Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.mft
File:                     F9571F71D3A1F065220B153C7C0B22D2A2862123.mft (raw, json)
Hash identifier:          zy7G8/uakia8fom8DxqIueD+pBtzXOZfdtzjhDvOCNc=
Subject key identifier:   F5:F7:97:97:5A:6F:54:3E:98:16:1D:27:8A:B9:35:A8:9F:41:90:44
Authority key identifier: F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23
Certificate issuer:       /CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
Certificate serial:       031C7EC05C93FCF87F1AF953E0B52C6E9BC8BB52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.mft
Manifest number:          B2
Signing time:             Sun 06 Apr 2025 12:14:17 +0000
Manifest this update:     Sun 06 Apr 2025 12:09:17 +0000
Manifest next update:     Mon 07 Apr 2025 12:53:17 +0000
Files and hashes:         1: 3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa (hash: qK0ixQua8vWAPl+dGCYjid9tVncL6BUVgsYG10hWIz8=)
                          2: 323830343a333461633a3a2f33322d3438203d3e20323635343732.roa (hash: tpEQglKyQR4Iy83hQeMBv5g+EcOCRPprr2vmjyIIFpY=)
                          3: F9571F71D3A1F065220B153C7C0B22D2A2862123.crl (hash: 1ZywX8Tb9NzhIupx2arZuuiX22an+BFhHLqz82bPWyw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.crl
                          rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1c:7e:c0:5c:93:fc:f8:7f:1a:f9:53:e0:b5:2c:6e:9b:c8:bb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
        Validity
            Not Before: Apr  6 12:09:17 2025 GMT
            Not After : Apr  7 12:53:17 2025 GMT
        Subject: CN=F5F797975A6F543E98161D278AB935A89F419044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:34:b5:41:7c:0a:8e:38:41:f4:da:97:b6:
                    2b:ce:99:79:c8:e2:cf:70:22:f5:9f:1d:65:df:d2:
                    5d:35:3f:f8:d3:51:e6:c5:cd:f1:62:57:e7:94:7d:
                    73:b8:b0:28:e9:2a:7e:4d:d3:5d:c5:d5:f4:f5:29:
                    bb:3b:fe:27:5b:03:5a:32:f2:6a:5a:d4:e1:bc:a0:
                    87:b3:1c:31:5d:a5:dd:65:f5:1b:fa:11:ea:b5:48:
                    07:e6:d4:06:d9:df:76:a7:37:2a:0b:cc:0e:70:95:
                    21:3c:14:d8:71:ec:8d:ee:2b:65:4a:c9:78:8d:b9:
                    a1:88:d5:82:02:b3:95:97:de:02:c2:37:ca:71:e0:
                    4d:24:22:42:9b:cf:ee:8f:69:a7:70:f1:a4:ba:0f:
                    47:60:81:c6:fb:aa:72:01:84:4c:0d:02:ff:a4:32:
                    7e:e2:4d:f0:63:3c:dc:32:b8:0f:0a:4d:e3:f8:7c:
                    06:88:fc:fc:13:2c:43:f3:25:b7:c3:18:d8:8c:fc:
                    c1:d8:8b:e5:85:85:17:81:5d:2f:3c:9c:29:6e:78:
                    34:a8:f9:00:e2:8b:f8:7d:07:57:6d:da:df:0d:73:
                    2a:88:6d:02:a2:59:48:a6:01:42:0e:ae:a2:cb:ce:
                    07:97:43:ce:cf:ad:df:90:4b:6e:d1:52:86:d6:12:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:97:97:5A:6F:54:3E:98:16:1D:27:8A:B9:35:A8:9F:41:90:44
