Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft
File:                     8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft (raw, json)
Hash identifier:          LJhLXiX4GWv0Plawq1nqD7wAHdy2jA/O2nmWhFV8N7Y=
Subject key identifier:   B1:A8:BE:3D:8F:62:F0:45:31:F4:9E:3C:0B:4E:81:62:06:7F:7A:71
Authority key identifier: 8E:52:C3:EE:0E:4E:14:82:F1:EC:B7:06:9F:3B:7A:34:4E:A0:DD:B2
Certificate issuer:       /CN=8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2
Certificate serial:       093B697724F0A8D29084981D34EC8DAFBED355BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft
Manifest number:          3C
Signing time:             Mon 09 Jun 2025 09:39:32 +0000
Manifest this update:     Mon 09 Jun 2025 09:34:32 +0000
Manifest next update:     Tue 10 Jun 2025 11:35:32 +0000
Files and hashes:         1: 323830343a326566303a3a2f33322d313238203d3e20323634383632.roa (hash: /yzgAnYbMJWj28/xRizqx8a9n9Vu4jaezShDbudLLKI=)
                          2: 3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa (hash: jK4KZk9GpmyY6DV5imhyMSK8gnX/EJeWy4ICZUOtRSw=)
                          3: 8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl (hash: mAfAlTcaDTbHIEaRi3TGe4l6IgmgGh/JsX8bH5cvSOo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl
                          rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3b:69:77:24:f0:a8:d2:90:84:98:1d:34:ec:8d:af:be:d3:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2
        Validity
            Not Before: Jun  9 09:34:32 2025 GMT
            Not After : Jun 10 11:35:32 2025 GMT
        Subject: CN=B1A8BE3D8F62F04531F49E3C0B4E8162067F7A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:09:d5:04:86:20:b1:5e:9a:43:05:c2:55:
                    d4:c0:34:c7:44:98:2e:fe:2e:b7:2d:02:f7:c9:f5:
                    96:e4:fe:6b:6d:53:77:b2:5b:23:54:3d:66:54:af:
                    06:1a:9c:ba:b8:ac:96:c2:01:e0:92:13:ec:c7:54:
                    d8:e9:67:48:e5:35:08:e9:3f:dc:7a:6f:1e:f2:1c:
                    16:00:82:8d:b3:49:ea:83:eb:b2:85:cc:5d:ff:ae:
                    0f:30:5c:7c:6e:61:d0:b3:85:b4:74:c9:48:9d:1c:
                    55:77:b6:35:89:19:3a:89:93:53:a8:ea:dd:35:ed:
                    3f:30:98:f2:f8:2a:f2:84:bf:24:2d:ed:2c:7e:4d:
                    05:8a:4c:d2:a3:eb:8e:4e:26:84:8c:a4:97:64:27:
                    53:f6:0f:cf:fa:57:f7:0e:c4:c2:ce:dd:8b:98:72:
                    9a:0c:57:3d:50:9b:87:33:aa:cb:0a:61:1e:e2:d4:
                    ef:f1:81:cc:bc:13:bb:d7:d0:19:fb:c1:78:f2:c3:
                    d4:b8:45:59:90:ec:52:00:7b:c5:90:69:55:d9:10:
                    c8:48:89:06:6c:00:cd:36:e9:50:6c:b4:99:a3:76:
                    a7:73:a1:38:a1:c8:20:e3:9a:79:89:37:27:98:21:
