Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File:                     F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier:          JlZl07662QjmnhmNj3VeNad8u6dL5+mUgHEo0aGAdvc=
Subject key identifier:   DD:1D:E3:1A:FC:79:6F:7B:6D:1E:29:7B:BC:13:61:C1:E9:88:7A:54
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer:       /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial:       0999886022A418CD4CA8DC354BB67B67A0D2F449
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number:          025E
Signing time:             Thu 03 Jul 2025 05:54:26 +0000
Manifest this update:     Thu 03 Jul 2025 05:49:26 +0000
Manifest next update:     Fri 04 Jul 2025 08:35:26 +0000
Files and hashes:         1: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 8eAkq4HT64a5baT56OgFx1DH72F9mwfih602zhR2CH0=)
                          2: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=)
                          3: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: eXKHbwdnjCSh4/8aFp2W96BkEfM1czymkgK63LsdhnY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
                          rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:99:88:60:22:a4:18:cd:4c:a8:dc:35:4b:b6:7b:67:a0:d2:f4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
        Validity
            Not Before: Jul  3 05:49:26 2025 GMT
            Not After : Jul  4 08:35:26 2025 GMT
        Subject: CN=DD1DE31AFC796F7B6D1E297BBC1361C1E9887A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:46:9a:e9:8a:b9:3b:1b:f4:c1:58:c4:ec:
                    0d:c5:70:7d:68:65:a7:7f:4c:e9:12:cb:07:01:9c:
                    52:2d:ff:58:e6:76:67:0e:5b:f3:d3:b7:7c:45:6d:
                    e3:bc:24:27:76:aa:9c:ce:1a:bf:8f:bd:f5:49:8c:
                    4a:08:e7:d8:8d:73:8c:7f:d5:f9:3f:cd:1a:84:df:
                    5d:24:2c:92:c4:82:18:aa:31:12:58:6e:e3:c0:6c:
                    cb:d3:a0:16:6a:3c:80:72:b8:89:02:6e:11:27:ec:
                    93:34:f8:92:00:93:5c:74:f1:98:f3:32:18:17:80:
                    9d:a0:f5:96:38:2b:75:5b:42:9d:e4:ac:c4:25:00:
                    12:67:6a:7c:8d:07:5f:00:32:e7:cf:33:40:ad:1a:
                    5d:5b:22:5e:36:1c:bb:af:1f:92:97:01:52:e0:4c:
                    34:c6:bb:81:b6:02:4e:9c:b8:ae:ff:6a:b2:6f:dd:
                    6f:01:bd:a1:b6:f0:ed:7e:2f:a3:ff:33:41:7b:43:
                    00:c8:63:96:0e:f1:b3:d9:be:a7:ba:a3:72:e8:e2:
                    4e:b5:e6:91:f8:d2:25:3d:fe:0a:8d:d5:7f:8b:9e:
                    da:5a:09:cd:96:04:2d:46:5b:8f:b4:76:4a:55:5f:
                    b1:45:a3:d4:93:e9:60:56:56:3a:34:b6:d1:05:b8:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1D:E3:1A:FC:79:6F:7B:6D:1E:29:7B:BC:13:61:C1:E9:88:7A:54
            X509v3 Authority Key Identifier:
                keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:16:ce:1e:00:e1:2d:4a:52:c5:7a:98:e1:0c:db:b2:42:
         11:63:c9:18:a2:dd:7d:52:88:f2:04:c1:3f:26:54:2d:96:8f:
         0b:73:f8:d3:e8:69:fd:d9:c5:99:3d:4a:0d:03:d8:e2:43:2e:
         58:cf:e6:6c:17:cf:4b:1a:82:32:22:06:2d:01:c2:a5:65:fb:
         09:1d:12:b4:30:cf:c3:13:d6:51:ba:6f:c3:18:9d:db:5e:a0:
         6b:53:25:0d:b4:f6:c5:70:3b:ba:fc:fe:61:b7:82:21:e5:b6:
         5a:c8:c5:3d:f4:85:fa:ec:78:6d:bd:34:8f:51:6f:bd:1b:88:
         4c:3b:44:fe:76:e7:88:5c:31:43:c7:57:36:66:06:76:9d:87:
         5f:b2:79:b1:fc:03:9d:04:6c:50:96:84:cd:ea:cc:cc:6a:31:
         c9:98:71:0e:0c:1d:b2:db:02:22:e3:61:ab:d8:4f:a7:37:ab:
         61:fd:20:c6:28:bb:14:25:1b:8e:aa:2c:be:03:04:08:2d:53:
         de:bc:10:dd:c2:db:fd:c5:d7:a5:c7:96:61:e3:cb:7d:41:f8:
         ce:0b:a9:92:a3:39:99:66:1b:84:3e:86:bf:7c:89:2f:4f:9c:
         63:0d:65:da:9e:1c:0e:a0:b3:dd:cc:f5:8a:56:05:ba:ac:aa:
         8e:8f:3f:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCZmIYCKkGM1MqNw1S7Z7Z6DS9EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0NTg2RTVGRUFERDYyNDIwNUNBOUNBQTE3NUQzRENB
NTlEMzJCMzAeFw0yNTA3MDMwNTQ5MjZaFw0yNTA3MDQwODM1MjZaMDMxMTAvBgNV
BAMTKEREMURFMzFBRkM3OTZGN0I2RDFFMjk3QkJDMTM2MUMxRTk4ODdBNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9Uaa6Yq5Oxv0wVjE7A3FcH1o
Zad/TOkSywcBnFIt/1jmdmcOW/PTt3xFbeO8JCd2qpzOGr+PvfVJjEoI59iNc4x/
1fk/zRqE310kLJLEghiqMRJYbuPAbMvToBZqPIByuIkCbhEn7JM0+JIAk1x08Zjz
MhgXgJ2g9ZY4K3VbQp3krMQlABJnanyNB18AMufPM0CtGl1bIl42HLuvH5KXAVLg
TDTGu4G2Ak6cuK7/arJv3W8BvaG28O1+L6P/M0F7QwDIY5YO8bPZvqe6o3Lo4k61
5pH40iU9/gqN1X+LntpaCc2WBC1GW4+0dkpVX7FFo9ST6WBWVjo0ttEFuBg3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3R3jGvx5b3ttHil7vBNhwemIelQwHwYDVR0j
BBgwFoAU80WG5f6t1iQgXKnKoXXT3KWdMrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMS9GMzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU4NkU1RkVBREQ2MjQy
MDVDQTlDQUExNzVEM0RDQTU5RDMyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdCTDQvMS9G
MzQ1ODZFNUZFQURENjI0MjA1Q0E5Q0FBMTc1RDNEQ0E1OUQzMkIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf7oWzh4A4S1KUsV6mOEM27JCEWPJGKLdfVKI8gTBPyZULZaPC3P40+hp/dnF
mT1KDQPY4kMuWM/mbBfPSxqCMiIGLQHCpWX7CR0StDDPwxPWUbpvwxid216ga1Ml
DbT2xXA7uvz+YbeCIeW2WsjFPfSF+ux4bb00j1FvvRuITDtE/nbniFwxQ8dXNmYG
dp2HX7J5sfwDnQRsUJaEzerMzGoxyZhxDgwdstsCIuNhq9hPpzerYf0gxii7FCUb
jqosvgMECC1T3rwQ3cLb/cXXpceWYePLfUH4zgupkqM5mWYbhD6Gv3yJL0+cYw1l
2p4cDqCz3cz1ilYFuqyqjo8/Bw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:10:14 2025 by rpki-client