Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft
File:                     2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft (raw, json)
Hash identifier:          QI5NFw0W1It3SLPx3rmBhf4aVxfrd+rI8Xtr6/vC0Js=
Subject key identifier:   A4:E3:BC:71:EB:5B:F3:86:AA:D4:63:1C:16:1C:3A:1A:70:FB:27:FF
Authority key identifier: 2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0
Certificate issuer:       /CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
Certificate serial:       D54CF681F9FAFBCB72B36541795254C671D59C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft
Manifest number:          021A
Signing time:             Sun 11 May 2025 08:24:45 +0000
Manifest this update:     Sun 11 May 2025 08:19:45 +0000
Manifest next update:     Mon 12 May 2025 09:03:45 +0000
Files and hashes:         1: 34352e3138342e3234302e302f32322d3234203d3e20323639333632.roa (hash: 9A/20jI7CjAW42XSeWaQ6dZzvEktDUfGDHe2/IdEx/k=)
                          2: 2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl (hash: 5ypVZx8TxGQUGD3zentBO9dOC8CDX2QMO3A1EoZNg8o=)
                          3: 323830343a363337343a3a2f33322d3334203d3e20323639333632.roa (hash: VIr+gR/eh9VfgvdU5V/TBcEvkm4nnXTmh4X5EYUPxNo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl
                          rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:4c:f6:81:f9:fa:fb:cb:72:b3:65:41:79:52:54:c6:71:d5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0
        Validity
            Not Before: May 11 08:19:45 2025 GMT
            Not After : May 12 09:03:45 2025 GMT
        Subject: CN=A4E3BC71EB5BF386AAD4631C161C3A1A70FB27FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:d7:1e:bb:aa:3e:10:48:a8:ea:3e:ed:80:
                    a0:06:11:64:d3:0b:d0:41:54:ca:97:7a:1c:bf:93:
                    69:1f:63:03:dd:6f:3d:01:a6:b7:00:89:cb:8b:f1:
                    ae:f9:d3:fe:f8:77:ae:48:bd:53:00:d0:cd:c1:8f:
                    8f:f1:da:66:a0:0d:37:ba:3f:6d:71:6f:55:66:47:
                    7a:bb:60:f5:54:bb:91:3e:af:a7:52:8f:9e:d9:53:
                    c3:75:30:2e:cc:ea:7c:f7:31:b1:fd:18:9a:d5:2d:
                    06:30:b3:c6:80:70:2f:c5:fa:ac:55:08:c6:47:af:
                    9b:be:f6:9c:a0:9f:78:fa:53:31:be:46:01:83:ea:
                    22:a7:06:a0:aa:0e:b7:41:d3:d7:62:d4:8f:94:ff:
                    fb:ca:c0:b9:8a:32:5c:4b:4d:e1:50:17:5d:f9:b5:
                    0b:55:ac:26:47:6c:21:b3:e7:3e:e4:02:6b:eb:ae:
                    7f:fd:b2:30:33:27:2d:77:5a:ef:e3:66:bb:b8:f4:
                    53:ff:d6:ef:b7:89:f8:75:86:c0:5e:12:19:52:f3:
                    36:d0:86:2f:3a:51:62:f7:61:ea:f6:83:a6:68:af:
                    d5:fe:8a:e7:9f:58:ef:ee:07:1a:97:a1:41:b4:1c:
                    42:bb:95:9b:fb:1c:7e:a3:3f:7d:7f:2f:b7:d2:d4:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:BC:71:EB:5B:F3:86:AA:D4:63:1C:16:1C:3A:1A:70:FB:27:FF
            X509v3 Authority Key Identifier:
                keyid:2E:76:E9:05:C3:C2:C8:5E:3D:E4:63:5F:1B:C8:7F:1A:F3:13:FE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NShXA16gi7bnbFaQnQ6oGyZ2PEq5wgHyKx66zh6gVi1/1/2E76E905C3C2C85E3DE4635F1BC87F1AF313FEC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:da:53:74:a9:99:2f:7c:c2:7b:75:c0:e3:bd:7d:2d:e6:c2:
         f3:c3:a5:71:1c:e0:66:14:d3:dc:0f:bb:ce:0c:83:fd:36:64:
         25:82:ad:84:c2:ac:e9:f8:ee:56:9a:15:ba:ce:56:ce:bd:d9:
         aa:e8:52:0e:a1:5e:88:ae:ef:d7:d9:2a:e2:1a:f2:e7:dd:c8:
         44:76:43:92:ce:bb:35:11:8b:ca:d6:b2:a0:82:18:03:31:a4:
         bb:d3:f4:32:98:6c:51:d8:c2:8f:3d:45:e9:c3:1c:44:ab:a1:
         d1:16:80:e6:0e:d3:a7:cf:e1:61:d8:35:a2:c3:1c:62:13:e1:
         cc:b5:ab:3f:37:8c:64:cc:e5:dc:f2:94:6b:55:76:6e:44:71:
         c0:17:66:26:e5:33:02:85:e7:f3:24:55:be:e2:81:ba:55:18:
         3f:35:b6:0b:7d:1e:93:37:47:fc:47:97:09:57:e5:54:9c:04:
         ae:ff:57:d6:eb:58:84:2c:10:8e:b0:19:d4:6d:3a:91:7a:8e:
         4b:90:01:b3:61:fe:c2:7c:15:36:62:25:e3:7d:97:f3:64:2a:
         18:af:a7:ec:23:3a:33:52:dd:7b:53:20:af:cb:df:52:cf:f0:
         d6:2c:eb:1f:ab:78:5e:d8:27:98:2f:85:42:60:72:eb:bb:ff:
         ba:78:a2:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUANVM9oH5+vvLcrNlQXlSVMZx1ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3NkU5MDVDM0MyQzg1RTNERTQ2MzVGMUJDODdGMUFG
MzEzRkVDMDAeFw0yNTA1MTEwODE5NDVaFw0yNTA1MTIwOTAzNDVaMDMxMTAvBgNV
BAMTKEE0RTNCQzcxRUI1QkYzODZBQUQ0NjMxQzE2MUMzQTFBNzBGQjI3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsktceu6o+EEio6j7tgKAGEWTT
C9BBVMqXehy/k2kfYwPdbz0BprcAicuL8a750/74d65IvVMA0M3Bj4/x2magDTe6
P21xb1VmR3q7YPVUu5E+r6dSj57ZU8N1MC7M6nz3MbH9GJrVLQYws8aAcC/F+qxV
CMZHr5u+9pygn3j6UzG+RgGD6iKnBqCqDrdB09di1I+U//vKwLmKMlxLTeFQF135
tQtVrCZHbCGz5z7kAmvrrn/9sjAzJy13Wu/jZru49FP/1u+3ifh1hsBeEhlS8zbQ
hi86UWL3Yer2g6Zor9X+iuefWO/uBxqXoUG0HEK7lZv7HH6jP31/L7fS1JK7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpOO8cetb84aq1GMcFhw6GnD7J/8wHwYDVR0j
BBgwFoAULnbpBcPCyF495GNfG8h/GvMT/sAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE5TaFhBMTZnaTdibmJGYVFuUTZvR3laMlBFcTV3Z0h5S3g2NnpoNmdW
aTEvMS8yRTc2RTkwNUMzQzJDODVFM0RFNDYzNUYxQkM4N0YxQUYzMTNGRUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNzZFOTA1QzNDMkM4NUUz
REU0NjM1RjFCQzg3RjFBRjMxM0ZFQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NE5TaFhBMTZnaTdibmJGYVFuUTZvR3laMlBFcTV3Z0h5S3g2NnpoNmdWaTEvMS8y
RTc2RTkwNUMzQzJDODVFM0RFNDYzNUYxQkM4N0YxQUYzMTNGRUMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJdpTdKmZL3zCe3XA4719LebC88OlcRzgZhTT3A+7zgyD/TZkJYKthMKs6fju
VpoVus5Wzr3ZquhSDqFeiK7v19kq4hry593IRHZDks67NRGLytayoIIYAzGku9P0
MphsUdjCjz1F6cMcRKuh0RaA5g7Tp8/hYdg1osMcYhPhzLWrPzeMZMzl3PKUa1V2
bkRxwBdmJuUzAoXn8yRVvuKBulUYPzW2C30ekzdH/EeXCVflVJwErv9X1utYhCwQ
jrAZ1G06kXqOS5ABs2H+wnwVNmIl432X82QqGK+n7CM6M1Lde1Mgr8vfUs/w1izr
H6t4XtgnmC+FQmBy67v/uniiSw==
-----END CERTIFICATE-----
Generated at Sun May 11 13:35:26 2025 by rpki-client