                    34:73:44:18:08:a2:b2:9b:54:b2:02:66:6b:58:81:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:BE:3D:8F:62:F0:45:31:F4:9E:3C:0B:4E:81:62:06:7F:7A:71
            X509v3 Authority Key Identifier:
                keyid:8E:52:C3:EE:0E:4E:14:82:F1:EC:B7:06:9F:3B:7A:34:4E:A0:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8e:c4:c2:72:af:6e:a5:96:99:38:c6:cb:eb:3a:31:7a:c5:
         12:33:59:14:cb:c0:9b:f6:7c:1d:60:1f:5a:b6:38:e2:2a:e5:
         5c:e1:02:a1:bb:99:06:73:2a:48:d9:85:86:d2:f9:03:86:a6:
         09:16:aa:2e:35:dd:36:c8:5f:49:24:ed:4b:64:f3:6c:82:7d:
         0b:0c:73:5e:6f:a6:05:3b:b2:cd:c8:d9:bb:02:ed:10:b5:fc:
         b7:72:11:e6:e2:b6:ee:c2:32:6f:c7:3d:af:76:69:be:6c:86:
         95:4e:b6:77:e9:4c:7f:91:12:28:d9:86:66:37:49:20:60:a7:
         77:c4:64:16:ee:46:cc:85:80:70:c2:af:8b:b9:6d:07:b9:f5:
         24:6f:74:93:e8:62:8c:63:f7:f1:02:98:1c:c1:db:a7:2a:04:
         b2:e0:fe:af:0a:07:69:5b:f3:d5:ee:2f:d4:58:b1:0d:6d:73:
         34:a1:0d:cf:b8:aa:d7:eb:ed:4e:34:d0:d4:d4:d1:0f:7c:ba:
         18:8d:43:b7:40:9a:ee:28:fe:b3:60:84:ad:a3:24:2a:cd:e5:
         87:1e:e8:8c:29:b0:0e:c0:7e:d6:a1:28:3b:32:de:67:5f:af:
         1d:0f:0c:43:30:81:3c:7d:8e:3e:0a:6d:cd:07:ca:24:59:4a:
         93:12:b0:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCTtpdyTwqNKQhJgdNOyNr77TVb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkMzRUUwRTRFMTQ4MkYxRUNCNzA2OUYzQjdBMzQ0
RUEwRERCMjAeFw0yNTA2MDkwOTM0MzJaFw0yNTA2MTAxMTM1MzJaMDMxMTAvBgNV
BAMTKEIxQThCRTNEOEY2MkYwNDUzMUY0OUUzQzBCNEU4MTYyMDY3RjdBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1gnVBIYgsV6aQwXCVdTANMdE
mC7+LrctAvfJ9Zbk/mttU3eyWyNUPWZUrwYanLq4rJbCAeCSE+zHVNjpZ0jlNQjp
P9x6bx7yHBYAgo2zSeqD67KFzF3/rg8wXHxuYdCzhbR0yUidHFV3tjWJGTqJk1Oo
6t017T8wmPL4KvKEvyQt7Sx+TQWKTNKj645OJoSMpJdkJ1P2D8/6V/cOxMLO3YuY
cpoMVz1Qm4czqssKYR7i1O/xgcy8E7vX0Bn7wXjyw9S4RVmQ7FIAe8WQaVXZEMhI
iQZsAM026VBstJmjdqdzoTihyCDjmnmJNyeYITRzRBgIorKbVLICZmtYgWMNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsai+PY9i8EUx9J48C06BYgZ/enEwHwYDVR0j
BBgwFoAUjlLD7g5OFILx7LcGnzt6NE6g3bIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX
Y20vMC84RTUyQzNFRTBFNEUxNDgyRjFFQ0I3MDY5RjNCN0EzNDRFQTBEREIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDM0VFMEU0RTE0ODJG
MUVDQjcwNjlGM0I3QTM0NEVBMEREQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldXY20vMC84
RTUyQzNFRTBFNEUxNDgyRjFFQ0I3MDY5RjNCN0EzNDRFQTBEREIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFo7EwnKvbqWWmTjGy+s6MXrFEjNZFMvAm/Z8HWAfWrY44irlXOECobuZBnMq
SNmFhtL5A4amCRaqLjXdNshfSSTtS2TzbIJ9CwxzXm+mBTuyzcjZuwLtELX8t3IR
5uK27sIyb8c9r3ZpvmyGlU62d+lMf5ESKNmGZjdJIGCnd8RkFu5GzIWAcMKvi7lt
B7n1JG90k+hijGP38QKYHMHbpyoEsuD+rwoHaVvz1e4v1FixDW1zNKENz7iq1+vt
TjTQ1NTRD3y6GI1Dt0Ca7ij+s2CEraMkKs3lhx7ojCmwDsB+1qEoOzLeZ1+vHQ8M
QzCBPH2OPgptzQfKJFlKkxKw9Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:11:02 2025 by rpki-client