Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
File:                     23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft (raw, json)
Hash identifier:          ttRljou8hCCWpCo1espAyXqDD5arLj05oZF37PtXaUQ=
Subject key identifier:   27:7F:00:AF:76:A4:94:A4:FF:EB:21:74:F5:C1:CA:DD:A2:06:BD:07
Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6
Certificate issuer:       /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
Certificate serial:       1083FD848AF83C500938A47EFD7F2C2EDAF4AD54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
Manifest number:          E5
Signing time:             Sat 23 Aug 2025 05:34:30 +0000
Manifest this update:     Sat 23 Aug 2025 05:29:30 +0000
Manifest next update:     Sun 24 Aug 2025 09:11:30 +0000
Files and hashes:         1: 323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (hash: 9q+3WZCQelpJ82GHGMPZnl7Km+15Ep1MFsxC6afmR5c=)
                          2: 323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (hash: qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=)
                          3: 323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (hash: QXrOFT2cUsRU2r0pxCN+XM3aulT9UCyMbe+iqjUwCNQ=)
                          4: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl (hash: QC7nanA53zG+AGvP0b1W4BlB6jo5Rd6XIeATqvzICWc=)
                          5: 323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (hash: sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=)
                          6: 323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (hash: HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:83:fd:84:8a:f8:3c:50:09:38:a4:7e:fd:7f:2c:2e:da:f4:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6
        Validity
            Not Before: Aug 23 05:29:30 2025 GMT
            Not After : Aug 24 09:11:30 2025 GMT
        Subject: CN=277F00AF76A494A4FFEB2174F5C1CADDA206BD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:4c:b9:87:c6:28:04:7c:b1:17:27:28:fb:
                    ef:63:cd:f4:35:b8:77:5d:da:75:b7:36:7d:d4:58:
                    1c:2c:31:1e:fd:b4:63:2e:1e:5f:4b:81:b8:c4:a2:
                    4a:eb:ad:f5:9e:0b:9b:a6:2a:ed:0c:85:73:b0:79:
                    3b:03:fa:51:f5:c8:ab:ef:21:3e:11:46:03:e6:bc:
                    6e:98:c7:b4:18:73:d1:41:52:c8:37:23:71:f0:42:
                    3e:ff:b9:ec:f4:a0:57:1e:68:45:e1:a1:32:78:26:
                    ef:44:16:94:56:a2:8f:70:2a:8c:24:06:3c:ae:4e:
                    37:75:37:55:f0:d9:a1:f7:e1:c9:fe:d4:6a:1f:32:
                    4d:ac:50:96:a3:47:57:b5:81:9f:7d:58:db:9f:2a:
                    58:28:f4:92:b9:31:e7:bf:ed:51:9d:ff:13:bd:4b:
                    83:80:fe:e8:f3:07:26:0b:ae:d9:2b:41:63:42:d0:
                    08:63:44:60:36:2c:87:4c:ee:10:0b:68:8c:b3:77:
                    46:53:28:6f:8f:1e:36:2e:b1:8e:ff:ad:09:95:c3:
                    a6:28:c0:73:d9:a0:e2:5a:6c:db:1d:2a:f9:6e:4e:
                    e5:a5:a2:e8:f1:ed:c7:fe:a1:d2:2f:56:41:b1:66:
                    64:2e:d8:13:9f:e9:42:86:6b:94:1f:a4:e8:b8:b4:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:00:AF:76:A4:94:A4:FF:EB:21:74:F5:C1:CA:DD:A2:06:BD:07
            X509v3 Authority Key Identifier:
                keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4f:17:c5:a0:12:4b:de:9b:d6:02:ab:49:b7:50:f9:b8:61:
         27:d8:61:b3:99:6b:dd:e2:f0:9d:4c:e6:bc:e1:b0:da:44:54:
         01:bf:cd:a9:27:7a:77:7a:76:cf:47:a5:a4:7f:d9:6d:49:a9:
         21:ec:d9:cc:f7:2d:b9:57:ce:14:c9:b4:1e:c4:ad:c0:b3:96:
         74:8c:72:82:b8:0e:37:dc:ec:a0:29:09:8a:b7:1f:c0:e0:cd:
         f5:58:c2:3d:7d:e5:46:cd:9f:1e:4f:4a:24:9e:1c:b6:93:36:
         e6:2f:24:5d:d2:74:fd:9e:c3:29:7b:b2:be:5c:68:1f:7e:c1:
         9e:d2:94:cc:46:95:20:97:4f:c1:e8:59:ea:3a:c5:3d:65:1f:
         e4:6a:11:f6:1b:02:3d:94:ea:4b:b9:e4:35:17:62:0d:b2:dd:
         e1:26:93:7c:ff:4d:00:86:03:81:a4:08:fd:ac:7a:98:0a:80:
         a4:90:e5:9e:68:89:17:a3:33:ab:d9:9b:d4:ce:5f:75:7b:92:
         f1:67:12:92:05:8f:cb:7e:b7:9f:e5:c3:03:eb:71:e3:29:4e:
         40:06:eb:21:89:6f:0f:40:3e:a3:1a:6d:67:ea:d3:e6:9f:e5:
         3e:e3:72:41:9a:c9:f0:59:36:3e:00:f1:8f:e2:03:58:f6:60:
         30:5b:e8:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEIP9hIr4PFAJOKR+/X8sLtr0rVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNBMjJFNjdDOUZFOUI1ODkyNzVENUMxNDkwMkZGN0M1
MURBREJGNjAeFw0yNTA4MjMwNTI5MzBaFw0yNTA4MjQwOTExMzBaMDMxMTAvBgNV
BAMTKDI3N0YwMEFGNzZBNDk0QTRGRkVCMjE3NEY1QzFDQUREQTIwNkJEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBky5h8YoBHyxFyco++9jzfQ1
uHdd2nW3Nn3UWBwsMR79tGMuHl9LgbjEokrrrfWeC5umKu0MhXOweTsD+lH1yKvv
IT4RRgPmvG6Yx7QYc9FBUsg3I3HwQj7/uez0oFceaEXhoTJ4Ju9EFpRWoo9wKowk
BjyuTjd1N1Xw2aH34cn+1GofMk2sUJajR1e1gZ99WNufKlgo9JK5Mee/7VGd/xO9
S4OA/ujzByYLrtkrQWNC0AhjRGA2LIdM7hALaIyzd0ZTKG+PHjYusY7/rQmVw6Yo
wHPZoOJabNsdKvluTuWloujx7cf+odIvVkGxZmQu2BOf6UKGa5QfpOi4tLS5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJ38Ar3aklKT/6yF09cHK3aIGvQcwHwYDVR0j
BBgwFoAUI6IuZ8n+m1iSddXBSQL/fFHa2/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC8yM0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTIyRTY3QzlGRTlCNTg5
Mjc1RDVDMTQ5MDJGRjdDNTFEQURCRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdWWGovMC8y
M0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOE8XxaASS96b1gKrSbdQ+bhhJ9hhs5lr3eLwnUzmvOGw2kRUAb/NqSd6d3p2
z0elpH/ZbUmpIezZzPctuVfOFMm0HsStwLOWdIxygrgON9zsoCkJircfwODN9VjC
PX3lRs2fHk9KJJ4ctpM25i8kXdJ0/Z7DKXuyvlxoH37BntKUzEaVIJdPwehZ6jrF
PWUf5GoR9hsCPZTqS7nkNRdiDbLd4SaTfP9NAIYDgaQI/ax6mAqApJDlnmiJF6Mz
q9mb1M5fdXuS8WcSkgWPy363n+XDA+tx4ylOQAbrIYlvD0A+oxptZ+rT5p/lPuNy
QZrJ8Fk2PgDxj+IDWPZgMFvoUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:36 2025 by rpki-client