Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
File:                     42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json)
Hash identifier:          05lktMNwClKZN20dYtjzl9B14LX1FNNwY0YTxqLKf2c=
Subject key identifier:   C9:02:1B:40:ED:56:7E:17:B3:8A:97:60:38:1A:98:11:77:D3:7F:7A
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       06D40CB95FB210AC13B883B68083E526EF70FF37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
Manifest number:          01FC
Signing time:             Sun 08 Jun 2025 15:09:03 +0000
Manifest this update:     Sun 08 Jun 2025 15:04:03 +0000
Manifest next update:     Mon 09 Jun 2025 18:22:03 +0000
Files and hashes:         1: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: 5UTaU84R+nywBkmh2VOMTd/UzpdSJSI3l+dyzYmnuFo=)
                          2: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: vGrE2QkyLb0ZqSk3VbDFyFYQZDWgFD0gMkk1SZHUtZ8=)
                          3: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: IADFzSevHl4ce05kCWQxGwAsTo4Bn5SVgqNyIvGMnW0=)
                          4: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: NU6uq0C87qGWTrG4MN1JdLZtRk94lw5YmEnKWfV5ZXU=)
                          5: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: ceYoAtNP9I/fYOCde9To24oMt8TJcIju9lbdS97lAIM=)
                          6: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: UrG52ZPguo6yArGwMeYZBknSlHnaNmN3dn07xO9WcKM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d4:0c:b9:5f:b2:10:ac:13:b8:83:b6:80:83:e5:26:ef:70:ff:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Jun  8 15:04:03 2025 GMT
            Not After : Jun  9 18:22:03 2025 GMT
        Subject: CN=C9021B40ED567E17B38A9760381A981177D37F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:b1:c6:80:80:74:e7:ff:87:a9:9f:21:84:
                    e0:ee:0b:d3:c8:ed:24:bf:f2:75:da:16:dc:4b:a9:
                    5c:77:98:33:8b:20:c7:b7:89:6d:cf:bc:82:1b:1c:
                    ec:61:35:73:f1:b7:65:f0:35:a3:0e:40:bf:61:43:
                    12:a9:ba:bb:cd:a9:97:37:2e:c8:30:ec:03:e0:e4:
                    8d:8a:4e:a8:74:69:bd:58:34:d8:01:52:2f:93:75:
                    2e:4d:2d:b4:8e:1f:68:8e:fd:ec:14:22:d6:27:2a:
                    23:80:86:21:27:fb:17:ad:21:f6:78:82:7a:e4:22:
                    0c:d0:bd:ff:ef:85:38:f2:3d:2d:f9:81:7d:e9:16:
                    c5:3f:3f:58:44:7a:19:ff:6e:94:a0:5d:7e:15:be:
                    6b:f9:6f:05:e0:07:3e:73:8a:df:a0:9e:e5:a4:11:
                    be:68:27:4f:ab:64:1e:c5:d6:b2:7e:90:0d:20:45:
                    fd:88:a7:66:63:ac:20:e5:83:bc:70:01:3e:9c:9a:
                    6d:4b:ce:d2:e9:e7:12:43:04:84:e3:d8:4e:e3:1c:
                    cb:e9:a8:cc:7d:5d:a5:d2:7f:c7:9d:f7:ed:b0:5c:
                    18:b3:bf:b4:e1:95:32:f0:17:93:03:9b:82:d1:51:
