Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
File:                     E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft (raw, json)
Hash identifier:          onqnzO0nv66H8FZNabFlxJH0d/YWB/knoelhgpLV3s8=
Subject key identifier:   2E:8D:9A:57:31:F1:BB:64:97:D7:B4:BE:C2:0A:9C:EC:F7:08:A8:2B
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       08F28C4424F2263B80D809F6482350A6709C20D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
Manifest number:          01E1
Signing time:             Wed 02 Jul 2025 09:37:14 +0000
Manifest this update:     Wed 02 Jul 2025 09:32:14 +0000
Manifest next update:     Thu 03 Jul 2025 09:56:14 +0000
Files and hashes:         1: 3137302e38322e342e302f32322d3234203d3e20323636343333.roa (hash: b/Zm6CJPfwWN47+L36utGZhmWMOak2gazTH2hP371BA=)
                          2: 3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (hash: n8S2COXT7FsJis/4Ekfbx3z3cwFdOm+NqrDeR9NrRhU=)
                          3: E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl (hash: 1an9yx2bmK8sTfTSmL9zB8TGNNVgFwmHgdr3uDoqwaA=)
                          4: 3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (hash: UxFzZ8WfxRekPlsHdoXcpFmzdBByfdNKSoJ2Ksi0fUY=)
                          5: 3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (hash: 0+nFMdCLym7Rsl6HvblfjhZQUqbxHP0qWYbL35iKgYc=)
                          6: 34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (hash: FxKFICEQyRLWaja1zhuNJ5BlZPLEz3p9yAyXQ7ftl64=)
                          7: 323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (hash: GCJghJccnE7+LrxXikNqUo+7cp/majrAplA7/0bl/Sk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 09:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:8c:44:24:f2:26:3b:80:d8:09:f6:48:23:50:a6:70:9c:20:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  2 09:32:14 2025 GMT
            Not After : Jul  3 09:56:14 2025 GMT
        Subject: CN=2E8D9A5731F1BB6497D7B4BEC20A9CECF708A82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:b8:e3:f7:d3:46:ab:57:cb:d0:99:7c:d7:
                    ce:77:eb:db:af:be:f7:a9:96:8b:02:d3:84:80:99:
                    c2:12:e3:78:fd:1d:7e:b3:bd:24:ef:cd:48:c5:11:
                    0e:74:ef:17:99:f5:2c:77:4b:8b:d8:7a:d0:bd:09:
                    bb:24:cc:c7:56:e0:f4:fa:76:9a:e8:e1:d9:92:f9:
                    dd:9d:36:e8:ff:2f:74:77:4d:1d:0b:f3:4d:dc:b5:
                    b2:27:a5:a4:e6:a2:9c:46:24:7a:ae:5a:56:ca:67:
                    f0:1e:65:2b:65:41:0e:c4:91:93:f9:fb:f8:df:02:
                    26:1b:ac:8f:6b:ce:48:d6:c1:a2:fa:48:ad:56:21:
                    15:d3:8e:08:f1:1f:5d:10:d6:4f:ef:1c:27:e0:9e:
                    92:0f:a6:d8:d1:01:34:99:86:df:88:32:06:39:c1:
                    01:5b:f0:08:b7:f5:d9:98:a6:a4:d0:ef:52:6e:07:
                    3f:23:b3:bd:9e:56:dc:d1:29:cc:54:85:b5:94:23:
                    4a:c1:f6:e9:14:e8:c2:08:a6:b8:ad:13:33:94:17:
                    09:69:cf:c1:dc:14:a7:e9:fd:72:a7:ee:8d:f7:7f:
                    03:b2:c3:31:0a:41:33:01:20:6e:99:e5:01:30:66:
                    2b:b9:17:35:a3:ce:b3:b9:77:39:48:fc:05:9e:94:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:9A:57:31:F1:BB:64:97:D7:B4:BE:C2:0A:9C:EC:F7:08:A8:2B
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:67:de:83:67:25:84:af:c9:46:fc:85:29:73:60:84:77:
         92:25:d9:63:a7:15:8d:87:de:22:fc:51:ca:e6:50:2f:76:21:
         46:db:be:13:41:4e:b4:04:b3:0f:81:00:01:14:3d:3e:7e:b5:
         11:25:2d:5a:4a:b6:cb:c7:93:b6:fe:57:d1:4b:bb:44:96:75:
         ff:e4:2f:83:1a:a9:d0:42:d9:a4:6c:6e:27:cf:23:fc:c6:70:
         6b:d8:f0:6f:f3:ee:51:fe:cc:3e:7e:88:ae:b1:e0:24:dc:1a:
         ed:49:46:c9:25:23:ee:93:38:3e:6d:ba:40:a8:49:43:ef:22:
         a5:a9:51:9e:85:d6:00:32:df:75:e6:09:a3:57:53:78:3c:d1:
         f6:04:30:21:4a:d6:fb:b3:22:47:6e:26:3a:f3:39:9e:b6:22:
         5f:85:7e:ea:a7:f5:d9:ae:bc:b8:98:bf:57:9a:10:4d:d8:93:
         41:f9:97:0c:c8:91:5f:58:11:57:8e:5a:f2:48:0d:44:4a:7f:
         18:fa:ad:20:33:0c:76:a6:4e:0c:89:3d:d8:e4:67:12:19:24:
         ce:81:75:81:19:ec:db:11:f1:56:c2:35:e8:44:00:b5:b5:7b:
         a1:ee:6c:37:a1:1f:70:b1:d5:ba:67:53:fc:91:ff:e2:27:fe:
         95:98:d1:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCPKMRCTyJjuA2An2SCNQpnCcINgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNTA3MDIwOTMyMTRaFw0yNTA3MDMwOTU2MTRaMDMxMTAvBgNV
BAMTKDJFOEQ5QTU3MzFGMUJCNjQ5N0Q3QjRCRUMyMEE5Q0VDRjcwOEE4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOrjj99NGq1fL0Jl8185369uv
vveplosC04SAmcIS43j9HX6zvSTvzUjFEQ507xeZ9Sx3S4vYetC9CbskzMdW4PT6
dpro4dmS+d2dNuj/L3R3TR0L803ctbInpaTmopxGJHquWlbKZ/AeZStlQQ7EkZP5
+/jfAiYbrI9rzkjWwaL6SK1WIRXTjgjxH10Q1k/vHCfgnpIPptjRATSZht+IMgY5
wQFb8Ai39dmYpqTQ71JuBz8js72eVtzRKcxUhbWUI0rB9ukU6MIIpritEzOUFwlp
z8HcFKfp/XKn7o33fwOywzEKQTMBIG6Z5QEwZiu5FzWjzrO5dzlI/AWelAHHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULo2aVzHxu2SX17S+wgqc7PcIqCswHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5VWYvMC9F
NEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKs5n3oNnJYSvyUb8hSlzYIR3kiXZY6cVjYfeIvxRyuZQL3YhRtu+E0FOtASz
D4EAARQ9Pn61ESUtWkq2y8eTtv5X0Uu7RJZ1/+Qvgxqp0ELZpGxuJ88j/MZwa9jw
b/PuUf7MPn6IrrHgJNwa7UlGySUj7pM4Pm26QKhJQ+8ipalRnoXWADLfdeYJo1dT
eDzR9gQwIUrW+7MiR24mOvM5nrYiX4V+6qf12a68uJi/V5oQTdiTQfmXDMiRX1gR
V45a8kgNREp/GPqtIDMMdqZODIk92ORnEhkkzoF1gRns2xHxVsI16EQAtbV7oe5s
N6EfcLHVumdT/JH/4if+lZjR6A==
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:19:13 2025 by rpki-client