Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
File:                     E3C11484C8B4CD3F766170F9E324672A733D9604.mft (raw, json)
Hash identifier:          CbcWOL2E1T4dPBYD4+u0IsVE0F2U1gZKeh7mCBklV/w=
Subject key identifier:   DD:DA:13:AF:E9:43:3D:AD:AA:F3:BF:B6:EB:AB:AE:E8:BF:6C:BD:5C
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       1A0E8EA5D65FD3341AC70F0CCC2949EF67CFDA67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
Manifest number:          025A
Signing time:             Sun 29 Jun 2025 17:07:07 +0000
Manifest this update:     Sun 29 Jun 2025 17:02:07 +0000
Manifest next update:     Mon 30 Jun 2025 19:31:07 +0000
Files and hashes:         1: E3C11484C8B4CD3F766170F9E324672A733D9604.crl (hash: lQ/JtS3n/ajSbtqZWBrmU7WPkCL0unKq9Yg37n9smxg=)
                          2: 323830343a323265303a3a2f33322d3333203d3e20323634313238.roa (hash: 5eieEmo4ICN0+EhPKrQo0OHf9XosS6uKJyqVxKL+m8I=)
                          3: 3133382e39372e35322e302f32322d3234203d3e20323634313238.roa (hash: E3WMsmqEkhdbsbIMFTk09kY0OwhJeErA/X0iuPVijZ4=)
                          4: 3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa (hash: oz/Xjh+jR/plturHwyxcC3YqrerDjS9XoAP5thbB1QY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 19:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0e:8e:a5:d6:5f:d3:34:1a:c7:0f:0c:cc:29:49:ef:67:cf:da:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Jun 29 17:02:07 2025 GMT
            Not After : Jun 30 19:31:07 2025 GMT
        Subject: CN=DDDA13AFE9433DADAAF3BFB6EBABAEE8BF6CBD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:0c:c8:0a:1d:ff:ad:24:d5:a2:71:cc:e3:
                    fc:aa:b5:5e:ea:32:2f:d1:3a:75:7b:fe:d2:ad:69:
                    33:cd:0c:0b:88:26:d7:3d:d2:b3:9e:37:20:c1:c7:
                    0c:04:a3:16:43:39:97:b5:5c:8f:cb:c1:8d:1a:29:
                    2b:29:2b:9b:5d:06:88:b5:1e:48:bc:d9:27:f8:a8:
                    96:fa:69:b0:e4:93:e9:2f:3f:de:4e:86:08:1e:d2:
                    22:72:6e:e2:d6:9c:71:99:eb:e8:8f:58:25:79:ef:
                    c2:f5:00:70:18:d5:65:40:a8:31:9e:64:20:22:5a:
                    67:19:be:77:02:80:1a:52:55:01:43:97:14:f7:5a:
                    da:f0:84:3a:61:10:c4:36:5c:ed:89:75:47:25:29:
                    34:3c:bb:47:c2:2f:be:ea:f1:26:08:64:55:29:26:
                    e2:b7:3a:30:ce:81:36:0b:c3:c2:e7:f6:0b:e0:e8:
                    f2:c0:c3:42:24:a8:af:a4:61:1a:a9:c8:6a:33:be:
                    e5:2a:7a:b7:74:9d:6e:c1:7f:4f:55:95:c9:94:bd:
                    d5:c7:17:0e:d9:e6:f4:b7:9d:98:9a:13:a4:02:28:
                    10:ff:33:79:a5:6a:d6:74:ac:89:bb:b3:09:f0:70:
                    02:ba:db:82:6e:45:ef:95:4e:6b:14:18:84:73:bd:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:13:AF:E9:43:3D:AD:AA:F3:BF:B6:EB:AB:AE:E8:BF:6C:BD:5C