            X509v3 Authority Key Identifier:
                keyid:F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:52:60:26:27:60:f8:b0:20:f5:e1:04:09:98:ce:2e:4e:c7:
         b8:4c:5d:89:f9:40:6b:22:5d:b7:20:f9:23:71:e3:ee:62:8f:
         8a:70:be:87:b5:52:81:be:64:f6:88:e9:3b:59:b8:6f:c7:6a:
         e0:1a:f7:ed:1a:9b:12:76:b2:7e:99:f1:0d:b3:17:2c:8e:6f:
         c3:a4:96:33:1d:3e:5e:0e:86:ba:85:c0:c9:0f:b6:56:e9:20:
         54:6b:53:8a:3e:72:78:89:e8:c0:eb:48:1d:c0:1a:d6:4e:09:
         15:59:23:28:5c:47:6e:94:bf:f1:c0:7c:f5:96:1f:bd:d7:da:
         fa:a3:1a:95:7a:0c:70:5a:1a:a4:35:82:7d:8c:67:ef:42:b3:
         8b:a5:44:5e:e6:c5:69:2a:d2:fa:7f:fb:e8:5b:44:a5:af:03:
         75:27:42:66:cc:cd:59:73:c6:0b:f2:38:e9:7d:cf:db:a9:94:
         1c:1c:b3:df:20:00:01:82:8d:a5:e4:2e:a4:aa:ce:13:09:01:
         1b:19:d1:ea:a0:6c:76:f7:cc:e7:f8:fc:ce:fc:69:16:d6:d9:
         63:db:84:4e:5b:d7:01:e1:39:4f:12:23:37:bb:e3:de:b8:7b:
         c8:03:20:99:b8:37:58:f6:79:65:24:d3:75:b7:46:d8:c8:93:
         80:d7:c4:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAxx+wFyT/Ph/GvlT4LUsbpvIu1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk1NzFGNzFEM0ExRjA2NTIyMEIxNTNDN0MwQjIyRDJB
Mjg2MjEyMzAeFw0yNTA0MDYxMjA5MTdaFw0yNTA0MDcxMjUzMTdaMDMxMTAvBgNV
BAMTKEY1Rjc5Nzk3NUE2RjU0M0U5ODE2MUQyNzhBQjkzNUE4OUY0MTkwNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWTS1QXwKjjhB9NqXtivOmXnI
4s9wIvWfHWXf0l01P/jTUebFzfFiV+eUfXO4sCjpKn5N013F1fT1Kbs7/idbA1oy
8mpa1OG8oIezHDFdpd1l9Rv6Eeq1SAfm1AbZ33anNyoLzA5wlSE8FNhx7I3uK2VK
yXiNuaGI1YICs5WX3gLCN8px4E0kIkKbz+6Paadw8aS6D0dggcb7qnIBhEwNAv+k
Mn7iTfBjPNwyuA8KTeP4fAaI/PwTLEPzJbfDGNiM/MHYi+WFhReBXS88nClueDSo
+QDii/h9B1dt2t8NcyqIbQKiWUimAUIOrqLLzgeXQ87Prd+QS27RUobWEh+3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9feXl1pvVD6YFh0nirk1qJ9BkEQwHwYDVR0j
BBgwFoAU+VcfcdOh8GUiCxU8fAsi0qKGISMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZ3VjJWZjhRYXU1aUZjQ0pjOWo5Qks0S202ZDRpd2s5NFBQaXVHY2ZR
WTUvMC9GOTU3MUY3MUQzQTFGMDY1MjIwQjE1M0M3QzBCMjJEMkEyODYyMTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NTcxRjcxRDNBMUYwNjUy
MjBCMTUzQzdDMEIyMkQyQTI4NjIxMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODZ3VjJWZjhRYXU1aUZjQ0pjOWo5Qks0S202ZDRpd2s5NFBQaXVHY2ZRWTUvMC9G
OTU3MUY3MUQzQTFGMDY1MjIwQjE1M0M3QzBCMjJEMkEyODYyMTIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIlJgJidg+LAg9eEECZjOLk7HuExdiflAayJdtyD5I3Hj7mKPinC+h7VSgb5k
9ojpO1m4b8dq4Br37RqbEnayfpnxDbMXLI5vw6SWMx0+Xg6GuoXAyQ+2VukgVGtT
ij5yeInowOtIHcAa1k4JFVkjKFxHbpS/8cB89ZYfvdfa+qMalXoMcFoapDWCfYxn
70Kzi6VEXubFaSrS+n/76FtEpa8DdSdCZszNWXPGC/I46X3P26mUHByz3yAAAYKN
peQupKrOEwkBGxnR6qBsdvfM5/j8zvxpFtbZY9uETlvXAeE5TxIjN7vj3rh7yAMg
mbg3WPZ5ZSTTdbdG2MiTgNfE3w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:56 2025 by rpki-client