Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File:                     1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier:          ol+hOKX2TrQTqP65jAUCf8jWgvM9pYQo01fwHOLdVhw=
Subject key identifier:   31:7B:37:95:7D:DA:18:B9:A0:98:42:A6:A2:0F:50:A4:29:3D:17:6F
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       12A3B2919FCCD07AB30EA26ACCF65024F72FEB6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number:          64
Signing time:             Wed 02 Jul 2025 06:23:23 +0000
Manifest this update:     Wed 02 Jul 2025 06:18:23 +0000
Manifest next update:     Thu 03 Jul 2025 09:50:23 +0000
Files and hashes:         1: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: VeR/O+9Gf+ayE3m4Vl1nJkDnw89kGLb98SbW5qArQ/c=)
                          2: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: ADREfT9MheCE1Wjv94Tw9CnUHlS1l0PQ8XXqstyqAiQ=)
                          3: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: afJLR8PlUzFskdzVHFBs/+9++T5DKH+kQFl0KIelOiE=)
                          4: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=)
                          5: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: 1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=)
                          6: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: b3HE9X7yWDg+NhEPjhVX8s3KFWQlBvIq6aG3ZvIFDW0=)
                          7: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: ZirqTWq7d7/lwQgHJx1DD+FiioGP1qk31ScfgX+AtN4=)
                          8: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: L29rQu6A2D/GRscHMRxgKff1Mj4otpbS7jgvNTfbqrM=)
                          9: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: hVKZtPo2uOTvKf5GK1oLTTBexTI84WAT9zQJ3UV58/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 09:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a3:b2:91:9f:cc:d0:7a:b3:0e:a2:6a:cc:f6:50:24:f7:2f:eb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Jul  2 06:18:23 2025 GMT
            Not After : Jul  3 09:50:23 2025 GMT
        Subject: CN=317B37957DDA18B9A09842A6A20F50A4293D176F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:12:27:93:eb:f4:36:df:ae:74:71:1b:29:
                    bc:17:3e:92:b1:40:d9:80:db:e6:6f:77:4b:91:80:
                    7c:5a:3f:1d:69:8d:31:b1:3c:a3:cd:25:d9:c7:4f:
                    62:0a:34:ec:3f:17:cb:ae:19:9d:8d:30:95:9c:4c:
                    33:0b:29:b7:83:ef:0c:9b:ff:57:ae:bd:4b:76:cd:
                    0e:af:39:f5:ee:71:36:0b:b1:f1:71:18:c2:89:37:
                    4b:62:f3:ce:00:dc:dc:a7:c2:10:9d:7c:88:90:fc:
                    45:e1:94:86:cc:9b:b9:bf:6e:87:9a:ea:a6:3f:7d:
                    9f:51:ea:f1:d2:67:e6:ed:35:d6:96:69:01:bd:fc:
                    25:71:ac:3a:72:ea:a7:de:b6:de:79:1f:13:77:84:
                    dc:91:fd:1b:f9:c7:72:39:f3:ef:3a:24:36:2b:b2:
                    bc:6c:4b:7e:09:66:43:18:b3:b1:1c:6c:4c:57:9d:
                    33:9f:89:20:99:dc:41:f4:a8:b8:80:5e:11:59:28:
                    e0:2f:44:a5:46:b4:09:45:4f:5b:2b:05:5a:68:c4:
                    13:cb:4e:7c:72:c2:d3:a4:9e:51:a5:bc:f7:ea:77:
                    43:23:50:af:eb:de:56:d5:36:42:67:f0:d3:e1:b1:
                    99:2f:ea:cc:c2:09:c1:e4:96:00:63:53:5d:cc:d0:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:37:95:7D:DA:18:B9:A0:98:42:A6:A2:0F:50:A4:29:3D:17:6F
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:53:e0:40:81:2f:7e:bc:2d:0a:9c:d7:37:5c:6c:f1:a1:90:
         d8:52:18:22:32:a9:80:b7:e8:ed:08:1a:f5:ec:6b:76:89:0d:
         52:f7:94:cf:c7:ad:69:74:20:89:da:9e:18:80:c7:82:54:f5:
         04:f2:59:e1:27:99:7b:84:90:42:fd:0d:f0:d6:d3:79:a1:32:
         81:e4:0c:cc:12:1f:b6:7a:a5:69:fa:83:5f:f9:08:b7:d1:44:
         dc:af:97:6e:2e:e0:36:f4:c7:c9:10:df:98:7f:f0:87:b7:f9:
         e4:15:82:c0:35:3f:1c:cb:97:d5:38:d3:ab:95:41:c5:4b:3c:
         5a:0b:81:7f:a4:2f:76:ab:4c:c4:a8:d7:3f:36:13:e6:30:a1:
         ee:cd:66:6e:72:df:2c:88:cb:ec:20:af:3a:5d:3d:32:6e:1d:
         da:4e:55:d3:16:dd:3b:8d:53:f4:b7:2b:16:38:51:02:ad:05:
         0f:c8:d8:aa:a8:0d:cb:53:5e:90:de:09:aa:30:70:c7:aa:9c:
         7f:56:03:7a:c8:03:fd:9f:0d:1f:9f:77:aa:94:c3:95:8e:74:
         ad:54:e8:20:c2:bc:b3:8e:0f:4d:c9:94:3f:89:55:8e:f7:96:
         97:55:9e:64:30:d0:2f:41:38:ac:35:2a:f9:b4:d7:85:2a:4f:
         8e:f8:22:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEqOykZ/M0HqzDqJqzPZQJPcv624wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGN0JFOEY0RTI5RTFDRUExQTEwQzBCQTA0MzA1NDIx
MjZGRTc4OTAeFw0yNTA3MDIwNjE4MjNaFw0yNTA3MDMwOTUwMjNaMDMxMTAvBgNV
BAMTKDMxN0IzNzk1N0REQTE4QjlBMDk4NDJBNkEyMEY1MEE0MjkzRDE3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IxInk+v0Nt+udHEbKbwXPpKx
QNmA2+Zvd0uRgHxaPx1pjTGxPKPNJdnHT2IKNOw/F8uuGZ2NMJWcTDMLKbeD7wyb
/1euvUt2zQ6vOfXucTYLsfFxGMKJN0ti884A3NynwhCdfIiQ/EXhlIbMm7m/boea
6qY/fZ9R6vHSZ+btNdaWaQG9/CVxrDpy6qfett55HxN3hNyR/Rv5x3I58+86JDYr
srxsS34JZkMYs7EcbExXnTOfiSCZ3EH0qLiAXhFZKOAvRKVGtAlFT1srBVpoxBPL
TnxywtOknlGlvPfqd0MjUK/r3lbVNkJn8NPhsZkv6szCCcHklgBjU13M0OVfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMXs3lX3aGLmgmEKmog9QpCk9F28wHwYDVR0j
BBgwFoAUGve+j04p4c6hoQwLoEMFQhJv54kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3
dzMvMC8xQUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRjdCRThGNEUyOUUxQ0VB
MUExMEMwQkEwNDMwNTQyMTI2RkU3ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3dzMvMC8x
QUY3QkU4RjRFMjlFMUNFQTFBMTBDMEJBMDQzMDU0MjEyNkZFNzg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU1PgQIEvfrwtCpzXN1xs8aGQ2FIYIjKpgLfo7Qga9exrdokNUveUz8etaXQg
idqeGIDHglT1BPJZ4SeZe4SQQv0N8NbTeaEygeQMzBIftnqlafqDX/kIt9FE3K+X
bi7gNvTHyRDfmH/wh7f55BWCwDU/HMuX1TjTq5VBxUs8WguBf6QvdqtMxKjXPzYT
5jCh7s1mbnLfLIjL7CCvOl09Mm4d2k5V0xbdO41T9LcrFjhRAq0FD8jYqqgNy1Ne
kN4JqjBwx6qcf1YDesgD/Z8NH593qpTDlY50rVToIMK8s44PTcmUP4lVjveWl1We
ZDDQL0E4rDUq+bTXhSpPjvgiAg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:22:51 2025 by rpki-client