Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
File:                     AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft (raw, json)
Hash identifier:          EbonVysYLgbohBqtiL4FfFDEVMVWXxf8OPO5uzCi1uM=
Subject key identifier:   B7:1A:90:D3:1F:38:7A:C4:B3:D0:9D:DC:61:58:9B:45:1D:60:90:32
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Certificate issuer:       /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial:       6F05DA9DD4CCFEF11FC3C9F1A63840DE076DEF1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
Manifest number:          0145
Signing time:             Sat 23 Aug 2025 14:04:17 +0000
Manifest this update:     Sat 23 Aug 2025 13:59:17 +0000
Manifest next update:     Sun 24 Aug 2025 14:16:17 +0000
Files and hashes:         1: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (hash: Nqck8WgvQAKrcOZojIIg8caQwhZaHsLYU74VYSjovik=)
                          2: AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl (hash: m9G3FhO2mkdfAq4eg61VCEKaMqhbmfWGypMT1C1DnzE=)
                          3: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (hash: K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
                          rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:05:da:9d:d4:cc:fe:f1:1f:c3:c9:f1:a6:38:40:de:07:6d:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Validity
            Not Before: Aug 23 13:59:17 2025 GMT
            Not After : Aug 24 14:16:17 2025 GMT
        Subject: CN=B71A90D31F387AC4B3D09DDC61589B451D609032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:58:3e:15:e5:bc:9a:79:bc:93:9a:8b:5a:
                    6d:6f:a7:2f:45:56:d5:df:01:a1:f4:dc:d1:59:69:
                    dc:a2:e3:f4:02:4e:0a:50:dd:90:ca:3d:11:a8:ab:
                    1c:6e:d5:4c:71:c8:f6:5f:5b:21:e3:19:69:79:a2:
                    e6:4d:c1:10:5e:6d:19:1f:84:42:73:74:1e:e7:3c:
                    ab:fc:e4:a0:eb:1a:d7:5a:02:5e:a6:7e:df:4d:76:
                    62:c4:d4:a9:fd:ce:1b:73:09:2a:73:25:18:55:2a:
                    ac:04:ef:2e:7a:ff:38:f2:7c:ab:dc:b5:19:fd:9f:
                    26:e5:fc:ab:e6:6a:62:32:3a:10:d4:25:a8:e2:26:
                    84:6a:4e:c8:91:9b:b7:ed:31:41:ca:67:d0:8b:21:
                    9c:f2:38:3a:3d:d7:7d:a5:90:6d:ae:35:a5:88:65:
                    33:d0:03:9c:2e:28:47:b6:2e:80:d7:f0:11:bd:cd:
                    5c:1c:52:ba:fe:d5:5d:f2:b1:f6:49:3c:61:9f:45:
                    a7:ee:7c:d6:98:fb:b7:05:55:8f:65:e3:fc:86:1f:
                    0e:e8:96:a6:57:37:b3:d6:12:94:cc:46:fa:3f:16:
                    e1:8f:6f:03:da:90:32:a0:c2:26:95:09:ac:85:d7:
                    69:38:e6:23:e3:60:52:d9:0b:08:27:72:c5:b3:ec:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:90:D3:1F:38:7A:C4:B3:D0:9D:DC:61:58:9B:45:1D:60:90:32
            X509v3 Authority Key Identifier:
                keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:f7:b5:dd:b7:4b:58:f8:77:5e:71:51:51:41:5a:f0:f5:
         64:13:ee:44:8b:69:34:e8:6d:4a:14:05:87:2e:35:aa:d0:80:
         22:52:80:fc:62:06:96:38:9d:e6:1e:b0:d4:62:6b:8a:52:e7:
         2c:40:c7:37:3c:9d:7a:6e:e9:33:80:38:5e:6f:25:05:f1:d9:
         53:f7:b5:4f:2b:13:c0:21:a1:ce:41:39:44:ef:db:e2:3c:e6:
         9a:78:40:36:74:5d:3f:b4:00:f9:93:2c:59:a4:dd:12:75:c6:
         69:ea:18:d6:56:d8:64:48:22:23:f7:7a:55:6c:f5:ca:3a:01:
         7b:39:86:70:54:5a:76:d8:81:5b:90:6e:6d:bb:6d:2b:25:31:
         d0:14:6d:cd:bb:73:25:d0:f7:e9:a9:3d:d2:4f:40:71:10:4c:
         13:57:13:3f:10:94:2f:59:3c:da:da:fb:36:d8:4d:75:35:15:
         ab:df:ad:05:36:16:ac:c4:b5:93:01:8a:54:b9:3c:9c:e9:3d:
         1f:bd:a1:74:31:81:0d:64:d7:16:2b:61:94:a6:87:8a:35:73:
         6b:d8:7e:ca:37:74:54:76:9d:17:8b:09:bd:4d:de:5e:46:ef:
         13:7b:e8:36:3b:a6:b1:df:72:48:29:78:2f:c5:3f:1a:a1:a5:
         41:e9:82:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbwXandTM/vEfw8nxpjhA3gdt7xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCMzdFODk4MjU5MUIxOERCREU5RTgyMTcyNzRERkFC
Q0VBQTk0NTAeFw0yNTA4MjMxMzU5MTdaFw0yNTA4MjQxNDE2MTdaMDMxMTAvBgNV
BAMTKEI3MUE5MEQzMUYzODdBQzRCM0QwOUREQzYxNTg5QjQ1MUQ2MDkwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pVg+FeW8mnm8k5qLWm1vpy9F
VtXfAaH03NFZadyi4/QCTgpQ3ZDKPRGoqxxu1UxxyPZfWyHjGWl5ouZNwRBebRkf
hEJzdB7nPKv85KDrGtdaAl6mft9NdmLE1Kn9zhtzCSpzJRhVKqwE7y56/zjyfKvc
tRn9nybl/KvmamIyOhDUJajiJoRqTsiRm7ftMUHKZ9CLIZzyODo9132lkG2uNaWI
ZTPQA5wuKEe2LoDX8BG9zVwcUrr+1V3ysfZJPGGfRafufNaY+7cFVY9l4/yGHw7o
lqZXN7PWEpTMRvo/FuGPbwPakDKgwiaVCayF12k45iPjYFLZCwgncsWz7HpxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtxqQ0x84esSz0J3cYVibRR1gkDIwHwYDVR0j
BBgwFoAUr7N+iYJZGxjb3p6CFydN+rzqqUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1
ODcvMC9BRkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQjM3RTg5ODI1OTFCMThE
QkRFOUU4MjE3Mjc0REZBQkNFQUE5NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1ODcvMC9B
RkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcNb3td23S1j4d15xUVFBWvD1ZBPuRItpNOhtShQFhy41qtCAIlKA/GIGljid
5h6w1GJrilLnLEDHNzydem7pM4A4Xm8lBfHZU/e1TysTwCGhzkE5RO/b4jzmmnhA
NnRdP7QA+ZMsWaTdEnXGaeoY1lbYZEgiI/d6VWz1yjoBezmGcFRadtiBW5Bubbtt
KyUx0BRtzbtzJdD36ak90k9AcRBME1cTPxCUL1k82tr7NthNdTUVq9+tBTYWrMS1
kwGKVLk8nOk9H72hdDGBDWTXFithlKaHijVza9h+yjd0VHadF4sJvU3eXkbvE3vo
Njumsd9ySCl4L8U/GqGlQemCZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:50 2025 by rpki-client