Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
File:                     A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft (raw, json)
Hash identifier:          vFSa2KVsse4pCb0ff+mJ+JloKyUTkeANMGkt0Z7bHgg=
Subject key identifier:   21:83:E8:56:3D:28:60:71:55:A5:29:D2:50:EA:3A:1D:4F:D9:A6:03
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       3AE4D6E9AF667FD16ADD396B6F9835FFBB863C12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
Manifest number:          021E
Signing time:             Tue 13 May 2025 09:07:39 +0000
Manifest this update:     Tue 13 May 2025 09:02:39 +0000
Manifest next update:     Wed 14 May 2025 12:22:39 +0000
Files and hashes:         1: 323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (hash: oY3wmOqpzLkG3r9DljD4e0hIEN7701lByHA3sXDkwxg=)
                          2: 3137372e33392e3135322e302f32322d3234203d3e20323632343237.roa (hash: +SH1VjqSWqQxliRg5cMuFYBmBkMqMfL70N/ahgL+izI=)
                          3: 3134332e3230322e32382e302f32322d3234203d3e20323632343237.roa (hash: IQE76VFPTRkQ/UdZD48z+3nsMaTFmcE5R70fO7TD5mE=)
                          4: A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl (hash: i9b/3U2Q+qvm/jvejKNGeUo+7kl+vE8qVtvtt9aBy0o=)
                          5: 3137372e33392e3134342e302f32312d3234203d3e20323632343237.roa (hash: dSCFVMVNhPe76O9ZijBn3q1Dl/+IgNhGLZsNKGAXTtc=)
                          6: 3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (hash: M3Xan8PTutfFCczexcLDuNODOHh3FxZyL26aFlmbsmA=)
                          7: 3137372e37312e32342e302f32312d3234203d3e20323632343237.roa (hash: E0DWZ6LwoRukzw3jEaMscyj9eo3FSqUSxcioZRCShlw=)
                          8: 3136382e3232382e3137322e302f32322d3234203d3e20323632343237.roa (hash: IK9Ns+zUondYd3DNran9bjy0gSWoWLfa4gCEE2FDxoY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e4:d6:e9:af:66:7f:d1:6a:dd:39:6b:6f:98:35:ff:bb:86:3c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: May 13 09:02:39 2025 GMT
            Not After : May 14 12:22:39 2025 GMT
        Subject: CN=2183E8563D28607155A529D250EA3A1D4FD9A603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:ad:dd:11:04:2e:9d:c4:b8:fc:75:49:a5:
                    6b:06:8d:15:a4:7f:00:6d:69:1a:c3:bf:6f:dd:93:
                    51:b8:2a:22:16:60:58:e1:af:17:41:cb:78:54:a5:
                    16:84:ee:38:64:a4:85:73:b5:92:37:cf:92:1d:13:
                    12:cd:6b:19:74:e8:89:eb:8d:4f:15:55:80:e5:84:
                    d9:53:d2:cf:92:a5:8d:3e:aa:cc:09:fb:f1:18:72:
                    13:5f:1c:6f:82:e2:ab:07:ed:0a:d7:18:d1:31:9f:
                    2b:6c:33:35:d3:00:c8:1b:e8:d0:bd:61:eb:2a:b7:
                    1e:13:5b:6a:85:67:03:60:9d:a3:c6:8a:89:db:8f:
                    86:80:c3:6d:40:e7:f1:ad:c4:c2:27:fe:9e:71:b4:
                    64:97:51:94:db:b9:af:e6:10:aa:53:c5:c8:42:2b:
                    46:d3:1f:1a:f0:53:5a:eb:5d:3f:b9:45:5b:e1:3f:
                    8c:47:34:af:7a:af:09:ff:27:26:d2:8f:8d:a7:f7:
                    5a:f7:39:81:0e:48:9c:49:88:db:fa:96:a5:58:2e:
                    87:df:af:63:5b:63:5f:7a:ef:58:ee:7d:91:49:57:
                    1a:6d:53:15:a1:f9:b8:26:ce:07:5f:0a:9e:f6:6f:
                    17:52:16:bd:b2:10:d7:7b:e2:c9:a7:a9:30:a6:bc:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:E8:56:3D:28:60:71:55:A5:29:D2:50:EA:3A:1D:4F:D9:A6:03
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:60:47:21:a5:c1:7b:8d:03:30:3c:52:89:5c:72:88:38:c7:
         6a:50:12:59:48:24:c5:62:44:33:63:76:1c:63:e9:0b:40:0c:
         45:e7:a0:3f:80:df:6a:e6:82:00:cd:07:df:f8:c4:26:f6:84:
         02:78:4a:70:97:cd:8e:d9:69:5f:7d:41:5e:a2:ab:7e:46:18:
         4a:f2:ca:c7:ed:40:13:43:dc:5d:b0:cf:48:17:0c:c5:6f:25:
         cf:8a:31:7b:74:f2:d3:a7:f8:15:a2:32:3d:6c:ef:08:60:4d:
         a1:b7:ca:6a:c9:38:3e:4a:cd:74:01:8e:e3:f2:86:36:f2:32:
         b1:48:75:bd:9c:ad:1c:be:99:51:ec:ee:ed:10:1f:b5:45:f6:
         9e:53:be:0f:92:41:c3:79:a0:b1:ca:72:5a:95:4d:a5:ec:08:
         df:e8:69:f7:64:e3:af:56:c1:12:7a:0e:54:d5:99:ef:c4:4d:
         2b:b0:ab:72:69:0e:cd:da:99:22:f5:4f:39:42:24:79:6a:b6:
         b5:52:33:48:f2:63:40:a6:a7:27:be:28:74:cd:52:c3:ab:0f:
         38:e0:ea:b0:eb:3d:b4:bb:a7:8c:e8:40:23:35:66:75:e2:69:
         53:6c:44:f0:8e:4e:88:93:20:6f:49:c3:b0:87:96:ee:25:8e:
         ce:65:e3:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOuTW6a9mf9Fq3Tlrb5g1/7uGPBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk0QzI2MUU3RjU0RkQ4RjkxMzJEN0NDNjU4NzZBOUZD
Q0IyMkI0NDAeFw0yNTA1MTMwOTAyMzlaFw0yNTA1MTQxMjIyMzlaMDMxMTAvBgNV
BAMTKDIxODNFODU2M0QyODYwNzE1NUE1MjlEMjUwRUEzQTFENEZEOUE2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvK3dEQQuncS4/HVJpWsGjRWk
fwBtaRrDv2/dk1G4KiIWYFjhrxdBy3hUpRaE7jhkpIVztZI3z5IdExLNaxl06Inr
jU8VVYDlhNlT0s+SpY0+qswJ+/EYchNfHG+C4qsH7QrXGNExnytsMzXTAMgb6NC9
Yesqtx4TW2qFZwNgnaPGionbj4aAw21A5/GtxMIn/p5xtGSXUZTbua/mEKpTxchC
K0bTHxrwU1rrXT+5RVvhP4xHNK96rwn/JybSj42n91r3OYEOSJxJiNv6lqVYLoff
r2NbY19671jufZFJVxptUxWh+bgmzgdfCp72bxdSFr2yENd74smnqTCmvHEfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIYPoVj0oYHFVpSnSUOo6HU/ZpgMwHwYDVR0j
BBgwFoAUqUwmHn9U/Y+RMtfMZYdqn8yyK0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFJDRVhzRTlMcTZiVkxVYzVwZmNFVzFDa1dBV2VqalFjemhodWJ2cGFj
ZmYvMS9BOTRDMjYxRTdGNTRGRDhGOTEzMkQ3Q0M2NTg3NkE5RkNDQjIyQjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NEMyNjFFN0Y1NEZEOEY5
MTMyRDdDQzY1ODc2QTlGQ0NCMjJCNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFJDRVhzRTlMcTZiVkxVYzVwZmNFVzFDa1dBV2VqalFjemhodWJ2cGFjZmYvMS9B
OTRDMjYxRTdGNTRGRDhGOTEzMkQ3Q0M2NTg3NkE5RkNDQjIyQjQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYWBHIaXBe40DMDxSiVxyiDjHalASWUgkxWJEM2N2HGPpC0AMReegP4DfauaC
AM0H3/jEJvaEAnhKcJfNjtlpX31BXqKrfkYYSvLKx+1AE0PcXbDPSBcMxW8lz4ox
e3Ty06f4FaIyPWzvCGBNobfKask4PkrNdAGO4/KGNvIysUh1vZytHL6ZUezu7RAf
tUX2nlO+D5JBw3mgscpyWpVNpewI3+hp92Tjr1bBEnoOVNWZ78RNK7CrcmkOzdqZ
IvVPOUIkeWq2tVIzSPJjQKanJ74odM1Sw6sPOODqsOs9tLunjOhAIzVmdeJpU2xE
8I5OiJMgb0nDsIeW7iWOzmXj3g==
-----END CERTIFICATE-----
Generated at Tue May 13 12:17:04 2025 by rpki-client