Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          xzsONOZJT7oR7y1HNxksNweL2+4rLa26ehwFpD8NITA=
Subject key identifier:   9B:AE:11:5A:29:E4:FC:19:3D:45:71:5E:05:EC:45:F2:42:B5:C8:6C
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       28C551FEC06337C96ADDF815B4F9DB8A052E2844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0260
Signing time:             Fri 04 Jul 2025 10:53:52 +0000
Manifest this update:     Fri 04 Jul 2025 10:48:52 +0000
Manifest next update:     Sat 05 Jul 2025 10:58:52 +0000
Files and hashes:         1: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          2: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          3: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          4: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: Pu6AGUgbvfU9YNpyuGMRuUkXV3mjk2ReoWYYSMgXnZw=)
                          5: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          6: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          7: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 10:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:51:fe:c0:63:37:c9:6a:dd:f8:15:b4:f9:db:8a:05:2e:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jul  4 10:48:52 2025 GMT
            Not After : Jul  5 10:58:52 2025 GMT
        Subject: CN=9BAE115A29E4FC193D45715E05EC45F242B5C86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:d3:2b:bf:f2:fc:a5:6c:c2:7c:8e:1b:e0:
                    4a:3a:1c:65:b8:5f:13:8e:70:62:ff:24:cb:81:31:
                    3e:f9:da:22:be:dd:71:82:50:e3:97:58:9d:39:24:
                    06:b9:ca:79:56:a1:21:f4:25:c1:1d:29:9b:17:46:
                    ae:77:d5:f6:1d:91:78:43:ec:bf:de:8e:03:ba:5a:
                    24:ec:08:d8:7d:16:f4:f6:ac:f0:7b:fe:cd:46:b8:
                    42:6c:8c:7b:2e:5b:76:90:aa:d9:34:7d:b3:bb:12:
                    41:b6:a8:a4:0c:7d:86:fc:ac:b0:35:2a:43:05:f5:
                    a2:07:ac:07:64:9e:df:a5:df:c4:0f:58:1c:bf:04:
                    89:97:0d:31:8e:56:5f:cd:9c:e6:f0:ac:b4:0f:ca:
                    ca:af:6d:97:4d:fd:03:61:26:c3:12:e4:29:84:8b:
                    5e:9a:97:f1:57:83:72:97:4d:24:cb:68:95:4f:22:
                    82:5a:fb:b1:64:38:78:71:d9:1e:af:7f:ee:8c:50:
                    b4:53:c4:ef:b4:dd:35:7d:f6:2d:33:6a:6c:38:84:
                    d7:0c:c8:de:08:0a:b6:5a:32:8a:de:d1:25:85:18:
                    25:62:47:6a:de:2b:00:d7:c5:6d:56:c5:04:8e:03:
                    bd:85:e5:f0:34:88:0a:89:2d:58:9b:99:93:4c:bf:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:11:5A:29:E4:FC:19:3D:45:71:5E:05:EC:45:F2:42:B5:C8:6C
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:b2:ae:a8:68:7f:d9:4f:05:c7:4d:92:40:1a:cd:45:6b:
         f0:00:74:1c:4c:81:ec:83:f8:1a:32:e8:f2:69:9b:0c:ef:28:
         f8:b0:6c:9c:1e:62:4e:59:ed:b8:22:ec:b6:1e:6d:64:8a:a3:
         a0:7f:65:52:30:01:bb:3c:e4:51:13:64:12:4b:10:09:59:a1:
         d2:58:98:b0:bb:2b:39:90:e5:32:56:e9:07:1c:39:b2:d6:6f:
         81:32:3d:cd:dc:5c:f1:66:20:7e:e1:69:b6:52:0f:8f:e0:22:
         89:4d:1f:c3:c8:70:8c:e6:f9:aa:3b:d6:2f:67:eb:a9:fb:29:
         47:99:d9:73:87:1f:d3:d8:14:47:c2:1e:dc:41:fd:ef:2e:94:
         76:71:38:90:c1:08:13:9a:27:c0:db:3f:20:b8:ac:08:4d:9c:
         cd:13:26:9e:66:b9:0a:51:7e:2d:8d:e7:d5:64:fa:46:53:1b:
         24:d2:55:c0:25:fe:a0:df:91:f5:1a:f5:0b:1c:07:b4:31:4c:
         eb:af:d4:6d:8d:c9:dd:dd:ff:35:31:ac:4f:83:46:7b:cf:d6:
         e4:81:55:15:62:52:65:b6:bf:aa:20:de:50:b2:0c:65:68:8b:
         2c:77:a3:29:e1:d0:16:c0:6c:b7:c6:0d:3e:0b:a5:ee:95:5c:
         03:3c:98:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKMVR/sBjN8lq3fgVtPnbigUuKEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREMkNCNjQ2RjQ4QkEyMTRBQTI4QTJEQjg5NEM0QUI3
NTAyMENFNzAeFw0yNTA3MDQxMDQ4NTJaFw0yNTA3MDUxMDU4NTJaMDMxMTAvBgNV
BAMTKDlCQUUxMTVBMjlFNEZDMTkzRDQ1NzE1RTA1RUM0NUYyNDJCNUM4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3tMrv/L8pWzCfI4b4Eo6HGW4
XxOOcGL/JMuBMT752iK+3XGCUOOXWJ05JAa5ynlWoSH0JcEdKZsXRq531fYdkXhD
7L/ejgO6WiTsCNh9FvT2rPB7/s1GuEJsjHsuW3aQqtk0fbO7EkG2qKQMfYb8rLA1
KkMF9aIHrAdknt+l38QPWBy/BImXDTGOVl/NnObwrLQPysqvbZdN/QNhJsMS5CmE
i16al/FXg3KXTSTLaJVPIoJa+7FkOHhx2R6vf+6MULRTxO+03TV99i0zamw4hNcM
yN4ICrZaMore0SWFGCViR2reKwDXxW1WxQSOA72F5fA0iAqJLVibmZNMvydTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUm64RWink/Bk9RXFeBexF8kK1yGwwHwYDVR0j
BBgwFoAURNLLZG9IuiFKoootuJTEq3UCDOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMS80NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDJDQjY0NkY0OEJBMjE0
QUEyOEEyREI4OTRDNEFCNzUwMjBDRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRWeVovMS80
NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/Wyrqhof9lPBcdNkkAazUVr8AB0HEyB7IP4GjLo8mmbDO8o+LBsnB5iTlnt
uCLsth5tZIqjoH9lUjABuzzkURNkEksQCVmh0liYsLsrOZDlMlbpBxw5stZvgTI9
zdxc8WYgfuFptlIPj+AiiU0fw8hwjOb5qjvWL2frqfspR5nZc4cf09gUR8Ie3EH9
7y6UdnE4kMEIE5onwNs/ILisCE2czRMmnma5ClF+LY3n1WT6RlMbJNJVwCX+oN+R
9Rr1CxwHtDFM66/UbY3J3d3/NTGsT4NGe8/W5IFVFWJSZba/qiDeULIMZWiLLHej
KeHQFsBst8YNPgul7pVcAzyY2w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:29:18 2025 by rpki-client