Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          P+ZDsV5d/xtgb3yE5i2/eX9oWt5BiDJuINNptAG1sd0=
Subject key identifier:   E2:48:73:34:39:19:C1:D9:01:6C:78:8F:F4:B4:94:26:74:0C:8C:43
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       41D4EFCDAF652F27397A7B46EAF533647F9E6285
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          01F7
Signing time:             Fri 11 Apr 2025 08:26:25 +0000
Manifest this update:     Fri 11 Apr 2025 08:21:25 +0000
Manifest next update:     Sat 12 Apr 2025 10:57:25 +0000
Files and hashes:         1: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
                          2: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
                          3: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)
                          4: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: S2jsCkjhwm5AMCK/xeqlSYfZTfxRxq1McKXMKyLF1LU=)
                          5: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 10:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d4:ef:cd:af:65:2f:27:39:7a:7b:46:ea:f5:33:64:7f:9e:62:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Apr 11 08:21:25 2025 GMT
            Not After : Apr 12 10:57:25 2025 GMT
        Subject: CN=E24873343919C1D9016C788FF4B49426740C8C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:97:c0:e8:59:d4:e5:a8:25:d6:2d:76:8a:
                    8a:67:cd:81:32:01:02:77:55:90:11:44:3f:f7:7e:
                    6a:a3:85:6d:d3:03:a8:95:75:62:30:fc:48:cb:c8:
                    7f:28:56:80:b1:ca:46:cd:03:94:d6:bb:bf:61:f8:
                    60:b8:26:2a:ec:b0:54:2c:e5:e2:49:c5:c8:f1:39:
                    76:48:9f:fb:d7:3e:a8:8b:ea:94:4c:43:d4:83:49:
                    26:b1:19:15:97:2f:14:6b:4f:4a:cb:5b:2d:03:74:
                    74:43:89:51:83:68:34:45:39:3e:ac:6a:bc:9f:dd:
                    5d:c2:82:08:fe:a8:30:ec:33:10:b7:5c:8f:f1:37:
                    71:4a:c4:a5:eb:88:6a:ad:1f:98:57:e7:20:fb:c5:
                    d1:1f:38:f6:ab:ae:28:a2:4c:26:2f:63:84:2d:72:
                    e9:27:d2:a9:20:ef:56:20:2b:6f:dc:47:5d:60:74:
                    94:9b:59:4d:7a:aa:41:fa:d5:4f:a3:b7:94:be:e6:
                    89:a8:95:50:91:73:3b:0a:ba:a0:da:37:b8:7b:a7:
                    a4:f5:48:97:0b:03:4e:6b:a6:56:78:de:59:66:6b:
                    58:32:22:6b:a5:ad:3c:3e:8c:98:d7:4e:fe:ce:0d:
                    4e:0f:30:54:63:91:c1:78:81:1f:e1:fa:de:bb:f0:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:48:73:34:39:19:C1:D9:01:6C:78:8F:F4:B4:94:26:74:0C:8C:43
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:3a:c8:32:2c:e7:c0:e1:a3:3e:5a:9c:82:89:83:76:d1:
         56:ab:3c:2d:45:94:96:52:07:ee:3c:b8:e1:c2:2b:d7:a5:e9:
         f5:65:7e:9d:16:7d:34:8e:00:8a:03:2c:7c:ff:e1:79:37:3f:
         9f:ed:9f:41:ad:03:d7:0e:5e:d4:40:f0:0c:6a:cf:4f:33:f4:
         3a:5a:b7:7d:8c:73:af:06:f4:53:a9:18:0f:d1:94:1b:56:93:
         de:cd:87:b4:3e:5c:9b:8d:d4:af:ed:c4:ea:e1:5a:af:e0:96:
         f6:6f:e0:86:03:4a:cc:5b:a6:ce:14:c9:6f:d8:0a:6b:20:bc:
         b2:4b:c5:e7:d6:74:32:d0:2c:3c:52:b7:23:95:69:99:c7:f1:
         af:b8:7d:85:e5:aa:0e:09:33:34:59:86:a4:f3:ae:7b:b8:0f:
         49:91:79:25:fa:36:56:94:c6:52:3b:3f:94:f2:6a:7c:0a:3e:
         86:18:51:cd:fc:32:b5:45:cb:b1:1c:c3:aa:87:3d:4a:3c:f0:
         35:9e:f4:46:c1:0c:95:58:71:d8:cc:4e:ab:05:53:4a:48:7a:
         3d:ac:76:a1:8d:e7:84:83:7a:59:09:66:a6:54:54:3a:16:89:
         6d:29:43:c5:fd:21:7d:1a:58:a8:40:f3:30:df:f6:c8:47:84:
         fd:84:47:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQdTvza9lLyc5entG6vUzZH+eYoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0N0NDQzY4NENFMzA4QzhDREJBRjA0RTkwQzlFMThE
QjMzQUMxNzAeFw0yNTA0MTEwODIxMjVaFw0yNTA0MTIxMDU3MjVaMDMxMTAvBgNV
BAMTKEUyNDg3MzM0MzkxOUMxRDkwMTZDNzg4RkY0QjQ5NDI2NzQwQzhDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzZfA6FnU5agl1i12iopnzYEy
AQJ3VZARRD/3fmqjhW3TA6iVdWIw/EjLyH8oVoCxykbNA5TWu79h+GC4JirssFQs
5eJJxcjxOXZIn/vXPqiL6pRMQ9SDSSaxGRWXLxRrT0rLWy0DdHRDiVGDaDRFOT6s
aryf3V3Cggj+qDDsMxC3XI/xN3FKxKXriGqtH5hX5yD7xdEfOParriiiTCYvY4Qt
cukn0qkg71YgK2/cR11gdJSbWU16qkH61U+jt5S+5omolVCRczsKuqDaN7h7p6T1
SJcLA05rplZ43llma1gyImulrTw+jJjXTv7ODU4PMFRjkcF4gR/h+t678Ov9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4khzNDkZwdkBbHiP9LSUJnQMjEMwHwYDVR0j
BBgwFoAUKEfMxoTOMIyM268E6QyeGNszrBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5DM0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4
YlkvMi8yODQ3Q0NDNjg0Q0UzMDhDOENEQkFGMDRFOTBDOUUxOERCMzNBQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NDdDQ0M2ODRDRTMwOEM4
Q0RCQUYwNEU5MEM5RTE4REIzM0FDMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm5DM0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4YlkvMi8y
ODQ3Q0NDNjg0Q0UzMDhDOENEQkFGMDRFOTBDOUUxOERCMzNBQzE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATcg6yDIs58Dhoz5anIKJg3bRVqs8LUWUllIH7jy44cIr16Xp9WV+nRZ9NI4A
igMsfP/heTc/n+2fQa0D1w5e1EDwDGrPTzP0Olq3fYxzrwb0U6kYD9GUG1aT3s2H
tD5cm43Ur+3E6uFar+CW9m/ghgNKzFumzhTJb9gKayC8skvF59Z0MtAsPFK3I5Vp
mcfxr7h9heWqDgkzNFmGpPOue7gPSZF5Jfo2VpTGUjs/lPJqfAo+hhhRzfwytUXL
sRzDqoc9SjzwNZ70RsEMlVhx2MxOqwVTSkh6Pax2oY3nhIN6WQlmplRUOhaJbSlD
xf0hfRpYqEDzMN/2yEeE/YRHFw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:23 2025 by rpki-client