Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
File:                     114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft (raw, json)
Hash identifier:          26Muv+ZftnaydwsH+gRKfGTFbAKlQPf1rjSVVbGJCxA=
Subject key identifier:   16:1F:4A:BF:E0:46:F5:02:7A:F5:18:D2:02:F2:D3:84:48:68:F1:70
Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2
Certificate issuer:       /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
Certificate serial:       08BD8FC2F95CC1AC9E0FBF0D3A8C9D4ECA18F22B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
Manifest number:          4B
Signing time:             Sat 12 Apr 2025 13:18:24 +0000
Manifest this update:     Sat 12 Apr 2025 13:13:24 +0000
Manifest next update:     Sun 13 Apr 2025 14:46:24 +0000
Files and hashes:         1: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (hash: /jjNTYdHgGu54/KsbvfYxBSxmVomJOu/7haHE2jkFo8=)
                          2: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl (hash: Q+FrCSbj10ygof3S3Q4Wv2ckat4kESDAAtvuLhRZcN0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl
                          rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bd:8f:c2:f9:5c:c1:ac:9e:0f:bf:0d:3a:8c:9d:4e:ca:18:f2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2
        Validity
            Not Before: Apr 12 13:13:24 2025 GMT
            Not After : Apr 13 14:46:24 2025 GMT
        Subject: CN=161F4ABFE046F5027AF518D202F2D3844868F170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:57:58:f8:b6:ed:3c:fb:0f:12:c9:de:87:
                    73:cb:77:ca:da:6c:14:1f:2d:b6:5d:f0:65:c6:ed:
                    e1:03:e7:d5:ec:6b:96:80:80:c2:1c:de:8a:32:95:
                    08:5c:2f:26:99:c3:1a:17:47:52:81:a7:d3:25:65:
                    98:81:1c:f1:91:4c:95:fd:ab:e3:63:ff:8d:c6:12:
                    8b:28:53:2b:25:66:fb:1a:19:ae:cd:64:f9:9c:c5:
                    85:94:a5:52:61:9d:ad:9a:c5:af:79:4a:46:36:32:
                    c2:94:d4:af:f4:dd:3b:b3:44:6a:2c:b9:18:3a:14:
                    b1:60:05:93:ad:23:19:f8:57:ce:e9:c4:53:a1:c6:
                    7d:e9:6e:30:0f:a2:0c:0b:80:be:ea:3f:ef:1e:6b:
                    b8:3e:f2:aa:52:3b:a7:d9:8d:33:6b:f4:92:05:cd:
                    7c:24:2c:d0:46:56:21:30:62:41:22:1d:24:0d:da:
                    08:ad:cd:04:e0:ac:48:a6:33:b0:b9:c1:de:56:c5:
                    ae:f3:3f:34:3f:92:f7:55:57:bf:59:ca:a0:51:d2:
                    a4:d1:09:b4:5d:bb:19:54:01:04:e8:c8:f2:80:a9:
                    84:c8:79:e3:de:f4:dd:6f:ee:14:25:05:a0:4e:ea:
                    45:6e:87:72:d1:da:06:19:56:65:f8:96:3c:11:e3:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:4A:BF:E0:46:F5:02:7A:F5:18:D2:02:F2:D3:84:48:68:F1:70
            X509v3 Authority Key Identifier:
                keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5d:1d:98:d0:b8:d0:bd:2c:3c:b5:4d:c8:41:7e:e8:88:8b:
         cf:53:cb:62:d2:46:a9:37:de:ff:d7:c0:aa:b2:30:f7:03:92:
         e5:ad:b0:e7:53:aa:db:f9:7b:eb:00:7d:05:b8:57:14:f2:ac:
         31:ad:f4:8e:12:45:97:d5:ad:52:c6:08:42:0f:fe:87:6a:cd:
         02:bf:27:93:b9:b3:e4:39:4e:1b:ca:ea:a9:b9:b6:51:e9:1c:
         27:7a:52:0a:f7:0c:3b:e5:3e:b6:4b:aa:87:7a:80:24:46:af:
         4d:02:32:af:f9:d6:1a:05:6c:e5:eb:10:f2:ba:c6:68:15:7f:
         b1:25:39:87:50:f1:a3:da:e7:99:e6:28:d5:70:e1:5c:74:8f:
         f9:d5:23:77:3a:cc:47:22:ec:36:b4:2e:2e:62:a4:f7:e4:d6:
         11:10:0f:e3:54:9c:1f:2c:12:41:d2:8a:e9:7f:8d:16:82:83:
         cf:c1:48:a0:80:12:5d:fb:8c:9a:16:50:a1:d5:ee:f0:f7:6e:
         2f:14:78:3a:55:8c:d8:1f:75:9d:ee:2d:16:b2:58:f6:09:85:
         cf:17:1f:2c:41:99:b1:02:5d:e5:5b:2b:72:26:81:90:ce:74:
         7e:a8:30:19:67:28:0a:18:a0:21:5e:c9:4b:ea:11:a3:12:3b:
         1d:20:9a:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCL2PwvlcwayeD78NOoydTsoY8iswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE0QzM0RTcwMkQ2QjNDNzhEQjZBRDBDOEI2QTEyQTRG
NkM5NjJGMjAeFw0yNTA0MTIxMzEzMjRaFw0yNTA0MTMxNDQ2MjRaMDMxMTAvBgNV
BAMTKDE2MUY0QUJGRTA0NkY1MDI3QUY1MThEMjAyRjJEMzg0NDg2OEYxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXVdY+LbtPPsPEsneh3PLd8ra
bBQfLbZd8GXG7eED59Xsa5aAgMIc3ooylQhcLyaZwxoXR1KBp9MlZZiBHPGRTJX9
q+Nj/43GEosoUyslZvsaGa7NZPmcxYWUpVJhna2axa95SkY2MsKU1K/03TuzRGos
uRg6FLFgBZOtIxn4V87pxFOhxn3pbjAPogwLgL7qP+8ea7g+8qpSO6fZjTNr9JIF
zXwkLNBGViEwYkEiHSQN2gitzQTgrEimM7C5wd5Wxa7zPzQ/kvdVV79ZyqBR0qTR
CbRduxlUAQToyPKAqYTIeePe9N1v7hQlBaBO6kVuh3LR2gYZVmX4ljwR47J5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFh9Kv+BG9QJ69RjSAvLThEho8XAwHwYDVR0j
BBgwFoAUEUw05wLWs8eNtq0Mi2oSpPbJYvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBv
eFgvMS8xMTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNEMzNEU3MDJENkIzQzc4
REI2QUQwQzhCNkExMkE0RjZDOTYyRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBveFgvMS8x
MTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvl0dmNC40L0sPLVNyEF+6IiLz1PLYtJGqTfe/9fAqrIw9wOS5a2w51Oq2/l7
6wB9BbhXFPKsMa30jhJFl9WtUsYIQg/+h2rNAr8nk7mz5DlOG8rqqbm2UekcJ3pS
CvcMO+U+tkuqh3qAJEavTQIyr/nWGgVs5esQ8rrGaBV/sSU5h1Dxo9rnmeYo1XDh
XHSP+dUjdzrMRyLsNrQuLmKk9+TWERAP41ScHywSQdKK6X+NFoKDz8FIoIASXfuM
mhZQodXu8PduLxR4OlWM2B91ne4tFrJY9gmFzxcfLEGZsQJd5VsrciaBkM50fqgw
GWcoChigIV7JS+oRoxI7HSCaVw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:50:28 2025 by rpki-client