Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
File:                     32A915BA5A97568A877890D55DC289FFCB6FEE60.mft (raw, json)
Hash identifier:          Dgye4/Gcg2/DjuJc4fg2VZLLdBbm+7wgIm+Hk3RZug0=
Subject key identifier:   66:3E:B3:CA:6F:A9:F5:9E:E2:89:67:3B:FB:B4:BB:D1:C0:AC:1F:ED
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5F06199C5EED144BA7A57E85650B4F9F1886DAF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
Manifest number:          021B
Signing time:             Sat 10 May 2025 23:05:52 +0000
Manifest this update:     Sat 10 May 2025 23:00:52 +0000
Manifest next update:     Mon 12 May 2025 00:31:52 +0000
Files and hashes:         1: 34352e3137322e3134342e302f32322d3234203d3e203238333730.roa (hash: PGUZBgq2K5A0RoVNe3glityB24qZUbcUh0sxTl+5M5c=)
                          2: 32A915BA5A97568A877890D55DC289FFCB6FEE60.crl (hash: m6FJA7QI1gkh/QkzObiwQ6ckoo2KwzCDQhprvwP3z2s=)
                          3: 3138372e34352e3134342e302f32302d3234203d3e203238333730.roa (hash: ajoqP0chGI7RDEOpLwPl/OarxrO/YWkTO3ucnYFpUmQ=)
                          4: 323830343a353931633a3a2f33322d3438203d3e203238333730.roa (hash: mIBAK2g5DXorhpMWio5R2pj8qCeuMVvqhSA3Y7GC6tM=)
                          5: 3138392e38342e3134342e302f32302d3234203d3e203238333730.roa (hash: 67itAHjx67XgxTaqNrd9aE5/oixnkRRbFtUhpcfWrjw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 00:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:06:19:9c:5e:ed:14:4b:a7:a5:7e:85:65:0b:4f:9f:18:86:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: May 10 23:00:52 2025 GMT
            Not After : May 12 00:31:52 2025 GMT
        Subject: CN=663EB3CA6FA9F59EE289673BFBB4BBD1C0AC1FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:92:0f:39:e2:36:32:f1:de:9c:33:e6:87:
                    48:d8:a3:91:a6:bd:a3:d6:a5:e0:05:b5:a3:1f:27:
                    b4:37:0e:b9:f7:b8:a3:19:4c:d3:c6:20:b7:eb:7e:
                    bb:3d:d7:6a:d6:e2:58:0b:82:e8:6b:75:78:dd:91:
                    09:a8:c0:58:c6:f2:08:d6:f6:f0:ed:3c:c9:3b:4a:
                    23:72:89:46:28:d1:42:c3:33:72:b1:7d:a8:8c:2e:
                    f4:72:ba:1f:46:09:42:f7:2e:3b:bf:f7:ae:ce:d7:
                    2a:f7:cc:ac:db:c4:09:39:b6:27:1e:a3:66:9b:ed:
                    cb:99:ea:f9:34:69:99:9e:3a:21:6e:7b:01:b4:42:
                    20:a1:c0:7c:dc:f4:58:4c:fa:c4:e6:f9:c1:da:95:
                    a5:d8:f2:02:dd:e7:81:3f:56:20:21:46:d5:64:49:
                    58:4e:34:c0:82:43:f6:dd:ec:44:5a:78:f8:ca:be:
                    8f:52:45:c9:b5:a6:1b:a7:4c:31:26:77:98:f4:33:
                    ce:14:1b:d3:04:7a:c2:7b:c5:6e:46:a4:46:f1:af:
                    01:c9:0c:ec:c6:74:11:3f:46:dc:b7:af:17:58:97:
                    53:86:58:32:44:01:ec:dc:94:83:ca:1e:54:be:de:
                    43:85:93:7f:3d:c6:a6:74:94:8a:19:e0:a3:af:32:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3E:B3:CA:6F:A9:F5:9E:E2:89:67:3B:FB:B4:BB:D1:C0:AC:1F:ED
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:a4:45:36:0b:f8:da:33:1d:26:fb:0b:72:ac:62:4c:e2:
         d6:41:47:6d:a2:44:b4:fa:e0:7e:26:13:e2:f9:06:62:b5:69:
         7d:50:c6:6e:51:8c:35:64:fb:24:37:b0:09:aa:d5:57:c0:e2:
         bd:4e:59:ff:e2:50:8b:3c:26:94:1a:dd:ec:13:63:4b:4b:16:
         6d:d1:d7:23:1c:8b:76:bf:54:2c:b8:b3:f7:6f:d4:a6:35:5d:
         05:ba:54:f6:50:73:09:20:95:60:e2:81:f1:ae:3e:1e:53:fd:
         ee:78:41:83:c3:19:b9:ce:68:00:6d:58:d2:21:02:ed:65:6e:
         5b:b8:1b:e6:93:d0:00:de:cd:9d:a4:57:97:9a:50:e6:b6:d9:
         ae:9d:7e:67:f0:d2:0f:7e:a3:09:63:57:ac:af:ae:31:0b:89:
         58:6a:1a:c5:82:6b:7a:cd:d2:83:39:af:e6:30:84:48:50:d9:
         4c:67:b1:3e:4f:8b:d6:af:54:68:e6:c1:ab:59:8e:95:4d:1e:
         b3:8b:79:2f:b6:64:24:41:3e:d4:ed:64:5e:4f:ec:ec:da:96:
         82:f5:29:73:ad:f4:b6:e9:86:86:cf:f4:db:ae:92:7f:0d:6f:
         9a:53:78:d7:35:07:a0:0e:56:0f:3e:09:d2:4a:8f:25:d3:9d:
         3c:ae:a9:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXwYZnF7tFEunpX6FZQtPnxiG2vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA1MTAyMzAwNTJaFw0yNTA1MTIwMDMxNTJaMDMxMTAvBgNV
BAMTKDY2M0VCM0NBNkZBOUY1OUVFMjg5NjczQkZCQjRCQkQxQzBBQzFGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7ZIPOeI2MvHenDPmh0jYo5Gm
vaPWpeAFtaMfJ7Q3Drn3uKMZTNPGILfrfrs912rW4lgLguhrdXjdkQmowFjG8gjW
9vDtPMk7SiNyiUYo0ULDM3KxfaiMLvRyuh9GCUL3Lju/967O1yr3zKzbxAk5tice
o2ab7cuZ6vk0aZmeOiFuewG0QiChwHzc9FhM+sTm+cHalaXY8gLd54E/ViAhRtVk
SVhONMCCQ/bd7ERaePjKvo9SRcm1phunTDEmd5j0M84UG9MEesJ7xW5GpEbxrwHJ
DOzGdBE/Rty3rxdYl1OGWDJEAezclIPKHlS+3kOFk389xqZ0lIoZ4KOvMhQnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZj6zym+p9Z7iiWc7+7S70cCsH+0wHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZrRlIvMS8z
MkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZLmkRTYL+NozHSb7C3KsYkzi1kFHbaJEtPrgfiYT4vkGYrVpfVDGblGMNWT7
JDewCarVV8DivU5Z/+JQizwmlBrd7BNjS0sWbdHXIxyLdr9ULLiz92/UpjVdBbpU
9lBzCSCVYOKB8a4+HlP97nhBg8MZuc5oAG1Y0iEC7WVuW7gb5pPQAN7NnaRXl5pQ
5rbZrp1+Z/DSD36jCWNXrK+uMQuJWGoaxYJres3Sgzmv5jCESFDZTGexPk+L1q9U
aObBq1mOlU0es4t5L7ZkJEE+1O1kXk/s7NqWgvUpc630tumGhs/0266Sfw1vmlN4
1zUHoA5WDz4J0kqPJdOdPK6pRw==
-----END CERTIFICATE-----
Generated at Sun May 11 17:10:52 2025 by rpki-client