Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.mft
File:                     87CA627772CF603A1756B51EC3AE073A9FCA3589.mft (raw, json)
Hash identifier:          ZP2eeVy08o0+SQaICN58NUNhDI5uv6JDPVyxKYhYRLo=
Subject key identifier:   65:0A:32:3F:3E:36:72:89:C5:A4:18:2C:16:0F:60:02:FC:4B:7E:8C
Authority key identifier: 87:CA:62:77:72:CF:60:3A:17:56:B5:1E:C3:AE:07:3A:9F:CA:35:89
Certificate issuer:       /CN=87CA627772CF603A1756B51EC3AE073A9FCA3589
Certificate serial:       EC220150F5B515B7BECF8B4C491E2A24216DA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87CA627772CF603A1756B51EC3AE073A9FCA3589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.mft
Manifest number:          36
Signing time:             Mon 09 Jun 2025 12:10:16 +0000
Manifest this update:     Mon 09 Jun 2025 12:05:16 +0000
Manifest next update:     Tue 10 Jun 2025 15:20:16 +0000
Files and hashes:         1: 34352e3139302e382e302f32322d3332203d3e20323639363137.roa (hash: iKXGyLKvyMpCiyJuDSHoZJB2IFzAP2pCYOPTY0sn1j8=)
                          2: 323830343a363734343a3a2f33322d313238203d3e20323639363137.roa (hash: bLKsWH58JivC1PTPGM+bIRzlqj2ueiFcE4l59/apc0M=)
                          3: 87CA627772CF603A1756B51EC3AE073A9FCA3589.crl (hash: 3ShAWM0Xk24B6wAUysgg3Wy9xUQu7KcolAdZYFCWORE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.crl
                          rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87CA627772CF603A1756B51EC3AE073A9FCA3589.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 15:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:22:01:50:f5:b5:15:b7:be:cf:8b:4c:49:1e:2a:24:21:6d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CA627772CF603A1756B51EC3AE073A9FCA3589
        Validity
            Not Before: Jun  9 12:05:16 2025 GMT
            Not After : Jun 10 15:20:16 2025 GMT
        Subject: CN=650A323F3E367289C5A4182C160F6002FC4B7E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:03:27:92:4d:97:45:9f:e3:af:31:53:45:
                    b3:df:0d:14:f2:e8:b2:5a:fc:a8:70:78:75:5b:c4:
                    0e:e2:d4:db:e2:3c:6a:bf:76:02:93:ee:e5:a3:91:
                    f1:f3:80:e3:d9:0d:d1:83:1f:0b:ee:e3:08:97:d4:
                    42:7d:34:59:42:6a:5f:95:03:85:b4:5b:93:71:a8:
                    8f:be:f4:1a:6d:c0:d7:4f:a2:5a:64:95:a0:8f:1b:
                    fa:0b:72:36:ff:23:1a:37:7a:17:47:b6:e4:3a:6b:
                    10:22:52:b7:fc:2d:01:2f:4d:fd:79:4d:c0:7c:0e:
                    af:6d:a5:46:38:b2:6e:dc:08:d0:cb:50:00:ec:99:
                    cd:d2:bd:48:40:23:ba:28:6d:7e:a6:82:37:42:bf:
                    f4:62:de:0c:fe:bc:98:4c:9c:0a:5c:39:e6:03:d7:
                    40:2a:7f:15:8d:8a:51:41:b9:80:3c:71:71:ce:0d:
                    79:6a:86:86:76:bd:eb:d5:d4:aa:a3:8c:a1:09:79:
                    e8:77:b2:c4:e2:80:4a:bb:9f:bb:87:fa:3b:08:ff:
                    5c:67:a4:73:fe:39:73:63:3b:f7:eb:6d:44:ca:df:
                    cc:91:b6:84:75:94:9a:61:46:02:2a:d5:71:ac:d4:
                    02:91:e6:51:ef:b4:6e:2f:ff:c5:ee:23:47:45:67:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:32:3F:3E:36:72:89:C5:A4:18:2C:16:0F:60:02:FC:4B:7E:8C
