Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
File:                     91D34B9E6993B17B315517C2B8D7A7587070F90E.mft (raw, json)
Hash identifier:          /3mXql4w1oZ6sMyXeeFQ4unGSQ31H9Z3aYpxwaaQ92Q=
Subject key identifier:   0A:7A:B3:F9:D0:AB:19:EA:61:8A:64:22:F3:40:23:6E:75:EC:DE:79
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       350150DAE14E6C80EFA9C914FFF4151AA86DC750
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
Manifest number:          013F
Signing time:             Wed 14 May 2025 21:44:56 +0000
Manifest this update:     Wed 14 May 2025 21:39:56 +0000
Manifest next update:     Thu 15 May 2025 23:11:56 +0000
Files and hashes:         1: 3138372e302e3232382e302f32322d3234203d3e20323634323132.roa (hash: 6JmpWi3alE3VcTG4J6CtVtSbwNn31SC4cevkINFGdJQ=)
                          2: 91D34B9E6993B17B315517C2B8D7A7587070F90E.crl (hash: ip6gk/VhOKyptP1d40VX3PQPSJfBRnPCV+20nB+/Lno=)
                          3: 3138372e302e3232342e302f32322d3234203d3e20323634323132.roa (hash: 1VlLAAFqunTeCqPjVgmjYRyc9I2aKgmuhgsN6kYeIN0=)
                          4: 3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa (hash: GJ3/513EpRyf096gqf1uDBy1qnXuD0HIKDwKXqNQl/U=)
                          5: 3138372e302e3233322e302f32322d3234203d3e20323634323132.roa (hash: HKuv2lccceoZDrqKGr3FEcWJRiwdVtQpLmgJd6RpBYE=)
                          6: 3138372e302e3233382e302f32332d3234203d3e20323634323132.roa (hash: qUWweOD3CjcY0lIEFviVTCIxnOtfHsE3z2K86blAVoI=)
                          7: 323830343a323434383a3a2f33322d3438203d3e20323634323132.roa (hash: QLh34/K8q3OWo34HwqvBpdMmV6uRNXzRst8MWdcZRLA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:50:da:e1:4e:6c:80:ef:a9:c9:14:ff:f4:15:1a:a8:6d:c7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: May 14 21:39:56 2025 GMT
            Not After : May 15 23:11:56 2025 GMT
        Subject: CN=0A7AB3F9D0AB19EA618A6422F340236E75ECDE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:71:4f:18:da:cc:41:b8:8a:51:86:48:63:
                    cc:61:92:a2:05:2d:df:81:01:38:06:ec:1f:85:d8:
                    a7:64:e7:2e:26:fe:15:d7:70:6f:37:11:8a:ba:cd:
                    bf:f3:5d:b5:4e:f7:f1:32:83:9c:13:9c:62:0f:34:
                    20:59:71:2b:52:a8:12:f9:87:5a:05:1f:26:47:49:
                    a5:ea:f3:79:bf:fa:e9:af:e5:b4:fe:02:e4:b4:7b:
                    94:1d:8a:51:bc:46:28:08:4a:11:83:c5:e2:3b:d9:
                    da:3e:61:a5:cd:8e:99:22:ee:84:2c:0b:96:7f:54:
                    84:15:31:2e:6b:c6:8a:41:15:59:eb:c4:88:e0:e5:
                    23:5a:c4:ef:d6:52:9f:04:47:ac:95:3f:df:d2:5a:
                    39:5a:19:f6:26:45:76:eb:89:0a:32:37:ec:2a:b5:
                    89:91:ac:a3:0a:95:f3:b1:aa:18:5c:0d:87:ff:74:
                    13:d5:89:e6:03:2d:2d:62:e8:91:44:90:b3:b6:5c:
                    71:53:84:f3:b9:2f:e2:16:44:88:a9:3b:0c:3f:40:
                    34:2e:10:9c:26:86:bc:b9:f5:7a:9c:97:aa:b8:30:
