Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.mft
File:                     68990E6100D2FF0A00146743F6D743C3A3C7944B.mft (raw, json)
Hash identifier:          EDe4BWlTj7ja6NyQeB128n7VefCF7iqUyn6gLRnU0AM=
Subject key identifier:   9D:F7:72:35:FA:82:3E:A5:49:82:70:C6:AE:E5:B5:62:43:47:36:2F
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Certificate issuer:       /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial:       7179A43AC455E6BD0C3FC0FB9C539B0918ADFFD1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.mft
Manifest number:          17
Signing time:             Sun 06 Apr 2025 19:22:09 +0000
Manifest this update:     Sun 06 Apr 2025 19:17:09 +0000
Manifest next update:     Mon 07 Apr 2025 19:45:09 +0000
Files and hashes:         1: 323830343a326566303a3a2f33332d3333203d3e20323634383632.roa (hash: CdGpILaUxuDeCnjA0pMkKwCqYI/tzt4bnqg5trZIyL8=)
                          2: 68990E6100D2FF0A00146743F6D743C3A3C7944B.crl (hash: VqVflkBaunp8mnAuJdt7IBVRv9XD/SSVs8YaGylwLPI=)
                          3: 3136382e3138312e3133322e302f32322d3232203d3e20323634383632.roa (hash: Ck3l0b2u/8Ajnm/BsMtbtnCI1vjeWWayJZSa5rbQ+d8=)
                          4: 323830343a326566303a383030303a3a2f33332d3333203d3e20323634383632.roa (hash: T3xe6C0QTLg48F90QdUP0+GSnUOTDN48qK2ny7XvDIg=)
                          5: 3136382e3138312e3133322e302f32332d3233203d3e20323634383632.roa (hash: Vq3Ffzn9lm+C5IAzAPV1eH7wlLyJGeSe6oqMrfApYJo=)
                          6: 323830343a326566303a3a2f33322d3332203d3e20323634383632.roa (hash: w1IQF8cTfEnrX8/p1nklGaG9PzaPccBrfuLawPLoO2A=)
                          7: 3136382e3138312e3133342e302f32332d3233203d3e20323634383632.roa (hash: c5Uy5q+XHC5eKTt2COQuPdxjxYJuOFuuZ2gde9Z8sEs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl
                          rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:79:a4:3a:c4:55:e6:bd:0c:3f:c0:fb:9c:53:9b:09:18:ad:ff:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
        Validity
            Not Before: Apr  6 19:17:09 2025 GMT
            Not After : Apr  7 19:45:09 2025 GMT
        Subject: CN=9DF77235FA823EA5498270C6AEE5B5624347362F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:d0:1d:c4:66:77:c5:38:c2:19:f5:b7:eb:
                    63:3f:25:3d:85:28:c8:7f:17:43:9d:8b:6c:7b:a8:
                    fb:1d:d5:0e:01:8e:89:61:42:5a:58:f5:46:74:eb:
                    1d:73:cf:a1:45:1a:13:3b:b8:e8:ee:78:99:b4:26:
                    c8:5b:3e:cd:c1:4f:51:67:3f:bb:74:4d:b4:20:f9:
                    f4:33:d3:d6:07:3b:81:48:19:a4:c4:0c:ed:81:f5:
                    76:92:bb:98:41:8e:06:73:79:c6:d5:9b:44:4d:5b:
                    7f:92:14:c0:53:94:89:3c:99:7a:a2:53:b0:9f:55:
                    c1:e7:dc:35:b1:87:22:80:7f:72:03:0a:68:1c:79:
                    ff:36:09:f5:ba:57:2e:60:77:be:5f:6c:d0:a6:46:
                    3d:5c:b8:ee:0b:73:7a:c6:95:3c:74:c7:26:5c:fd:
                    b8:18:6f:4e:c3:25:bc:7c:85:ea:59:ef:0d:59:06:
                    8d:0d:ab:1d:53:6b:ec:e8:4d:cb:f5:ba:b0:57:d0:
