Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File:                     FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier:          ri1mHRYSM24Sozc734rZjmFdzdthlCLNAoARu0NPUeA=
Subject key identifier:   58:0B:59:A6:95:35:E9:6E:94:D3:45:96:07:3A:1E:87:10:9F:12:33
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       342842D59B6D6B0C2B240186C9DCB8D6231E9B27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number:          0253
Signing time:             Mon 30 Jun 2025 01:12:12 +0000
Manifest this update:     Mon 30 Jun 2025 01:07:12 +0000
Manifest next update:     Tue 01 Jul 2025 03:00:12 +0000
Files and hashes:         1: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: yQc6f9s60kFC5wyf3iEWaiYSrO4M0pIpsU7UlDMHI9g=)
                          2: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: J+wRwomABKCbVl4EP5JD2Yfly2BPeIoqIkLJ9ZSvj4s=)
                          3: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: 64d3manPGgk3wxr3C7+S75h3+f1uoBp0OnH1+QMNePE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:28:42:d5:9b:6d:6b:0c:2b:24:01:86:c9:dc:b8:d6:23:1e:9b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Jun 30 01:07:12 2025 GMT
            Not After : Jul  1 03:00:12 2025 GMT
        Subject: CN=580B59A69535E96E94D34596073A1E87109F1233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:e8:b8:0c:bc:1e:f4:ed:90:50:47:0d:02:
                    0e:a2:8c:84:9c:09:3d:55:a9:8f:83:d8:79:ec:66:
                    ff:41:b8:b6:31:0d:00:22:42:f5:1d:87:e0:42:73:
                    a1:6f:19:a8:53:c0:26:58:22:cb:8b:62:fa:84:98:
                    5a:b9:e3:5e:64:5a:87:ca:03:cd:d3:56:bf:c5:69:
                    e3:81:ff:75:b6:4f:96:ff:55:bc:8d:43:e5:47:0a:
                    fb:9b:df:c4:42:20:7b:2c:30:f1:1e:a6:6e:8d:0c:
                    a4:c0:de:d8:69:b7:1b:a2:bb:fd:0b:32:e1:ee:8f:
                    88:ef:30:be:a0:4f:26:2d:d4:80:a1:5d:11:a9:23:
                    3d:f7:17:a2:d6:65:f7:9c:73:6d:8b:46:59:b8:40:
                    9c:5b:a0:45:30:8b:a8:7f:61:72:b7:8d:b6:72:c6:
                    07:dc:a3:d0:8c:df:7d:13:1a:87:b9:b4:89:90:a9:
                    4c:61:46:73:00:e7:d1:64:4e:2a:c1:19:21:28:cb:
                    9a:41:af:f8:94:8f:f0:93:10:9e:8c:e2:fa:46:45:
                    db:e9:42:65:ae:cd:cc:06:1b:df:cb:6c:f1:82:43:
                    2b:bc:5d:d3:f9:a7:aa:a5:f7:fa:8d:55:98:69:92:
                    84:9a:7f:55:68:12:b5:ab:18:44:52:52:e8:40:ff:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0B:59:A6:95:35:E9:6E:94:D3:45:96:07:3A:1E:87:10:9F:12:33
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:82:b2:64:d9:c9:f2:b4:f4:69:9b:c3:ec:4d:fa:98:bf:
         76:c0:4f:99:62:0b:27:77:eb:bb:c6:9b:2b:15:1f:db:39:73:
         d5:6d:14:a4:a9:99:48:53:4d:42:7a:05:68:6a:38:81:a6:69:
         49:20:39:36:09:6b:7e:34:27:ad:36:29:f8:53:a9:9b:fb:03:
         2f:f6:10:12:05:04:90:8f:8c:0d:69:66:71:44:97:fb:55:72:
         13:cb:e7:72:00:f2:d2:aa:97:9e:a8:92:68:93:10:3f:7e:d5:
         22:e7:cc:0c:36:62:84:a9:86:b1:33:95:9c:e9:3a:18:33:08:
         b1:59:2e:1e:37:b4:65:4c:4a:7e:03:4d:99:c5:fa:ef:76:41:
         93:e9:3d:f6:0e:01:8b:1a:49:1a:c8:a3:a0:0f:71:70:18:d8:
         35:eb:81:74:16:70:d8:75:de:82:3c:da:b6:9c:db:27:cb:7b:
         51:af:90:e9:47:41:b0:22:1b:be:00:80:3b:99:ad:1c:70:74:
         b3:b4:80:3c:76:8c:16:98:8a:08:d7:9e:23:be:2e:49:cd:3c:
         e1:0e:35:ad:aa:43:8e:41:b1:99:4b:bc:cd:1c:33:41:d7:40:
         07:a6:48:b0:ce:b0:73:41:af:8f:7c:70:a9:4e:1f:e9:e7:93:
         5b:99:37:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNChC1ZttawwrJAGGydy41iMemycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQzQzg0NjQzQ0YwQ0ZERUMzRjMyREU1QUU2M0U4OEJD
RkE5RjdDOTAeFw0yNTA2MzAwMTA3MTJaFw0yNTA3MDEwMzAwMTJaMDMxMTAvBgNV
BAMTKDU4MEI1OUE2OTUzNUU5NkU5NEQzNDU5NjA3M0ExRTg3MTA5RjEyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHei4DLwe9O2QUEcNAg6ijISc
CT1VqY+D2HnsZv9BuLYxDQAiQvUdh+BCc6FvGahTwCZYIsuLYvqEmFq5415kWofK
A83TVr/FaeOB/3W2T5b/VbyNQ+VHCvub38RCIHssMPEepm6NDKTA3thptxuiu/0L
MuHuj4jvML6gTyYt1IChXRGpIz33F6LWZfecc22LRlm4QJxboEUwi6h/YXK3jbZy
xgfco9CM330TGoe5tImQqUxhRnMA59FkTirBGSEoy5pBr/iUj/CTEJ6M4vpGRdvp
QmWuzcwGG9/LbPGCQyu8XdP5p6ql9/qNVZhpkoSaf1VoErWrGERSUuhA/8y7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWAtZppU16W6U00WWBzoehxCfEjMwHwYDVR0j
BBgwFoAU/TyEZDzwz97D8y3lrmPoi8+p98kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUFrMzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VF
a3ovMS9GRDNDODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEM0M4NDY0M0NGMENGREVD
M0YzMkRFNUFFNjNFODhCQ0ZBOUY3QzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUFrMzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VFa3ovMS9G
RDNDODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdZyCsmTZyfK09Gmbw+xN+pi/dsBPmWILJ3fru8abKxUf2zlz1W0UpKmZSFNN
QnoFaGo4gaZpSSA5NglrfjQnrTYp+FOpm/sDL/YQEgUEkI+MDWlmcUSX+1VyE8vn
cgDy0qqXnqiSaJMQP37VIufMDDZihKmGsTOVnOk6GDMIsVkuHje0ZUxKfgNNmcX6
73ZBk+k99g4BixpJGsijoA9xcBjYNeuBdBZw2HXegjzatpzbJ8t7Ua+Q6UdBsCIb
vgCAO5mtHHB0s7SAPHaMFpiKCNeeI74uSc084Q41rapDjkGxmUu8zRwzQddAB6ZI
sM6wc0Gvj3xwqU4f6eeTW5k35Q==
-----END CERTIFICATE-----
Generated at Mon Jun 30 04:32:12 2025 by rpki-client