Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
File:                     E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft (raw, json)
Hash identifier:          182Bx+l4CqTEkPvsR+fuEMByoHaUX1aekv0Na1ocsCo=
Subject key identifier:   9F:09:34:C6:D6:01:2E:CA:8D:14:AE:C9:7A:E3:32:1F:AC:A5:AE:5F
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Certificate issuer:       /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial:       4AE9BDAC20A87DC5040B2621502320B8032375B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
Manifest number:          D7
Signing time:             Thu 15 May 2025 14:46:29 +0000
Manifest this update:     Thu 15 May 2025 14:41:29 +0000
Manifest next update:     Fri 16 May 2025 17:10:29 +0000
Files and hashes:         1: 323830343a376332343a633030303a3a2f33362d3336203d3e20323731343738.roa (hash: vC12VwZiITV9Hzl66Jf+zOomqCVCFX9ocISVIQwMUHY=)
                          2: 323830343a376332343a3a2f33342d3334203d3e20323731343738.roa (hash: Ou9ou3F2N0dyM29n7iIj+vc87gMtZMHtS4BmEnXZSIo=)
                          3: 34352e3233362e37342e302f32332d3234203d3e20323731343738.roa (hash: OWToDLzrI5hquIuNOfHGmh2ckHVreGju+9RfkTUABM4=)
                          4: E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl (hash: MrGPpnN1QGBmon3fH3GNVkeXpeudUqEmUgEz0aRse1I=)
                          5: 323830343a376332343a643030303a3a2f33362d3336203d3e20323731343738.roa (hash: TV/8J81ItO/6vRPeWlNxaQJ645VxejW7gbhlAWeM1Tc=)
                          6: 3137392e302e3132332e302f32342d3234203d3e20323731343738.roa (hash: hO8+tpvrdftLDBWFZVAQaWqmWhDnRrFmDEO8If/XbNU=)
                          7: 323830343a376332343a383030303a3a2f33342d3334203d3e20323731343738.roa (hash: 9w8DPA1oGgE95/xJVZ3yUoiVLozbTehc8DNCmIRJGMk=)
                          8: 34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (hash: e9k1zD0HTtTNwQWSVP+GkoG98+sXRX+jHTE9sMwf1DU=)
                          9: 3137392e302e3132302e302f32332d3234203d3e20323731343738.roa (hash: vMEAEYeszoRwPv1ZdFOPPkzXhpXZ6F+XmEdHn5V6qE8=)
                          10: 323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa (hash: xime1ESlDmcU/ubogi3o0TEFsGjGvoctB7eLEvLJlHI=)
                          11: 3137392e302e3132322e302f32342d3234203d3e20323731343738.roa (hash: N+yAVPLYDXOiXZi2NX2M58nh01/g/mZ5OheOcgwA/v8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 17:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:bd:ac:20:a8:7d:c5:04:0b:26:21:50:23:20:b8:03:23:75:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
        Validity
            Not Before: May 15 14:41:29 2025 GMT
            Not After : May 16 17:10:29 2025 GMT
        Subject: CN=9F0934C6D6012ECA8D14AEC97AE3321FACA5AE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:be:92:a4:d8:71:4c:36:14:87:a4:90:4b:
                    bc:a3:99:fc:82:61:1a:58:68:25:2f:88:a0:ea:d9:
                    d9:51:f9:64:4b:ca:ac:aa:bb:6d:d6:42:da:b6:97:
                    b3:33:6e:74:41:9e:bc:36:21:97:f0:ef:3a:76:0e:
                    f2:05:b5:18:06:da:f7:8c:7f:f3:50:53:f2:41:42:
                    1b:06:75:92:15:20:c6:a7:f7:e4:83:c9:ff:11:8b:
                    25:c0:fc:3f:fe:60:c0:d1:51:e8:dd:43:94:16:ec:
                    58:ce:86:5f:43:6b:61:7b:dd:ea:29:43:f1:5c:6e:
                    2d:4c:4b:e9:c1:d2:ab:af:e0:79:45:68:7c:db:82:
                    49:57:b0:3b:cf:a6:2c:01:a2:43:bf:04:a5:a3:b3:
                    2a:c1:aa:7e:25:a8:a7:2e:af:f8:59:96:c4:49:4d:
                    00:db:ff:d1:63:a8:e9:32:9e:16:05:dc:60:f4:72:
                    c3:c8:ce:fe:5a:5a:c1:49:d5:19:bc:10:04:88:96:
                    91:fb:7d:48:dc:4f:4b:22:ee:db:41:e2:ad:d7:ab:
                    56:bc:bd:5a:99:61:42:ca:39:6e:ba:f2:5c:c9:1c:
                    ed:73:83:35:4b:36:fd:9d:5f:e7:3f:05:40:25:8b:
                    30:5c:5f:a9:f7:f2:69:0e:47:ab:3d:1f:0d:d4:75:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:34:C6:D6:01:2E:CA:8D:14:AE:C9:7A:E3:32:1F:AC:A5:AE:5F
            X509v3 Authority Key Identifier:
                keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:ae:1e:97:17:90:03:2b:6c:c3:e6:fc:93:c8:6e:b5:cb:
         d6:af:88:b8:43:db:2e:5c:ea:6a:85:6a:cd:db:81:b1:62:48:
         bf:d1:a1:c1:24:54:84:0a:6f:6a:0a:de:57:77:a0:e7:e2:d3:
         8b:84:51:4d:56:50:de:db:da:5c:f7:dc:13:b4:00:43:9e:3b:
         56:cc:19:32:04:1a:24:d1:22:4d:48:eb:93:b8:db:4b:11:86:
         e6:fe:c5:a1:d4:5c:eb:ec:dc:3c:6f:19:8e:16:4b:d1:bb:c3:
         22:da:c0:47:42:2f:cb:59:d2:0b:ef:1c:c9:20:d4:e4:66:0f:
         40:37:a5:4e:26:c8:64:7e:b2:3c:9a:8e:52:1a:76:31:48:91:
         79:b0:d9:e3:a8:f3:55:5d:ec:f2:bf:2c:fc:e5:f5:8c:96:a4:
         fc:34:b1:e1:ae:25:5c:47:f9:61:7f:65:a9:5f:3c:38:8f:a3:
         c4:4e:25:ca:93:d6:0f:ab:aa:ad:65:c5:85:48:fa:3e:84:ed:
         55:09:f9:4f:0a:96:1d:67:21:12:f7:69:36:4c:84:b2:93:63:
         9a:bb:da:ae:7c:d0:10:c2:98:5d:7f:ff:6d:34:e2:60:61:9d:
         5f:b8:2d:67:73:b7:ab:58:04:3c:72:48:f6:8c:ac:8f:62:23:
         16:ed:54:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSum9rCCofcUECyYhUCMguAMjdbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDMkM2QjNEQzhBREFFMTk2RkY3MEEwQzc3Mzk5MDAx
RjVBNzQwMDAeFw0yNTA1MTUxNDQxMjlaFw0yNTA1MTYxNzEwMjlaMDMxMTAvBgNV
BAMTKDlGMDkzNEM2RDYwMTJFQ0E4RDE0QUVDOTdBRTMzMjFGQUNBNUFFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWA76SpNhxTDYUh6SQS7yjmfyC
YRpYaCUviKDq2dlR+WRLyqyqu23WQtq2l7MzbnRBnrw2IZfw7zp2DvIFtRgG2veM
f/NQU/JBQhsGdZIVIMan9+SDyf8RiyXA/D/+YMDRUejdQ5QW7FjOhl9Da2F73eop
Q/Fcbi1MS+nB0quv4HlFaHzbgklXsDvPpiwBokO/BKWjsyrBqn4lqKcur/hZlsRJ
TQDb/9FjqOkynhYF3GD0csPIzv5aWsFJ1Rm8EASIlpH7fUjcT0si7ttB4q3Xq1a8
vVqZYULKOW668lzJHO1zgzVLNv2dX+c/BUAlizBcX6n38mkOR6s9Hw3UdY8JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnwk0xtYBLsqNFK7JeuMyH6ylrl8wHwYDVR0j
BBgwFoAU5MLGs9yK2uGW/3Cgx3OZAB9adAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS
UHcvMC9FNEMyQzZCM0RDOEFEQUUxOTZGRjcwQTBDNzczOTkwMDFGNUE3NDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QzJDNkIzREM4QURBRTE5
NkZGNzBBMEM3NzM5OTAwMUY1QTc0MDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZSUHcvMC9F
NEMyQzZCM0RDOEFEQUUxOTZGRjcwQTBDNzczOTkwMDFGNUE3NDAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbcauHpcXkAMrbMPm/JPIbrXL1q+IuEPbLlzqaoVqzduBsWJIv9GhwSRUhApv
agreV3eg5+LTi4RRTVZQ3tvaXPfcE7QAQ547VswZMgQaJNEiTUjrk7jbSxGG5v7F
odRc6+zcPG8ZjhZL0bvDItrAR0Ivy1nSC+8cySDU5GYPQDelTibIZH6yPJqOUhp2
MUiRebDZ46jzVV3s8r8s/OX1jJak/DSx4a4lXEf5YX9lqV88OI+jxE4lypPWD6uq
rWXFhUj6PoTtVQn5TwqWHWchEvdpNkyEspNjmrvarnzQEMKYXX//bTTiYGGdX7gt
Z3O3q1gEPHJI9oysj2IjFu1U0A==
-----END CERTIFICATE-----
Generated at Thu May 15 17:06:47 2025 by rpki-client