Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          mJu6bLYaxImgsl1j0mXEmHkTFEtT72UBhDjvEa/z5VY=
Subject key identifier:   37:F8:2D:6B:03:69:94:1B:3B:C2:E8:BA:C5:0B:D3:53:DD:5F:AC:5A
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       3F2F4922E7559E2235680996A9074A73B7894EB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          0136
Signing time:             Tue 10 Jun 2025 18:34:35 +0000
Manifest this update:     Tue 10 Jun 2025 18:29:35 +0000
Manifest next update:     Wed 11 Jun 2025 19:01:35 +0000
Files and hashes:         1: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: 2INq3xE6upAmDztTdWwtjePXTuQOj2MAyDG9knhJelM=)
                          2: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: UNeuxPPS9SwrPu/iyvcNEmPvZV77Vcj6+nlzZ2aEBkI=)
                          3: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=)
                          4: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: qvIMK685FSdFyB1oJt5aRMfVxCvrfR5JXAjYLXbC+4w=)
                          5: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: A0xY8FQpNJ+Dmu/PZSKbDs05Sg3vxalRRBfAWO03pMk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2f:49:22:e7:55:9e:22:35:68:09:96:a9:07:4a:73:b7:89:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Jun 10 18:29:35 2025 GMT
            Not After : Jun 11 19:01:35 2025 GMT
        Subject: CN=37F82D6B0369941B3BC2E8BAC50BD353DD5FAC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:62:ea:c2:4d:de:b3:ba:1c:98:ec:d7:52:
                    78:23:ba:23:22:19:03:e2:83:76:0b:2b:e6:57:f5:
                    fe:4a:1a:b8:10:89:94:e2:21:fb:9e:59:00:da:50:
                    95:b3:db:98:41:55:6a:ac:41:a6:30:67:fe:5e:90:
                    26:04:9b:f7:4c:a4:a6:44:ee:c1:c0:cc:41:32:5b:
                    7a:d0:fa:0f:11:2a:a3:2d:be:5e:a7:2e:bf:94:0a:
                    79:ae:da:c9:e1:83:0c:e1:7e:a9:21:33:c8:ff:17:
                    b0:d2:1a:5d:f4:40:d9:80:c1:3b:8d:d1:88:55:8e:
                    a6:59:a5:f9:66:9d:86:e0:df:93:04:ee:a2:37:d9:
                    03:8b:5a:ac:2b:86:fb:39:15:47:14:fc:bc:21:1c:
                    9c:8e:36:c2:2b:a8:bd:ad:ae:98:9d:5c:38:99:64:
                    f5:bd:08:58:a3:a4:96:1f:27:33:18:e2:4f:55:f3:
                    e2:b2:b2:54:38:cf:d2:ec:2e:c6:7f:25:0e:83:2d:
                    17:ab:ad:5d:36:85:23:2c:b3:3d:8e:d8:c7:73:b8:
                    a8:f0:50:58:c0:f9:30:47:2c:a1:4a:ba:ec:b9:4e:
                    21:13:53:cd:b6:af:ab:36:b8:31:96:e1:31:e2:cb:
                    a1:f6:af:32:da:22:d0:ff:7e:97:9f:d4:96:bf:f1:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:2D:6B:03:69:94:1B:3B:C2:E8:BA:C5:0B:D3:53:DD:5F:AC:5A
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:ed:e1:d0:b6:60:7e:96:a5:13:08:fa:47:3e:88:84:85:
         1b:5c:29:a0:ee:5d:e7:bd:7e:0b:14:8d:a0:23:11:c9:0a:c7:
         03:e1:22:69:90:0b:56:99:41:12:1f:1c:8c:d2:52:17:c8:b8:
         75:2e:00:ec:b1:78:ee:9f:f3:aa:69:35:fd:6f:d3:16:f4:2c:
         5c:73:0f:32:84:75:46:b0:5c:a8:a5:83:a4:d2:23:b5:e9:12:
         50:ac:f1:2c:25:b3:15:19:86:92:35:92:da:3a:58:2c:46:bc:
         64:3c:a8:f3:b6:bf:d2:5a:23:09:8b:18:12:e5:93:5e:aa:1e:
         75:a1:30:5b:ff:85:42:e7:5c:a8:c4:42:c1:5a:81:74:65:1c:
         bf:1b:6e:16:f7:08:6b:2f:0a:fe:b2:65:22:2d:6f:79:3e:e9:
         24:9c:d9:85:0f:07:f1:0d:ad:af:73:81:ee:20:8a:e8:84:a3:
         77:66:7d:b9:4a:44:d2:e3:21:78:70:0b:5e:7a:68:14:c8:f9:
         da:5e:f2:ae:6d:7a:63:c9:c9:f3:9b:3b:32:2b:19:c3:b6:bb:
         99:b4:9c:3c:2a:bf:9f:68:1f:b2:f2:e3:17:b1:71:f5:88:78:
         bb:50:d4:b5:86:a1:2b:4c:4d:2f:0b:cb:da:09:de:cf:01:6b:
         45:6b:d3:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPy9JIudVniI1aAmWqQdKc7eJTrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3
NzM0M0M3NjAeFw0yNTA2MTAxODI5MzVaFw0yNTA2MTExOTAxMzVaMDMxMTAvBgNV
BAMTKDM3RjgyRDZCMDM2OTk0MUIzQkMyRThCQUM1MEJEMzUzREQ1RkFDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mmLqwk3es7ocmOzXUngjuiMi
GQPig3YLK+ZX9f5KGrgQiZTiIfueWQDaUJWz25hBVWqsQaYwZ/5ekCYEm/dMpKZE
7sHAzEEyW3rQ+g8RKqMtvl6nLr+UCnmu2snhgwzhfqkhM8j/F7DSGl30QNmAwTuN
0YhVjqZZpflmnYbg35ME7qI32QOLWqwrhvs5FUcU/LwhHJyONsIrqL2trpidXDiZ
ZPW9CFijpJYfJzMY4k9V8+KyslQ4z9LsLsZ/JQ6DLRerrV02hSMssz2O2MdzuKjw
UFjA+TBHLKFKuuy5TiETU822r6s2uDGW4THiy6H2rzLaItD/fpef1Ja/8bQ9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN/gtawNplBs7wui6xQvTU91frFowHwYDVR0j
BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x
ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG
M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5xejkvMC82
ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMKvt4dC2YH6WpRMI+kc+iISFG1wpoO5d571+CxSNoCMRyQrHA+EiaZALVplB
Eh8cjNJSF8i4dS4A7LF47p/zqmk1/W/TFvQsXHMPMoR1RrBcqKWDpNIjtekSUKzx
LCWzFRmGkjWS2jpYLEa8ZDyo87a/0lojCYsYEuWTXqoedaEwW/+FQudcqMRCwVqB
dGUcvxtuFvcIay8K/rJlIi1veT7pJJzZhQ8H8Q2tr3OB7iCK6ISjd2Z9uUpE0uMh
eHALXnpoFMj52l7yrm16Y8nJ85s7MisZw7a7mbScPCq/n2gfsvLjF7Fx9Yh4u1DU
tYahK0xNLwvL2gnezwFrRWvThw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:45:34 2025 by rpki-client