Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          LAt4eMuOktkAMMm2MbpZKqa0O4Ipk1S1r9ss4FbBjTY=
Subject key identifier:   9F:94:66:60:5D:17:95:6E:A9:82:1D:83:0B:24:A7:2B:92:3B:19:4D
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       47B6E182B70703AE2C4BB88FA74BE4D334E2326D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          029E
Signing time:             Fri 08 Aug 2025 16:19:27 +0000
Manifest this update:     Fri 08 Aug 2025 16:14:27 +0000
Manifest next update:     Sat 09 Aug 2025 18:32:27 +0000
Files and hashes:         1: 3137302e3234372e38302e302f32322d3234203d3e203631383035.roa (hash: yCzuLmb/Tt6KFd57YY2nX7jQhrMJcLtBuCJAgEPyWp8=)
                          2: 3137302e3234362e33322e302f32322d3234203d3e203631383035.roa (hash: WnVJTcCQumCE9fQ7Vws90QAt2HsWCykqOp9Cx81XI8M=)
                          3: 34352e3233392e3232342e302f32322d3234203d3e203631383035.roa (hash: dCwgks9kz+PtKonoUYMuaJ/xBVsseEIveXSK48b+vek=)
                          4: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: +cgKERxRp5K4ubsS5w7/X+dOih1g3TyxJWaurKXx6jo=)
                          5: 3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (hash: FbA7Md3FlU43upzx21RM/HOPJeIXcMSZyumJsm6sz8E=)
                          6: 3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (hash: vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=)
                          7: 323830343a313939383a3a2f33322d3438203d3e203631383035.roa (hash: Qk7ja/D0UnEABlntWPvNXxeAnxQmmqTk79+LRpxGwiA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 18:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b6:e1:82:b7:07:03:ae:2c:4b:b8:8f:a7:4b:e4:d3:34:e2:32:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Aug  8 16:14:27 2025 GMT
            Not After : Aug  9 18:32:27 2025 GMT
        Subject: CN=9F9466605D17956EA9821D830B24A72B923B194D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:a6:70:e0:f3:2a:8b:6b:7d:97:1b:2a:6e:
                    41:2d:69:4e:cc:c7:e2:5d:f2:2c:4e:89:55:a7:e2:
                    39:76:d5:5b:bd:8b:9c:be:4a:53:fc:54:8d:67:e5:
                    66:da:3f:9a:4e:47:90:72:48:01:52:c8:47:47:11:
                    36:38:8a:3b:5d:6a:8b:73:93:92:17:c5:0f:77:0e:
                    53:b5:1f:8f:4a:ca:33:f6:98:2f:8c:7a:e4:e3:48:
                    00:50:7b:40:65:ac:3e:f3:c6:2a:47:0f:3f:21:04:
                    53:2c:36:b2:45:3d:56:b0:07:22:25:24:fc:75:49:
                    fd:02:84:e9:72:f1:46:1c:a0:0d:06:5f:59:37:78:
                    9e:2b:46:0a:a1:75:0b:ee:f6:79:f8:b3:cf:82:db:
                    ac:ce:c4:9c:97:a7:c9:bd:a8:52:3a:01:54:b2:de:
                    a7:de:49:19:b6:fd:a5:24:cf:48:0a:bd:49:57:70:
                    90:b2:35:19:7e:a5:ba:ac:6f:49:87:53:e7:02:94:
                    e1:5c:d0:0c:a1:49:57:6b:09:31:88:84:23:f4:ae:
                    63:eb:a2:5a:3a:b7:49:0c:7b:c0:31:e4:94:2b:0c:
                    96:61:42:52:8d:54:52:dd:83:92:a8:01:55:64:f5:
                    53:6a:86:b8:50:f4:05:32:8d:3d:09:2b:21:7c:06:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:66:60:5D:17:95:6E:A9:82:1D:83:0B:24:A7:2B:92:3B:19:4D
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:bf:1c:44:1f:78:8d:d0:d1:2b:91:10:62:22:77:03:e4:
         a0:8d:a2:b2:bb:4a:ac:f2:be:10:ae:86:75:d0:3f:7e:4e:c2:
         88:05:bf:05:e4:6f:9b:ca:d7:b3:f9:e8:3a:3e:62:82:03:7a:
         66:6b:a0:23:1d:0b:1b:1c:14:d4:05:8e:7b:74:55:23:84:de:
         62:61:7a:1a:d5:84:b0:b2:a6:8f:96:00:ac:d9:5d:67:7a:28:
         23:06:0d:c8:f7:0b:af:84:6b:9b:1d:31:eb:1c:2b:98:3c:41:
         a6:fd:e1:37:53:b5:85:7c:3f:25:8f:44:6b:99:67:61:bd:af:
         d7:c6:35:a8:5d:03:fa:38:8d:ba:87:77:1b:f1:77:5d:dc:d0:
         60:3d:85:f6:88:ac:4e:15:88:24:27:cb:e8:50:b0:8c:97:2d:
         1a:b3:9a:75:e2:99:ee:8e:7d:85:ca:36:71:a4:85:79:7c:08:
         f0:fc:21:ce:0c:27:db:1e:9a:b7:ba:6b:24:01:78:25:13:9a:
         8f:74:ce:a5:68:c1:7a:7f:2d:77:4c:e7:68:8c:2b:92:cd:6e:
         0b:e3:40:b1:ed:41:77:1c:f5:4c:94:ce:99:df:49:75:f4:30:
         97:da:1f:2a:7d:e6:84:f5:95:9a:bd:c3:1a:2e:81:dc:b4:07:
         65:b0:b8:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUR7bhgrcHA64sS7iPp0vk0zTiMm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNTA4MDgxNjE0MjdaFw0yNTA4MDkxODMyMjdaMDMxMTAvBgNV
BAMTKDlGOTQ2NjYwNUQxNzk1NkVBOTgyMUQ4MzBCMjRBNzJCOTIzQjE5NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbSaZw4PMqi2t9lxsqbkEtaU7M
x+Jd8ixOiVWn4jl21Vu9i5y+SlP8VI1n5WbaP5pOR5BySAFSyEdHETY4ijtdaotz
k5IXxQ93DlO1H49KyjP2mC+MeuTjSABQe0BlrD7zxipHDz8hBFMsNrJFPVawByIl
JPx1Sf0ChOly8UYcoA0GX1k3eJ4rRgqhdQvu9nn4s8+C26zOxJyXp8m9qFI6AVSy
3qfeSRm2/aUkz0gKvUlXcJCyNRl+pbqsb0mHU+cClOFc0AyhSVdrCTGIhCP0rmPr
olo6t0kMe8Ax5JQrDJZhQlKNVFLdg5KoAVVk9VNqhrhQ9AUyjT0JKyF8BpWXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUn5RmYF0XlW6pgh2DCySnK5I7GU0wHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FCOUgvMC9G
RTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZbm/HEQfeI3Q0SuREGIidwPkoI2isrtKrPK+EK6GddA/fk7CiAW/BeRvm8rX
s/noOj5iggN6ZmugIx0LGxwU1AWOe3RVI4TeYmF6GtWEsLKmj5YArNldZ3ooIwYN
yPcLr4Rrmx0x6xwrmDxBpv3hN1O1hXw/JY9Ea5lnYb2v18Y1qF0D+jiNuod3G/F3
XdzQYD2F9oisThWIJCfL6FCwjJctGrOadeKZ7o59hco2caSFeXwI8Pwhzgwn2x6a
t7prJAF4JROaj3TOpWjBen8td0znaIwrks1uC+NAse1Bdxz1TJTOmd9JdfQwl9of
Kn3mhPWVmr3DGi6B3LQHZbC4Yg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:16 2025 by rpki-client