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:63:42:dd:20:2d:99:30:f4:a9:9d:c2:37:f2:44:eb:a1:
         a1:52:05:ac:11:c0:9d:6f:ac:7f:c8:ae:4d:27:92:1d:83:52:
         a6:f4:5d:fa:4d:8f:52:13:7a:44:af:52:18:4a:d1:1a:ba:a1:
         d6:a1:8b:35:b0:26:47:7f:b3:df:85:58:66:9a:de:21:b4:48:
         69:b3:b0:5c:90:a1:ae:5a:e4:15:f1:f3:e8:81:32:66:d8:66:
         2b:56:51:66:cd:3f:32:48:54:1d:0b:7c:26:a9:f6:58:8f:b5:
         d0:4c:9a:05:42:97:31:8c:60:60:01:b4:44:75:f3:ed:a2:57:
         47:f1:5d:6a:f2:5a:c5:cb:92:28:ae:38:30:be:8d:ea:1a:ff:
         44:79:48:8c:60:ff:89:3a:36:d4:dc:d3:43:44:38:c1:20:49:
         23:de:b5:9d:a4:3c:5a:a2:d7:b7:f6:92:b1:f3:07:9d:67:1d:
         d8:f6:7c:61:57:0a:de:8a:46:73:25:09:b1:b7:fa:ce:e1:ec:
         83:10:c8:ae:ff:3f:fa:5d:f6:5d:79:61:b0:01:0e:54:8b:b4:
         71:50:90:7f:34:91:25:73:d2:dd:6e:a9:7a:f0:8e:a5:25:91:
         db:aa:4f:2f:3d:16:8f:30:56:6c:80:d9:68:68:38:69:d2:ad:
         89:e8:2b:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGg6OpdZf0zQaxw8MzClJ72fP2mcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNDMTE0ODRDOEI0Q0QzRjc2NjE3MEY5RTMyNDY3MkE3
MzNEOTYwNDAeFw0yNTA2MjkxNzAyMDdaFw0yNTA2MzAxOTMxMDdaMDMxMTAvBgNV
BAMTKEREREExM0FGRTk0MzNEQURBQUYzQkZCNkVCQUJBRUU4QkY2Q0JENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdwzICh3/rSTVonHM4/yqtV7q
Mi/ROnV7/tKtaTPNDAuIJtc90rOeNyDBxwwEoxZDOZe1XI/LwY0aKSspK5tdBoi1
Hki82Sf4qJb6abDkk+kvP95Ohgge0iJybuLWnHGZ6+iPWCV578L1AHAY1WVAqDGe
ZCAiWmcZvncCgBpSVQFDlxT3WtrwhDphEMQ2XO2JdUclKTQ8u0fCL77q8SYIZFUp
JuK3OjDOgTYLw8Ln9gvg6PLAw0IkqK+kYRqpyGozvuUqerd0nW7Bf09VlcmUvdXH
Fw7Z5vS3nZiaE6QCKBD/M3mlatZ0rIm7swnwcAK624JuRe+VTmsUGIRzvX0dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3doTr+lDPa2q87+266uu6L9svVwwHwYDVR0j
BBgwFoAU48EUhMi0zT92YXD54yRnKnM9lgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdvbVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVY
RUgvMS9FM0MxMTQ4NEM4QjRDRDNGNzY2MTcwRjlFMzI0NjcyQTczM0Q5NjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzQzExNDg0QzhCNENEM0Y3
NjYxNzBGOUUzMjQ2NzJBNzMzRDk2MDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEdvbVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVYRUgvMS9F
M0MxMTQ4NEM4QjRDRDNGNzY2MTcwRjlFMzI0NjcyQTczM0Q5NjA0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa/ZjQt0gLZkw9KmdwjfyROuhoVIFrBHAnW+sf8iuTSeSHYNSpvRd+k2PUhN6
RK9SGErRGrqh1qGLNbAmR3+z34VYZpreIbRIabOwXJChrlrkFfHz6IEyZthmK1ZR
Zs0/MkhUHQt8Jqn2WI+10EyaBUKXMYxgYAG0RHXz7aJXR/FdavJaxcuSKK44ML6N
6hr/RHlIjGD/iTo21NzTQ0Q4wSBJI961naQ8WqLXt/aSsfMHnWcd2PZ8YVcK3opG
cyUJsbf6zuHsgxDIrv8/+l32XXlhsAEOVIu0cVCQfzSRJXPS3W6pevCOpSWR26pP
Lz0WjzBWbIDZaGg4adKtiegreg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 09:42:49 2025 by rpki-client