Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
File:                     2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json)
Hash identifier:          HZMQI6G/vwtkiLUW8QfTmKzRnEK8DtkgvR5M/hdLqMI=
Subject key identifier:   B0:6C:5D:54:1F:53:BB:87:CC:2F:EA:7D:07:89:0D:67:4F:CF:AB:77
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       19659CC60F18A7DDC797FDF65F8358C217321F4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
Manifest number:          0298
Signing time:             Wed 14 May 2025 04:27:28 +0000
Manifest this update:     Wed 14 May 2025 04:22:28 +0000
Manifest next update:     Thu 15 May 2025 04:34:28 +0000
Files and hashes:         1: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: EtAFZVftso22tPfn5dl/88WB9YQ7x3P4uwE8iBRdUJk=)
                          2: 3230312e34392e3232342e302f32302d3234203d3e203532353332.roa (hash: CNJSlWtatUN4HSdkuVeA3UaPEokKP4ThP14ovzAF/c0=)
                          3: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=)
                          4: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=)
                          5: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=)
                          6: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=)
                          7: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: NjJwSnFI4r3ME9C6UeE80SD8MFMH9WCcp6INqFLK6rs=)
                          8: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:65:9c:c6:0f:18:a7:dd:c7:97:fd:f6:5f:83:58:c2:17:32:1f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: May 14 04:22:28 2025 GMT
            Not After : May 15 04:34:28 2025 GMT
        Subject: CN=B06C5D541F53BB87CC2FEA7D07890D674FCFAB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:a9:84:c9:91:25:0d:f1:10:11:c9:c4:90:
                    62:0b:a4:8d:dd:d6:39:ed:e8:e1:10:02:42:0c:db:
                    c9:0a:a8:f9:25:20:66:68:4a:eb:1d:e3:dd:53:fd:
                    e3:b0:7e:25:de:78:39:b5:01:fc:9e:91:64:5f:dd:
                    d5:5b:30:61:1b:83:d3:b4:68:fe:0c:93:26:c5:fc:
                    33:ea:ee:f2:ea:73:80:ff:e3:c3:3f:4a:d0:48:56:
                    b3:30:d9:d3:50:95:8c:13:39:92:55:5c:af:65:2b:
                    a9:8c:0e:e8:3e:c0:47:a6:0f:d1:c8:56:0e:ab:f9:
                    8d:12:c0:46:9d:23:7b:61:c3:41:fc:98:2f:f3:a6:
                    5f:a5:79:73:88:43:f7:b1:58:73:70:41:33:47:6a:
                    08:0f:08:6c:42:0a:a0:f6:07:1e:c4:93:61:d7:99:
                    3c:70:82:8c:54:32:8b:71:38:5c:ca:8e:55:ff:39:
                    4d:f7:bd:b0:ac:6a:7c:57:8a:23:92:00:a1:47:87:
                    7b:02:f8:65:c2:4a:55:25:7d:2f:31:00:80:85:dc:
                    0a:9c:86:4a:c6:cd:82:27:08:44:1c:07:22:a3:fa:
                    0b:a5:05:1e:35:07:49:1f:29:db:0a:e9:f8:49:14:
                    87:1c:ca:b4:e3:70:15:fa:14:d3:9e:b2:e9:d1:44:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6C:5D:54:1F:53:BB:87:CC:2F:EA:7D:07:89:0D:67:4F:CF:AB:77
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:55:d3:98:94:e4:e0:82:64:a1:dd:da:39:f4:57:fe:fc:
         6e:bc:92:8f:bc:f9:e3:21:83:eb:eb:f7:fd:db:c1:d5:39:dc:
         02:c3:f8:e9:12:3b:22:12:61:84:83:7c:b1:b3:f4:95:c9:82:
         46:9c:31:c6:c6:46:93:ef:1e:81:b5:4c:18:80:db:87:06:61:
         61:bd:7b:53:f0:02:49:1c:93:19:e7:a8:7e:0c:91:23:1c:a9:
         0d:d1:b6:12:0e:90:3f:d0:60:48:ab:57:39:e0:b9:69:f4:b5:
         ce:fd:b1:4e:21:8d:6e:05:5e:e2:d4:49:91:fd:dc:4b:9b:55:
         30:03:be:30:c6:6c:17:ff:6c:f8:a6:5a:92:c9:b2:23:f0:41:
         ef:bb:ec:d6:5c:25:08:f1:94:bd:a5:1f:05:2d:a5:50:24:bd:
         be:7d:cb:77:aa:ae:f2:5b:35:ef:eb:17:53:d7:96:78:39:c6:
         62:45:5d:38:ba:bc:77:09:d4:a3:cb:4d:8c:88:de:a1:68:ec:
         cf:37:b6:a1:40:6e:f5:90:7b:74:da:db:05:a5:89:f9:6e:e5:
         ab:ff:e9:92:90:59:43:56:3d:f5:52:d1:c5:a5:4c:28:6a:01:
         8c:f8:e9:67:b6:ac:dc:bc:b7:69:61:8d:b9:7b:af:d0:ae:aa:
         50:55:0f:dd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUGWWcxg8Yp93Hl/32X4NYwhcyH0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTA1MTQwNDIyMjhaFw0yNTA1MTUwNDM0MjhaMDMxMTAvBgNV
BAMTKEIwNkM1RDU0MUY1M0JCODdDQzJGRUE3RDA3ODkwRDY3NEZDRkFCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKamEyZElDfEQEcnEkGILpI3d
1jnt6OEQAkIM28kKqPklIGZoSusd491T/eOwfiXeeDm1AfyekWRf3dVbMGEbg9O0
aP4MkybF/DPq7vLqc4D/48M/StBIVrMw2dNQlYwTOZJVXK9lK6mMDug+wEemD9HI
Vg6r+Y0SwEadI3thw0H8mC/zpl+leXOIQ/exWHNwQTNHaggPCGxCCqD2Bx7Ek2HX
mTxwgoxUMotxOFzKjlX/OU33vbCsanxXiiOSAKFHh3sC+GXCSlUlfS8xAICF3Aqc
hkrGzYInCEQcByKj+gulBR41B0kfKdsK6fhJFIccyrTjcBX6FNOesunRRFBfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUsGxdVB9Tu4fML+p9B4kNZ0/Pq3cwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Fm
WEZNa1F5cEpqYVNhVXp0M0VRUW9KTmNWdXpoaG1kQk51MVc0WEVvM2kvMS8yQzFD
Qzk0MzUzN0U3MkFBNTk5QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
AF5V05iU5OCCZKHd2jn0V/78brySj7z54yGD6+v3/dvB1TncAsP46RI7IhJhhIN8
sbP0lcmCRpwxxsZGk+8egbVMGIDbhwZhYb17U/ACSRyTGeeofgyRIxypDdG2Eg6Q
P9BgSKtXOeC5afS1zv2xTiGNbgVe4tRJkf3cS5tVMAO+MMZsF/9s+KZaksmyI/BB
77vs1lwlCPGUvaUfBS2lUCS9vn3Ld6qu8ls17+sXU9eWeDnGYkVdOLq8dwnUo8tN
jIjeoWjszze2oUBu9ZB7dNrbBaWJ+W7lq//pkpBZQ1Y99VLRxaVMKGoBjPjpZ7as
3Ly3aWGNuXuv0K6qUFUP3Q==
-----END CERTIFICATE-----
Generated at Wed May 14 07:54:16 2025 by rpki-client