Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
File:                     AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft (raw, json)
Hash identifier:          AyrlJhfKBI9NrNYE/XYRGbq5YyeC2ZjJa9wPzc3KIGQ=
Subject key identifier:   D9:25:5B:7B:AA:0B:B5:FD:64:A1:CE:67:40:70:74:D6:89:79:0F:FB
Authority key identifier: AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D
Certificate issuer:       /CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
Certificate serial:       5FA5DC073541DEF598C2B17D68F597A0E135ED5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
Manifest number:          01A9
Signing time:             Tue 17 Jun 2025 19:34:07 +0000
Manifest this update:     Tue 17 Jun 2025 19:29:07 +0000
Manifest next update:     Wed 18 Jun 2025 20:26:07 +0000
Files and hashes:         1: 323830343a386365303a3a2f33322d3438203d3e20323733333230.roa (hash: r/BRuiwGDb2l1+/WCN81mTz6dDcGYXbvaF8j78BvAEw=)
                          2: AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl (hash: UjNQe62c9CzYbr3mZeLOsQCyXX9ommm7WMhgaXWe3oo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl
                          rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 20:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a5:dc:07:35:41:de:f5:98:c2:b1:7d:68:f5:97:a0:e1:35:ed:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D
        Validity
            Not Before: Jun 17 19:29:07 2025 GMT
            Not After : Jun 18 20:26:07 2025 GMT
        Subject: CN=D9255B7BAA0BB5FD64A1CE67407074D689790FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:56:ba:1c:b9:80:f4:7b:c7:39:6c:0e:0c:
                    bb:79:c1:94:f4:2e:86:d1:86:8d:f9:0e:9e:c3:61:
                    29:14:2c:2f:64:e9:19:1b:3f:33:71:86:ab:fe:2b:
                    a8:d6:6f:f6:59:bb:0c:3e:da:e1:dd:a8:8a:84:bf:
                    01:c1:3a:23:d0:73:57:3e:c3:1f:7d:2b:da:58:b2:
                    35:68:45:29:70:a7:ee:18:28:e3:a9:be:b5:4d:46:
                    9b:a5:3c:99:34:e3:df:73:59:bd:4d:52:76:44:80:
                    09:69:4c:18:18:18:13:46:92:f6:26:c2:1b:a6:85:
                    b7:af:99:33:37:99:d0:1e:59:bc:d8:e5:41:af:ef:
                    f5:86:16:a6:ba:2e:05:12:fe:db:66:ad:fa:c1:19:
                    87:4d:4c:8e:18:1f:1e:e4:64:96:8a:0b:3e:47:27:
                    04:a3:2d:ff:76:d3:87:58:b5:83:1d:8e:da:d2:46:
                    04:75:c1:8d:59:13:70:a0:eb:ad:c4:f2:bc:47:71:
                    fe:ec:d2:19:03:a3:02:84:93:82:1f:46:0e:9c:81:
                    0a:62:97:69:8c:9a:74:e6:dc:30:93:81:76:aa:b7:
                    4f:3c:9d:57:36:cb:44:f3:d5:46:5e:98:06:de:f1:
                    55:d8:16:8b:a3:fb:4f:56:0e:c8:b6:c5:11:bf:d6:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:5B:7B:AA:0B:B5:FD:64:A1:CE:67:40:70:74:D6:89:79:0F:FB
            X509v3 Authority Key Identifier:
                keyid:AD:38:DC:BC:BE:1A:6D:1E:79:86:85:8F:CA:F4:AD:40:79:14:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMY5bvf3krT9Q6w6LEbLJtr49zcKP3jn8fUN4d5Z7RQ1/0/AD38DCBCBE1A6D1E7986858FCAF4AD4079142D2D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5d:b7:f1:8f:13:8d:0e:3a:1b:46:cc:1b:5b:58:e1:33:52:
         c5:96:38:64:61:14:f4:8b:58:fc:fa:7d:fa:c8:1c:10:21:6c:
         d5:0c:14:24:bd:af:bf:73:4f:c3:ca:cd:fe:ad:b2:69:6b:23:
         bb:e6:95:45:4c:83:79:8a:f7:4c:79:e8:60:1e:83:24:a6:34:
         21:09:f4:d0:f5:73:f0:30:be:e7:1a:ed:08:99:ae:e5:0c:c9:
         d0:1b:0d:0c:cf:b2:c1:4f:60:b6:dd:b6:7c:bd:8a:fa:eb:d0:
         2a:78:df:d2:cb:1b:33:f2:48:e6:87:8e:97:ed:9b:1c:3d:02:
         1f:94:75:0f:66:b7:3f:d4:05:3c:25:af:ed:08:58:ea:b3:06:
         1f:c7:24:2e:75:de:fe:ab:df:10:f0:b7:2c:52:cc:e6:76:f9:
         83:31:39:cd:73:8d:79:bb:e1:d7:b9:00:e0:70:2c:39:24:01:
         ae:98:af:be:cf:58:35:c0:a4:a5:a1:df:d3:a1:8a:d7:0a:1d:
         79:31:31:be:ea:f5:87:3b:72:2f:44:b7:55:94:de:5e:50:2e:
         f9:5e:9d:ac:7b:5a:4e:aa:2a:11:78:38:f6:ce:c2:be:25:72:
         a7:f3:c9:36:ae:65:d0:9b:d7:d9:8d:5f:e8:83:23:48:62:bd:
         76:2f:ec:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUX6XcBzVB3vWYwrF9aPWXoOE17VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzOERDQkNCRTFBNkQxRTc5ODY4NThGQ0FGNEFENDA3
OTE0MkQyRDAeFw0yNTA2MTcxOTI5MDdaFw0yNTA2MTgyMDI2MDdaMDMxMTAvBgNV
BAMTKEQ5MjU1QjdCQUEwQkI1RkQ2NEExQ0U2NzQwNzA3NEQ2ODk3OTBGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz31a6HLmA9HvHOWwODLt5wZT0
LobRho35Dp7DYSkULC9k6RkbPzNxhqv+K6jWb/ZZuww+2uHdqIqEvwHBOiPQc1c+
wx99K9pYsjVoRSlwp+4YKOOpvrVNRpulPJk0499zWb1NUnZEgAlpTBgYGBNGkvYm
whumhbevmTM3mdAeWbzY5UGv7/WGFqa6LgUS/ttmrfrBGYdNTI4YHx7kZJaKCz5H
JwSjLf9204dYtYMdjtrSRgR1wY1ZE3Cg663E8rxHcf7s0hkDowKEk4IfRg6cgQpi
l2mMmnTm3DCTgXaqt088nVc2y0Tz1UZemAbe8VXYFouj+09WDsi2xRG/1u1bAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2SVbe6oLtf1koc5nQHB01ol5D/swHwYDVR0j
BBgwFoAUrTjcvL4abR55hoWPyvStQHkULS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1ZNWJ2ZjNrclQ5UTZ3NkxFYkxKdHI0OXpjS1Azam44ZlVONGQ1WjdS
UTEvMC9BRDM4RENCQ0JFMUE2RDFFNzk4Njg1OEZDQUY0QUQ0MDc5MTQyRDJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMzhEQ0JDQkUxQTZEMUU3
OTg2ODU4RkNBRjRBRDQwNzkxNDJEMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RE1ZNWJ2ZjNrclQ5UTZ3NkxFYkxKdHI0OXpjS1Azam44ZlVONGQ1WjdSUTEvMC9B
RDM4RENCQ0JFMUE2RDFFNzk4Njg1OEZDQUY0QUQ0MDc5MTQyRDJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADV238Y8TjQ46G0bMG1tY4TNSxZY4ZGEU9ItY/Pp9+sgcECFs1QwUJL2vv3NP
w8rN/q2yaWsju+aVRUyDeYr3THnoYB6DJKY0IQn00PVz8DC+5xrtCJmu5QzJ0BsN
DM+ywU9gtt22fL2K+uvQKnjf0ssbM/JI5oeOl+2bHD0CH5R1D2a3P9QFPCWv7QhY
6rMGH8ckLnXe/qvfEPC3LFLM5nb5gzE5zXONebvh17kA4HAsOSQBrpivvs9YNcCk
paHf06GK1wodeTExvur1hztyL0S3VZTeXlAu+V6drHtaTqoqEXg49s7CviVyp/PJ
Nq5l0JvX2Y1f6IMjSGK9di/s7w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:27:50 2025 by rpki-client