Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
File:                     8969EE982CBE9BCDB5B100091931153438B2D419.mft (raw, json)
Hash identifier:          bOjqNATHiwnUn9VcniIAk2tXUwV1BMBYrN+bNfXhi8w=
Subject key identifier:   12:B5:02:11:69:07:21:97:F5:E7:94:F8:08:02:A7:88:97:06:B7:2C
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Certificate issuer:       /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial:       767BD738ADCED2D86E1E64E5A294A9FA63A67D0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
Manifest number:          86
Signing time:             Mon 21 Apr 2025 14:49:07 +0000
Manifest this update:     Mon 21 Apr 2025 14:44:07 +0000
Manifest next update:     Tue 22 Apr 2025 15:18:07 +0000
Files and hashes:         1: 34352e3232382e3139342e302f32332d3233203d3e20323637303933.roa (hash: xXlI1MgqShkusstRWHkCavlRYnjvI1WcS6BfSG0HF3g=)
                          2: 8969EE982CBE9BCDB5B100091931153438B2D419.crl (hash: iGMbutgF1vNgQIQ8wCZ97Ifmf9Sgv0cDPWJcMYKPktk=)
                          3: 34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa (hash: xgr/tcSRt4yqL7n5Eowko+mbkSSkSUP7HngS6B4fO3w=)
                          4: 34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa (hash: 8wLqmwDIkzgTjXeZ0/B/hKgvrewB3sFvzZYXaf3QDnk=)
                          5: 323830343a343830383a3a2f33332d3333203d3e20323637303933.roa (hash: h43nfEMhF2q//oO8O04sCUZyB7Tc4xjXXQy549DkNic=)
                          6: 34352e3232382e3139322e302f32342d3234203d3e20323637303933.roa (hash: SrbgBmmCCTwBSDFxp3Xe2PUFtH8tqOb/nphiiQw0Ujc=)
                          7: 34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa (hash: KkYxC2jk3npjs5eib3sH4bgZjE1tsvKtTbD766Tjdro=)
                          8: 323830343a343830383a383030303a3a2f33332d3333203d3e20323637303933.roa (hash: 5WjoGRjC1PsMqUNyzxhh+1AcEhSwq/FRM0AIP0+qYK8=)
                          9: 34352e3232382e3139332e302f32342d3234203d3e20323637303933.roa (hash: zW54pBpULWwnokO7vy+IxNIlM9HH9zycWbhM+Ojc7T8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
                          rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7b:d7:38:ad:ce:d2:d8:6e:1e:64:e5:a2:94:a9:fa:63:a6:7d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
        Validity
            Not Before: Apr 21 14:44:07 2025 GMT
            Not After : Apr 22 15:18:07 2025 GMT
        Subject: CN=12B5021169072197F5E794F80802A7889706B72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:43:92:87:27:97:3b:ce:2f:c6:4a:33:44:
                    0d:5d:08:9a:d4:e6:43:f6:e4:ae:42:37:ec:22:7e:
                    0d:4d:48:0a:85:6f:b5:7c:84:62:cc:24:b8:26:c4:
                    6c:d8:b3:37:30:84:db:5a:b7:33:87:97:a8:de:ac:
                    d0:4a:33:d0:ea:1f:78:b8:e4:8c:86:e1:e9:da:8c:
                    7f:1c:7b:be:ff:89:45:0c:a4:a6:91:5d:b1:df:c7:
                    f7:db:02:19:e5:97:89:f0:bd:5c:9b:24:a0:a3:ce:
                    60:d4:c6:c9:44:02:9f:88:74:2c:cc:e0:c6:07:63:
                    3c:f1:73:dc:0d:0d:d1:7a:42:9a:e8:e4:0a:4f:d0:
                    1f:7d:f3:72:33:c0:46:fd:bf:d0:07:71:c6:1a:e3:
                    22:a5:e3:78:b5:cd:d2:c5:ba:84:32:d9:57:11:a5:
                    c0:55:ec:ab:1f:ba:9f:53:0b:7d:21:d3:e8:3b:fe:
                    1c:45:07:e9:8e:10:5a:c1:08:73:ae:f7:79:e7:79:
                    88:ee:ae:3b:c0:46:f9:47:fb:ce:12:21:30:88:08:
                    30:5f:9d:f3:da:fc:cf:40:f6:f6:33:b0:4d:7e:2f:
                    05:a5:6f:51:71:4d:d8:6b:16:7e:6b:bb:5d:96:16:
                    67:c7:8c:b7:7d:48:59:c9:f5:b4:05:b6:61:1d:c9:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B5:02:11:69:07:21:97:F5:E7:94:F8:08:02:A7:88:97:06:B7:2C
            X509v3 Authority Key Identifier:
                keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:99:e9:d9:e2:41:86:2c:a3:27:09:08:9f:55:22:bc:3f:e8:
         32:55:c4:b8:bc:5b:ab:7d:5a:49:76:41:ec:68:69:ed:7a:93:
         c1:cd:7e:85:3e:df:97:ba:6f:cc:77:bc:c5:49:54:f8:00:b9:
         b5:59:38:f0:7e:bc:82:1a:b4:6f:c9:bb:d6:71:be:83:04:40:
         ac:98:ac:5c:1b:a9:27:54:36:75:62:97:28:68:2a:e6:3d:ee:
         1e:aa:df:d9:b2:0b:c6:c7:18:2a:66:2c:6c:93:c7:de:64:a8:
         12:3f:da:a8:bb:b5:18:5f:90:56:d2:b4:e5:2a:bc:12:53:53:
         d3:9d:e3:bd:dc:b4:a3:7f:ae:70:a9:ef:21:a0:69:f0:fc:7a:
         47:37:82:d9:54:29:8a:7e:52:69:cc:b7:15:52:9e:ed:a3:ef:
         5a:de:6c:f2:d5:95:73:d4:1c:37:94:d7:35:01:89:71:84:6a:
         5b:61:e5:a1:ae:47:6c:08:57:7e:73:09:fd:57:f0:12:69:7d:
         9c:69:59:94:93:95:f1:40:8e:a9:95:e0:3c:9b:86:5c:a1:5b:
         f6:47:1c:d0:ea:a4:e9:d2:ce:2f:3b:66:b8:83:59:c0:87:b1:
         c7:1b:0e:09:f8:8d:b9:cf:1b:59:74:1b:67:33:6a:35:13:85:
         0e:e7:a9:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdnvXOK3O0thuHmTlopSp+mOmfQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2OUVFOTgyQ0JFOUJDREI1QjEwMDA5MTkzMTE1MzQz
OEIyRDQxOTAeFw0yNTA0MjExNDQ0MDdaFw0yNTA0MjIxNTE4MDdaMDMxMTAvBgNV
BAMTKDEyQjUwMjExNjkwNzIxOTdGNUU3OTRGODA4MDJBNzg4OTcwNkI3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDEOShyeXO84vxkozRA1dCJrU
5kP25K5CN+wifg1NSAqFb7V8hGLMJLgmxGzYszcwhNtatzOHl6jerNBKM9DqH3i4
5IyG4enajH8ce77/iUUMpKaRXbHfx/fbAhnll4nwvVybJKCjzmDUxslEAp+IdCzM
4MYHYzzxc9wNDdF6Qpro5ApP0B9983IzwEb9v9AHccYa4yKl43i1zdLFuoQy2VcR
pcBV7Ksfup9TC30h0+g7/hxFB+mOEFrBCHOu93nneYjurjvARvlH+84SITCICDBf
nfPa/M9A9vYzsE1+LwWlb1FxTdhrFn5ru12WFmfHjLd9SFnJ9bQFtmEdyWyvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUErUCEWkHIZf155T4CAKniJcGtywwHwYDVR0j
BBgwFoAUiWnumCy+m821sQAJGTEVNDiy1BkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pqQ0JkdWtWQjNkS3M4QnI5U3d3Zk5LcUtkWTc4SmpOMjNyNW9XZGlu
dGkvMC84OTY5RUU5ODJDQkU5QkNEQjVCMTAwMDkxOTMxMTUzNDM4QjJENDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NjlFRTk4MkNCRTlCQ0RC
NUIxMDAwOTE5MzExNTM0MzhCMkQ0MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0pqQ0JkdWtWQjNkS3M4QnI5U3d3Zk5LcUtkWTc4SmpOMjNyNW9XZGludGkvMC84
OTY5RUU5ODJDQkU5QkNEQjVCMTAwMDkxOTMxMTUzNDM4QjJENDE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpnp2eJBhiyjJwkIn1UivD/oMlXEuLxbq31aSXZB7Ghp7XqTwc1+hT7fl7pv
zHe8xUlU+AC5tVk48H68ghq0b8m71nG+gwRArJisXBupJ1Q2dWKXKGgq5j3uHqrf
2bILxscYKmYsbJPH3mSoEj/aqLu1GF+QVtK05Sq8ElNT053jvdy0o3+ucKnvIaBp
8Px6RzeC2VQpin5Sacy3FVKe7aPvWt5s8tWVc9QcN5TXNQGJcYRqW2Hloa5HbAhX
fnMJ/VfwEml9nGlZlJOV8UCOqZXgPJuGXKFb9kcc0Oqk6dLOLztmuINZwIexxxsO
CfiNuc8bWXQbZzNqNROFDuepag==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:41:11 2025 by rpki-client