Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
File:                     4AF555507F76387C67C13DE0BC2B700D6D33121B.mft (raw, json)
Hash identifier:          8nIt1STcUVTKQKrgZceSw9hnCeAQYmimvySZJv9Py1M=
Subject key identifier:   F4:68:41:1D:18:86:04:11:A2:C4:E6:91:1E:90:E0:24:F2:55:C9:2B
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Certificate issuer:       /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial:       6F025AD1249AE3D7CD56C7F2C7C2E7C4C7EF8027
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
Manifest number:          01D6
Signing time:             Wed 20 Aug 2025 20:54:17 +0000
Manifest this update:     Wed 20 Aug 2025 20:49:17 +0000
Manifest next update:     Thu 21 Aug 2025 23:31:17 +0000
Files and hashes:         1: 34352e3233322e36302e302f32322d3332203d3e20323637333136.roa (hash: nw0NpupkAzt0uKFRYgy5vCDDMGOg7JOE7vpmE0b5/hg=)
                          2: 4AF555507F76387C67C13DE0BC2B700D6D33121B.crl (hash: tZO0I9lO9VW1l9goJU4ylG4y++kcYBcyIC2KwA+AVK8=)
                          3: 323830343a346239343a3a2f33322d313238203d3e20323637333136.roa (hash: L+9CnXqjAjr7hJzwCUHCbQpHd7lBS0fpdy6GYCvbwhY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
                          rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 23:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:5a:d1:24:9a:e3:d7:cd:56:c7:f2:c7:c2:e7:c4:c7:ef:80:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Validity
            Not Before: Aug 20 20:49:17 2025 GMT
            Not After : Aug 21 23:31:17 2025 GMT
        Subject: CN=F468411D18860411A2C4E6911E90E024F255C92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:aa:db:0f:cd:8c:20:cf:9b:68:b6:b2:de:f7:
                    b5:dc:d0:cc:2c:f1:89:06:bc:68:56:9b:f8:56:1b:
                    b4:ad:73:8e:6d:15:8a:4a:8e:7f:bb:2f:b9:26:e9:
                    48:5f:cf:71:61:82:f8:a4:b7:86:45:da:5b:c1:3f:
                    19:1b:db:a9:c1:59:f7:c0:9c:51:02:bb:80:26:62:
                    cc:61:ce:5e:e2:a8:0c:70:32:4f:fe:cb:ee:2f:2c:
                    d3:d7:4b:27:fe:69:5c:6b:85:c4:74:37:1d:d9:d3:
                    56:22:e0:cb:1c:88:a9:1d:03:d3:d8:e8:78:4b:a2:
                    ca:44:d1:8c:22:46:21:db:34:be:7a:f4:21:2d:00:
                    29:2b:53:cb:2d:7f:01:f3:03:3e:82:1b:e3:c2:35:
                    87:0e:7a:d9:a8:9c:89:7e:af:85:13:68:f2:35:f8:
                    98:08:fc:46:be:19:a8:48:f0:00:4a:8e:cb:79:58:
                    95:73:82:03:79:3b:91:94:9d:c4:c1:33:1c:47:13:
                    2b:4e:c0:7f:76:c9:85:5d:fc:f3:77:82:3d:d7:40:
                    ae:60:31:b5:d9:86:6b:7c:bc:b6:00:f8:ef:54:d5:
                    4b:09:9d:79:a8:df:2c:94:04:13:15:e9:2a:35:3f:
                    70:81:22:77:ef:ae:44:f4:3e:bf:84:59:86:65:27:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:68:41:1D:18:86:04:11:A2:C4:E6:91:1E:90:E0:24:F2:55:C9:2B
