Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft
File:                     D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft (raw, json)
Hash identifier:          K7sJbH5Rh/Ay1pcdQp4u0R1lQ0u5G5aXk0IecW6xhh8=
Subject key identifier:   65:95:55:35:BA:EE:0C:D1:95:5B:88:B9:1A:66:E7:9A:BD:6B:84:F8
Authority key identifier: D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB
Certificate issuer:       /CN=D6B9EE6613E3E32F3534176202CB552DAD0B77CB
Certificate serial:       1AAD7462F20EB91F8D70685425A3240A30F13801
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft
Manifest number:          22
Signing time:             Sun 29 Jun 2025 14:06:46 +0000
Manifest this update:     Sun 29 Jun 2025 14:01:46 +0000
Manifest next update:     Mon 30 Jun 2025 17:12:46 +0000
Files and hashes:         1: 3136382e3230352e3232332e302f32342d3234203d3e20323634383636.roa (hash: ZSaz/I0X/gwJ04h3YeFRrmooT+vRnq2L6Q4Qv256+2M=)
                          2: D6B9EE6613E3E32F3534176202CB552DAD0B77CB.crl (hash: O3FQDfohPqVV8fNlmN7Ytz3cLUGIvdWpKq8YLuOLBBw=)
                          3: 323830343a326630343a3a2f33322d3332203d3e20323634383636.roa (hash: /ltXvHZTKRd7s9OFNNsJivKe9QESeYQli8DV24PBAl4=)
                          4: 3136382e3230352e3232302e302f32332d3233203d3e20323634383636.roa (hash: K1U0x3bFUJTrtExaGg+QiqWwuLinBUD6ZKsUokxc6zs=)
                          5: 3136382e3230352e3232302e302f32322d3232203d3e20323634383636.roa (hash: yZHMCZWFtOfpY0cWXCKSHqoASZDOVSynqwR/7dmY23w=)
                          6: 3136382e3230352e3232322e302f32332d3233203d3e20323634383636.roa (hash: sp7cnRh5YXJdcAeNrv5DI2xZwGuit9HK4a9iHhKytI4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.crl
                          rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 17:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:74:62:f2:0e:b9:1f:8d:70:68:54:25:a3:24:0a:30:f1:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6B9EE6613E3E32F3534176202CB552DAD0B77CB
        Validity
            Not Before: Jun 29 14:01:46 2025 GMT
            Not After : Jun 30 17:12:46 2025 GMT
        Subject: CN=65955535BAEE0CD1955B88B91A66E79ABD6B84F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:80:33:ef:0a:66:0a:83:36:de:a2:f8:88:
                    09:cf:14:5a:5d:cc:f9:d9:02:35:3a:32:8b:4d:d3:
                    cd:65:cf:2b:79:87:a0:87:b0:54:d2:fc:fd:fa:65:
                    ef:e0:2f:b3:8c:e1:75:92:f8:d1:1e:05:9f:18:00:
                    b8:91:94:b2:1c:e7:86:4e:6b:6a:48:60:33:98:ce:
                    a6:23:4e:3b:2f:4c:ee:2a:e2:a0:5a:bd:6a:e5:cf:
                    1e:3d:35:91:28:0a:68:a9:e8:70:47:50:11:e9:4a:
                    c0:06:0f:64:6c:df:19:55:a3:9c:6e:01:99:9c:a2:
                    d0:91:2e:7f:5a:27:4d:a2:5f:b1:6c:fb:fd:02:f0:
                    9b:b1:ee:e4:9e:9d:81:cd:07:7a:2b:e6:d0:1c:61:
                    91:b7:e0:34:47:f8:aa:8d:d5:25:94:b4:02:ef:52:
                    96:f9:07:de:af:14:27:2e:c1:ca:ca:5b:f3:3a:71:
                    ab:0d:8f:20:c4:8b:be:d3:2b:48:88:6d:43:99:97:
                    a8:93:a7:86:92:39:60:49:10:8a:89:0d:92:6c:86:
                    6b:7c:2e:ea:76:01:c3:23:f7:14:fa:41:be:ae:ca:
                    dd:62:ee:04:3e:f0:c6:b5:b7:49:56:3e:50:dc:e6:
                    34:59:fd:f9:95:fd:17:9b:35:f5:dc:16:63:20:89:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:55:35:BA:EE:0C:D1:95:5B:88:B9:1A:66:E7:9A:BD:6B:84:F8
            X509v3 Authority Key Identifier:
                keyid:D6:B9:EE:66:13:E3:E3:2F:35:34:17:62:02:CB:55:2D:AD:0B:77:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/D6B9EE6613E3E32F3534176202CB552DAD0B77CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:8c:bd:27:25:d5:03:2d:5e:bd:2f:89:36:fe:69:63:c3:
         bd:89:30:cc:9d:1f:57:a1:a9:33:5f:57:72:94:24:4c:c7:45:
         0c:0f:c7:2b:bf:2d:0d:e7:a0:c8:4a:43:e0:2b:3f:e1:ab:f5:
         6e:3f:af:4d:68:83:9a:54:f9:97:95:73:d5:c9:7c:26:37:72:
         e3:f7:59:1a:17:46:7b:62:6f:b2:cb:b8:32:e3:c0:f6:16:0c:
         4e:8d:2b:0c:7d:fb:c3:b7:a7:6d:7d:a9:86:20:b2:8d:eb:84:
         e7:93:4d:79:f5:ad:5c:41:c2:d7:3f:12:1d:2d:c4:2c:3f:a9:
         33:67:b1:71:72:34:0d:02:fe:a0:e1:1c:53:fd:fa:34:86:69:
         e9:f5:54:b8:52:a0:01:35:ac:8f:d0:80:d1:a4:9b:83:1d:7c:
         fe:2c:87:d8:72:f9:c2:0a:28:e3:d6:df:54:54:ee:b4:c9:ef:
         5e:93:0f:20:6f:cb:b8:7f:17:03:bf:d4:ab:34:10:6f:8b:ba:
         eb:bb:10:45:9b:56:cc:a4:f2:9a:c4:81:a9:7e:1a:95:00:47:
         31:af:1c:77:58:36:f9:cf:87:d4:ef:f9:35:ba:be:f7:33:f8:
         a2:da:16:f1:01:dc:63:83:f0:ff:ca:e0:c7:c7:88:c3:25:a0:
         60:26:2a:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGq10YvIOuR+NcGhUJaMkCjDxOAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZCOUVFNjYxM0UzRTMyRjM1MzQxNzYyMDJDQjU1MkRB
RDBCNzdDQjAeFw0yNTA2MjkxNDAxNDZaFw0yNTA2MzAxNzEyNDZaMDMxMTAvBgNV
BAMTKDY1OTU1NTM1QkFFRTBDRDE5NTVCODhCOTFBNjZFNzlBQkQ2Qjg0RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQoAz7wpmCoM23qL4iAnPFFpd
zPnZAjU6MotN081lzyt5h6CHsFTS/P36Ze/gL7OM4XWS+NEeBZ8YALiRlLIc54ZO
a2pIYDOYzqYjTjsvTO4q4qBavWrlzx49NZEoCmip6HBHUBHpSsAGD2Rs3xlVo5xu
AZmcotCRLn9aJ02iX7Fs+/0C8Jux7uSenYHNB3or5tAcYZG34DRH+KqN1SWUtALv
Upb5B96vFCcuwcrKW/M6casNjyDEi77TK0iIbUOZl6iTp4aSOWBJEIqJDZJshmt8
Lup2AcMj9xT6Qb6uyt1i7gQ+8Ma1t0lWPlDc5jRZ/fmV/RebNfXcFmMgiaoTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZZVVNbruDNGVW4i5Gmbnmr1rhPgwHwYDVR0j
BBgwFoAU1rnuZhPj4y81NBdiAstVLa0Ld8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFVTWZUdWJuYmJWbUpteDhDbkhUMm1TcGN2bThQZXBaeXlMeGtVVnd3
NEYvMC9ENkI5RUU2NjEzRTNFMzJGMzUzNDE3NjIwMkNCNTUyREFEMEI3N0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QjlFRTY2MTNFM0UzMkYz
NTM0MTc2MjAyQ0I1NTJEQUQwQjc3Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDFVTWZUdWJuYmJWbUpteDhDbkhUMm1TcGN2bThQZXBaeXlMeGtVVnd3NEYvMC9E
NkI5RUU2NjEzRTNFMzJGMzUzNDE3NjIwMkNCNTUyREFEMEI3N0NCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfbCMvScl1QMtXr0viTb+aWPDvYkwzJ0fV6GpM19XcpQkTMdFDA/HK78tDeeg
yEpD4Cs/4av1bj+vTWiDmlT5l5Vz1cl8Jjdy4/dZGhdGe2Jvssu4MuPA9hYMTo0r
DH37w7enbX2phiCyjeuE55NNefWtXEHC1z8SHS3ELD+pM2excXI0DQL+oOEcU/36
NIZp6fVUuFKgATWsj9CA0aSbgx18/iyH2HL5wgoo49bfVFTutMnvXpMPIG/LuH8X
A7/UqzQQb4u667sQRZtWzKTymsSBqX4alQBHMa8cd1g2+c+H1O/5Nbq+9zP4otoW
8QHcY4Pw/8rgx8eIwyWgYCYq3g==
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:25:29 2025 by rpki-client