Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File:                     CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier:          k8448aq6kNSPpVKzA1AaMtNgdxAQd8cDq8ts/CQkRH4=
Subject key identifier:   A1:45:AE:49:9B:7B:C8:FC:03:54:4B:1F:04:37:43:F3:75:FF:EA:97
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       51060F26E6C25769464D050A4A5A541DD680A8FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number:          12
Signing time:             Wed 02 Jul 2025 22:16:29 +0000
Manifest this update:     Wed 02 Jul 2025 22:11:29 +0000
Manifest next update:     Fri 04 Jul 2025 01:37:29 +0000
Files and hashes:         1: 3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa (hash: rK0IOV+EidUJoiUuH5PAx/A/dJ9zzuIc7Z7E9C5lbSQ=)
                          2: 323830343a366361383a3a2f33322d3332203d3e20323730343833.roa (hash: A6lX3qzZ/VyUkzt2oHNgr7S5bRZ3Oe6wwfxFH6a3dFk=)
                          3: 3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa (hash: O22CqyazHO7QsfMKVz3bn+StHnBcbRXfWsVfyk+nEJo=)
                          4: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: TAhKTM56tWTBjVlJHWDaqM3Vkzf2I/ILA12IEwoJBVY=)
                          5: 3230302e37332e3231382e302f32342d3234203d3e20323730343833.roa (hash: LSJphWIa9vFPrdJlMAauYotdxkp6+3n2ZeeAZXIioRI=)
                          6: 3230302e37332e3231372e302f32342d3234203d3e20323730343833.roa (hash: qOo8IcZVlwTbd0IrCacSIIPW2ym2IRab0LHbvl6QFN4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:06:0f:26:e6:c2:57:69:46:4d:05:0a:4a:5a:54:1d:d6:80:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Jul  2 22:11:29 2025 GMT
            Not After : Jul  4 01:37:29 2025 GMT
        Subject: CN=A145AE499B7BC8FC03544B1F043743F375FFEA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:a1:74:1c:73:0d:ac:6c:12:3c:4b:60:2f:
                    54:a6:c8:20:c0:16:13:cb:7d:28:63:db:b9:35:ed:
                    7b:64:fb:d6:39:20:06:ea:32:9a:d0:d6:08:9c:3c:
                    a4:69:c5:90:16:9c:79:43:e4:ac:ff:4d:48:39:b6:
                    a9:a0:f5:91:d9:4c:9f:30:a8:7d:d8:79:48:8b:2b:
                    62:25:f6:77:8f:4f:0b:96:b2:3b:4d:8e:29:f4:11:
                    d8:d3:f3:de:3e:08:7e:e7:57:ed:69:1f:64:c8:75:
                    cf:fd:f3:57:0d:b4:79:27:b7:da:aa:a5:94:f7:a2:
                    ea:7f:1f:9e:08:9c:4c:d5:a9:21:9b:3c:f3:95:48:
                    d4:0b:10:32:ca:e6:b3:4a:a1:1a:42:67:5c:77:93:
                    0e:0b:ec:14:c5:ae:73:c2:74:ad:c8:e5:f3:cb:f0:
                    af:1a:c5:06:12:4d:10:06:d4:4b:53:f5:4a:1c:92:
                    4f:a4:e1:d7:3e:83:d1:fe:2c:c9:07:47:8b:fc:f7:
                    49:41:99:2d:a0:75:93:1c:84:2c:e8:20:19:37:1e:
