Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
File:                     4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft (raw, json)
Hash identifier:          KpnUU7AKQScmcFtHRDGfopT3nPIRIJZ1q/BWJIphI74=
Subject key identifier:   8C:13:A1:19:B7:07:66:94:F8:15:DA:97:54:14:8B:F5:F3:56:EF:3F
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Certificate issuer:       /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial:       6B9D916D564388A876F56D09C0816A41A078967A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
Manifest number:          0120
Signing time:             Tue 10 Jun 2025 11:31:56 +0000
Manifest this update:     Tue 10 Jun 2025 11:26:56 +0000
Manifest next update:     Wed 11 Jun 2025 11:31:56 +0000
Files and hashes:         1: 3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (hash: jHX8rKTJIVzH1nDn1ZKmg7Dc/AgHN8F973eXTDMc5Pc=)
                          2: 323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa (hash: eON3fmQU63Ih6ClI7ympPMMn6/ISwZ/GREn+q9EZ44w=)
                          3: 4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl (hash: JZd6tLuqgdLyn96oeZ7uJ019yM2ZOCWJ7xYeKAuWarI=)
                          4: 3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa (hash: cKppDjg15XGqHP5VE+Ih6G66OwTO/3PTimS9AXEeOq8=)
                          5: 3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa (hash: Xojmt+hOhWk/eAfqNyLm582FKoELsaSO/YaHOf7nRpo=)
                          6: 3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa (hash: QKaypV5BfWHpdcMntxxAMv59Auy88+2q8C4vwfXD0CQ=)
                          7: 323830343a373031343a3a2f33322d3333203d3e20323730373034.roa (hash: tSTWoRQ5dSXgBZsgqqaXNgyq6qepM994e12zSVyFFbE=)
                          8: 3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa (hash: BgqojGnhAcW+VI4Pz/gdnTQWDpCF3vYZ6Aie1Ik4K1g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 11:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9d:91:6d:56:43:88:a8:76:f5:6d:09:c0:81:6a:41:a0:78:96:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
        Validity
            Not Before: Jun 10 11:26:56 2025 GMT
            Not After : Jun 11 11:31:56 2025 GMT
        Subject: CN=8C13A119B7076694F815DA9754148BF5F356EF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:55:84:09:de:0b:7e:fe:88:a2:fc:e4:a2:
                    58:98:41:01:b6:af:6c:31:cf:b4:7b:57:a5:aa:8b:
                    4e:70:13:78:2a:8f:43:12:97:c0:2e:75:f6:b7:c4:
                    c2:25:97:88:27:6c:7e:d2:db:fd:ac:bc:76:e1:23:
                    eb:53:c2:36:c3:a3:98:6a:a6:a8:41:be:49:95:ee:
                    9f:37:f7:0a:73:63:42:3f:eb:8a:52:ca:04:7e:c8:
                    66:b6:ed:38:b5:f7:76:3c:02:39:50:af:54:d4:0f:
                    d8:fc:49:93:11:58:5c:08:9d:d0:27:06:8d:36:81:
                    f9:83:59:c9:a5:ea:e8:c7:19:98:20:76:0e:87:6e:
                    14:3f:52:d7:1a:6d:7d:95:b5:cd:ac:9b:c7:f4:40:
                    f8:56:d7:48:7d:f8:b2:55:fa:17:e2:cb:8f:02:71:
                    2b:2b:c7:73:ce:bb:7e:78:cb:ea:ff:35:8a:b7:89:
                    e3:80:f0:75:b5:a9:03:cb:37:be:7e:9a:a4:e9:76:
                    43:fd:88:5b:60:a4:ae:55:9e:2a:0e:2f:d8:60:d6:
                    e7:95:72:e6:5e:29:12:53:37:c2:f8:66:89:c6:3b:
                    22:b5:14:db:49:93:cb:c4:6a:be:23:75:28:4b:d8:
                    8b:50:fb:b1:99:32:bb:51:95:ce:00:1c:97:9f:bc:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:A1:19:B7:07:66:94:F8:15:DA:97:54:14:8B:F5:F3:56:EF:3F
            X509v3 Authority Key Identifier:
                keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:4b:50:6a:57:98:ae:04:a5:9f:47:04:9f:92:1d:e2:ab:
         0f:8e:a6:18:0a:f8:c7:2c:ae:93:56:01:60:63:de:9e:39:df:
         7c:38:37:df:fe:b9:4f:67:50:25:d9:b0:94:0f:10:10:01:cd:
         94:27:61:4b:cc:f9:b4:2c:d2:d8:8e:81:59:8c:66:62:0f:6c:
         91:dc:4f:2c:6e:60:11:3c:6b:dc:c2:b0:87:4e:cf:51:67:bf:
         12:5d:5d:d9:cf:0e:f2:fe:2e:40:ae:01:54:8d:0a:15:2f:60:
         7b:30:28:16:f9:8d:2d:0f:64:c9:dd:15:77:46:54:15:d7:3a:
         98:9b:86:07:68:0e:4b:6c:55:20:aa:f7:d4:a0:42:1c:8d:47:
         06:65:ac:fd:a2:39:77:ce:76:83:c9:94:db:d1:f5:57:24:6b:
         c3:cb:87:62:df:14:bb:c9:52:22:ff:e9:2b:ac:cb:74:59:67:
         e2:f1:79:2c:a6:b1:ce:6a:0f:b3:88:72:ea:a0:ab:ab:4d:b6:
         37:1d:e3:d0:48:2a:24:b6:36:0a:51:d6:fb:49:cf:bf:8a:93:
         75:d7:96:54:96:05:09:fb:b7:6f:c9:1b:8c:ce:3e:4a:ac:2a:
         d9:a9:f6:32:eb:b9:21:08:fd:87:77:31:67:4b:af:25:a2:5f:
         c9:79:32:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUa52RbVZDiKh29W0JwIFqQaB4lnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU5NTRFOTIzOThERTEwMDA0RDg4MDVDNjFBRkRGNjgz
MUZBNEFBNTAeFw0yNTA2MTAxMTI2NTZaFw0yNTA2MTExMTMxNTZaMDMxMTAvBgNV
BAMTKDhDMTNBMTE5QjcwNzY2OTRGODE1REE5NzU0MTQ4QkY1RjM1NkVGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UVWECd4Lfv6IovzkoliYQQG2
r2wxz7R7V6Wqi05wE3gqj0MSl8Audfa3xMIll4gnbH7S2/2svHbhI+tTwjbDo5hq
pqhBvkmV7p839wpzY0I/64pSygR+yGa27Ti193Y8AjlQr1TUD9j8SZMRWFwIndAn
Bo02gfmDWcml6ujHGZggdg6HbhQ/UtcabX2Vtc2sm8f0QPhW10h9+LJV+hfiy48C
cSsrx3POu354y+r/NYq3ieOA8HW1qQPLN75+mqTpdkP9iFtgpK5VnioOL9hg1ueV
cuZeKRJTN8L4ZonGOyK1FNtJk8vEar4jdShL2ItQ+7GZMrtRlc4AHJefvOENAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjBOhGbcHZpT4FdqXVBSL9fNW7z8wHwYDVR0j
BBgwFoAUTpVOkjmN4QAE2IBcYa/faDH6SqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNV
TFUvMC80RTk1NEU5MjM5OERFMTAwMDREODgwNUM2MUFGREY2ODMxRkE0QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOTU0RTkyMzk4REUxMDAw
NEQ4ODA1QzYxQUZERjY4MzFGQTRBQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGU1aUtvNVV2eTNTc1RIYm4yS2dyMmVYbnhEejM3OTN0NEwyRndCbnNVTFUvMC80
RTk1NEU5MjM5OERFMTAwMDREODgwNUM2MUFGREY2ODMxRkE0QUE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAktZLUGpXmK4EpZ9HBJ+SHeKrD46mGAr4xyyuk1YBYGPenjnffDg33/65T2dQ
JdmwlA8QEAHNlCdhS8z5tCzS2I6BWYxmYg9skdxPLG5gETxr3MKwh07PUWe/El1d
2c8O8v4uQK4BVI0KFS9gezAoFvmNLQ9kyd0Vd0ZUFdc6mJuGB2gOS2xVIKr31KBC
HI1HBmWs/aI5d852g8mU29H1VyRrw8uHYt8Uu8lSIv/pK6zLdFln4vF5LKaxzmoP
s4hy6qCrq022Nx3j0EgqJLY2ClHW+0nPv4qTddeWVJYFCfu3b8kbjM4+Sqwq2an2
Muu5IQj9h3cxZ0uvJaJfyXkyPw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:14:04 2025 by rpki-client