Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
File:                     29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft (raw, json)
Hash identifier:          o9+bPaMvHBk/mexK9egk4wZipX30qRmGnpxqZCqW1/U=
Subject key identifier:   DD:15:E7:64:47:E6:A0:B9:0D:39:6F:2D:99:2C:3D:BF:2B:E1:1F:71
Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17
Certificate issuer:       /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
Certificate serial:       5B537EA205864387C125E2EEB4402A06446A7B81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
Manifest number:          01C3
Signing time:             Sun 08 Jun 2025 20:59:06 +0000
Manifest this update:     Sun 08 Jun 2025 20:54:06 +0000
Manifest next update:     Mon 09 Jun 2025 21:28:06 +0000
Files and hashes:         1: 323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (hash: Ixun3nWW3SSxlndSkYliPomT6RUJWF3m47aF6RdUzTo=)
                          2: 29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl (hash: MYp99M3cP3MBVAmeag15pacb02QAEstpNn721Vx8RlA=)
                          3: 3137372e38372e3137362e302f32322d3234203d3e20323632333036.roa (hash: /1iZ7MfjI0TaFU+5fIGZM08kiGyQDGOepbs2iyRnPng=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl
                          rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:7e:a2:05:86:43:87:c1:25:e2:ee:b4:40:2a:06:44:6a:7b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
        Validity
            Not Before: Jun  8 20:54:06 2025 GMT
            Not After : Jun  9 21:28:06 2025 GMT
        Subject: CN=DD15E76447E6A0B90D396F2D992C3DBF2BE11F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:7d:4e:c4:ea:a7:5c:82:ac:cc:2e:0b:a0:
                    2b:71:e8:ec:49:4f:05:e6:66:fc:c5:29:6e:70:4e:
                    f7:6e:40:17:38:ef:9a:93:e5:2c:96:c2:47:b6:59:
                    ab:fc:64:42:43:5c:7b:b1:c1:b7:43:72:c6:24:85:
                    2e:5f:29:66:49:8a:6e:9a:ff:63:bf:e3:b3:73:ae:
                    9b:fd:9a:72:9e:3c:07:bb:2e:00:db:17:a4:aa:1f:
                    08:c9:ba:e6:61:27:b5:a7:25:89:d6:0b:08:e1:8b:
                    70:73:8a:16:76:0a:a5:64:c2:5e:0c:79:52:14:15:
                    1d:28:b4:fd:b5:92:6b:fd:aa:a2:23:6d:33:4d:80:
                    6c:87:a4:5d:a3:29:2e:1a:73:1d:87:46:5a:a4:0b:
                    59:1d:05:4a:58:08:18:4b:06:a4:78:5d:01:ae:34:
                    05:63:a8:b1:c6:25:6d:3f:76:98:50:d0:84:d0:ed:
                    a1:46:a9:ed:04:fe:83:92:84:38:0a:1c:14:4b:ac:
                    2d:a5:a2:63:ed:51:bf:d6:bd:44:5b:15:5a:ea:1a:
                    89:80:69:99:e5:c8:71:86:35:87:13:22:19:a0:c5:
                    91:53:0e:ed:03:11:1d:67:50:1f:0e:14:d3:89:b3:
                    df:10:95:ba:2d:c0:7f:5b:09:50:50:55:f8:ff:d7:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:E7:64:47:E6:A0:B9:0D:39:6F:2D:99:2C:3D:BF:2B:E1:1F:71
