Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          9/msPdMa9jB5wUrbUZ42JpTTgZz6Lvz/DZ7xTGazChY=
Subject key identifier:   91:CF:CD:C5:E2:24:02:C2:10:CF:9C:81:7C:BC:19:CB:68:75:28:E7
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       672C34617F2456DA4CF3F8D55A2B3C5260E739F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          DD
Signing time:             Fri 04 Apr 2025 17:45:47 +0000
Manifest this update:     Fri 04 Apr 2025 17:40:47 +0000
Manifest next update:     Sat 05 Apr 2025 18:51:47 +0000
Files and hashes:         1: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: A0xY8FQpNJ+Dmu/PZSKbDs05Sg3vxalRRBfAWO03pMk=)
                          2: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: 41ZqT8pWtpd4+JiG3GSKgj31hgQE6ip+z6R1m7X6N7Q=)
                          3: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: qvIMK685FSdFyB1oJt5aRMfVxCvrfR5JXAjYLXbC+4w=)
                          4: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: 2INq3xE6upAmDztTdWwtjePXTuQOj2MAyDG9knhJelM=)
                          5: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 18:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2c:34:61:7f:24:56:da:4c:f3:f8:d5:5a:2b:3c:52:60:e7:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Apr  4 17:40:47 2025 GMT
            Not After : Apr  5 18:51:47 2025 GMT
        Subject: CN=91CFCDC5E22402C210CF9C817CBC19CB687528E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:31:83:a8:08:55:19:c9:78:f6:f2:39:c0:11:
                    1d:31:46:33:d0:98:75:4e:c0:a3:e0:20:9b:4c:40:
                    e2:53:0d:a2:ce:e0:50:72:d8:ed:ae:b7:be:21:23:
                    20:44:01:97:8e:f8:0d:53:f9:72:5f:6d:86:cc:9b:
                    63:28:2e:7e:6a:4a:91:e6:13:c9:c0:b6:c0:6c:6a:
                    d8:38:d8:b9:ab:da:48:43:b9:77:ea:9b:86:52:af:
                    36:11:a2:9d:24:3a:d8:f0:d2:46:14:3a:5d:f6:f3:
                    18:95:c9:2d:7e:c9:08:10:1c:9e:12:37:7b:36:7e:
                    62:20:01:c0:38:be:89:c5:12:d5:8d:d4:e5:f1:c4:
                    9f:ab:f6:8f:d3:56:f0:68:98:26:3e:4b:2a:fe:b5:
                    63:b5:c0:66:5e:51:75:2c:dc:c7:78:61:f2:a9:9f:
                    55:61:89:f8:60:a7:1f:11:0d:ec:3f:7c:0e:d9:a7:
                    52:01:74:7a:d2:28:5d:1c:f4:a5:0f:a3:a5:b9:60:
                    df:c7:c3:c8:4a:5b:6b:3b:c4:95:e6:3f:49:51:42:
                    b6:95:e5:72:34:6a:ee:a7:db:ce:30:e6:62:8e:7a:
                    51:0d:82:75:25:07:4b:e5:34:f9:2f:15:85:06:2a:
                    1b:38:d9:28:69:23:0b:05:f0:e4:84:0e:0a:15:c4:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:CD:C5:E2:24:02:C2:10:CF:9C:81:7C:BC:19:CB:68:75:28:E7
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:fb:e6:4f:da:f5:06:8e:ea:2e:9f:6d:cd:15:53:fd:33:
         af:b9:26:6f:96:d2:45:2c:3e:9e:0c:85:40:8f:89:7e:32:72:
         43:6d:68:ad:e9:2c:64:d2:b9:90:1f:8d:87:f6:d2:6a:c0:e5:
         1f:4f:c3:d8:fb:8d:a1:44:71:13:fe:e1:31:c3:64:9b:81:4b:
         46:7a:bd:db:fa:2c:0b:ef:c2:82:86:69:4e:9e:c4:15:43:9b:
         03:9a:f6:45:7d:f5:ae:7a:bd:0b:7a:76:9f:c2:65:1b:9a:d8:
         c9:41:77:12:50:14:25:60:45:86:36:b1:00:46:0b:52:06:e8:
         d1:6b:3e:b3:fb:2a:7c:6b:cc:a3:ba:6d:b8:83:2e:ae:3d:f5:
         71:59:41:b4:16:e1:a0:f9:ae:1e:23:20:98:d2:1c:0f:2e:44:
         d9:4e:2a:2e:c2:f3:ba:94:64:ab:6b:4f:cb:09:b6:b9:b3:9b:
         46:7b:29:42:f0:bb:cf:0e:6f:bf:23:59:db:b1:27:c6:7e:37:
         1a:3c:b5:a3:25:a3:31:b0:73:73:1c:25:1b:bb:33:5c:dd:00:
         ed:a0:9b:ca:e3:b1:6d:74:06:54:b4:eb:ea:02:58:42:db:7d:
         00:32:7e:67:e9:fb:45:2d:5f:9a:0c:28:1b:a9:6e:32:96:5c:
         01:32:10:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZyw0YX8kVtpM8/jVWis8UmDnOfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3
NzM0M0M3NjAeFw0yNTA0MDQxNzQwNDdaFw0yNTA0MDUxODUxNDdaMDMxMTAvBgNV
BAMTKDkxQ0ZDREM1RTIyNDAyQzIxMENGOUM4MTdDQkMxOUNCNjg3NTI4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMYOoCFUZyXj28jnAER0xRjPQ
mHVOwKPgIJtMQOJTDaLO4FBy2O2ut74hIyBEAZeO+A1T+XJfbYbMm2MoLn5qSpHm
E8nAtsBsatg42Lmr2khDuXfqm4ZSrzYRop0kOtjw0kYUOl328xiVyS1+yQgQHJ4S
N3s2fmIgAcA4vonFEtWN1OXxxJ+r9o/TVvBomCY+Syr+tWO1wGZeUXUs3Md4YfKp
n1Vhifhgpx8RDew/fA7Zp1IBdHrSKF0c9KUPo6W5YN/Hw8hKW2s7xJXmP0lRQraV
5XI0au6n284w5mKOelENgnUlB0vlNPkvFYUGKhs42ShpIwsF8OSEDgoVxAMpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkc/NxeIkAsIQz5yBfLwZy2h1KOcwHwYDVR0j
BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x
ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG
M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5xejkvMC82
ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQab75k/a9QaO6i6fbc0VU/0zr7kmb5bSRSw+ngyFQI+JfjJyQ21oreksZNK5
kB+Nh/bSasDlH0/D2PuNoURxE/7hMcNkm4FLRnq92/osC+/CgoZpTp7EFUObA5r2
RX31rnq9C3p2n8JlG5rYyUF3ElAUJWBFhjaxAEYLUgbo0Ws+s/sqfGvMo7ptuIMu
rj31cVlBtBbhoPmuHiMgmNIcDy5E2U4qLsLzupRkq2tPywm2ubObRnspQvC7zw5v
vyNZ27Enxn43Gjy1oyWjMbBzcxwlG7szXN0A7aCbyuOxbXQGVLTr6gJYQtt9ADJ+
Z+n7RS1fmgwoG6luMpZcATIQ9w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:59 2025 by rpki-client