Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          HEvKK7FS+RRSZxwzVmtjOJKp43AIZZK8a1vBKZTnSLo=
Subject key identifier:   23:79:7A:D3:52:FA:5C:14:6C:E8:28:CA:76:4C:09:D6:1D:1A:32:FC
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       43B887852A89E2400E0E6F8C3355DA6C8DCA9669
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          025A
Signing time:             Mon 30 Jun 2025 14:35:14 +0000
Manifest this update:     Mon 30 Jun 2025 14:30:14 +0000
Manifest next update:     Tue 01 Jul 2025 15:58:14 +0000
Files and hashes:         1: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: IS0tA9ntjO/6YSwSpKoc+6y0GOXtntg0W8Yvm4DBaSU=)
                          2: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: Hy3yGE356xabWQ4vXFKWmuk7oxWqyq5EH1KN5FJn7V8=)
                          3: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: Bu/IlHVqfrerUZ8q53bzUTf7AYEB+3z4EdZLXZZdicM=)
                          4: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: qIQpkQj0ZHEuXLTDN6BOH5c02tE1erFqyB0POd6mnGo=)
                          5: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: 6nL36QcETJJFvkiVVyWMLCclaTBJ1x3KCbT9g3ETV2Q=)
                          6: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: v6vtcVtojKMb7fm54RcvwQ5OYxhclZknjvsFw4uvV8Y=)
                          7: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: VZn9LAow7O6W9g199BFgEbVbSmNr6lwGD8lpJ00wUck=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b8:87:85:2a:89:e2:40:0e:0e:6f:8c:33:55:da:6c:8d:ca:96:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Jun 30 14:30:14 2025 GMT
            Not After : Jul  1 15:58:14 2025 GMT
        Subject: CN=23797AD352FA5C146CE828CA764C09D61D1A32FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:b8:d6:a9:8d:24:68:f4:16:03:d2:15:d5:
                    4a:31:ee:6b:73:86:22:0f:aa:0b:82:a7:1b:d0:5a:
                    40:7a:39:79:60:24:61:d7:c2:72:e3:fa:eb:ae:d7:
                    46:3a:be:78:37:33:d2:a8:11:69:57:9f:1a:c4:c8:
                    8a:36:6c:d3:2c:d9:fa:e2:b5:55:73:a9:42:87:80:
                    22:17:d3:0a:d8:ab:0e:9b:67:bc:9b:b8:df:3d:54:
                    28:56:eb:ae:70:24:ee:49:00:cd:87:2e:2b:f1:2a:
                    6d:bc:c7:63:c1:14:39:b5:e3:ff:4a:67:bd:55:35:
                    04:6d:0c:91:38:7d:84:d6:2b:89:a7:2b:b3:b7:61:
                    00:17:4f:27:f4:79:2d:19:14:c9:4c:42:77:7e:f9:
                    4e:ba:5b:03:32:9f:0d:35:b3:fe:94:2b:2c:d3:9e:
                    0d:0c:27:93:dc:97:75:6c:9c:69:71:75:de:ab:9b:
                    e9:78:70:51:66:92:ee:79:86:f0:87:cb:68:8c:25:
                    d6:53:e3:ac:3a:ca:49:ce:08:f9:ab:ca:bd:23:d0:
                    dd:53:cb:bb:6a:7a:83:b3:03:2b:fe:ce:fd:3a:a7:
                    7b:82:46:44:e7:a3:18:5f:01:7f:b3:57:99:90:f5:
                    51:ff:17:dc:3f:75:84:29:b7:29:46:2e:fd:5f:8b:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:79:7A:D3:52:FA:5C:14:6C:E8:28:CA:76:4C:09:D6:1D:1A:32:FC
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:82:19:8e:75:f2:2c:c6:39:c5:2b:c9:00:1a:d7:1b:c6:b3:
         8c:f8:f4:df:21:54:4b:1c:7d:fc:ed:3b:2b:60:6f:c8:30:b0:
         57:fb:59:3c:00:99:d7:96:d5:7a:aa:49:9c:1f:ea:12:d7:36:
         e5:8b:2c:92:9c:f7:67:dd:5f:86:9e:1d:25:d5:75:f8:e0:71:
         f4:5f:b3:95:35:6a:fd:28:f1:36:c3:2d:a6:ac:5a:66:b6:8c:
         86:84:28:78:89:04:ee:cb:73:ec:4f:e0:bc:5a:64:58:ff:f3:
         7c:4f:ae:dc:c3:4c:27:ad:b9:93:cb:99:e6:b8:74:58:fe:3f:
         57:d5:0b:17:f6:24:3a:33:57:6b:f5:89:8e:7a:cc:65:87:87:
         1c:68:9a:90:0c:58:65:1a:0e:ae:64:44:c8:27:7d:a5:52:69:
         e6:ec:07:b7:bf:db:8c:65:ee:f7:19:97:16:55:1e:dc:87:6f:
         80:03:9e:87:3d:fb:b8:a5:81:f7:38:cb:2f:90:fc:07:66:ff:
         7e:03:c5:83:1f:b8:cd:9b:f9:13:8a:21:6a:d7:fa:e2:5a:74:
         e0:6d:eb:cc:6a:8b:10:b4:d8:76:07:a9:2d:be:b2:6c:b3:a8:
         35:dd:bc:31:92:64:84:36:aa:37:a7:05:3d:ac:30:51:7f:ff:
         2c:a6:82:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ7iHhSqJ4kAODm+MM1XabI3KlmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNGMTY4RjBFNTBBOTBFNDFBNzM2RkUwRDVGQTkxOTc2
NUUxQjVFNjAeFw0yNTA2MzAxNDMwMTRaFw0yNTA3MDExNTU4MTRaMDMxMTAvBgNV
BAMTKDIzNzk3QUQzNTJGQTVDMTQ2Q0U4MjhDQTc2NEMwOUQ2MUQxQTMyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjt7jWqY0kaPQWA9IV1Uox7mtz
hiIPqguCpxvQWkB6OXlgJGHXwnLj+uuu10Y6vng3M9KoEWlXnxrEyIo2bNMs2fri
tVVzqUKHgCIX0wrYqw6bZ7ybuN89VChW665wJO5JAM2HLivxKm28x2PBFDm14/9K
Z71VNQRtDJE4fYTWK4mnK7O3YQAXTyf0eS0ZFMlMQnd++U66WwMynw01s/6UKyzT
ng0MJ5Pcl3VsnGlxdd6rm+l4cFFmku55hvCHy2iMJdZT46w6yknOCPmryr0j0N1T
y7tqeoOzAyv+zv06p3uCRkTnoxhfAX+zV5mQ9VH/F9w/dYQptylGLv1fixS9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUI3l601L6XBRs6CjKdkwJ1h0aMvwwHwYDVR0j
BBgwFoAUo/Fo8OUKkOQac2/g1fqRl2XhteYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk5aY1YxTFJORkQ5N3BoVmRUUXN2cEZzVmFDVkpQa01jbWFHUmRMbXFa
S2QvMS9BM0YxNjhGMEU1MEE5MEU0MUE3MzZGRTBENUZBOTE5NzY1RTFCNUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzRjE2OEYwRTUwQTkwRTQx
QTczNkZFMEQ1RkE5MTk3NjVFMUI1RTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nk5aY1YxTFJORkQ5N3BoVmRUUXN2cEZzVmFDVkpQa01jbWFHUmRMbXFaS2QvMS9B
M0YxNjhGMEU1MEE5MEU0MUE3MzZGRTBENUZBOTE5NzY1RTFCNUU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABIIZjnXyLMY5xSvJABrXG8azjPj03yFUSxx9/O07K2BvyDCwV/tZPACZ15bV
eqpJnB/qEtc25Ysskpz3Z91fhp4dJdV1+OBx9F+zlTVq/SjxNsMtpqxaZraMhoQo
eIkE7stz7E/gvFpkWP/zfE+u3MNMJ625k8uZ5rh0WP4/V9ULF/YkOjNXa/WJjnrM
ZYeHHGiakAxYZRoOrmREyCd9pVJp5uwHt7/bjGXu9xmXFlUe3IdvgAOehz37uKWB
9zjLL5D8B2b/fgPFgx+4zZv5E4ohatf64lp04G3rzGqLELTYdgepLb6ybLOoNd28
MZJkhDaqN6cFPawwUX//LKaCTg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:28:54 2025 by rpki-client