Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
File:                     9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft (raw, json)
Hash identifier:          CtUbTPDumsw7DZpJr8kY6+MwzyoPwd91vGNbYtNNjVc=
Subject key identifier:   8F:70:3D:2A:7A:52:21:F6:EA:A7:8A:07:8C:21:5F:C6:1D:C3:C1:D6
Authority key identifier: 9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Certificate issuer:       /CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
Certificate serial:       42E3F2625FD04AAAA0B33C9D9737434349B88B97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
Manifest number:          01CE
Signing time:             Tue 13 May 2025 01:28:22 +0000
Manifest this update:     Tue 13 May 2025 01:23:22 +0000
Manifest next update:     Wed 14 May 2025 02:33:22 +0000
Files and hashes:         1: 9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl (hash: qpFi2GVlk6xugRmdGnYMo0P22Gw8X1dYle1BUELoSbU=)
                          2: 323830343a6330343a3a2f33322d313238203d3e203532363630.roa (hash: Z6/YMyE4NyHg0Yx+ngBURUeszLbB3PmPoMfLyiuHrgM=)
                          3: 3137372e36362e3234382e302f32312d3332203d3e203532363630.roa (hash: 30QSJthbib9KyeyfZtnKK5KttJf+Kera9kSwuAgUjyo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e3:f2:62:5f:d0:4a:aa:a0:b3:3c:9d:97:37:43:43:49:b8:8b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Validity
            Not Before: May 13 01:23:22 2025 GMT
            Not After : May 14 02:33:22 2025 GMT
        Subject: CN=8F703D2A7A5221F6EAA78A078C215FC61DC3C1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:60:e6:bd:b2:70:5d:18:7d:b0:81:46:5f:
                    33:eb:f6:fe:fe:2a:8e:01:5c:45:bf:0b:54:7c:c3:
                    b7:4c:52:f4:12:69:ed:0f:c2:c8:dd:a2:ce:cd:40:
                    22:2b:41:eb:00:46:70:8c:1d:ed:49:15:e3:82:b2:
                    5c:b5:86:70:12:2c:10:64:9f:63:ad:20:9c:9c:4b:
                    e2:cc:44:b5:38:7b:cb:5f:10:b7:b0:96:46:3f:bb:
                    9b:46:04:82:09:95:21:a9:6d:53:49:20:a9:13:fb:
                    ae:5c:0b:5e:53:ff:20:48:35:64:e7:7b:c8:cb:66:
                    75:97:dd:2f:1e:b7:cf:08:e8:d7:19:62:c8:70:c1:
                    51:5b:6d:68:72:24:7c:0a:a8:8e:df:d5:33:40:64:
                    ff:f5:f0:a6:6e:2d:31:ce:f5:16:1c:a9:5d:a1:b1:
                    fa:db:a3:a2:95:b3:e8:ba:18:c6:1c:77:54:f8:bd:
                    87:2c:ce:32:9f:f6:b3:25:47:4d:82:cc:5e:60:d3:
                    f7:44:89:c8:f6:cb:c7:4f:67:d7:9b:ec:79:ad:b9:
                    02:03:15:f1:77:f2:be:ef:56:f3:cc:67:3b:b7:3a:
                    20:15:bc:d7:db:6c:a5:96:74:df:a6:0b:d0:91:2d:
                    9a:cf:8f:18:be:4b:99:93:10:f8:71:33:c3:d8:6c:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:70:3D:2A:7A:52:21:F6:EA:A7:8A:07:8C:21:5F:C6:1D:C3:C1:D6
