Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft (raw, json)
Hash identifier:          hn7f0cppmZwm52uSOleiCU7jpdVHvvt6d6xwBf3znSo=
Subject key identifier:   A8:C7:A8:E3:67:B4:DA:0C:FE:B3:33:0B:0A:90:22:73:15:3D:0E:73
Authority key identifier: 2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Certificate issuer:       /CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
Certificate serial:       D256640176C15C78F6CF006EF4E9A2190CC8E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
Manifest number:          02CE
Signing time:             Fri 25 Jul 2025 18:50:00 +0000
Manifest this update:     Fri 25 Jul 2025 18:45:00 +0000
Manifest next update:     Sat 26 Jul 2025 18:50:00 +0000
Files and hashes:         1: 2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl (hash: VxJN1VH2RCeHElCnZA4z4mIVVyIcupA0Zb9JInLxYyo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl
                          rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:56:64:01:76:c1:5c:78:f6:cf:00:6e:f4:e9:a2:19:0c:c8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Validity
            Not Before: Jul 25 18:45:00 2025 GMT
            Not After : Aug  1 18:50:00 2025 GMT
        Subject: CN=3082010A0282010100E73707394B8A299C500F75C5E17475D99FDA93714BAD20467DFECBEE954917C4834506E14C217F9ABAC9B6BB032A993DF3BF63B290B4F0BD79FD60EDAA76C2985E6B8FA5EE4467F41A1CE14F6964E15DDCA670A757B1FD0A76E09ED02E442BE0FD57F14330D4286E20C79C898F2459F671CE30AFF8C5E6FF086D939EDB1856D50871D77462FE729DF590710AF4C8AA794CB60748EBB292A91EBC3070D2290B54D085D52AEA5F0EBC7F1BB1993B3BDD54CD5A2B10D195F4CF1E99D223983893802BE5888B43FA52300CF28A87DAE0F603059212F87D22AF740288D6A5FE072F45A04E93C128232C7A4B463EEAA5AE3922657783BBCB23F357FE3BA7BA9848A3A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:07:39:4b:8a:29:9c:50:0f:75:c5:e1:74:
                    75:d9:9f:da:93:71:4b:ad:20:46:7d:fe:cb:ee:95:
                    49:17:c4:83:45:06:e1:4c:21:7f:9a:ba:c9:b6:bb:
                    03:2a:99:3d:f3:bf:63:b2:90:b4:f0:bd:79:fd:60:
                    ed:aa:76:c2:98:5e:6b:8f:a5:ee:44:67:f4:1a:1c:
                    e1:4f:69:64:e1:5d:dc:a6:70:a7:57:b1:fd:0a:76:
                    e0:9e:d0:2e:44:2b:e0:fd:57:f1:43:30:d4:28:6e:
                    20:c7:9c:89:8f:24:59:f6:71:ce:30:af:f8:c5:e6:
                    ff:08:6d:93:9e:db:18:56:d5:08:71:d7:74:62:fe:
                    72:9d:f5:90:71:0a:f4:c8:aa:79:4c:b6:07:48:eb:
                    b2:92:a9:1e:bc:30:70:d2:29:0b:54:d0:85:d5:2a:
                    ea:5f:0e:bc:7f:1b:b1:99:3b:3b:dd:54:cd:5a:2b:
                    10:d1:95:f4:cf:1e:99:d2:23:98:38:93:80:2b:e5:
                    88:8b:43:fa:52:30:0c:f2:8a:87:da:e0:f6:03:05:
                    92:12:f8:7d:22:af:74:02:88:d6:a5:fe:07:2f:45:
                    a0:4e:93:c1:28:23:2c:7a:4b:46:3e:ea:a5:ae:39:
                    22:65:77:83:bb:cb:23:f3:57:fe:3b:a7:ba:98:48:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:A8:E3:67:B4:DA:0C:FE:B3:33:0B:0A:90:22:73:15:3D:0E:73
            X509v3 Authority Key Identifier:
                keyid:2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:53:bb:7f:6a:de:16:a2:09:9e:b9:87:88:1e:0d:5e:ed:20:
         5d:26:2e:20:dc:5f:f7:fc:02:6a:c9:19:6a:2c:a6:a2:6b:a4:
         1b:0f:c0:7f:97:93:3d:3a:a6:c6:84:e0:09:ce:97:e4:b3:a6:
         a9:d4:99:ee:f9:4c:af:67:f1:3a:26:79:8c:6b:2b:89:cd:8d:
         8c:82:fe:46:48:65:b8:9e:a3:2f:ba:ae:f1:bf:55:32:a6:e7:
         b8:56:ce:cd:c1:6f:c8:15:75:d6:fe:81:ad:57:03:12:9f:00:
         85:b2:6d:da:95:06:6e:58:4d:48:ae:42:7f:aa:4d:7a:6c:b6:
         64:c0:8c:7f:ba:dd:de:b7:dd:c9:6a:76:69:77:be:6f:63:60:
         02:cd:28:1b:03:a6:84:0f:6f:8b:b2:29:7f:b8:c5:a4:68:40:
         2a:77:2c:e2:b9:d3:bd:c3:ce:8e:a9:18:07:24:b2:89:7c:a3:
         18:47:7d:17:92:b1:23:0d:9c:12:1c:44:11:66:31:c4:71:c3:
         47:11:2d:fe:0a:63:52:fd:4c:54:06:29:ca:2f:b0:9c:84:87:
         b1:2a:b7:8a:ae:12:ad:fb:7a:38:39:39:47:86:d7:03:38:ea:
         fc:8d:45:eb:83:e8:fb:c9:07:15:a2:7a:65:2e:a3:b5:96:77:
         bf:9d:d3:e2
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUANJWZAF2wVx49s8AbvTpohkMyOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5MzM1RTU4RDdGRDFG
ODI2MzgzMDAeFw0yNTA3MjUxODQ1MDBaFw0yNTA4MDExODUwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTczNzA3Mzk0QjhBMjk5QzUw
MEY3NUM1RTE3NDc1RDk5RkRBOTM3MTRCQUQyMDQ2N0RGRUNCRUU5NTQ5MTdDNDgz
NDUwNkUxNEMyMTdGOUFCQUM5QjZCQjAzMkE5OTNERjNCRjYzQjI5MEI0RjBCRDc5
RkQ2MEVEQUE3NkMyOTg1RTZCOEZBNUVFNDQ2N0Y0MUExQ0UxNEY2OTY0RTE1RERD
QTY3MEE3NTdCMUZEMEE3NkUwOUVEMDJFNDQyQkUwRkQ1N0YxNDMzMEQ0Mjg2RTIw
Qzc5Qzg5OEYyNDU5RjY3MUNFMzBBRkY4QzVFNkZGMDg2RDkzOUVEQjE4NTZENTA4
NzFENzc0NjJGRTcyOURGNTkwNzEwQUY0QzhBQTc5NENCNjA3NDhFQkIyOTJBOTFF
QkMzMDcwRDIyOTBCNTREMDg1RDUyQUVBNUYwRUJDN0YxQkIxOTkzQjNCREQ1NENE
NUEyQjEwRDE5NUY0Q0YxRTk5RDIyMzk4Mzg5MzgwMkJFNTg4OEI0M0ZBNTIzMDBD
RjI4QTg3REFFMEY2MDMwNTkyMTJGODdEMjJBRjc0MDI4OEQ2QTVGRTA3MkY0NUEw
NEU5M0MxMjgyMzJDN0E0QjQ2M0VFQUE1QUUzOTIyNjU3NzgzQkJDQjIzRjM1N0ZF
M0JBN0JBOTg0OEEzQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5zcHOUuKKZxQD3XF4XR12Z/ak3FLrSBGff7L7pVJF8SDRQbhTCF/
mrrJtrsDKpk9879jspC08L15/WDtqnbCmF5rj6XuRGf0GhzhT2lk4V3cpnCnV7H9
CnbgntAuRCvg/VfxQzDUKG4gx5yJjyRZ9nHOMK/4xeb/CG2TntsYVtUIcdd0Yv5y
nfWQcQr0yKp5TLYHSOuykqkevDBw0ikLVNCF1SrqXw68fxuxmTs73VTNWisQ0ZX0
zx6Z0iOYOJOAK+WIi0P6UjAM8oqH2uD2AwWSEvh9Iq90AojWpf4HL0WgTpPBKCMs
ektGPuqlrjkiZXeDu8sj81f+O6e6mEijqQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKjHqONntNoM/rMzCwqQInMVPQ5zMB8GA1UdIwQYMBaAFC12Z6qj67cgSKeTNeWN
f9H4JjgwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNr
dDdaYWdSNGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcy
MDQ4QTc5MzM1RTU4RDdGRDFGODI2MzgzMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRDc2NjdBQUEzRUJCNzIwNDhBNzkzMzVFNThEN0ZEMUY4MjYz
ODMwLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNSNmtvNDVIR1MzWGNrdDdaYWdS
NGhaekVtZURBa0RKc25LMmVaRUJyS2RTLzEvMkQ3NjY3QUFBM0VCQjcyMDQ4QTc5
MzM1RTU4RDdGRDFGODI2MzgzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGBTu39q3haiCZ65h4geDV7t
IF0mLiDcX/f8AmrJGWospqJrpBsPwH+Xkz06psaE4AnOl+SzpqnUme75TK9n8Tom
eYxrK4nNjYyC/kZIZbieoy+6rvG/VTKm57hWzs3Bb8gVddb+ga1XAxKfAIWybdqV
Bm5YTUiuQn+qTXpstmTAjH+63d633clqdml3vm9jYALNKBsDpoQPb4uyKX+4xaRo
QCp3LOK5073Dzo6pGAcksol8oxhHfReSsSMNnBIcRBFmMcRxw0cRLf4KY1L9TFQG
KcovsJyEh7Eqt4quEq37ejg5OUeG1wM46vyNReuD6PvJBxWiemUuo7WWd7+d0+I=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:34:21 2025 by rpki-client