                    8c:36:c6:a8:eb:44:fd:6b:76:a3:3f:06:ed:2f:68:
                    98:73:88:d7:fe:d0:45:93:75:04:a0:bd:55:c0:78:
                    80:3e:4b:cb:6b:a2:1f:b5:0c:fe:db:23:4d:34:ca:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:AE:49:9B:7B:C8:FC:03:54:4B:1F:04:37:43:F3:75:FF:EA:97
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:22:dc:9f:17:6f:49:ad:55:96:a7:d2:f6:cf:7d:40:8a:8d:
         72:f1:86:d2:27:df:45:d9:06:93:b4:24:dc:03:e6:66:5a:86:
         59:f5:98:aa:33:df:9a:58:8e:f3:12:e5:80:e2:db:35:ca:c8:
         c5:7a:9a:3b:8c:4f:ca:86:00:bc:dd:e9:16:75:80:c9:89:fd:
         9b:a4:34:de:9c:d6:fb:72:3d:d7:01:6b:b3:8e:29:96:48:1a:
         63:1e:f5:77:47:12:f3:a2:b8:f7:42:80:e2:13:da:4f:f3:7c:
         da:9d:f2:de:c1:32:84:15:e5:12:b6:ec:e7:98:c5:b9:72:d2:
         99:da:4d:f0:4c:15:14:2c:9f:e2:4d:c8:66:78:14:eb:b8:1e:
         ec:0e:06:61:9a:d7:52:5d:72:e4:b0:35:a7:5a:b7:3d:f4:ae:
         2f:44:e7:e4:75:8e:d5:d6:58:4b:6c:07:68:a4:3f:8c:b8:20:
         52:e1:07:30:b1:8c:6f:32:ec:40:25:65:57:f0:55:42:95:c8:
         09:39:3a:c4:15:df:ac:3d:9f:0a:c5:b9:59:24:bf:55:02:7a:
         25:f1:97:9f:85:e2:7d:6a:f2:d0:e1:19:11:87:bd:9b:fd:e2:
         0e:37:75:e6:77:3f:50:19:34:8d:22:23:41:be:31:dd:e2:2f:
         98:a2:c1:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUQYPJubCV2lGTQUKSlpUHdaAqP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0
NTU0QkJEQjAeFw0yNTA3MDIyMjExMjlaFw0yNTA3MDQwMTM3MjlaMDMxMTAvBgNV
BAMTKEExNDVBRTQ5OUI3QkM4RkMwMzU0NEIxRjA0Mzc0M0YzNzVGRkVBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mKF0HHMNrGwSPEtgL1SmyCDA
FhPLfShj27k17Xtk+9Y5IAbqMprQ1gicPKRpxZAWnHlD5Kz/TUg5tqmg9ZHZTJ8w
qH3YeUiLK2Il9nePTwuWsjtNjin0EdjT894+CH7nV+1pH2TIdc/981cNtHknt9qq
pZT3oup/H54InEzVqSGbPPOVSNQLEDLK5rNKoRpCZ1x3kw4L7BTFrnPCdK3I5fPL
8K8axQYSTRAG1EtT9Uockk+k4dc+g9H+LMkHR4v890lBmS2gdZMchCzoIBk3How2
xqjrRP1rdqM/Bu0vaJhziNf+0EWTdQSgvVXAeIA+S8troh+1DP7bI000yquBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUoUWuSZt7yPwDVEsfBDdD83X/6pcwHwYDVR0j
BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0
OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD
MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0OTgvMC9D
QUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAECLcnxdvSa1VlqfS9s99QIqNcvGG0iffRdkGk7Qk3APmZlqGWfWYqjPfmliO
8xLlgOLbNcrIxXqaO4xPyoYAvN3pFnWAyYn9m6Q03pzW+3I91wFrs44plkgaYx71
d0cS86K490KA4hPaT/N82p3y3sEyhBXlErbs55jFuXLSmdpN8EwVFCyf4k3IZngU
67ge7A4GYZrXUl1y5LA1p1q3PfSuL0Tn5HWO1dZYS2wHaKQ/jLggUuEHMLGMbzLs
QCVlV/BVQpXICTk6xBXfrD2fCsW5WSS/VQJ6JfGXn4XifWry0OEZEYe9m/3iDjd1
5nc/UBk0jSIjQb4x3eIvmKLB0w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:42:21 2025 by rpki-client