            X509v3 Authority Key Identifier:
                keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:72:f9:4a:e7:d2:a2:ce:f8:ba:44:f2:e8:33:31:6d:cf:
         1d:5e:b9:19:83:1a:02:0c:0c:fd:a6:92:cf:a3:01:0d:2a:4d:
         4b:96:26:a9:8b:ed:a7:82:f0:5a:32:ae:01:69:87:98:9c:07:
         32:15:b5:19:26:c8:8e:0f:c8:fc:4e:91:d2:b7:1b:9f:7e:42:
         3d:c9:8f:ad:e3:e2:2e:a7:01:39:74:ab:d4:51:c2:27:7c:9b:
         ed:6d:28:14:31:e5:9c:ed:52:a7:d5:3f:63:bc:d6:4f:2c:fe:
         a3:9e:c4:fe:95:73:ae:a9:f8:3b:4b:c5:1c:c3:1a:6b:19:f5:
         6a:66:15:e0:c7:71:f4:10:8c:9a:e0:96:63:3c:8d:66:ba:d4:
         c4:c7:5c:4f:29:a4:64:db:b0:6f:e1:a7:b0:ca:10:a2:dc:86:
         89:f3:a2:dd:76:58:d2:37:e1:17:45:58:80:84:60:af:ee:ec:
         58:60:07:f0:4e:9d:13:84:f2:b6:63:13:98:9b:6c:fa:01:d2:
         85:d2:61:f1:bb:1e:f1:07:c2:17:40:4b:b8:a8:1b:29:eb:70:
         8e:cb:e8:89:1d:2a:33:a6:1f:3a:d2:f4:38:04:a2:8b:e1:4f:
         a7:54:42:ed:08:8b:4e:bd:88:f5:de:0b:bb:a1:0a:0d:04:02:
         d4:cd:dd:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW1N+ogWGQ4fBJeLutEAqBkRqe4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlENzExMkM3QjZCRDM5NDExMzNEOEEyREIwRkJBQjZD
QTA4MUMxNzAeFw0yNTA2MDgyMDU0MDZaFw0yNTA2MDkyMTI4MDZaMDMxMTAvBgNV
BAMTKEREMTVFNzY0NDdFNkEwQjkwRDM5NkYyRDk5MkMzREJGMkJFMTFGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8h31OxOqnXIKszC4LoCtx6OxJ
TwXmZvzFKW5wTvduQBc475qT5SyWwke2Wav8ZEJDXHuxwbdDcsYkhS5fKWZJim6a
/2O/47Nzrpv9mnKePAe7LgDbF6SqHwjJuuZhJ7WnJYnWCwjhi3BzihZ2CqVkwl4M
eVIUFR0otP21kmv9qqIjbTNNgGyHpF2jKS4acx2HRlqkC1kdBUpYCBhLBqR4XQGu
NAVjqLHGJW0/dphQ0ITQ7aFGqe0E/oOShDgKHBRLrC2lomPtUb/WvURbFVrqGomA
aZnlyHGGNYcTIhmgxZFTDu0DER1nUB8OFNOJs98QlbotwH9bCVBQVfj/18gxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3RXnZEfmoLkNOW8tmSw9vyvhH3EwHwYDVR0j
BBgwFoAUKdcRLHtr05QRM9ii2w+6tsoIHBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkxrVFh4emU5NkJyOVpQbThpSFpqV2dBYkZTOFU1eGRRaXJ5TjZOOGFk
ZlUvMC8yOUQ3MTEyQzdCNkJEMzk0MTEzM0Q4QTJEQjBGQkFCNkNBMDgxQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RDcxMTJDN0I2QkQzOTQx
MTMzRDhBMkRCMEZCQUI2Q0EwODFDMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkxrVFh4emU5NkJyOVpQbThpSFpqV2dBYkZTOFU1eGRRaXJ5TjZOOGFkZlUvMC8y
OUQ3MTEyQzdCNkJEMzk0MTEzM0Q4QTJEQjBGQkFCNkNBMDgxQzE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJUpy+Urn0qLO+LpE8ugzMW3PHV65GYMaAgwM/aaSz6MBDSpNS5YmqYvtp4Lw
WjKuAWmHmJwHMhW1GSbIjg/I/E6R0rcbn35CPcmPrePiLqcBOXSr1FHCJ3yb7W0o
FDHlnO1Sp9U/Y7zWTyz+o57E/pVzrqn4O0vFHMMaaxn1amYV4Mdx9BCMmuCWYzyN
ZrrUxMdcTymkZNuwb+GnsMoQotyGifOi3XZY0jfhF0VYgIRgr+7sWGAH8E6dE4Ty
tmMTmJts+gHShdJh8bse8QfCF0BLuKgbKetwjsvoiR0qM6YfOtL0OASii+FPp1RC
7QiLTr2I9d4Lu6EKDQQC1M3dtw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:33:59 2025 by rpki-client