BBgwFoAUzwxZStu6J8mPq1mSwjwJjdA6xjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1
aTYvMC9DRjBDNTk0QURCQkEyN0M5OEZBQjU5OTJDMjNDMDk4REQwM0FDNjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMEM1OTRBREJCQTI3Qzk4
RkFCNTk5MkMyM0MwOThERDAzQUM2MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1aTYvMC9D
RjBDNTk0QURCQkEyN0M5OEZBQjU5OTJDMjNDMDk4REQwM0FDNjMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAswv/Zza0VW8Guobur5cECitzv/qgxYpejx8V6lKeVuF5UsK5IthQXf9ilXVe
hhij5BREnfuNWVqQCkvoQI8V/8RTOXSm/Fru3Sle6l47RZizJRPhwUCzCiGh+YJ2
GYzDUlBd55thmWmKhpapgxO2JnN+5xKg4VvKUEpnOZpaWrcDfy9BJQDsqo7rb/x2
S4ocr/Qutl4VB6ULCrTkOu8tiEiJ1dsJ3DjtNr3K4PQAsEfsNqCmHRfXdSG7qeed
pgmu8xxrcdIND4GRzOkl7nCYBWZ5Sjk6+lHFRJdTwsftnfOmwREQaNemlrfb+mew
ppfwpnvvzf1i16cgO9r5/st5CQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:21:21 2025 by rpki-client