Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
File:                     582517B9105955B7B839FB60DC59AE677C6B4DED.mft (raw, json)
Hash identifier:          nL0O9UKX2VSsWP6RneprreetYVRkVlVmfmU7x+Jh8XA=
Subject key identifier:   C8:E2:95:87:EE:7B:5B:D1:82:D2:07:97:42:76:66:14:9A:4D:9B:57
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       42B0F6541975F648CD42C35C67EC9758FF3BE05B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
Manifest number:          025E
Signing time:             Mon 30 Jun 2025 17:06:12 +0000
Manifest this update:     Mon 30 Jun 2025 17:01:12 +0000
Manifest next update:     Tue 01 Jul 2025 17:14:12 +0000
Files and hashes:         1: 323830343a363434343a313130303a3a2f34302d3430203d3e20323639343137.roa (hash: 6f1yJXItyt0SjHHrPR4mrHZLPA/DpvcqSMVQ6OliXwg=)
                          2: 582517B9105955B7B839FB60DC59AE677C6B4DED.crl (hash: i492zwLQpVK5heh4PrXazlM9T0yzOMiAPJD9GOmxXrg=)
                          3: 323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (hash: JPJQP27OEK8rUPH8CmEfxGwM8CyPkwEg19EZpb7vMjk=)
                          4: 323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (hash: 8s5e127dU7/EznWjKEQqBfCMfHXWL9OO9dUHUkrLvUs=)
                          5: 323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (hash: Fm72jXNedihMmSVYwWDB9msaqzvPn+whkD1ujIfoFQ0=)
                          6: 323830343a363434343a3a2f33322d3335203d3e20323639343137.roa (hash: H8Elqz19bRblZhKEx7VnGb4ZBsNWV8X8BsYHFXyB+AI=)
                          7: 34352e3138362e38382e302f32322d3234203d3e20323639343137.roa (hash: xP1F0pMSSokgmJoEtD1tmFwDICZcoxgevpV5id1ez8g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 17:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:f6:54:19:75:f6:48:cd:42:c3:5c:67:ec:97:58:ff:3b:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Jun 30 17:01:12 2025 GMT
            Not After : Jul  1 17:14:12 2025 GMT
        Subject: CN=C8E29587EE7B5BD182D20797427666149A4D9B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:6f:49:2a:63:2a:e2:2d:13:83:7a:9f:d9:
                    95:d0:96:d0:81:8c:66:85:41:af:57:f8:55:f6:b0:
                    5b:60:fa:25:12:f3:df:8d:e7:96:dc:3a:e7:0c:22:
                    c1:62:9e:f7:39:2f:9e:e5:72:65:a5:1d:38:94:53:
                    e4:43:d7:ac:06:df:9b:14:33:6f:8b:8e:28:3c:49:
                    6a:dc:5e:3d:1c:ca:77:85:34:6b:b6:dd:f4:c6:3d:
                    32:e9:07:39:c7:cd:d9:d9:73:f7:42:83:e0:b3:76:
                    ae:34:ba:e3:23:6a:7c:0e:d0:a9:04:3c:15:d6:f6:
                    e1:59:bd:07:ae:c3:44:1c:c7:a8:75:8b:a9:b8:35:
                    cf:2e:c2:c5:30:6d:a8:4b:cb:37:88:84:35:5e:dd:
                    fe:7f:0c:37:e3:7e:ed:ec:d3:fe:52:15:56:6e:f9:
                    c9:2b:b9:1b:c5:63:6f:a9:fd:cc:90:8e:a6:87:9c:
                    5d:cc:77:fa:5f:56:28:5e:63:e9:b1:e1:cb:8b:d1:
                    51:4b:a6:56:70:81:95:19:d5:d3:d0:8f:45:e4:01:
                    2c:af:b8:65:65:43:2a:3d:e0:50:dc:b9:ff:58:3e:
                    44:b2:8b:24:fb:ce:db:34:7a:96:fa:df:d5:f7:7f:
                    2e:3f:e1:02:83:90:d8:47:e4:43:fc:b6:ca:96:5c:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E2:95:87:EE:7B:5B:D1:82:D2:07:97:42:76:66:14:9A:4D:9B:57
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:95:e2:de:e9:a1:41:ad:c6:a7:b5:cf:30:a9:b4:7e:ad:fb:
         fa:99:9d:f4:e4:f2:42:82:e4:77:87:13:2f:3b:40:7c:16:45:
         3c:19:67:3c:fc:bc:bc:f6:2a:c2:ee:cf:2e:08:a6:3f:a9:d4:
         4c:73:0c:c1:7c:e3:74:ad:33:a5:1c:ed:c8:fd:64:6c:91:a6:
         1c:91:cb:34:99:0d:15:2d:19:d3:38:92:99:cb:40:96:6f:fe:
         a7:bf:0e:18:db:ae:a3:32:19:13:60:48:dd:3e:74:6b:eb:53:
         17:bb:a5:dc:0a:eb:e2:0e:92:88:b9:f3:85:c3:79:28:0d:ea:
         30:12:da:3f:25:7a:9c:1d:fe:5a:26:2d:27:6a:78:85:62:c2:
         fa:90:4a:5d:27:a7:2a:e2:93:9c:c4:5a:9b:86:dd:a0:ac:f0:
         80:d0:c8:75:13:b1:5c:2d:b4:40:08:88:c0:2f:04:86:dc:8e:
         1a:b5:5c:46:8a:d4:c4:09:d7:a1:9f:b7:71:db:d6:c7:da:e3:
         61:d7:79:07:e8:00:ff:42:21:71:d7:ab:83:9b:db:11:d5:ab:
         62:d3:e7:a9:74:50:33:36:5f:81:54:df:5e:4e:05:99:56:50:
         0b:62:5a:01:29:2d:b2:6d:48:25:6f:44:5b:18:39:f5:9d:58:
         01:8f:6f:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQrD2VBl19kjNQsNcZ+yXWP874FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyNTE3QjkxMDU5NTVCN0I4MzlGQjYwREM1OUFFNjc3
QzZCNERFRDAeFw0yNTA2MzAxNzAxMTJaFw0yNTA3MDExNzE0MTJaMDMxMTAvBgNV
BAMTKEM4RTI5NTg3RUU3QjVCRDE4MkQyMDc5NzQyNzY2NjE0OUE0RDlCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hW9JKmMq4i0Tg3qf2ZXQltCB
jGaFQa9X+FX2sFtg+iUS89+N55bcOucMIsFinvc5L57lcmWlHTiUU+RD16wG35sU
M2+Ljig8SWrcXj0cyneFNGu23fTGPTLpBznHzdnZc/dCg+Czdq40uuMjanwO0KkE
PBXW9uFZvQeuw0Qcx6h1i6m4Nc8uwsUwbahLyzeIhDVe3f5/DDfjfu3s0/5SFVZu
+ckruRvFY2+p/cyQjqaHnF3Md/pfViheY+mx4cuL0VFLplZwgZUZ1dPQj0XkASyv
uGVlQyo94FDcuf9YPkSyiyT7zts0epb639X3fy4/4QKDkNhH5EP8tsqWXJLbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyOKVh+57W9GC0geXQnZmFJpNm1cwHwYDVR0j
BBgwFoAUWCUXuRBZVbe4Oftg3FmuZ3xrTe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVx
NUQvMS81ODI1MTdCOTEwNTk1NUI3QjgzOUZCNjBEQzU5QUU2NzdDNkI0REVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4MjUxN0I5MTA1OTU1QjdC
ODM5RkI2MERDNTlBRTY3N0M2QjRERUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXJQNUdXR0pTNWhGUUs3ZjV2UVNIVmRRWmJOYWlKNFdrV3BBeG1iYmVxNUQvMS81
ODI1MTdCOTEwNTk1NUI3QjgzOUZCNjBEQzU5QUU2NzdDNkI0REVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd5Xi3umhQa3Gp7XPMKm0fq37+pmd9OTyQoLkd4cTLztAfBZFPBlnPPy8vPYq
wu7PLgimP6nUTHMMwXzjdK0zpRztyP1kbJGmHJHLNJkNFS0Z0ziSmctAlm/+p78O
GNuuozIZE2BI3T50a+tTF7ul3Arr4g6SiLnzhcN5KA3qMBLaPyV6nB3+WiYtJ2p4
hWLC+pBKXSenKuKTnMRam4bdoKzwgNDIdROxXC20QAiIwC8EhtyOGrVcRorUxAnX
oZ+3cdvWx9rjYdd5B+gA/0Ihcderg5vbEdWrYtPnqXRQMzZfgVTfXk4FmVZQC2Ja
ASktsm1IJW9EWxg59Z1YAY9vrA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:18 2025 by rpki-client