Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
File:                     D71B242F0E743C443E8FBA587735676FC26F8546.mft (raw, json)
Hash identifier:          3W4xKTRDl5Adj+ri1AAYxk0AhnnhegOAINKZnKqyQpM=
Subject key identifier:   C2:F0:91:C5:0E:32:3A:3A:00:AD:EE:EF:8C:38:D4:E9:49:D2:69:7A
Authority key identifier: D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46
Certificate issuer:       /CN=D71B242F0E743C443E8FBA587735676FC26F8546
Certificate serial:       0FA192819A39775033D247E87EED00E33F70D6D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71B242F0E743C443E8FBA587735676FC26F8546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
Manifest number:          011D
Signing time:             Tue 01 Jul 2025 16:46:34 +0000
Manifest this update:     Tue 01 Jul 2025 16:41:34 +0000
Manifest next update:     Wed 02 Jul 2025 17:40:34 +0000
Files and hashes:         1: 3230302e38312e35322e302f32322d3234203d3e20323730343634.roa (hash: VTDrl89eGFfFm5O/WmKWIm1TBledI3SNuwSD/Dzm83Q=)
                          2: 3230302e38312e35322e302f32332d3233203d3e20323730343634.roa (hash: 0UadAg1KLJ8RXWQ9Hyy/nF9EXBxyNYSy7fI5s0dn3HI=)
                          3: 323830343a366336303a3a2f33342d3334203d3e20323730343634.roa (hash: ZzpTlIeZFf96y2yYOzungiF8KBbrXG1k3IjBXdVPZ5Q=)
                          4: 323830343a366336303a3a2f33322d3332203d3e20323730343634.roa (hash: MWxet4+DZrFHX8e+Va79qD7uSkOP0wLPlX5dpT024Vg=)
                          5: D71B242F0E743C443E8FBA587735676FC26F8546.crl (hash: RS2zrwJr4P2s+0tKekTyWeHwaweLr82NSjPX11Aw+qE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.crl
                          rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71B242F0E743C443E8FBA587735676FC26F8546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 17:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a1:92:81:9a:39:77:50:33:d2:47:e8:7e:ed:00:e3:3f:70:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71B242F0E743C443E8FBA587735676FC26F8546
        Validity
            Not Before: Jul  1 16:41:34 2025 GMT
            Not After : Jul  2 17:40:34 2025 GMT
        Subject: CN=C2F091C50E323A3A00ADEEEF8C38D4E949D2697A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:cd:77:2c:76:96:a8:21:5c:6b:bd:41:94:
                    2f:9b:09:8a:11:58:d5:90:e5:41:69:5d:f2:f2:b7:
                    53:01:65:27:07:69:f9:f6:af:ce:bb:92:97:e2:ec:
                    64:cb:db:5d:84:ed:b2:09:df:32:35:e7:23:dd:cf:
                    c2:f7:0e:b7:42:02:ff:b1:81:0c:87:92:3f:f2:f8:
                    a0:0c:b0:71:0b:fc:59:99:d6:fc:8e:ce:f9:e4:e3:
                    9f:25:35:bf:3b:6e:37:2b:1f:c5:ea:7c:90:62:4b:
                    97:d7:6f:7d:a4:b0:8f:e5:7b:9f:22:8e:66:d3:22:
                    bb:90:7d:e7:1e:a9:b5:18:da:5a:72:3e:18:e8:88:
                    90:1f:54:9c:ab:a5:b6:84:cc:ef:70:90:e8:2d:2a:
                    2a:5e:99:a1:0d:30:b7:34:83:e7:d3:9e:4d:b9:e5:
                    d6:49:0a:31:30:7d:8e:fe:b9:34:0c:23:f3:41:cc:
                    82:fc:1e:f2:5c:ad:e1:fc:1b:f0:1b:02:61:1b:24:
                    55:4a:65:15:4d:c5:a7:b5:b2:c6:dd:26:66:ad:9a:
                    34:b1:d3:ee:b4:99:69:0b:a7:b7:9d:17:de:e1:dd:
                    60:74:fe:6a:d3:fe:99:42:e1:51:f9:25:d9:98:4a:
                    dc:ab:ad:25:b5:8d:98:bf:eb:0f:0d:c2:eb:a2:cd:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:91:C5:0E:32:3A:3A:00:AD:EE:EF:8C:38:D4:E9:49:D2:69:7A
            X509v3 Authority Key Identifier:
                keyid:D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71B242F0E743C443E8FBA587735676FC26F8546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:f0:b8:41:a7:4b:c6:c5:fa:59:3c:4a:6c:3d:dc:bb:fb:
         df:50:ef:fa:2d:01:0e:7e:fe:f5:62:a2:c2:57:99:96:64:71:
         3d:d4:9e:53:cd:69:ad:c6:a5:20:2d:0c:fa:53:a7:02:9c:dc:
         6c:ab:4e:86:51:2c:9b:07:44:f9:9f:c1:58:d9:18:f9:57:6f:
         d1:bd:8e:b3:46:2f:71:eb:cd:d3:c1:ad:d6:5a:11:96:e7:0e:
         51:6c:16:35:c3:e8:10:48:de:32:67:0a:6b:54:bf:8b:07:73:
         e4:26:9e:b7:d1:dd:22:ff:72:3e:f6:c5:29:be:69:40:2a:f6:
         97:ee:ea:c4:7b:09:48:e2:9e:e9:ee:32:60:13:73:65:7d:3a:
         00:68:4f:50:10:c6:1f:9c:51:3e:f1:e9:5c:97:b1:09:4f:3c:
         19:2e:93:ec:a6:17:86:bd:88:48:81:8b:f4:84:ff:d7:97:af:
         43:4a:0a:c9:0f:c9:64:c2:33:30:e9:43:12:2f:d3:b2:cf:17:
         0c:d0:57:4a:5f:d7:f0:6d:26:20:91:b5:0d:4d:d4:ef:7d:05:
         c7:2a:5c:0a:d0:e4:d6:b4:c5:01:c9:a5:63:03:f6:87:68:8a:
         e2:8a:ad:8f:74:bb:af:61:ec:27:32:39:35:cc:42:41:57:ed:
         af:21:e7:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD6GSgZo5d1Az0kfofu0A4z9w1tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcxQjI0MkYwRTc0M0M0NDNFOEZCQTU4NzczNTY3NkZD
MjZGODU0NjAeFw0yNTA3MDExNjQxMzRaFw0yNTA3MDIxNzQwMzRaMDMxMTAvBgNV
BAMTKEMyRjA5MUM1MEUzMjNBM0EwMEFERUVFRjhDMzhENEU5NDlEMjY5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ls13LHaWqCFca71BlC+bCYoR
WNWQ5UFpXfLyt1MBZScHafn2r867kpfi7GTL212E7bIJ3zI15yPdz8L3DrdCAv+x
gQyHkj/y+KAMsHEL/FmZ1vyOzvnk458lNb87bjcrH8XqfJBiS5fXb32ksI/le58i
jmbTIruQfeceqbUY2lpyPhjoiJAfVJyrpbaEzO9wkOgtKipemaENMLc0g+fTnk25
5dZJCjEwfY7+uTQMI/NBzIL8HvJcreH8G/AbAmEbJFVKZRVNxae1ssbdJmatmjSx
0+60mWkLp7edF97h3WB0/mrT/plC4VH5JdmYStyrrSW1jZi/6w8NwuuizcQZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwvCRxQ4yOjoAre7vjDjU6UnSaXowHwYDVR0j
BBgwFoAU1xskLw50PEQ+j7pYdzVnb8JvhUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lhNThFTHhUbVJVREdIR0g1VEhFN0IyZGh2QTRIZ3l6b0JiTlpuRlE1
MjIvMC9ENzFCMjQyRjBFNzQzQzQ0M0U4RkJBNTg3NzM1Njc2RkMyNkY4NTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MUIyNDJGMEU3NDNDNDQz
RThGQkE1ODc3MzU2NzZGQzI2Rjg1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3lhNThFTHhUbVJVREdIR0g1VEhFN0IyZGh2QTRIZ3l6b0JiTlpuRlE1MjIvMC9E
NzFCMjQyRjBFNzQzQzQ0M0U4RkJBNTg3NzM1Njc2RkMyNkY4NTQ2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACVzwuEGnS8bF+lk8Smw93Lv731Dv+i0BDn7+9WKiwleZlmRxPdSeU81prcal
IC0M+lOnApzcbKtOhlEsmwdE+Z/BWNkY+Vdv0b2Os0YvcevN08Gt1loRlucOUWwW
NcPoEEjeMmcKa1S/iwdz5Caet9HdIv9yPvbFKb5pQCr2l+7qxHsJSOKe6e4yYBNz
ZX06AGhPUBDGH5xRPvHpXJexCU88GS6T7KYXhr2ISIGL9IT/15evQ0oKyQ/JZMIz
MOlDEi/Tss8XDNBXSl/X8G0mIJG1DU3U730FxypcCtDk1rTFAcmlYwP2h2iK4oqt
j3S7r2HsJzI5NcxCQVftryHnlg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:17 2025 by rpki-client