                    49:8c:63:ed:49:dc:b5:b8:b7:6a:b4:5b:ed:a1:ff:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:1B:40:ED:56:7E:17:B3:8A:97:60:38:1A:98:11:77:D3:7F:7A
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:91:63:65:63:ba:f0:e8:aa:20:f1:36:af:20:4f:4c:d4:
         19:9e:76:62:8a:77:53:74:9f:ce:c4:ac:b5:53:24:5e:0e:48:
         86:06:44:52:cf:d6:a0:6b:0b:f7:d7:96:c1:69:2b:87:e4:73:
         0d:3f:77:ff:e6:bd:3d:eb:be:c1:e8:c3:af:07:4b:73:a8:12:
         03:f2:23:f3:b2:bb:aa:cd:0b:83:98:fa:44:ed:6f:dd:fa:dd:
         fe:ff:3e:29:63:08:c4:93:4f:5d:97:4f:43:80:0b:d2:3b:8d:
         c4:47:37:95:91:bd:38:f7:ba:36:96:bb:2b:0d:67:10:1c:29:
         a0:53:34:9e:8c:9f:4c:ac:19:20:8e:51:40:7e:91:a9:d9:54:
         37:fa:b3:96:24:b7:c9:06:80:35:74:1f:5f:98:b4:cc:3e:ae:
         81:57:aa:52:fd:52:e1:3a:d0:dd:ea:b4:5f:60:7d:28:2e:24:
         bc:da:bd:0b:ac:be:90:5a:01:bc:fb:70:a1:48:ad:77:a6:84:
         0e:c4:09:21:53:74:e4:a8:83:0e:be:b2:e2:63:42:b2:0f:18:
         39:88:e4:28:e0:2d:56:be:78:97:81:7c:49:29:02:72:69:15:
         84:d1:e4:6e:56:d2:c8:dc:a0:00:a6:79:d8:ac:1e:97:fd:0a:
         63:9b:11:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBtQMuV+yEKwTuIO2gIPlJu9w/zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJENjA0Njk4QUZBOUJBNDkyODA3Mzk4QUE2NTI3QjZF
N0IwNEFCNDAeFw0yNTA2MDgxNTA0MDNaFw0yNTA2MDkxODIyMDNaMDMxMTAvBgNV
BAMTKEM5MDIxQjQwRUQ1NjdFMTdCMzhBOTc2MDM4MUE5ODExNzdEMzdGN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q7HGgIB05/+HqZ8hhODuC9PI
7SS/8nXaFtxLqVx3mDOLIMe3iW3PvIIbHOxhNXPxt2XwNaMOQL9hQxKpurvNqZc3
Lsgw7APg5I2KTqh0ab1YNNgBUi+TdS5NLbSOH2iO/ewUItYnKiOAhiEn+xetIfZ4
gnrkIgzQvf/vhTjyPS35gX3pFsU/P1hEehn/bpSgXX4Vvmv5bwXgBz5zit+gnuWk
Eb5oJ0+rZB7F1rJ+kA0gRf2Ip2ZjrCDlg7xwAT6cmm1LztLp5xJDBITj2E7jHMvp
qMx9XaXSf8ed9+2wXBizv7ThlTLwF5MDm4LRUUmMY+1J3LW4t2q0W+2h/wIhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyQIbQO1WfhezipdgOBqYEXfTf3owHwYDVR0j
BBgwFoAUQtYEaYr6m6SSgHOYqmUntuewSrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQ
NU4vMC80MkQ2MDQ2OThBRkE5QkE0OTI4MDczOThBQTY1MjdCNkU3QjA0QUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRDYwNDY5OEFGQTlCQTQ5
MjgwNzM5OEFBNjUyN0I2RTdCMDRBQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQNU4vMC80
MkQ2MDQ2OThBRkE5QkE0OTI4MDczOThBQTY1MjdCNkU3QjA0QUI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASKmRY2VjuvDoqiDxNq8gT0zUGZ52Yop3U3SfzsSstVMkXg5IhgZEUs/WoGsL
99eWwWkrh+RzDT93/+a9Peu+wejDrwdLc6gSA/Ij87K7qs0Lg5j6RO1v3frd/v8+
KWMIxJNPXZdPQ4AL0juNxEc3lZG9OPe6Npa7Kw1nEBwpoFM0noyfTKwZII5RQH6R
qdlUN/qzliS3yQaANXQfX5i0zD6ugVeqUv1S4TrQ3eq0X2B9KC4kvNq9C6y+kFoB
vPtwoUitd6aEDsQJIVN05KiDDr6y4mNCsg8YOYjkKOAtVr54l4F8SSkCcmkVhNHk
blbSyNygAKZ52Kwel/0KY5sRRA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:05:25 2025 by rpki-client