Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
File:                     D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft (raw, json)
Hash identifier:          e4mBj17qHAaRrVsGrVjTxpvW49lr8gxA/dkhi5xBwGg=
Subject key identifier:   A3:74:18:32:E7:3A:B0:AC:A5:12:C0:11:96:15:11:50:51:78:7A:94
Authority key identifier: D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3
Certificate issuer:       /CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
Certificate serial:       0B286C9A47D6EA225B9C881D63E7C59B7BAEA62F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
Manifest number:          16
Signing time:             Wed 14 May 2025 20:33:18 +0000
Manifest this update:     Wed 14 May 2025 20:28:18 +0000
Manifest next update:     Thu 15 May 2025 22:10:18 +0000
Files and hashes:         1: 3136382e3139372e302e302f32322d3234203d3e20323634343630.roa (hash: J5DuMAzhx4KoEFlX3DTQKywifQ6ZKpEHcvRsljmOZxs=)
                          2: 34352e3233312e3139322e302f32322d3234203d3e20323637323234.roa (hash: tDzwNLhp8MedGTGaNGLtT/Fw0Bl48ELMHEmcdqtlsd4=)
                          3: 323830343a346133343a3a2f33322d3438203d3e20323637323234.roa (hash: qd8qZxi7tw5baLaDh+jLIXeBIbcnNo/pWA5jPR+866s=)
                          4: 323830343a323030343a3a2f33322d3438203d3e20323634343630.roa (hash: rLhCpfojbkJSBkjdVakfqfdy5v+FGh8VNsiDkLgvf/U=)
                          5: 3133322e3235352e3130302e302f32322d3234203d3e20323634343630.roa (hash: 8KhBvEK0Q7b5QPyXOAPE1nYaZr6TvetPVI5C2wvYYr8=)
                          6: D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl (hash: pqiU0rn0Y5ipQEYZffxLpZMXmKD5wO066w7eF8WDgks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl
                          rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:6c:9a:47:d6:ea:22:5b:9c:88:1d:63:e7:c5:9b:7b:ae:a6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D392D06DAD0BA1CB860889043CB27A3AE10540B3
        Validity
            Not Before: May 14 20:28:18 2025 GMT
            Not After : May 15 22:10:18 2025 GMT
        Subject: CN=A3741832E73AB0ACA512C0119615115051787A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:d9:f7:61:87:91:3b:f6:cd:ae:dd:84:b2:
                    44:88:2a:45:40:18:f7:8b:99:48:c0:59:d1:fb:33:
                    83:56:ca:2e:a5:dd:26:4f:c0:69:77:f7:2e:ba:d0:
                    cc:b4:52:b4:13:e9:4f:b1:3b:b2:70:4f:bf:ef:ff:
                    02:54:74:d0:46:bf:75:5c:25:11:d2:b5:76:d7:22:
                    c2:f5:b9:2c:2d:33:d8:40:ae:fc:d4:93:f3:83:b1:
                    19:64:63:8a:95:4d:92:b7:8c:4e:14:9b:64:ad:42:
                    c4:71:0a:e3:1e:66:1c:ee:4b:4b:99:60:48:e3:68:
                    d6:e7:f5:68:2b:ce:47:1d:bb:32:a2:e1:31:0e:d6:
                    37:1d:ab:7c:16:69:a6:80:79:7f:40:55:97:4d:8a:
                    ca:0c:64:cc:21:e9:0c:2f:eb:71:5f:ec:41:4b:ac:
                    0f:0a:98:28:22:b2:ee:19:b7:9c:f2:ce:fe:06:bd:
                    28:f5:5f:5e:04:6c:7c:1d:45:38:06:92:7b:1b:67:
                    7e:9a:eb:4f:3e:61:7a:5f:a2:77:eb:f2:98:6d:77:
                    78:2d:49:a8:d8:da:ef:48:93:28:09:f8:25:06:0c:
                    5a:22:19:4d:d1:65:37:b2:9c:6a:39:ea:74:40:b2:
