Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
File:                     06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft (raw, json)
Hash identifier:          A4NNcAbaKKf4GEzy20tyR/QA8ClDAOUHPj15hnNlY5k=
Subject key identifier:   57:44:9F:28:99:4D:EA:E0:E4:A8:AC:49:3C:12:17:B6:23:48:E3:21
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       240E1363CD4C746B4A48E80A638BDAB337B0E60B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
Manifest number:          2A
Signing time:             Sun 13 Jul 2025 06:40:19 +0000
Manifest this update:     Sun 13 Jul 2025 06:35:19 +0000
Manifest next update:     Mon 14 Jul 2025 08:50:19 +0000
Files and hashes:         1: 3133312e3130302e37342e302f32332d3233203d3e203631373536.roa (hash: 6FNuWOq1eHI5q3MgOqYyeE16Vv/YaJkuwv3MrFDS2IU=)
                          2: 323830343a316265383a3a2f33322d3332203d3e203631373536.roa (hash: gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=)
                          3: 323830343a316265383a3a2f33332d3333203d3e203631373536.roa (hash: l78EKC9kkJuCz96yuwMWkw3iPI6l1+LN8zK/5aMvMYQ=)
                          4: 3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (hash: VVZyjmnPEhB4/UoqE4uR1WwlyjcIZU8B+HO+mEVFe+0=)
                          5: 323830343a316265383a383030303a3a2f33332d3333203d3e203631373536.roa (hash: Te1wIaLs970GrPtdJHvPfelk9mSSTu3aJper1pE/gLI=)
                          6: 06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl (hash: wBJsPiQLJpTJZ3BC4xXKP+pofc7zq+gcaV7YLn1u6n0=)
                          7: 3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (hash: Kq1NYgqt7BBJXm6gv+qAVQNNtlsiDlad2EARZ4g408M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 08:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0e:13:63:cd:4c:74:6b:4a:48:e8:0a:63:8b:da:b3:37:b0:e6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Jul 13 06:35:19 2025 GMT
            Not After : Jul 14 08:50:19 2025 GMT
        Subject: CN=57449F28994DEAE0E4A8AC493C1217B62348E321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:3a:9c:c4:39:18:42:56:f4:2b:4c:a5:ac:
                    1b:ab:35:a8:73:8f:ea:0b:f6:63:2c:27:e0:3b:e3:
                    fb:cd:e4:a3:fa:31:5b:1a:99:61:f9:88:d6:0d:63:
                    8c:5f:7e:58:ba:1f:e0:a9:56:f6:60:87:5a:97:5a:
                    1c:9b:05:a7:63:07:ed:7f:f8:82:9f:5b:96:6c:a7:
                    3e:a0:99:6a:82:71:ce:d4:e6:99:fb:df:b8:91:eb:
                    a3:33:82:29:e4:f5:e9:e3:b7:82:e9:9d:18:ec:86:
                    e7:0b:c4:af:d0:25:3a:dd:6d:72:ae:ff:31:78:82:
                    f8:a7:46:62:0b:f9:9c:74:59:61:e0:e7:45:e0:3b:
                    4f:37:b2:40:93:94:b5:72:d6:e1:79:87:e1:02:d0:
                    a7:a5:ef:c3:ba:d4:36:6b:90:5d:fb:4c:a0:05:a1:
                    bd:b2:2d:73:c0:b1:70:c5:ae:f4:0a:51:18:a0:83:
                    52:2f:a5:70:fb:b7:e7:b0:56:4c:54:4b:ad:ec:1f:
                    4f:d9:74:5a:d3:4d:4e:c0:e6:13:cc:27:1d:f1:ea:
                    fd:88:c0:4e:30:ef:77:a4:8b:64:cf:dd:a3:97:0c:
                    f1:03:fc:27:63:fa:47:dc:65:b1:64:c0:78:3a:90:
                    47:ca:44:b7:d8:31:3d:6b:ec:89:d4:db:8e:cf:2f:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:9F:28:99:4D:EA:E0:E4:A8:AC:49:3C:12:17:B6:23:48:E3:21
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:85:c1:5a:f8:e0:db:d0:ef:aa:ce:ff:9b:5e:97:55:f0:
         ef:93:1b:08:2b:82:80:ba:6a:49:cf:8f:88:82:78:11:b3:54:
         03:db:8e:4a:4e:3d:4d:9e:de:be:60:fd:c4:5b:e1:5a:02:ed:
         7a:eb:54:85:52:f5:e1:db:e8:80:98:3b:bd:9e:b9:fd:b6:a1:
         81:c9:ec:b5:02:71:9a:c1:83:26:fb:3a:43:71:78:5c:35:b4:
         95:ec:43:04:b0:fe:80:be:21:29:e3:48:c5:9a:19:62:12:a5:
         62:b6:de:70:17:36:a6:a5:68:7e:31:24:49:07:64:5f:52:ff:
         65:ea:35:a5:bd:03:b6:98:aa:09:1b:de:07:20:b9:11:4d:cd:
         64:75:ec:cf:3e:6f:b9:4a:3f:0e:7b:d9:60:c1:2c:08:aa:3e:
         9d:b7:0a:3f:70:29:3b:9b:74:f9:ea:71:41:c4:2f:bd:77:1f:
         88:12:f3:4a:da:0d:8b:d7:14:bb:9c:42:a1:03:cc:94:46:0e:
         19:26:b2:de:60:02:f0:7f:9c:f4:fb:e0:55:cd:3b:bd:b5:62:
         9c:29:60:54:7a:86:2d:17:fb:23:2b:3d:88:a3:a8:65:4f:d3:
         57:c7:bd:1a:09:93:1a:d1:d9:7f:f8:d6:00:19:1a:a6:ac:d8:
         e0:22:b4:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJA4TY81MdGtKSOgKY4vaszew5gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDQjg4NDlENkYzMzQzMUFGMjI5RDRDMDE0RTFFOERF
MDY4RDlGOTAeFw0yNTA3MTMwNjM1MTlaFw0yNTA3MTQwODUwMTlaMDMxMTAvBgNV
BAMTKDU3NDQ5RjI4OTk0REVBRTBFNEE4QUM0OTNDMTIxN0I2MjM0OEUzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45zqcxDkYQlb0K0ylrBurNahz
j+oL9mMsJ+A74/vN5KP6MVsamWH5iNYNY4xffli6H+CpVvZgh1qXWhybBadjB+1/
+IKfW5Zspz6gmWqCcc7U5pn737iR66Mzgink9enjt4LpnRjshucLxK/QJTrdbXKu
/zF4gvinRmIL+Zx0WWHg50XgO083skCTlLVy1uF5h+EC0Kel78O61DZrkF37TKAF
ob2yLXPAsXDFrvQKURigg1IvpXD7t+ewVkxUS63sH0/ZdFrTTU7A5hPMJx3x6v2I
wE4w73eki2TP3aOXDPED/Cdj+kfcZbFkwHg6kEfKRLfYMT1r7InU247PLzTNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUV0SfKJlN6uDkqKxJPBIXtiNI4yEwHwYDVR0j
BBgwFoAUBsuISdbzNDGvIp1MAU4ejeBo2fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNkNCODg0OUQ2RjMzNDMxQUYyMjlENEMwMTRFMUU4REUwNjhEOUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2Q0I4ODQ5RDZGMzM0MzFB
RjIyOUQ0QzAxNEUxRThERTA2OEQ5RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w
NkNCODg0OUQ2RjMzNDMxQUYyMjlENEMwMTRFMUU4REUwNjhEOUY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9GFwVr44NvQ76rO/5tel1Xw75MbCCuCgLpqSc+PiIJ4EbNUA9uOSk49TZ7e
vmD9xFvhWgLteutUhVL14dvogJg7vZ65/bahgcnstQJxmsGDJvs6Q3F4XDW0lexD
BLD+gL4hKeNIxZoZYhKlYrbecBc2pqVofjEkSQdkX1L/Zeo1pb0DtpiqCRveByC5
EU3NZHXszz5vuUo/DnvZYMEsCKo+nbcKP3ApO5t0+epxQcQvvXcfiBLzStoNi9cU
u5xCoQPMlEYOGSay3mAC8H+c9PvgVc07vbVinClgVHqGLRf7Iys9iKOoZU/TV8e9
GgmTGtHZf/jWABkapqzY4CK0Mg==
-----END CERTIFICATE-----
Generated at Sun Jul 13 11:04:44 2025 by rpki-client