            X509v3 Authority Key Identifier:
                keyid:9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:89:cf:8c:4c:0e:16:5c:2a:03:db:47:eb:eb:57:fb:15:
         48:1a:a2:a5:cb:06:ec:ba:8a:98:1a:c5:8d:21:3d:e2:15:8e:
         ab:2b:28:a1:bc:1d:a9:30:7e:dd:a0:8e:1e:7f:d5:53:9a:42:
         fa:38:b9:21:bf:88:46:fe:00:dd:b5:43:aa:f4:50:cc:32:fe:
         74:ee:38:6b:1f:0c:da:02:4b:2a:39:b2:b2:07:0a:a5:88:0a:
         d4:f8:c3:5b:7a:b2:c2:58:14:fb:9a:b8:c3:a1:06:99:f8:b9:
         56:b5:93:cd:9c:44:e5:5e:04:5b:42:48:ca:23:5a:30:17:c7:
         01:af:25:9b:12:61:9a:90:74:a0:b8:ab:b6:6e:20:c2:84:36:
         b0:3e:cf:e7:18:33:b8:c5:51:51:a4:99:10:6f:a1:b2:d2:53:
         f3:22:4a:54:70:42:ca:2a:a5:a6:a4:a3:eb:42:5e:10:14:27:
         48:9c:a7:19:04:b4:c7:62:6c:ce:5c:83:54:a0:14:bb:2f:b4:
         13:3c:36:5c:14:a3:ce:79:5a:3d:96:d6:23:11:fd:1f:83:17:
         86:e8:bc:b5:e5:3a:67:f4:e9:73:0d:06:8f:92:4d:12:ca:05:
         27:fe:6d:c4:21:08:00:76:f4:3c:51:36:4d:76:7d:44:5d:8f:
         11:fa:3b:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQuPyYl/QSqqgszydlzdDQ0m4i5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEzRTQ1NEI2QkMxRERDMDQyMkE5RTRERjRENTFBNTg3
RTE3MzQxRDAeFw0yNTA1MTMwMTIzMjJaFw0yNTA1MTQwMjMzMjJaMDMxMTAvBgNV
BAMTKDhGNzAzRDJBN0E1MjIxRjZFQUE3OEEwNzhDMjE1RkM2MURDM0MxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9WDmvbJwXRh9sIFGXzPr9v7+
Ko4BXEW/C1R8w7dMUvQSae0Pwsjdos7NQCIrQesARnCMHe1JFeOCsly1hnASLBBk
n2OtIJycS+LMRLU4e8tfELewlkY/u5tGBIIJlSGpbVNJIKkT+65cC15T/yBINWTn
e8jLZnWX3S8et88I6NcZYshwwVFbbWhyJHwKqI7f1TNAZP/18KZuLTHO9RYcqV2h
sfrbo6KVs+i6GMYcd1T4vYcszjKf9rMlR02CzF5g0/dEicj2y8dPZ9eb7HmtuQID
FfF38r7vVvPMZzu3OiAVvNfbbKWWdN+mC9CRLZrPjxi+S5mTEPhxM8PYbLXfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj3A9KnpSIfbqp4oHjCFfxh3DwdYwHwYDVR0j
BBgwFoAUmj5FS2vB3cBCKp5N9NUaWH4XNB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR
MXEvMS85QTNFNDU0QjZCQzFEREMwNDIyQTlFNERGNEQ1MUE1ODdFMTczNDFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBM0U0NTRCNkJDMUREQzA0
MjJBOUU0REY0RDUxQTU4N0UxNzM0MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNRMXEvMS85
QTNFNDU0QjZCQzFEREMwNDIyQTlFNERGNEQ1MUE1ODdFMTczNDFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmviJz4xMDhZcKgPbR+vrV/sVSBqipcsG7LqKmBrFjSE94hWOqysoobwdqTB+
3aCOHn/VU5pC+ji5Ib+IRv4A3bVDqvRQzDL+dO44ax8M2gJLKjmysgcKpYgK1PjD
W3qywlgU+5q4w6EGmfi5VrWTzZxE5V4EW0JIyiNaMBfHAa8lmxJhmpB0oLirtm4g
woQ2sD7P5xgzuMVRUaSZEG+hstJT8yJKVHBCyiqlpqSj60JeEBQnSJynGQS0x2Js
zlyDVKAUuy+0Ezw2XBSjznlaPZbWIxH9H4MXhui8teU6Z/Tpcw0Gj5JNEsoFJ/5t
xCEIAHb0PFE2TXZ9RF2PEfo7+A==
-----END CERTIFICATE-----
Generated at Tue May 13 08:22:50 2025 by rpki-client