                    4f:34:e6:bd:66:8e:07:b2:29:a4:81:50:05:3f:67:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:74:18:32:E7:3A:B0:AC:A5:12:C0:11:96:15:11:50:51:78:7A:94
            X509v3 Authority Key Identifier:
                keyid:D3:92:D0:6D:AD:0B:A1:CB:86:08:89:04:3C:B2:7A:3A:E1:05:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D392D06DAD0BA1CB860889043CB27A3AE10540B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37jEwN7iPukTuVU2LEEs4LokUPxMQZVTTZY6G7c1MXbF/0/D392D06DAD0BA1CB860889043CB27A3AE10540B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:e1:cf:39:ff:5f:8e:1d:b9:a9:45:2e:f7:8e:e2:8b:e1:
         32:9e:a7:55:2c:69:39:8a:67:6a:4a:3c:91:63:2d:6d:94:25:
         3e:d8:69:0c:4d:e9:62:90:ca:b4:73:0c:74:5b:7f:3b:0d:8b:
         1e:70:83:9c:5c:4b:7f:cc:86:4d:fe:82:bb:7a:9e:9a:ec:00:
         58:59:f3:ac:22:ea:77:9e:94:9b:92:2d:28:7f:79:be:33:03:
         6f:eb:e8:b2:65:4f:81:11:4d:cd:8b:f1:90:6a:4a:9a:61:74:
         28:95:d1:f4:10:ee:9f:23:2a:9c:cb:61:10:ba:bf:eb:be:d9:
         93:1b:82:d0:fe:b5:2e:73:25:37:06:5c:d9:77:6e:d3:04:19:
         3f:53:7b:97:7e:bb:3d:46:b5:ed:8c:cf:cd:4f:a5:0d:b9:cf:
         e0:fc:e1:93:d2:0c:b6:a5:62:55:19:a4:cc:f5:c2:18:85:29:
         e2:23:34:06:b5:bd:16:32:3b:f1:13:7a:f0:8a:47:28:54:98:
         29:58:96:45:c6:b5:f7:42:68:14:ab:ae:39:d2:97:7e:b0:92:
         0a:96:6d:3f:e3:c9:81:d4:84:bc:c0:be:9f:c1:0c:f9:7b:f2:
         c6:75:0f:4e:ef:80:80:b6:e8:c3:93:1f:60:c8:16:1b:c2:c7:
         bd:4f:33:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCyhsmkfW6iJbnIgdY+fFm3uupi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5MkQwNkRBRDBCQTFDQjg2MDg4OTA0M0NCMjdBM0FF
MTA1NDBCMzAeFw0yNTA1MTQyMDI4MThaFw0yNTA1MTUyMjEwMThaMDMxMTAvBgNV
BAMTKEEzNzQxODMyRTczQUIwQUNBNTEyQzAxMTk2MTUxMTUwNTE3ODdBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXtn3YYeRO/bNrt2EskSIKkVA
GPeLmUjAWdH7M4NWyi6l3SZPwGl39y660My0UrQT6U+xO7JwT7/v/wJUdNBGv3Vc
JRHStXbXIsL1uSwtM9hArvzUk/ODsRlkY4qVTZK3jE4Um2StQsRxCuMeZhzuS0uZ
YEjjaNbn9WgrzkcduzKi4TEO1jcdq3wWaaaAeX9AVZdNisoMZMwh6Qwv63Ff7EFL
rA8KmCgisu4Zt5zyzv4GvSj1X14EbHwdRTgGknsbZ36a608+YXpfonfr8phtd3gt
SajY2u9IkygJ+CUGDFoiGU3RZTeynGo56nRAsk805r1mjgeyKaSBUAU/Z1KjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo3QYMuc6sKylEsARlhURUFF4epQwHwYDVR0j
BBgwFoAU05LQba0LocuGCIkEPLJ6OuEFQLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzdqRXdON2lQdWtUdVZVMkxFRXM0TG9rVVB4TVFaVlRUWlk2RzdjMU1Y
YkYvMC9EMzkyRDA2REFEMEJBMUNCODYwODg5MDQzQ0IyN0EzQUUxMDU0MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOTJEMDZEQUQwQkExQ0I4
NjA4ODkwNDNDQjI3QTNBRTEwNTQwQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzdqRXdON2lQdWtUdVZVMkxFRXM0TG9rVVB4TVFaVlRUWlk2RzdjMU1YYkYvMC9E
MzkyRDA2REFEMEJBMUNCODYwODg5MDQzQ0IyN0EzQUUxMDU0MEIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQevhzzn/X44dualFLveO4ovhMp6nVSxpOYpnako8kWMtbZQlPthpDE3pYpDK
tHMMdFt/Ow2LHnCDnFxLf8yGTf6Cu3qemuwAWFnzrCLqd56Um5ItKH95vjMDb+vo
smVPgRFNzYvxkGpKmmF0KJXR9BDunyMqnMthELq/677ZkxuC0P61LnMlNwZc2Xdu
0wQZP1N7l367PUa17YzPzU+lDbnP4Pzhk9IMtqViVRmkzPXCGIUp4iM0BrW9FjI7
8RN68IpHKFSYKViWRca190JoFKuuOdKXfrCSCpZtP+PJgdSEvMC+n8EM+XvyxnUP
Tu+AgLbow5MfYMgWG8LHvU8zSw==
-----END CERTIFICATE-----
Generated at Wed May 14 22:36:55 2025 by rpki-client