            X509v3 Authority Key Identifier:
                keyid:87:CA:62:77:72:CF:60:3A:17:56:B5:1E:C3:AE:07:3A:9F:CA:35:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87CA627772CF603A1756B51EC3AE073A9FCA3589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/87CA627772CF603A1756B51EC3AE073A9FCA3589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:75:22:a7:80:e3:85:8e:bf:5e:d1:e8:e5:34:16:40:4d:28:
         83:e6:a3:a1:4f:a1:ef:e8:f7:8d:92:6a:2b:93:b6:e2:fd:34:
         b2:c5:38:a4:8b:10:20:b9:09:59:44:9f:fe:ed:cd:b3:c1:d7:
         86:20:e2:a0:e7:9a:92:9d:22:72:00:a8:7c:23:35:04:3c:ae:
         6b:9e:d2:cd:7c:af:00:f9:70:e5:e4:ab:eb:81:93:7c:62:68:
         86:e7:51:0d:c2:af:fd:d5:fb:c0:4e:05:49:b4:a1:c8:d5:c5:
         c1:7e:66:c6:c2:48:06:47:a6:e8:49:9d:6e:0f:ce:59:4d:ee:
         fa:a3:f1:93:3d:d1:8b:3c:1d:77:28:26:4c:60:c3:31:88:a3:
         7c:20:bd:30:a9:22:b3:90:37:25:e4:f4:61:b1:96:a4:37:55:
         b3:38:04:de:0e:3a:39:90:18:e2:d8:c7:a7:3b:63:16:e2:0d:
         a2:2a:6e:0e:8e:28:b3:f6:34:0b:9c:2e:29:9e:58:b8:d2:5e:
         3d:4e:15:8f:2d:27:a7:01:31:a7:b0:9a:20:ee:4b:0d:f4:7a:
         b5:47:33:3d:1a:de:d8:88:b5:2b:05:3e:94:09:ec:d2:a4:f0:
         83:45:a0:72:43:51:c4:37:04:e4:9c:9e:3e:23:7b:69:1e:83:
         32:24:d6:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAOwiAVD1tRW3vs+LTEkeKiQhbaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdDQTYyNzc3MkNGNjAzQTE3NTZCNTFFQzNBRTA3M0E5
RkNBMzU4OTAeFw0yNTA2MDkxMjA1MTZaFw0yNTA2MTAxNTIwMTZaMDMxMTAvBgNV
BAMTKDY1MEEzMjNGM0UzNjcyODlDNUE0MTgyQzE2MEY2MDAyRkM0QjdFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqewMnkk2XRZ/jrzFTRbPfDRTy
6LJa/KhweHVbxA7i1NviPGq/dgKT7uWjkfHzgOPZDdGDHwvu4wiX1EJ9NFlCal+V
A4W0W5NxqI++9BptwNdPolpklaCPG/oLcjb/Ixo3ehdHtuQ6axAiUrf8LQEvTf15
TcB8Dq9tpUY4sm7cCNDLUADsmc3SvUhAI7oobX6mgjdCv/Ri3gz+vJhMnApcOeYD
10AqfxWNilFBuYA8cXHODXlqhoZ2vevV1KqjjKEJeeh3ssTigEq7n7uH+jsI/1xn
pHP+OXNjO/frbUTK38yRtoR1lJphRgIq1XGs1AKR5lHvtG4v/8XuI0dFZyX9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZQoyPz42conFpBgsFg9gAvxLfowwHwYDVR0j
BBgwFoAUh8pid3LPYDoXVrUew64HOp/KNYkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3WEpNczM1NjhG
aHovMC84N0NBNjI3NzcyQ0Y2MDNBMTc1NkI1MUVDM0FFMDczQTlGQ0EzNTg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3Q0E2Mjc3NzJDRjYwM0Ex
NzU2QjUxRUMzQUUwNzNBOUZDQTM1ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0xRM3NSTnVxbm1DTTlYdUxyak1VVzZBc3Z6N1ZFckw3WEpNczM1NjhGaHovMC84
N0NBNjI3NzcyQ0Y2MDNBMTc1NkI1MUVDM0FFMDczQTlGQ0EzNTg5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHUip4DjhY6/XtHo5TQWQE0og+ajoU+h7+j3jZJqK5O24v00ssU4pIsQILkJ
WUSf/u3Ns8HXhiDioOeakp0icgCofCM1BDyua57SzXyvAPlw5eSr64GTfGJohudR
DcKv/dX7wE4FSbShyNXFwX5mxsJIBkem6Emdbg/OWU3u+qPxkz3RizwddygmTGDD
MYijfCC9MKkis5A3JeT0YbGWpDdVszgE3g46OZAY4tjHpztjFuINoipuDo4os/Y0
C5wuKZ5YuNJePU4Vjy0npwExp7CaIO5LDfR6tUczPRre2Ii1KwU+lAns0qTwg0Wg
ckNRxDcE5JyePiN7aR6DMiTWtA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:23:32 2025 by rpki-client