Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
File:                     D903348767481BAEFE2C4B534D22308FC61456DE.mft (raw, json)
Hash identifier:          lmM/ZSkM1HOriyDVs8UbztyfXBxvkE9PC1pvPtuIJQA=
Subject key identifier:   9B:A2:D8:0B:8A:04:BA:AC:7F:D2:D2:5D:D2:5B:1E:B8:A9:01:27:F9
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       5C43F3999C858366B786AA32C6FF8714B5837FA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
Manifest number:          025E
Signing time:             Tue 01 Jul 2025 02:21:13 +0000
Manifest this update:     Tue 01 Jul 2025 02:16:13 +0000
Manifest next update:     Wed 02 Jul 2025 06:09:13 +0000
Files and hashes:         1: D903348767481BAEFE2C4B534D22308FC61456DE.crl (hash: gzNi+Z8tEcoalp9FPgKIw0keiN2LTvqTklNfPnJygmI=)
                          2: 323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (hash: Mw7HvlDrp63aWO1ARIfPFNHv5rafM0coG3YOIzN9QdA=)
                          3: 3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (hash: 9qI1j80SisNpEFrkVgnZx2fMMWt5iqrs2+4KLEk1aLI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 06:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:43:f3:99:9c:85:83:66:b7:86:aa:32:c6:ff:87:14:b5:83:7f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Jul  1 02:16:13 2025 GMT
            Not After : Jul  2 06:09:13 2025 GMT
        Subject: CN=9BA2D80B8A04BAAC7FD2D25DD25B1EB8A90127F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:03:d1:e5:f1:0b:b0:6f:94:08:72:2d:81:
                    f8:ad:4f:cb:1d:49:e8:22:2d:d8:fc:ca:35:8f:e6:
                    b8:62:22:05:61:79:98:80:d4:5c:80:14:55:01:e5:
                    df:e2:6e:06:0e:cb:32:d0:54:19:d5:bf:13:b8:70:
                    7c:c6:5b:99:46:b0:c8:8b:8d:d2:ac:f0:19:0f:eb:
                    ec:fc:15:a9:40:88:4a:63:74:d6:4d:65:5f:e7:a7:
                    26:b0:a7:06:e5:5d:41:b1:3e:13:3a:e3:99:63:85:
                    66:cb:28:85:22:ec:c4:ea:f1:4c:34:11:fb:dc:ce:
                    ce:30:04:8b:2f:f4:7d:ab:2f:f1:5d:64:46:e8:e6:
                    72:44:b7:2a:47:51:5b:b1:d3:6c:a8:8e:50:b1:f1:
                    f1:f3:6a:fb:6e:cd:2c:57:02:08:4a:3e:9c:81:48:
                    d2:0b:81:8f:ca:b2:78:ca:2a:b9:72:18:8f:51:2b:
                    f8:0f:69:0c:34:e5:24:89:15:f2:75:ee:0f:50:28:
                    d6:74:16:ee:c8:17:e6:a7:61:da:2f:4b:dd:0b:27:
                    9e:40:b2:6b:9b:87:42:33:55:64:a0:2d:fb:75:cd:
                    2a:2b:ad:be:2a:d2:8d:00:9f:fc:a3:61:4c:31:6d:
                    e1:c0:a8:ed:f4:30:b8:8b:2c:0e:d2:2a:1f:6e:7e:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:D8:0B:8A:04:BA:AC:7F:D2:D2:5D:D2:5B:1E:B8:A9:01:27:F9
