Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
File:                     10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft (raw, json)
Hash identifier:          3bZUjKTr9w+QsP9uj6m1HvpBcgYttiFswdOMMCWSbzA=
Subject key identifier:   CE:D7:CD:58:63:81:7F:AB:BE:7D:66:5E:E5:53:DF:1E:0C:6D:C9:2C
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       01CEB8C53400B3CB55CD18F27867B706CB3E131E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
Manifest number:          021D
Signing time:             Sun 11 May 2025 07:37:33 +0000
Manifest this update:     Sun 11 May 2025 07:32:33 +0000
Manifest next update:     Mon 12 May 2025 08:28:33 +0000
Files and hashes:         1: 3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (hash: fE24f26j0kL/eARBJ/0bEc8rHNXMJe4dMA29NYJzh/E=)
                          2: 3137372e33372e33312e302f32342d3234203d3e20323730353934.roa (hash: FDFbmXXsRE37sk0qOjiCb7hbsCEVD3Su2L9vgvnmp7E=)
                          3: 323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (hash: FJzuXb3rPKEB9M/UrCEVvzbujD6MI9jHBtF6Dpipnxc=)
                          4: 3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (hash: KWppXTqmgTsfYVtQwBA0L55uv+geHmhw9Ux5utAeIAg=)
                          5: 3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (hash: f6yTzBfUYT5Bjdi76PtLBqtiOolgjET/iU/l6X+ipa4=)
                          6: 3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (hash: jZMapOUe84nS0/HmSAfDLEi0KYVQyv8elBOcMNwdzlk=)
                          7: 3137372e33372e33302e302f32342d3234203d3e20323730353934.roa (hash: Ey7RS6ZvA9Mg77sUwDuoQ8ZDRjfaKl8xEJ8Pcs9LN8I=)
                          8: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl (hash: lKsy1mZYYYRvnySwUhcy2kk+Tff9oIoGZ5LIVNV2dbY=)
                          9: 3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (hash: EmWje+arIFTV7gO7Z/KIu2yxqAhGMRVeT3C7Qk900tY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 08:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ce:b8:c5:34:00:b3:cb:55:cd:18:f2:78:67:b7:06:cb:3e:13:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: May 11 07:32:33 2025 GMT
            Not After : May 12 08:28:33 2025 GMT
        Subject: CN=CED7CD5863817FABBE7D665EE553DF1E0C6DC92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:1a:5b:2f:ba:a6:a5:4e:ee:50:d7:43:b9:
                    1f:fc:83:b2:e3:2d:88:c1:8b:91:8e:93:14:ce:c9:
                    52:21:b0:40:e7:c2:b6:ba:db:5a:da:7b:8e:39:03:
                    b6:da:ea:07:90:60:6a:41:ab:fe:44:6a:af:3e:32:
                    e3:f6:44:c8:b7:ce:05:c3:71:f6:ab:a2:96:45:db:
                    a9:6d:58:26:35:87:49:c7:14:8f:0b:88:77:b3:dc:
                    ab:98:20:da:b4:7d:a6:9b:22:54:df:f0:49:ef:67:
                    5b:4b:e5:e1:28:11:a6:25:88:1c:0d:71:3c:48:e3:
                    74:5c:cf:a5:e2:f9:99:5a:27:3f:00:cf:a7:e4:64:
                    c7:be:ec:69:f9:03:83:ea:5c:37:70:f3:71:cb:8f:
                    6b:00:c7:db:fd:aa:84:b2:39:c0:b8:54:00:9d:c5:
                    45:f8:bd:6f:d4:bc:8a:71:ae:87:ef:1c:e5:6e:21:
                    7b:d1:18:50:17:9b:3b:42:c4:d3:cd:94:21:a1:3c:
                    24:16:4d:9c:6e:f1:4b:3e:cf:32:38:80:7c:39:7d:
                    45:54:31:d6:15:df:22:64:46:87:50:3d:50:fb:df:
                    34:42:ea:ce:fb:94:ad:5b:95:d9:e6:7f:c7:83:5b:
                    2e:85:df:37:43:c8:db:48:d8:59:fb:3b:2b:0e:4b:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:CD:58:63:81:7F:AB:BE:7D:66:5E:E5:53:DF:1E:0C:6D:C9:2C
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:57:ac:1e:7f:73:36:aa:7b:53:b3:a8:c6:cf:c5:73:b2:
         9f:b3:22:5a:88:fb:0d:c0:71:68:61:2f:b4:8e:88:9b:6d:18:
         fe:f2:2e:df:4b:91:2c:60:7b:a3:83:db:71:1b:58:04:fb:10:
         86:d0:df:24:2d:96:df:a9:af:73:8b:64:87:ae:43:0b:2f:0a:
         fd:68:1b:3d:16:67:03:00:57:78:a9:49:ea:18:89:22:1f:31:
         38:38:47:a7:ca:41:a9:be:be:d6:80:6d:b0:37:a2:e7:2a:af:
         b4:c6:cf:e8:b7:8c:53:c0:d6:58:e0:bd:f3:34:dc:4b:0e:b0:
         cc:a3:4d:55:0d:61:df:b3:65:27:f5:62:12:8f:14:0c:da:d8:
         52:bb:5e:20:c7:36:0f:80:83:69:54:21:a0:02:76:27:47:52:
         03:31:a5:6c:a1:6e:2f:fd:d1:47:b3:85:26:0a:d7:11:02:41:
         4a:bf:2d:4e:96:aa:3d:2f:68:f7:e4:27:dd:8d:1c:ae:e6:0d:
         80:b5:21:2d:4b:31:10:fe:5f:bb:0a:4f:af:27:78:10:1c:6d:
         1b:fd:9d:13:ad:cb:a6:9c:fd:36:25:c7:a5:ce:5d:1a:f1:9f:
         42:17:a5:22:31:23:77:ef:42:39:f2:ae:6b:54:81:84:bc:42:
         c7:f2:53:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAc64xTQAs8tVzRjyeGe3Bss+Ex4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCRjM5Q0VFNDc3QzIzQkU2MEJBOTk5QkE3QjcwMTcx
QkZCMkMxMDAeFw0yNTA1MTEwNzMyMzNaFw0yNTA1MTIwODI4MzNaMDMxMTAvBgNV
BAMTKENFRDdDRDU4NjM4MTdGQUJCRTdENjY1RUU1NTNERjFFMEM2REM5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jRpbL7qmpU7uUNdDuR/8g7Lj
LYjBi5GOkxTOyVIhsEDnwra621rae445A7ba6geQYGpBq/5Eaq8+MuP2RMi3zgXD
cfaropZF26ltWCY1h0nHFI8LiHez3KuYINq0faabIlTf8EnvZ1tL5eEoEaYliBwN
cTxI43Rcz6Xi+ZlaJz8Az6fkZMe+7Gn5A4PqXDdw83HLj2sAx9v9qoSyOcC4VACd
xUX4vW/UvIpxrofvHOVuIXvRGFAXmztCxNPNlCGhPCQWTZxu8Us+zzI4gHw5fUVU
MdYV3yJkRodQPVD73zRC6s77lK1bldnmf8eDWy6F3zdDyNtI2Fn7OysOS6rxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUztfNWGOBf6u+fWZe5VPfHgxtySwwHwYDVR0j
BBgwFoAUEL85zuR3wjvmC6mZuntwFxv7LBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0gzdkJnQ1VrNXBEWXpZWHhidTRvcVI3TVBTWDJWUFczZWlWWDRGN3k2
em8vMS8xMEJGMzlDRUU0NzdDMjNCRTYwQkE5OTlCQTdCNzAxNzFCRkIyQzEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQkYzOUNFRTQ3N0MyM0JF
NjBCQTk5OUJBN0I3MDE3MUJGQjJDMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0gzdkJnQ1VrNXBEWXpZWHhidTRvcVI3TVBTWDJWUFczZWlWWDRGN3k2em8vMS8x
MEJGMzlDRUU0NzdDMjNCRTYwQkE5OTlCQTdCNzAxNzFCRkIyQzEwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmdVXrB5/czaqe1OzqMbPxXOyn7MiWoj7DcBxaGEvtI6Im20Y/vIu30uRLGB7
o4PbcRtYBPsQhtDfJC2W36mvc4tkh65DCy8K/WgbPRZnAwBXeKlJ6hiJIh8xODhH
p8pBqb6+1oBtsDei5yqvtMbP6LeMU8DWWOC98zTcSw6wzKNNVQ1h37NlJ/ViEo8U
DNrYUrteIMc2D4CDaVQhoAJ2J0dSAzGlbKFuL/3RR7OFJgrXEQJBSr8tTpaqPS9o
9+Qn3Y0cruYNgLUhLUsxEP5fuwpPryd4EBxtG/2dE63Lppz9NiXHpc5dGvGfQhel
IjEjd+9COfKua1SBhLxCx/JTKQ==
-----END CERTIFICATE-----
Generated at Sun May 11 22:24:55 2025 by rpki-client