Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          JCrtPhcYD2wFi/N2tqYwZWG0IpQkNABWvw0EChadKLs=
Subject key identifier:   03:21:3B:54:B1:F2:40:67:24:36:81:58:44:ED:5F:8B:F4:49:67:A6
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       294C423C50B7115836A8A479D3CC80D7787CF65F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          021E
Signing time:             Thu 15 May 2025 06:30:44 +0000
Manifest this update:     Thu 15 May 2025 06:25:44 +0000
Manifest next update:     Fri 16 May 2025 06:36:44 +0000
Files and hashes:         1: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          2: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          3: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          4: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: 2yaHCQpQ1PIqrzjAAyOcCnkijaiehWAMynqjhCqxZd0=)
                          5: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          6: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          7: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 06:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4c:42:3c:50:b7:11:58:36:a8:a4:79:d3:cc:80:d7:78:7c:f6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: May 15 06:25:44 2025 GMT
            Not After : May 16 06:36:44 2025 GMT
        Subject: CN=03213B54B1F240672436815844ED5F8BF44967A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:7c:65:50:21:c8:c3:f0:fc:02:9b:37:5c:
                    a4:7e:ac:8d:c4:76:91:3e:16:df:8d:c7:45:a4:72:
                    e2:5c:85:89:b5:28:74:35:19:39:23:8f:a6:db:72:
                    c0:65:61:5f:d4:1f:0e:b3:a3:49:fa:97:3c:11:df:
                    7a:6d:a3:d0:b4:e9:60:cd:37:98:c7:cd:78:36:d4:
                    9d:bd:ff:6d:43:c7:ee:e8:47:fe:8f:18:54:99:d5:
                    da:7f:d3:73:53:a0:78:9b:55:d2:dd:48:77:d7:57:
                    24:51:11:6e:6d:34:b0:d6:53:37:7f:b8:5a:0e:76:
                    1f:9a:7e:eb:31:b0:44:38:f8:72:0e:59:4d:90:d9:
                    2a:d1:08:30:f2:da:f1:7b:77:2c:8e:47:b9:84:77:
                    2e:64:16:a1:a5:2a:c0:f5:0b:1b:1f:18:45:d7:e2:
                    ad:1e:65:c0:72:54:0e:31:90:c3:34:3e:cc:8d:78:
                    32:5e:21:dc:2f:e0:14:52:d9:3d:28:e2:dc:c1:a3:
                    4f:31:87:d2:28:37:e7:ff:99:a2:cb:f8:12:45:c0:
                    ad:7e:35:b2:9b:ce:36:28:46:c9:22:ca:eb:6c:85:
                    a6:3c:cb:55:84:d8:07:10:2e:50:5d:75:98:89:74:
                    01:f3:eb:9d:06:3f:da:54:d8:bf:e4:53:8e:73:c0:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:3B:54:B1:F2:40:67:24:36:81:58:44:ED:5F:8B:F4:49:67:A6
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:d8:ec:31:96:fe:df:17:5d:52:52:bb:54:e0:7c:4c:b7:
         57:7e:54:b8:4f:20:63:62:60:73:1e:e3:94:ef:79:c8:86:ba:
         05:6c:c8:3b:dc:88:09:da:9c:01:66:82:be:7f:e7:b8:bd:e6:
         a2:56:3e:0e:a7:51:cf:7f:6c:b5:40:96:f1:3b:91:54:15:19:
         49:a1:38:e5:44:67:4a:4b:01:01:b2:1e:9d:f8:f7:b3:e0:70:
         8c:5b:4e:c9:ef:4f:62:5c:f3:e6:a9:24:5a:a9:d9:58:6c:47:
         4e:a1:1e:ee:39:1c:c0:a0:bf:51:99:9e:a2:ae:c3:31:df:a3:
         93:4f:08:c0:f1:06:0f:2c:76:fb:c5:7d:1e:39:70:41:e9:85:
         0a:40:29:81:59:b1:1f:31:77:6d:b1:d9:5e:dd:9a:3f:7d:d7:
         d8:a8:ab:0c:25:08:21:8e:b8:dd:21:20:72:5d:b1:b1:9f:db:
         7f:44:9a:84:bd:9b:93:6b:2c:3b:08:87:dd:ff:b2:03:15:21:
         2a:f1:78:17:61:93:ba:1d:02:fa:c6:d8:db:7a:e2:e6:b9:73:
         2f:b3:d8:24:4c:09:e8:bd:67:88:09:69:de:f3:37:09:7e:88:
         79:5d:e0:b1:0f:c6:9d:bb:4b:f5:d1:35:16:5c:5d:ed:a2:b6:
         76:9b:3f:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKUxCPFC3EVg2qKR508yA13h89l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREMkNCNjQ2RjQ4QkEyMTRBQTI4QTJEQjg5NEM0QUI3
NTAyMENFNzAeFw0yNTA1MTUwNjI1NDRaFw0yNTA1MTYwNjM2NDRaMDMxMTAvBgNV
BAMTKDAzMjEzQjU0QjFGMjQwNjcyNDM2ODE1ODQ0RUQ1RjhCRjQ0OTY3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOHxlUCHIw/D8Aps3XKR+rI3E
dpE+Ft+Nx0WkcuJchYm1KHQ1GTkjj6bbcsBlYV/UHw6zo0n6lzwR33pto9C06WDN
N5jHzXg21J29/21Dx+7oR/6PGFSZ1dp/03NToHibVdLdSHfXVyRREW5tNLDWUzd/
uFoOdh+afusxsEQ4+HIOWU2Q2SrRCDDy2vF7dyyOR7mEdy5kFqGlKsD1CxsfGEXX
4q0eZcByVA4xkMM0PsyNeDJeIdwv4BRS2T0o4tzBo08xh9IoN+f/maLL+BJFwK1+
NbKbzjYoRskiyutshaY8y1WE2AcQLlBddZiJdAHz650GP9pU2L/kU45zwNK7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAyE7VLHyQGckNoFYRO1fi/RJZ6YwHwYDVR0j
BBgwFoAURNLLZG9IuiFKoootuJTEq3UCDOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRW
eVovMS80NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDJDQjY0NkY0OEJBMjE0
QUEyOEEyREI4OTRDNEFCNzUwMjBDRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWVyZndMWUtycWtQRWlxMWlWaDRURTN5ZVdTQ2dXbzE1dmJlNnpFdzRWeVovMS80
NEQyQ0I2NDZGNDhCQTIxNEFBMjhBMkRCODk0QzRBQjc1MDIwQ0U3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcrnY7DGW/t8XXVJSu1TgfEy3V35UuE8gY2Jgcx7jlO95yIa6BWzIO9yICdqc
AWaCvn/nuL3molY+DqdRz39stUCW8TuRVBUZSaE45URnSksBAbIenfj3s+BwjFtO
ye9PYlzz5qkkWqnZWGxHTqEe7jkcwKC/UZmeoq7DMd+jk08IwPEGDyx2+8V9Hjlw
QemFCkApgVmxHzF3bbHZXt2aP33X2KirDCUIIY643SEgcl2xsZ/bf0SahL2bk2ss
OwiH3f+yAxUhKvF4F2GTuh0C+sbY23ri5rlzL7PYJEwJ6L1niAlp3vM3CX6IeV3g
sQ/GnbtL9dE1Flxd7aK2dps/PQ==
-----END CERTIFICATE-----
Generated at Thu May 15 17:55:59 2025 by rpki-client