Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
File:                     0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json)
Hash identifier:          ylQ/YLoN1lrfWeD9KhlnT+QyAYf3K8i3p86NoBVDzRI=
Subject key identifier:   19:48:88:99:56:2B:AB:97:DB:A3:C9:E0:F8:07:E7:61:4B:6E:55:B9
Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08
Certificate issuer:       /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
Certificate serial:       1FA45A8A91E026908A05DCC79AD887DE220B7E00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
Manifest number:          026F
Signing time:             Sun 13 Jul 2025 02:20:47 +0000
Manifest this update:     Sun 13 Jul 2025 02:15:47 +0000
Manifest next update:     Mon 14 Jul 2025 05:56:47 +0000
Files and hashes:         1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=)
                          2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: OpcuPYD5l2qgucAj6Zdqes12ntcH7cwi3kZngtr6Eeg=)
                          3: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl
                          rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Jul 2025 05:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a4:5a:8a:91:e0:26:90:8a:05:dc:c7:9a:d8:87:de:22:0b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
        Validity
            Not Before: Jul 13 02:15:47 2025 GMT
            Not After : Jul 14 05:56:47 2025 GMT
        Subject: CN=19488899562BAB97DBA3C9E0F807E7614B6E55B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:b3:cf:eb:1f:56:3e:ad:1e:89:24:c0:63:
                    c1:a5:29:f2:bc:ea:c2:9d:5c:70:af:17:0a:5c:93:
                    05:e5:c6:b8:d4:a5:0d:49:0c:77:2c:18:e9:27:b7:
                    1a:a4:fe:62:ba:a6:11:f6:7e:c0:2d:1c:80:77:78:
                    9d:fa:84:86:d2:26:70:ea:f9:2b:54:ea:32:24:2a:
                    d7:39:9b:8e:3b:71:14:b9:c5:dd:b3:da:2e:89:0f:
                    71:47:98:94:65:d0:7f:fe:4b:f4:b8:a7:99:53:7c:
                    11:08:8d:13:0a:bb:e3:22:61:42:f2:46:7f:a0:27:
                    43:51:75:20:0e:ef:52:d8:ee:32:53:fb:c4:a8:d4:
                    46:00:ad:63:b0:15:1b:c2:d6:2f:7d:1c:c2:9c:25:
                    0d:5a:90:c4:2a:c4:90:ad:62:da:04:23:9f:ae:3a:
                    02:8a:26:4c:85:28:31:7e:fc:37:06:b1:10:da:7e:
                    21:f1:27:9b:31:72:26:3a:1c:fd:f1:35:20:42:23:
                    e8:db:ee:ad:75:1d:f1:87:b6:23:6c:71:5b:3a:38:
                    6c:b3:1f:a6:00:0c:b5:49:fe:e0:32:1e:38:a2:16:
                    9a:bc:e0:5b:3e:be:e7:2c:6d:83:49:bd:18:cd:d2:
                    9c:ff:cf:77:ae:48:bb:c9:9e:2d:50:b2:d6:5e:94:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:88:99:56:2B:AB:97:DB:A3:C9:E0:F8:07:E7:61:4B:6E:55:B9
            X509v3 Authority Key Identifier:
                keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:d7:7c:cf:16:d2:50:81:e3:ce:9b:58:71:ac:34:3b:90:
         f6:8d:04:a1:a1:0f:ed:a4:0a:91:57:e6:9a:b0:c2:1f:10:22:
         b6:5b:1c:24:38:4e:c7:19:0b:74:1a:fe:01:95:4e:42:b9:32:
         66:2c:27:74:13:bc:ab:32:8c:07:cd:93:5b:2f:60:be:d0:32:
         81:aa:b9:a3:b0:90:36:2c:9a:28:c3:53:81:fa:f4:93:ab:a4:
         c1:88:96:bd:3e:a9:04:22:00:3d:3e:ba:27:57:9d:a6:fd:61:
         4d:3a:80:8a:91:fd:d1:52:f6:79:22:6e:f8:7c:74:9c:74:6f:
         75:21:c6:0e:fc:e7:a5:c5:83:a5:24:35:0f:56:0d:13:94:43:
         0a:38:03:45:37:d8:e1:d6:3c:09:8d:4c:b5:80:7e:4e:9e:7d:
         73:04:3d:96:a9:d3:4f:8b:d5:6c:69:98:a9:5d:77:20:49:45:
         5d:67:ee:f0:ff:14:3f:49:cc:4d:00:79:ed:98:4a:47:e1:4e:
         9f:cc:9e:46:59:3d:7c:fe:dc:aa:c6:1e:7d:e2:94:b3:3b:f6:
         ea:12:dd:10:aa:59:01:3c:40:3e:f3:0f:5e:2f:7a:4b:5f:49:
         25:6e:a8:8d:c1:e1:19:f5:ba:7b:a1:89:85:00:72:29:41:0c:
         b9:f6:3f:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH6RaipHgJpCKBdzHmtiH3iILfgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx
MzUwREUwODAeFw0yNTA3MTMwMjE1NDdaFw0yNTA3MTQwNTU2NDdaMDMxMTAvBgNV
BAMTKDE5NDg4ODk5NTYyQkFCOTdEQkEzQzlFMEY4MDdFNzYxNEI2RTU1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSurPP6x9WPq0eiSTAY8GlKfK8
6sKdXHCvFwpckwXlxrjUpQ1JDHcsGOkntxqk/mK6phH2fsAtHIB3eJ36hIbSJnDq
+StU6jIkKtc5m447cRS5xd2z2i6JD3FHmJRl0H/+S/S4p5lTfBEIjRMKu+MiYULy
Rn+gJ0NRdSAO71LY7jJT+8So1EYArWOwFRvC1i99HMKcJQ1akMQqxJCtYtoEI5+u
OgKKJkyFKDF+/DcGsRDafiHxJ5sxciY6HP3xNSBCI+jb7q11HfGHtiNscVs6OGyz
H6YADLVJ/uAyHjiiFpq84Fs+vucsbYNJvRjN0pz/z3euSLvJni1QstZelCy5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGUiImVYrq5fbo8ng+AfnYUtuVbkwHwYDVR0j
BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6
UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE
MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w
RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQ7XfM8W0lCB486bWHGsNDuQ9o0EoaEP7aQKkVfmmrDCHxAitlscJDhOxxkL
dBr+AZVOQrkyZiwndBO8qzKMB82TWy9gvtAygaq5o7CQNiyaKMNTgfr0k6ukwYiW
vT6pBCIAPT66J1edpv1hTTqAipH90VL2eSJu+Hx0nHRvdSHGDvznpcWDpSQ1D1YN
E5RDCjgDRTfY4dY8CY1MtYB+Tp59cwQ9lqnTT4vVbGmYqV13IElFXWfu8P8UP0nM
TQB57ZhKR+FOn8yeRlk9fP7cqsYefeKUszv26hLdEKpZATxAPvMPXi96S19JJW6o
jcHhGfW6e6GJhQByKUEMufY/gA==
-----END CERTIFICATE-----
Generated at Sun Jul 13 09:53:37 2025 by rpki-client