            X509v3 Authority Key Identifier:
                keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:43:23:66:fd:e0:7f:b1:63:1b:09:da:50:ef:b7:f7:ea:52:
         15:9a:da:85:36:a7:a8:4e:ec:ac:09:25:8a:46:db:dd:ad:42:
         80:8d:18:b4:18:38:b5:a4:5b:66:aa:80:62:0d:7d:95:12:a7:
         55:c4:98:77:2f:45:07:36:ea:48:20:f7:40:d9:9a:7a:08:e9:
         d5:51:63:36:c6:9d:86:df:26:06:20:fc:5a:84:a9:c8:33:d0:
         28:a1:dc:70:a5:23:7f:e3:25:83:f8:c8:92:79:77:4b:7b:db:
         44:05:e0:cc:ad:17:44:78:a1:98:93:52:05:c0:06:cc:b6:98:
         c4:fa:a7:fa:2c:1c:8d:93:69:4c:a5:93:5f:b4:02:2e:06:82:
         e7:97:ab:fc:61:5c:53:35:c4:e0:e3:de:60:1d:29:21:ec:56:
         d8:43:57:4f:d7:b0:f5:c5:57:1f:05:23:7c:c1:1b:5c:a2:7f:
         de:33:b2:de:52:35:f9:47:ef:59:01:51:24:12:b8:5c:e4:85:
         74:70:8a:40:53:04:58:55:7f:42:8c:9d:07:b0:cb:52:47:a7:
         1b:ee:98:60:dd:ff:af:f7:21:bb:7b:31:04:b1:43:7d:02:5a:
         7c:c2:04:f4:9d:a0:94:8d:8c:17:2f:b6:92:a7:1b:7c:05:cf:
         48:d5:6d:5e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUbwJa0SSa49fNVsfyx8LnxMfvgCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2
RDMzMTIxQjAeFw0yNTA4MjAyMDQ5MTdaFw0yNTA4MjEyMzMxMTdaMDMxMTAvBgNV
BAMTKEY0Njg0MTFEMTg4NjA0MTFBMkM0RTY5MTFFOTBFMDI0RjI1NUM5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiqtsPzYwgz5totrLe97Xc0Mws
8YkGvGhWm/hWG7Stc45tFYpKjn+7L7km6Uhfz3Fhgvikt4ZF2lvBPxkb26nBWffA
nFECu4AmYsxhzl7iqAxwMk/+y+4vLNPXSyf+aVxrhcR0Nx3Z01Yi4MsciKkdA9PY
6HhLospE0YwiRiHbNL569CEtACkrU8stfwHzAz6CG+PCNYcOetmonIl+r4UTaPI1
+JgI/Ea+GahI8ABKjst5WJVzggN5O5GUncTBMxxHEytOwH92yYVd/PN3gj3XQK5g
MbXZhmt8vLYA+O9U1UsJnXmo3yyUBBMV6So1P3CBInfvrkT0Pr+EWYZlJzqjAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU9GhBHRiGBBGixOaRHpDgJPJVySswHwYDVR0j
BBgwFoAUSvVVUH92OHxnwT3gvCtwDW0zEhswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGVtdDlOM0NCVTdRN2Q4QU5CNDFzaFZrOWZEM1BVQjhwYUFVYkRyV0Ey
LzAvNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2RDMzMTIxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QUY1NTU1MDdGNzYzODdDNjdD
MTNERTBCQzJCNzAwRDZEMzMxMjFCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVk
ZW10OU4zQ0JVN1E3ZDhBTkI0MXNoVms5ZkQzUFVCOHBhQVViRHJXQTIvMC80QUY1
NTU1MDdGNzYzODdDNjdDMTNERTBCQzJCNzAwRDZEMzMxMjFCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
NUMjZv3gf7FjGwnaUO+39+pSFZrahTanqE7srAklikbb3a1CgI0YtBg4taRbZqqA
Yg19lRKnVcSYdy9FBzbqSCD3QNmaegjp1VFjNsadht8mBiD8WoSpyDPQKKHccKUj
f+Mlg/jIknl3S3vbRAXgzK0XRHihmJNSBcAGzLaYxPqn+iwcjZNpTKWTX7QCLgaC
55er/GFcUzXE4OPeYB0pIexW2ENXT9ew9cVXHwUjfMEbXKJ/3jOy3lI1+UfvWQFR
JBK4XOSFdHCKQFMEWFV/QoydB7DLUkenG+6YYN3/r/chu3sxBLFDfQJafMIE9J2g
lI2MFy+2kqcbfAXPSNVtXg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 04:24:15 2025 by rpki-client