Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
File:                     D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json)
Hash identifier:          1K7mKf1iINcFPflUv7uKye3iL3vCZuNoS5NEpuNisOU=
Subject key identifier:   8D:A0:C3:AA:5B:1B:44:F4:B5:7C:6C:18:1F:2E:E6:73:47:07:DB:33
Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B
Certificate issuer:       /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
Certificate serial:       7F94972DD063D9D7A48B10EAC26D346BC36F25F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
Manifest number:          E2
Signing time:             Tue 10 Jun 2025 14:31:46 +0000
Manifest this update:     Tue 10 Jun 2025 14:26:46 +0000
Manifest next update:     Wed 11 Jun 2025 16:35:46 +0000
Files and hashes:         1: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: keTEGbh9qyR70BnbqNpnn+4t56CpCWCdcKwsoEfOWSw=)
                          2: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=)
                          3: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=)
                          4: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:94:97:2d:d0:63:d9:d7:a4:8b:10:ea:c2:6d:34:6b:c3:6f:25:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B
        Validity
            Not Before: Jun 10 14:26:46 2025 GMT
            Not After : Jun 11 16:35:46 2025 GMT
        Subject: CN=8DA0C3AA5B1B44F4B57C6C181F2EE6734707DB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:6a:04:7b:e1:91:f4:76:09:e3:83:45:fc:
                    5d:65:bb:a7:12:26:df:a5:11:32:c7:63:f3:f1:b6:
                    c9:10:9a:3d:8e:5b:34:7b:44:65:a6:82:48:cc:93:
                    bd:ae:5f:d5:f1:b0:91:0c:0b:af:b0:15:f6:80:b4:
                    da:08:58:f4:08:98:b5:fe:a5:35:a1:b9:4f:ca:21:
                    ad:0a:10:ed:9d:b2:d5:53:dd:da:d9:2e:3f:c2:4f:
                    39:c4:69:d6:b5:c4:9c:02:20:2a:c7:b8:74:d4:d8:
                    a4:81:27:c8:67:51:90:86:78:41:6c:aa:fb:0f:13:
                    37:87:8e:b2:8f:c6:94:ef:1c:c1:6e:fb:83:2d:ac:
                    a4:f8:eb:a7:be:06:0a:57:69:f1:f3:a8:d7:12:35:
                    84:3f:85:bb:54:a0:c8:9b:e1:e0:7b:ce:87:41:0d:
                    1a:75:ae:a8:b6:2a:76:0c:45:47:ba:0a:18:38:31:
                    e4:37:f6:d6:de:b7:b9:94:c8:28:6a:6c:5d:32:72:
                    1f:32:a6:31:63:e1:96:e1:d1:ce:fe:92:c8:e3:4f:
                    e7:62:f5:b4:13:fc:dd:ac:c5:4c:88:5c:1f:98:34:
                    03:85:e9:d2:c3:d7:55:9a:0d:1a:91:b2:7a:65:ce:
                    cc:37:6b:36:74:7d:8d:90:b6:0e:68:ad:fb:6a:8b:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:C3:AA:5B:1B:44:F4:B5:7C:6C:18:1F:2E:E6:73:47:07:DB:33
            X509v3 Authority Key Identifier:
                keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:e6:6f:02:bb:72:89:28:80:8c:d1:48:53:9c:a6:a5:e6:
         1e:6c:9b:1a:99:e6:1e:f4:4a:75:7d:e2:6e:f6:0a:57:6b:fe:
         82:58:6b:d3:6d:76:01:da:4f:58:13:dc:3d:c9:f4:98:0b:bc:
         50:c3:6d:12:1b:a4:19:bd:28:35:1c:f1:93:34:5e:5f:dd:e9:
         32:33:0b:2a:0a:00:d7:92:fe:20:3a:9f:ba:ce:ae:e6:7a:e8:
         d5:27:88:ea:ed:f7:7c:5a:b3:bf:ed:0e:8c:85:96:5a:9c:6d:
         4a:fd:fa:33:27:9e:18:11:17:c3:4c:7a:48:53:ba:a0:74:27:
         04:10:ad:6f:af:bf:5c:7b:df:1b:71:80:1f:2f:b7:47:00:d1:
         b6:9c:a1:b1:70:15:1f:95:7b:0a:d4:73:82:61:45:74:b2:07:
         95:c6:a5:e8:19:bf:20:f3:20:f5:86:75:d1:2e:5b:e8:05:6d:
         73:d6:8f:68:8d:f9:f1:54:e3:70:e9:53:85:1a:65:f1:34:99:
         f5:d2:69:e0:4c:93:21:b3:08:b3:3b:e0:56:66:bd:26:4f:e7:
         b7:9a:d2:f0:bc:3b:4f:73:5c:42:12:46:f3:73:3b:95:92:8c:
         1a:43:0c:f6:44:33:7d:d3:bd:c0:7b:82:e6:3b:47:39:c7:7a:
         dd:7a:3c:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf5SXLdBj2dekixDqwm00a8NvJfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE
MTQ5RDcxQjAeFw0yNTA2MTAxNDI2NDZaFw0yNTA2MTExNjM1NDZaMDMxMTAvBgNV
BAMTKDhEQTBDM0FBNUIxQjQ0RjRCNTdDNkMxODFGMkVFNjczNDcwN0RCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCGoEe+GR9HYJ44NF/F1lu6cS
Jt+lETLHY/PxtskQmj2OWzR7RGWmgkjMk72uX9XxsJEMC6+wFfaAtNoIWPQImLX+
pTWhuU/KIa0KEO2dstVT3drZLj/CTznEada1xJwCICrHuHTU2KSBJ8hnUZCGeEFs
qvsPEzeHjrKPxpTvHMFu+4MtrKT466e+BgpXafHzqNcSNYQ/hbtUoMib4eB7zodB
DRp1rqi2KnYMRUe6Chg4MeQ39tbet7mUyChqbF0ych8ypjFj4Zbh0c7+ksjjT+di
9bQT/N2sxUyIXB+YNAOF6dLD11WaDRqRsnplzsw3azZ0fY2Qtg5orftqi4g5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjaDDqlsbRPS1fGwYHy7mc0cH2zMwHwYDVR0j
BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF
OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E
Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK+HmbwK7cokogIzRSFOcpqXmHmybGpnmHvRKdX3ibvYKV2v+glhr0212AdpP
WBPcPcn0mAu8UMNtEhukGb0oNRzxkzReX93pMjMLKgoA15L+IDqfus6u5nro1SeI
6u33fFqzv+0OjIWWWpxtSv36MyeeGBEXw0x6SFO6oHQnBBCtb6+/XHvfG3GAHy+3
RwDRtpyhsXAVH5V7CtRzgmFFdLIHlcal6Bm/IPMg9YZ10S5b6AVtc9aPaI358VTj
cOlThRpl8TSZ9dJp4EyTIbMIszvgVma9Jk/nt5rS8Lw7T3NcQhJG83M7lZKMGkMM
9kQzfdO9wHuC5jtHOcd63Xo8Vg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:50:57 2025 by rpki-client