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:62:fb:fe:e1:7a:16:ce:99:ea:43:a5:46:9a:6d:50:38:35:
         a2:0a:32:ae:0d:3c:23:31:81:40:d3:63:ec:48:45:b8:c9:c2:
         af:e7:8c:8b:72:aa:20:df:fe:88:d9:ea:d4:c2:16:0b:d6:72:
         55:46:e2:21:f7:72:9a:46:db:34:34:93:cc:25:6f:d1:fc:d9:
         60:fe:84:87:26:12:99:dc:19:7e:53:7a:c8:85:e8:f4:62:61:
         6b:8d:7e:37:54:f2:c2:8b:2b:20:17:de:3d:3a:ed:6a:e3:a1:
         3d:5d:4c:d3:22:85:a9:e5:f8:5f:90:46:ae:de:24:7d:a8:b7:
         05:5f:2c:2b:cb:81:4b:1c:5f:70:91:d5:d2:79:ed:d1:e5:dd:
         b9:ce:15:14:53:70:a6:00:6d:72:11:c7:2a:7e:89:48:1e:ac:
         86:6d:96:23:9a:47:3f:8a:92:5d:52:fc:9e:5c:fe:20:62:bd:
         e2:24:25:ad:ef:1e:b4:fe:96:13:d0:6d:9f:1d:78:33:51:62:
         b8:f9:5a:c7:6b:f9:c8:80:59:ce:5f:6e:e2:d7:58:52:ee:11:
         43:94:4b:a1:ef:34:73:d7:59:54:e2:60:47:bc:ed:19:d7:d8:
         e1:26:55:77:ae:eb:88:cf:9e:92:7f:85:08:d5:d3:63:39:9b:
         18:fe:0d:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXEPzmZyFg2a3hqoyxv+HFLWDf6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkwMzM0ODc2NzQ4MUJBRUZFMkM0QjUzNEQyMjMwOEZD
NjE0NTZERTAeFw0yNTA3MDEwMjE2MTNaFw0yNTA3MDIwNjA5MTNaMDMxMTAvBgNV
BAMTKDlCQTJEODBCOEEwNEJBQUM3RkQyRDI1REQyNUIxRUI4QTkwMTI3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpQPR5fELsG+UCHItgfitT8sd
SegiLdj8yjWP5rhiIgVheZiA1FyAFFUB5d/ibgYOyzLQVBnVvxO4cHzGW5lGsMiL
jdKs8BkP6+z8FalAiEpjdNZNZV/npyawpwblXUGxPhM645ljhWbLKIUi7MTq8Uw0
Efvczs4wBIsv9H2rL/FdZEbo5nJEtypHUVux02yojlCx8fHzavtuzSxXAghKPpyB
SNILgY/KsnjKKrlyGI9RK/gPaQw05SSJFfJ17g9QKNZ0Fu7IF+anYdovS90LJ55A
smubh0IzVWSgLft1zSorrb4q0o0An/yjYUwxbeHAqO30MLiLLA7SKh9ufhWXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUm6LYC4oEuqx/0tJd0lseuKkBJ/kwHwYDVR0j
BBgwFoAU2QM0h2dIG67+LEtTTSIwj8YUVt4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEZWNGpHR0N6amg2dlU1OTNTWWVxM2RWandGRG9zZVdZaFRpQWczaHdG
ZE4vMi9EOTAzMzQ4NzY3NDgxQkFFRkUyQzRCNTM0RDIyMzA4RkM2MTQ1NkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MDMzNDg3Njc0ODFCQUVG
RTJDNEI1MzREMjIzMDhGQzYxNDU2REUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEZWNGpHR0N6amg2dlU1OTNTWWVxM2RWandGRG9zZVdZaFRpQWczaHdGZE4vMi9E
OTAzMzQ4NzY3NDgxQkFFRkUyQzRCNTM0RDIyMzA4RkM2MTQ1NkRFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa2L7/uF6Fs6Z6kOlRpptUDg1ogoyrg08IzGBQNNj7EhFuMnCr+eMi3KqIN/+
iNnq1MIWC9ZyVUbiIfdymkbbNDSTzCVv0fzZYP6EhyYSmdwZflN6yIXo9GJha41+
N1TywosrIBfePTrtauOhPV1M0yKFqeX4X5BGrt4kfai3BV8sK8uBSxxfcJHV0nnt
0eXduc4VFFNwpgBtchHHKn6JSB6shm2WI5pHP4qSXVL8nlz+IGK94iQlre8etP6W
E9Btnx14M1FiuPlax2v5yIBZzl9u4tdYUu4RQ5RLoe80c9dZVOJgR7ztGdfY4SZV
d67riM+ekn+FCNXTYzmbGP4Nig==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:33:38 2025 by rpki-client