Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
File:                     0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft (raw, json)
Hash identifier:          +jBsSVq97tbTaYAvCJD8RCWyRK6+/7/GNVVgEy8lH2I=
Subject key identifier:   C5:31:30:29:51:B0:4A:A9:02:40:B9:B1:FF:B1:30:4F:91:A2:0D:DB
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       299E36F7BA24C3A59D25188FA0013E4B5F66CC31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
Manifest number:          01E8
Signing time:             Sat 05 Apr 2025 00:50:00 +0000
Manifest this update:     Sat 05 Apr 2025 00:45:00 +0000
Manifest next update:     Sun 06 Apr 2025 02:07:00 +0000
Files and hashes:         1: 0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl (hash: IcCP+/45z2g7706kwfORUNeVchzw8DDAYvxG8ZVDx+o=)
                          2: 3136382e3139352e32382e302f32322d3232203d3e20323635343235.roa (hash: FSsGN+HO/Zej0yrB1pNYsEFT0GVE+OEY9UUk6Wk220A=)
                          3: 3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (hash: dq/+8oOd5VUasJ5fSEIwYjwyyDp/VhN13OR1io5e43U=)
                          4: 3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (hash: gi4tWcwLcyLSJfXv9vVY2KQsbWR14ow5M2EkT9JOalg=)
                          5: 323830343a333365633a383030303a3a2f33332d3333203d3e20323635343235.roa (hash: CQ7eH9kbYFZuZreCpF9p6qELQgT6h1M5M3nPgro3GfY=)
                          6: 3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (hash: 68RQP2yM+06MNPnqd/qYQzS8B+kRQV5MWQe53XcDcs8=)
                          7: 323830343a333365633a3a2f33322d3332203d3e20323635343235.roa (hash: NwZDv+QQM8b2WkaSLAzsb5e3tpYPOPJWTqR4tFHYSj4=)
                          8: 3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (hash: SSvnKIou5tapPwYANrt1w6Bru2q0yrR/frue1eKNrWE=)
                          9: 3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (hash: OCzuBnMVYYGKPUlgYk2j0N0SB06bD4LIJp3X0YXh13Q=)
                          10: 323830343a333365633a3a2f33332d3333203d3e20323635343235.roa (hash: sau1gZQqGxfz85qo0i2qbo2Nh7RVr0qJvhyo/Ete0UI=)
                          11: 3136382e3139352e32382e302f32332d3233203d3e20323635343235.roa (hash: vc5HIanI94CfVniPYOnoR6bba67e09mRWoDfM9Ixh6g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9e:36:f7:ba:24:c3:a5:9d:25:18:8f:a0:01:3e:4b:5f:66:cc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  5 00:45:00 2025 GMT
            Not After : Apr  6 02:07:00 2025 GMT
        Subject: CN=C531302951B04AA90240B9B1FFB1304F91A20DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:45:5f:06:28:09:2f:f5:c4:d1:71:ce:a1:6d:
                    40:94:0e:44:c0:2d:2f:d9:d6:bd:a2:91:0a:3d:c1:
                    55:4f:78:72:c7:e1:fe:65:36:e4:a0:c3:a3:06:f6:
                    75:9c:42:8c:e2:4a:0a:b8:f3:9a:0e:68:fa:c0:f6:
                    41:49:a7:1d:73:47:b8:a0:d3:76:a0:fc:c0:25:eb:
                    36:42:3e:3c:37:6b:a6:5f:1c:e9:4e:e5:f3:58:c9:
                    2f:b5:a8:24:da:06:bb:cf:be:91:58:e8:3d:6b:96:
                    cd:3f:b1:cd:9a:92:4b:bf:fb:d8:87:03:6a:25:37:
                    1c:e0:63:72:89:84:12:e5:1c:08:21:61:77:05:d7:
                    f0:78:4b:bf:5e:0c:e7:77:23:43:f0:90:85:6f:70:
                    9f:89:a9:5a:fa:cb:39:fc:fb:3b:b4:f0:72:c8:ff:
                    53:47:55:81:9c:a5:8a:39:a2:da:50:b8:bf:66:26:
                    c6:88:6c:ab:b0:b0:c5:39:b0:6b:8d:b2:a3:3c:78:
                    4a:6b:ed:1a:d1:1b:78:3f:1c:c8:49:50:44:8b:42:
                    52:99:fc:3e:ba:7c:aa:70:41:84:90:01:41:44:fd:
                    65:29:83:3c:c1:9c:6e:98:63:a8:7a:08:e0:98:21:
                    55:92:1d:98:a0:f4:18:6e:0b:c7:7f:86:2d:1d:e3:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:31:30:29:51:B0:4A:A9:02:40:B9:B1:FF:B1:30:4F:91:A2:0D:DB
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:9c:f2:d9:98:06:43:99:54:cd:e7:e6:14:5a:e4:8d:ab:
         59:d1:4c:73:ad:65:36:a9:6f:21:4d:35:e2:41:96:f3:95:e0:
         f1:9b:17:54:da:e6:ed:2d:e3:5a:87:07:69:20:b0:49:82:5c:
         e3:c0:c9:38:6f:05:69:0a:fa:68:ad:a5:c6:8a:34:bf:59:4f:
         29:f4:3e:c1:fe:36:88:04:e5:54:fc:df:43:38:b7:93:c1:0f:
         bf:68:25:ad:be:00:4f:c9:c7:ce:b9:f4:33:25:a1:4c:1b:82:
         9d:a7:cc:71:e0:8f:24:60:1f:6b:f9:b0:10:1d:a0:5e:dc:19:
         f4:42:b7:73:64:ce:8e:f9:af:df:7f:3b:94:89:0b:e5:09:a8:
         b9:b9:07:49:0e:f9:26:47:ff:9a:f6:39:23:36:62:b3:16:3c:
         6e:17:38:e2:54:07:50:46:a6:91:7f:aa:d4:25:24:4f:11:bc:
         be:8e:fb:9f:08:6d:da:c8:4b:64:56:4e:32:78:ec:ad:26:9c:
         46:c5:3f:80:92:a4:2c:78:08:86:7c:31:70:e2:2f:38:df:42:
         87:59:6e:4f:9e:48:dd:8a:57:7d:7d:57:e8:86:5d:3d:2f:3a:
         6d:80:c7:b6:3f:b2:b9:6c:43:10:49:82:68:f2:29:35:b7:c9:
         dd:91:11:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKZ4297okw6WdJRiPoAE+S19mzDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwNkQzQkQ0MkFFMjk1RjE3Q0Y1MkQ1OEE1QkEzMEJD
RTkxQkZGOTAeFw0yNTA0MDUwMDQ1MDBaFw0yNTA0MDYwMjA3MDBaMDMxMTAvBgNV
BAMTKEM1MzEzMDI5NTFCMDRBQTkwMjQwQjlCMUZGQjEzMDRGOTFBMjBEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5RV8GKAkv9cTRcc6hbUCUDkTA
LS/Z1r2ikQo9wVVPeHLH4f5lNuSgw6MG9nWcQoziSgq485oOaPrA9kFJpx1zR7ig
03ag/MAl6zZCPjw3a6ZfHOlO5fNYyS+1qCTaBrvPvpFY6D1rls0/sc2akku/+9iH
A2olNxzgY3KJhBLlHAghYXcF1/B4S79eDOd3I0PwkIVvcJ+JqVr6yzn8+zu08HLI
/1NHVYGcpYo5otpQuL9mJsaIbKuwsMU5sGuNsqM8eEpr7RrRG3g/HMhJUESLQlKZ
/D66fKpwQYSQAUFE/WUpgzzBnG6YY6h6COCYIVWSHZig9BhuC8d/hi0d45PLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxTEwKVGwSqkCQLmx/7EwT5GiDdswHwYDVR0j
BBgwFoAUCwbTvUKuKV8Xz1LVilujC86Rv/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMi8wQjA2RDNCRDQyQUUyOTVGMTdDRjUyRDU4QTVCQTMwQkNFOTFCRkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMDZEM0JENDJBRTI5NUYx
N0NGNTJENThBNUJBMzBCQ0U5MUJGRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdVNGgvMi8w
QjA2RDNCRDQyQUUyOTVGMTdDRjUyRDU4QTVCQTMwQkNFOTFCRkY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASxKc8tmYBkOZVM3n5hRa5I2rWdFMc61lNqlvIU014kGW85Xg8ZsXVNrm7S3j
WocHaSCwSYJc48DJOG8FaQr6aK2lxoo0v1lPKfQ+wf42iATlVPzfQzi3k8EPv2gl
rb4AT8nHzrn0MyWhTBuCnafMceCPJGAfa/mwEB2gXtwZ9EK3c2TOjvmv3387lIkL
5QmoubkHSQ75Jkf/mvY5IzZisxY8bhc44lQHUEamkX+q1CUkTxG8vo77nwht2shL
ZFZOMnjsrSacRsU/gJKkLHgIhnwxcOIvON9Ch1luT55I3YpXfX1X6IZdPS86bYDH
tj+yuWxDEEmCaPIpNbfJ3ZER2w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:53:21 2025 by rpki-client