                    b3:98:2f:05:15:aa:5a:e5:de:e4:44:6f:6e:b9:c9:
                    98:4d:cb:71:4b:ea:5e:92:18:2a:4d:59:0c:5e:2c:
                    e2:8f:7d:70:df:b6:85:6c:d6:2a:9b:15:53:39:bd:
                    bd:55:e1:77:15:96:d0:de:60:5f:05:3b:ee:66:aa:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:72:35:FA:82:3E:A5:49:82:70:C6:AE:E5:B5:62:43:47:36:2F
            X509v3 Authority Key Identifier:
                keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:42:bc:4f:a8:72:71:02:c5:47:e7:17:15:ea:f4:48:f7:
         55:3b:35:c4:37:1b:4d:a7:98:88:49:04:7f:58:5f:67:f5:dd:
         96:ea:c5:ed:9b:93:e0:ac:36:3a:42:be:cf:db:86:ae:bd:9b:
         b5:b4:a8:80:e7:9d:a7:20:f3:91:1b:de:76:d3:b3:a5:ec:0f:
         68:73:74:e5:aa:0f:a2:6d:2d:77:d9:3f:e1:3b:17:bb:f9:29:
         12:fe:d3:32:b0:78:5f:fe:ff:49:3f:6d:02:24:37:4e:63:82:
         ad:d0:33:f7:10:ab:68:ce:6c:86:7f:e8:6e:05:86:4b:c2:8d:
         74:f4:b7:99:e0:79:41:03:b5:10:a4:e7:c4:99:f7:8d:fa:b5:
         94:1c:1e:4e:50:c1:48:1f:36:ec:ae:0d:ea:ff:2a:b7:2f:7b:
         4d:7c:4a:84:69:29:91:95:97:91:65:c3:0e:3c:42:83:eb:f5:
         6a:21:1f:e3:52:d7:ea:3e:9a:d4:a8:a6:99:0c:77:a4:d3:93:
         d3:93:0c:fa:e6:19:2a:ae:2f:c8:5d:d2:6e:46:dc:fc:1f:2a:
         4d:d3:62:ac:7e:52:a4:04:5a:71:d4:3b:18:68:74:25:4e:39:
         fa:61:9e:ed:61:9d:a1:57:da:ae:23:24:15:50:2f:4a:e4:eb:
         af:0d:ed:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcXmkOsRV5r0MP8D7nFObCRit/9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg5OTBFNjEwMEQyRkYwQTAwMTQ2NzQzRjZENzQzQzNB
M0M3OTQ0QjAeFw0yNTA0MDYxOTE3MDlaFw0yNTA0MDcxOTQ1MDlaMDMxMTAvBgNV
BAMTKDlERjc3MjM1RkE4MjNFQTU0OTgyNzBDNkFFRTVCNTYyNDM0NzM2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsIdAdxGZ3xTjCGfW362M/JT2F
KMh/F0Odi2x7qPsd1Q4BjolhQlpY9UZ06x1zz6FFGhM7uOjueJm0JshbPs3BT1Fn
P7t0TbQg+fQz09YHO4FIGaTEDO2B9XaSu5hBjgZzecbVm0RNW3+SFMBTlIk8mXqi
U7CfVcHn3DWxhyKAf3IDCmgcef82CfW6Vy5gd75fbNCmRj1cuO4Lc3rGlTx0xyZc
/bgYb07DJbx8hepZ7w1ZBo0Nqx1Ta+zoTcv1urBX0LOYLwUVqlrl3uREb265yZhN
y3FL6l6SGCpNWQxeLOKPfXDftoVs1iqbFVM5vb1V4XcVltDeYF8FO+5mqpOpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnfdyNfqCPqVJgnDGruW1YkNHNi8wHwYDVR0j
BBgwFoAUaJkOYQDS/woAFGdD9tdDw6PHlEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC82ODk5MEU2MTAwRDJGRjBBMDAxNDY3NDNGNkQ3NDNDM0EzQzc5NDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OTkwRTYxMDBEMkZGMEEw
MDE0Njc0M0Y2RDc0M0MzQTNDNzk0NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldXY20vMC82
ODk5MEU2MTAwRDJGRjBBMDAxNDY3NDNGNkQ3NDNDM0EzQzc5NDRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhCtCvE+ocnECxUfnFxXq9Ej3VTs1xDcbTaeYiEkEf1hfZ/XdlurF7ZuT4Kw2
OkK+z9uGrr2btbSogOedpyDzkRvedtOzpewPaHN05aoPom0td9k/4TsXu/kpEv7T
MrB4X/7/ST9tAiQ3TmOCrdAz9xCraM5shn/obgWGS8KNdPS3meB5QQO1EKTnxJn3
jfq1lBweTlDBSB827K4N6v8qty97TXxKhGkpkZWXkWXDDjxCg+v1aiEf41LX6j6a
1KimmQx3pNOT05MM+uYZKq4vyF3Sbkbc/B8qTdNirH5SpARacdQ7GGh0JU45+mGe
7WGdoVfariMkFVAvSuTrrw3t1A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:18:26 2025 by rpki-client