                    03:58:78:3d:39:83:91:71:79:f2:a7:20:72:5e:b3:
                    4e:cf:e2:3d:8d:ba:b2:df:50:a1:36:b6:37:81:28:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:B3:F9:D0:AB:19:EA:61:8A:64:22:F3:40:23:6E:75:EC:DE:79
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:36:f9:5a:56:29:4e:74:7d:3e:19:51:8e:d9:1f:2e:82:cf:
         a3:4c:ed:02:1a:7e:3f:d6:67:95:70:4c:07:ff:7b:a4:f5:91:
         9a:a9:76:88:d0:ba:1a:1c:88:21:49:d3:42:2d:04:22:cd:e3:
         fa:ce:72:13:bd:e7:ac:bb:bf:f3:ae:73:8c:07:64:74:51:c2:
         10:62:16:4a:e0:ba:6f:0e:71:06:84:ab:cd:b2:39:61:00:34:
         57:52:03:0e:51:04:52:d8:99:f7:f5:f8:11:f7:8a:30:73:11:
         d7:a8:2a:7b:ac:96:e7:eb:e2:36:d7:ee:4d:39:b8:d8:98:ee:
         34:11:7e:5a:91:9c:46:0a:83:c9:3d:29:9c:ff:a8:30:b9:9f:
         3a:c4:e7:ec:fe:2f:fb:7e:04:6d:52:ab:b9:b3:05:62:7d:53:
         93:3e:07:95:c4:f3:b6:71:4c:2e:bf:5f:4f:a8:7d:97:7d:fd:
         a3:ab:35:b7:b4:4d:9c:4e:64:d9:95:1a:a1:44:2c:c9:8a:c6:
         23:8d:8c:cb:48:c8:99:5a:a3:14:2b:71:ce:7d:76:08:03:f7:
         05:77:2f:f4:47:0f:9a:32:60:44:85:bc:8e:41:ec:f1:22:69:
         58:93:11:58:d2:f9:cb:4c:36:a6:e8:67:96:cc:47:f5:05:96:
         9d:1e:dd:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNQFQ2uFObIDvqckU//QVGqhtx1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEMzRCOUU2OTkzQjE3QjMxNTUxN0MyQjhEN0E3NTg3
MDcwRjkwRTAeFw0yNTA1MTQyMTM5NTZaFw0yNTA1MTUyMzExNTZaMDMxMTAvBgNV
BAMTKDBBN0FCM0Y5RDBBQjE5RUE2MThBNjQyMkYzNDAyMzZFNzVFQ0RFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObnFPGNrMQbiKUYZIY8xhkqIF
Ld+BATgG7B+F2Kdk5y4m/hXXcG83EYq6zb/zXbVO9/Eyg5wTnGIPNCBZcStSqBL5
h1oFHyZHSaXq83m/+umv5bT+AuS0e5QdilG8RigIShGDxeI72do+YaXNjpki7oQs
C5Z/VIQVMS5rxopBFVnrxIjg5SNaxO/WUp8ER6yVP9/SWjlaGfYmRXbriQoyN+wq
tYmRrKMKlfOxqhhcDYf/dBPVieYDLS1i6JFEkLO2XHFThPO5L+IWRIipOww/QDQu
EJwmhry59Xqcl6q4MANYeD05g5FxefKnIHJes07P4j2NurLfUKE2tjeBKEU5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCnqz+dCrGephimQi80AjbnXs3nkwHwYDVR0j
BBgwFoAUkdNLnmmTsXsxVRfCuNenWHBw+Q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTRSZUhwazZuTktZNzhCcVMxM0p6RkRUUTJLU1hEYkI0aVRZVVNmeWU3
ODEvMS85MUQzNEI5RTY5OTNCMTdCMzE1NTE3QzJCOEQ3QTc1ODcwNzBGOTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDM0QjlFNjk5M0IxN0Iz
MTU1MTdDMkI4RDdBNzU4NzA3MEY5MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MTRSZUhwazZuTktZNzhCcVMxM0p6RkRUUTJLU1hEYkI0aVRZVVNmeWU3ODEvMS85
MUQzNEI5RTY5OTNCMTdCMzE1NTE3QzJCOEQ3QTc1ODcwNzBGOTBFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABjb5WlYpTnR9PhlRjtkfLoLPo0ztAhp+P9ZnlXBMB/97pPWRmql2iNC6GhyI
IUnTQi0EIs3j+s5yE73nrLu/865zjAdkdFHCEGIWSuC6bw5xBoSrzbI5YQA0V1ID
DlEEUtiZ9/X4EfeKMHMR16gqe6yW5+viNtfuTTm42JjuNBF+WpGcRgqDyT0pnP+o
MLmfOsTn7P4v+34EbVKrubMFYn1Tkz4HlcTztnFMLr9fT6h9l339o6s1t7RNnE5k
2ZUaoUQsyYrGI42My0jImVqjFCtxzn12CAP3BXcv9EcPmjJgRIW8jkHs8SJpWJMR
WNL5y0w2puhnlsxH9QWWnR7dkA==
-----END CERTIFICATE-----
Generated at Thu May 15 00:23:41 2025 by rpki-client