Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          Q1iexXnCIkukpPgPrY/ugIcQK65JbcvD9+4XHA0bdyc=
Subject key identifier:   1A:3B:B1:A8:53:1B:47:54:EA:05:95:55:B9:61:99:14:E8:6C:44:4A
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       6883DC0F9EC3939A2652AF1651FE151C8CF310F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          021C
Signing time:             Wed 14 May 2025 23:25:01 +0000
Manifest this update:     Wed 14 May 2025 23:20:01 +0000
Manifest next update:     Fri 16 May 2025 00:39:01 +0000
Files and hashes:         1: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=)
                          2: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: l5iuX7GjA37o7Udu9PU5DNdnq2ShOa/gsNF+Y/QQnwM=)
                          3: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=)
                          4: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=)
                          5: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=)
                          6: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=)
                          7: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 00:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:dc:0f:9e:c3:93:9a:26:52:af:16:51:fe:15:1c:8c:f3:10:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: May 14 23:20:01 2025 GMT
            Not After : May 16 00:39:01 2025 GMT
        Subject: CN=1A3BB1A8531B4754EA059555B9619914E86C444A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:3d:fa:20:7d:5e:d6:6f:64:90:23:d1:07:
                    d6:0a:30:01:cf:75:b0:2a:40:a6:ff:64:56:36:b0:
                    a8:67:40:b7:29:3f:c6:c1:29:7a:dd:93:28:fd:9b:
                    e5:37:c1:02:cc:45:2e:62:e4:10:cb:a8:e3:e3:00:
                    a9:df:ad:fd:77:e6:4b:7a:02:d5:c2:3d:ba:b8:ff:
                    b6:8f:62:ab:64:3f:2e:58:2a:2e:0a:93:49:9d:f9:
                    f0:60:d4:0d:00:c8:eb:35:a4:05:c3:f6:e1:9b:05:
                    29:bf:57:24:da:ac:e0:d9:3a:1c:5c:87:92:3e:7e:
                    7c:f6:d0:24:b1:a0:d7:f4:98:d6:58:35:c5:59:48:
                    4b:1e:f4:5f:bf:af:1f:63:c9:64:31:d0:7d:70:32:
                    7d:87:9d:bf:22:aa:bc:f4:df:74:9d:10:25:83:dc:
                    77:7d:28:d0:d7:40:ce:7c:b5:f4:2e:96:b3:2b:b0:
                    67:f2:02:3e:01:48:0c:06:a8:86:ef:d3:ab:9c:cf:
                    5c:cc:98:6d:bd:a5:2e:2f:e0:bb:19:ed:14:cb:1b:
                    95:d9:ae:cd:5e:b3:bf:0d:89:20:bf:3a:dd:ab:bf:
                    0c:b5:01:bc:da:f9:18:1f:10:49:1e:cd:e6:6f:b7:
                    c2:ec:a3:fa:fd:0c:e7:d6:7d:3c:63:fb:14:41:2c:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3B:B1:A8:53:1B:47:54:EA:05:95:55:B9:61:99:14:E8:6C:44:4A
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:57:7e:bc:25:d6:3d:b5:1d:e1:f1:88:5e:11:a9:8e:9d:
         e1:44:a1:d4:02:8e:f7:03:7f:1c:4b:d5:2a:91:bf:0c:b2:98:
         11:ad:58:0e:d7:86:a2:6d:76:c6:ae:a8:9b:f9:d5:d8:b4:45:
         58:a4:bb:4a:32:2f:e1:01:d3:b0:72:2f:68:5a:ff:38:8f:e6:
         4d:2f:bf:10:b4:cd:56:56:94:82:3f:3a:fe:40:bb:16:da:d7:
         d0:b6:4f:aa:6b:f3:f9:d2:01:6e:43:fd:6b:7a:f4:78:10:39:
         7b:1a:a0:3f:c0:7f:c7:87:1a:24:cf:cb:e8:8b:c6:c6:cf:f9:
         cc:f5:c0:dc:62:f3:46:53:8e:ef:b7:e1:c8:7a:44:88:ca:c1:
         6d:b2:54:27:66:60:cf:ef:9f:7c:86:49:00:b5:75:68:9d:28:
         f2:f1:5b:d2:75:2e:63:1a:8f:f6:b7:e1:fa:bf:1e:3d:a0:06:
         af:fa:28:86:f6:17:3e:46:bf:3a:d6:8a:b2:3c:8f:3d:57:87:
         af:8d:41:8e:a6:68:da:31:aa:4d:97:e3:ec:c3:c0:aa:b6:1a:
         71:20:16:92:84:22:5b:49:28:35:55:82:ff:0e:d0:6f:35:e7:
         d1:64:51:01:d2:38:90:0a:f3:36:ea:d3:0a:53:8c:10:a1:26:
         a2:45:2a:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaIPcD57Dk5omUq8WUf4VHIzzEPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNTA1MTQyMzIwMDFaFw0yNTA1MTYwMDM5MDFaMDMxMTAvBgNV
BAMTKDFBM0JCMUE4NTMxQjQ3NTRFQTA1OTU1NUI5NjE5OTE0RTg2QzQ0NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oj36IH1e1m9kkCPRB9YKMAHP
dbAqQKb/ZFY2sKhnQLcpP8bBKXrdkyj9m+U3wQLMRS5i5BDLqOPjAKnfrf135kt6
AtXCPbq4/7aPYqtkPy5YKi4Kk0md+fBg1A0AyOs1pAXD9uGbBSm/VyTarODZOhxc
h5I+fnz20CSxoNf0mNZYNcVZSEse9F+/rx9jyWQx0H1wMn2Hnb8iqrz033SdECWD
3Hd9KNDXQM58tfQulrMrsGfyAj4BSAwGqIbv06ucz1zMmG29pS4v4LsZ7RTLG5XZ
rs1es78NiSC/Ot2rvwy1Abza+RgfEEkezeZvt8Lso/r9DOfWfTxj+xRBLIwfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGjuxqFMbR1TqBZVVuWGZFOhsREowHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z
RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXlxXfrwl1j21HeHxiF4RqY6d4USh1AKO9wN/HEvVKpG/DLKYEa1YDteGom12
xq6om/nV2LRFWKS7SjIv4QHTsHIvaFr/OI/mTS+/ELTNVlaUgj86/kC7FtrX0LZP
qmvz+dIBbkP9a3r0eBA5exqgP8B/x4caJM/L6IvGxs/5zPXA3GLzRlOO77fhyHpE
iMrBbbJUJ2Zgz++ffIZJALV1aJ0o8vFb0nUuYxqP9rfh+r8ePaAGr/oohvYXPka/
OtaKsjyPPVeHr41BjqZo2jGqTZfj7MPAqrYacSAWkoQiW0koNVWC/w7QbzXn0WRR
AdI4kArzNurTClOMEKEmokUqMQ==
-----END CERTIFICATE-----
Generated at Thu May 15 17:06:53 2025 by rpki-client