Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
File:                     0667C1E975614C995A6FB737132548928E943717.mft (raw, json)
Hash identifier:          WXezqgOwVk6iRL/y12+7xUsfSOSRx35vVe6/mxThTy8=
Subject key identifier:   F0:47:28:05:84:5A:20:5C:16:FE:A1:E8:AF:09:B5:7B:08:11:95:A2
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       0C1E77A139ECE6A64E3103E101386E27E571D54C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
Manifest number:          028F
Signing time:             Tue 29 Jul 2025 07:34:40 +0000
Manifest this update:     Tue 29 Jul 2025 07:29:40 +0000
Manifest next update:     Wed 30 Jul 2025 10:09:40 +0000
Files and hashes:         1: 0667C1E975614C995A6FB737132548928E943717.crl (hash: AM5jS0Hmmnc45l5w2twc0fh+Sibjd22sjzTcDnKh7j4=)
                          2: 3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (hash: NWCm4yJKj/f/UfUiGP5Z5BIupgwy4qUGgoBd+d6DqQ8=)
                          3: 3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (hash: jOaa9Y6B1wldYTqunC0ifArH1I/MagZETYt4EwF5yq0=)
                          4: 3138372e3131312e3131352e302f32342d3234203d3e20323731363830.roa (hash: oIInCdgaGC3oZ63SvbkLHxdHc1iFO02Y1xvdWzEcFSI=)
                          5: 3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (hash: Nz+bAcJFslkBbD7YryBSD/8I12DOUbudgxJ6Kj4NZ2E=)
                          6: 3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (hash: JVu8beyHKjU9ufH+KvindaEB+yOIp4s8pyXSuRmYUGk=)
                          7: 323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (hash: 8mwojufcPep+splbZMuv38KNaQbe2kXCGWx7hQgtXxA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 10:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1e:77:a1:39:ec:e6:a6:4e:31:03:e1:01:38:6e:27:e5:71:d5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Jul 29 07:29:40 2025 GMT
            Not After : Jul 30 10:09:40 2025 GMT
        Subject: CN=F0472805845A205C16FEA1E8AF09B57B081195A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:92:ea:3b:33:40:df:04:46:c1:74:a2:8a:
                    62:19:c3:27:36:15:67:9d:08:a7:b2:89:50:65:40:
                    cf:1b:79:e5:a2:57:ef:74:3e:38:b0:4e:05:fb:98:
                    58:c4:a7:0c:9c:f5:c1:10:f9:79:03:42:9c:b8:a7:
                    2b:32:af:ef:34:04:9c:4d:73:2d:d4:c7:96:30:b0:
                    3f:49:54:bc:08:24:48:c2:a7:3c:6f:93:12:e9:7a:
                    c1:4c:d4:01:bb:84:39:ac:93:12:52:ab:35:9c:20:
                    b3:59:dd:0e:a1:e4:67:3a:f4:05:42:e8:83:a6:99:
                    dd:1d:a9:8d:a2:c4:88:b7:f0:be:5a:55:26:e5:c4:
                    2c:60:50:c9:4c:51:e1:46:28:b7:a9:86:e5:49:e1:
                    e6:ac:fa:bd:0a:fe:b4:80:31:4a:73:c0:f0:8b:86:
                    b4:df:0e:34:a2:43:e3:6a:a2:98:3d:b2:a1:85:27:
                    d7:eb:28:68:78:36:e0:56:99:43:97:ee:11:ee:03:
                    a5:9c:cb:c4:0c:8e:c6:02:b7:7c:50:5d:e3:73:3b:
                    88:96:6c:fd:c7:d0:61:a4:63:bd:de:27:0d:d0:88:
                    2b:66:f3:51:02:d9:0d:c7:f5:a2:ed:05:d7:6f:7b:
                    8c:ea:2e:67:1d:d6:ec:80:e5:19:e2:49:cb:9a:a0:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:28:05:84:5A:20:5C:16:FE:A1:E8:AF:09:B5:7B:08:11:95:A2
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0e:08:a2:19:e8:5a:94:85:61:a7:c5:75:c6:49:82:1a:70:
         b2:c6:a3:00:7e:4c:84:cb:87:b8:ba:76:36:38:87:35:87:ff:
         dd:df:76:3b:d1:49:36:df:4b:13:74:30:60:8a:5f:7a:5c:2b:
         04:3a:e6:11:5b:80:f0:f6:84:b8:59:c1:d5:73:5f:13:f6:f2:
         e4:ee:52:50:ce:d8:d9:4f:4c:2d:9d:cc:51:2f:e0:d6:2e:62:
         e7:47:d1:9e:15:3c:9c:de:90:70:a7:ba:5a:03:e9:07:bc:17:
         44:27:66:ac:ff:61:e1:3c:a5:c4:aa:4f:02:b4:7c:28:0d:8a:
         b9:a9:f6:30:85:60:f2:83:41:cd:28:ab:51:b6:e9:1f:78:ac:
         25:2f:44:fd:01:53:79:17:33:d8:18:76:0e:ea:cc:8c:6e:8e:
         d5:f5:ef:e1:3d:fa:65:56:4a:e9:82:ea:87:f1:a6:7f:00:dd:
         30:31:75:bf:70:ef:49:65:cf:d6:aa:50:44:5c:b9:27:85:bf:
         ee:63:f4:ca:55:a8:e7:1c:79:ac:af:44:39:7d:11:7a:c7:15:
         e0:fe:f1:1e:82:f1:6f:64:cb:4e:0d:a5:ea:cf:52:08:7b:c7:
         b8:7e:f9:d0:d9:dd:f6:6b:24:d3:d0:63:19:b4:74:be:2c:32:
         97:34:c3:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDB53oTns5qZOMQPhAThuJ+Vx1UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2N0MxRTk3NTYxNEM5OTVBNkZCNzM3MTMyNTQ4OTI4
RTk0MzcxNzAeFw0yNTA3MjkwNzI5NDBaFw0yNTA3MzAxMDA5NDBaMDMxMTAvBgNV
BAMTKEYwNDcyODA1ODQ1QTIwNUMxNkZFQTFFOEFGMDlCNTdCMDgxMTk1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblZLqOzNA3wRGwXSiimIZwyc2
FWedCKeyiVBlQM8beeWiV+90PjiwTgX7mFjEpwyc9cEQ+XkDQpy4pysyr+80BJxN
cy3Ux5YwsD9JVLwIJEjCpzxvkxLpesFM1AG7hDmskxJSqzWcILNZ3Q6h5Gc69AVC
6IOmmd0dqY2ixIi38L5aVSblxCxgUMlMUeFGKLephuVJ4eas+r0K/rSAMUpzwPCL
hrTfDjSiQ+Nqopg9sqGFJ9frKGh4NuBWmUOX7hHuA6Wcy8QMjsYCt3xQXeNzO4iW
bP3H0GGkY73eJw3QiCtm81EC2Q3H9aLtBddve4zqLmcd1uyA5RniScuaoBxrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8EcoBYRaIFwW/qHorwm1ewgRlaIwHwYDVR0j
BBgwFoAUBmfB6XVhTJlab7c3EyVIko6UNxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpj
YTIvMS8wNjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjdDMUU5NzU2MTRDOTk1
QTZGQjczNzEzMjU0ODkyOEU5NDM3MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpjYTIvMS8w
NjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXA4IohnoWpSFYafFdcZJghpwssajAH5MhMuHuLp2NjiHNYf/3d92O9FJNt9L
E3QwYIpfelwrBDrmEVuA8PaEuFnB1XNfE/by5O5SUM7Y2U9MLZ3MUS/g1i5i50fR
nhU8nN6QcKe6WgPpB7wXRCdmrP9h4TylxKpPArR8KA2Kuan2MIVg8oNBzSirUbbp
H3isJS9E/QFTeRcz2Bh2DurMjG6O1fXv4T36ZVZK6YLqh/GmfwDdMDF1v3DvSWXP
1qpQRFy5J4W/7mP0ylWo5xx5rK9EOX0RescV4P7xHoLxb2TLTg2l6s9SCHvHuH75
0Nnd9msk09BjGbR0viwylzTDoA==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:42 2025 by rpki-client