Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
File:                     32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft (raw, json)
Hash identifier:          z8It1pdI6oUSW7nCA8a7VLTa8dc+kZwQKzLp3pb3zjk=
Subject key identifier:   CE:5C:82:A0:40:44:DD:A0:CB:BD:2A:06:5D:C5:48:7B:74:3D:0C:C6
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Certificate issuer:       /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial:       23503988001938C88F68F3CE3719667FEEA69575
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
Manifest number:          1B
Signing time:             Wed 19 Feb 2025 10:52:12 +0000
Manifest this update:     Wed 19 Feb 2025 10:47:12 +0000
Manifest next update:     Thu 20 Feb 2025 11:53:12 +0000
Files and hashes:         1: 323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa (hash: oJN1Mm0+oVZUvetgFQB7RM79SeEDZgUk1cdKVVd5CIc=)
                          2: 32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl (hash: eQvyZ9pALyPfOJ5C+RQZxa6zPEsfgJNKq3DRpfXnsao=)
                          3: 323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa (hash: rouJnIWoIFYaP7KwULszsMkxxfCXvzh00FR5d7b8ZrU=)
                          4: 323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (hash: OKBGqrUMOXnEbxRXfJOKCpZwVNDbPaV3RhaqWhTf/JA=)
                          5: 323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa (hash: hM7RiTy/3XICUGtb8UBMEuHjxIlIoL2zo6wNbX8QPhs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 11:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:50:39:88:00:19:38:c8:8f:68:f3:ce:37:19:66:7f:ee:a6:95:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
        Validity
            Not Before: Feb 19 10:47:12 2025 GMT
            Not After : Feb 20 11:53:12 2025 GMT
        Subject: CN=CE5C82A04044DDA0CBBD2A065DC5487B743D0CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:77:92:63:6f:5c:81:d1:61:75:b3:10:b6:
                    fb:ad:e0:1e:e2:9a:e9:08:41:a7:a5:54:a8:3f:5c:
                    aa:1e:e6:4b:7f:12:4e:b4:16:44:04:c2:85:b2:d8:
                    26:63:bd:b6:ba:30:02:2d:40:6e:80:ce:64:7f:7d:
                    bf:b8:6c:f5:89:c4:3a:07:96:7a:cb:6c:c4:8f:30:
                    14:62:12:1d:2e:98:22:32:ca:2f:03:88:01:40:52:
                    d6:82:27:5c:b7:09:a2:2e:79:71:86:a8:d8:c2:b0:
                    22:f0:1e:54:1b:ca:c7:69:80:21:9b:f8:61:00:6b:
                    b3:18:d7:ba:4d:09:6c:9a:34:cb:0a:0c:45:68:ab:
                    d0:e6:49:9e:e8:0a:b7:89:cd:83:05:7c:c4:15:73:
                    e6:73:05:7e:6b:25:11:67:aa:7a:99:e2:a1:ca:6e:
                    b8:0b:2a:16:6e:85:89:b7:81:76:73:6c:a6:80:e0:
                    8f:92:52:e4:dc:c6:19:9b:1e:fc:93:71:72:c5:81:
                    1d:e8:f3:03:8d:ec:81:41:51:55:c1:60:d0:2f:2f:
                    f6:59:95:df:e9:e6:77:9b:db:2f:fd:0b:80:3c:5a:
                    f7:95:6a:1a:af:40:bd:b7:08:00:f8:4f:57:10:91:
                    9d:49:c5:51:75:50:99:8e:fd:93:95:5d:31:e1:25:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:82:A0:40:44:DD:A0:CB:BD:2A:06:5D:C5:48:7B:74:3D:0C:C6
            X509v3 Authority Key Identifier:
                keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:19:7b:c7:d5:63:a5:b4:cd:f8:20:aa:37:a4:53:d4:34:
         5e:39:b2:2f:1b:df:96:e9:56:3d:c5:3f:01:ad:c4:d9:a9:e2:
         e1:89:9b:f0:c2:7e:a3:bd:c6:79:60:6e:3d:1f:d5:3b:0d:61:
         83:ac:2e:be:8d:96:b2:97:38:0a:d7:77:c0:1a:4f:33:b2:8c:
         2a:98:2a:cc:1c:83:42:56:ef:38:7a:9b:69:42:d1:01:08:4e:
         85:c1:97:d4:8f:bc:e3:81:c6:ed:c9:37:40:b9:9b:1d:ef:50:
         0d:db:2d:66:ff:e9:c6:c9:1e:87:aa:6b:38:ad:85:8d:eb:da:
         1d:2f:fe:98:cb:a1:e5:c5:a2:d9:09:d7:1e:77:84:7e:5b:6c:
         34:5b:f2:f4:e9:8e:1f:48:f6:c4:2f:8d:19:8c:73:d3:53:bd:
         66:6a:ad:2f:5d:3e:5a:46:95:23:06:e7:9b:dc:b5:a2:38:e2:
         91:5a:f5:f4:6a:95:be:9c:9f:93:a5:12:9a:06:ce:d8:a9:3b:
         fc:09:f7:ad:bb:db:39:a9:8f:10:d2:92:6b:2c:f9:44:b2:3b:
         1e:f6:c0:72:97:46:a7:00:05:79:2a:56:82:27:d7:40:f6:8c:
         9c:9f:e6:2d:2d:25:d6:77:e3:01:6c:0e:73:bb:96:32:24:27:
         51:cf:45:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI1A5iAAZOMiPaPPONxlmf+6mlXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJCQjUxODQxMzNGMEFENTY4NjI3RkNFOERBNkIwMzU0
RENFOUJFQzAeFw0yNTAyMTkxMDQ3MTJaFw0yNTAyMjAxMTUzMTJaMDMxMTAvBgNV
BAMTKENFNUM4MkEwNDA0NEREQTBDQkJEMkEwNjVEQzU0ODdCNzQzRDBDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTY3eSY29cgdFhdbMQtvut4B7i
mukIQaelVKg/XKoe5kt/Ek60FkQEwoWy2CZjvba6MAItQG6AzmR/fb+4bPWJxDoH
lnrLbMSPMBRiEh0umCIyyi8DiAFAUtaCJ1y3CaIueXGGqNjCsCLwHlQbysdpgCGb
+GEAa7MY17pNCWyaNMsKDEVoq9DmSZ7oCreJzYMFfMQVc+ZzBX5rJRFnqnqZ4qHK
brgLKhZuhYm3gXZzbKaA4I+SUuTcxhmbHvyTcXLFgR3o8wON7IFBUVXBYNAvL/ZZ
ld/p5neb2y/9C4A8WveVahqvQL23CAD4T1cQkZ1JxVF1UJmO/ZOVXTHhJd0LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzlyCoEBE3aDLvSoGXcVIe3Q9DMYwHwYDVR0j
BBgwFoAUMrtRhBM/CtVoYn/OjaawNU3Om+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG
UGcvMC8zMkJCNTE4NDEzM0YwQUQ1Njg2MjdGQ0U4REE2QjAzNTREQ0U5QkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQkI1MTg0MTMzRjBBRDU2
ODYyN0ZDRThEQTZCMDM1NERDRTlCRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tGUGcvMC8z
MkJCNTE4NDEzM0YwQUQ1Njg2MjdGQ0U4REE2QjAzNTREQ0U5QkVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUmsZe8fVY6W0zfggqjekU9Q0XjmyLxvflulWPcU/Aa3E2ani4Ymb8MJ+o73G
eWBuPR/VOw1hg6wuvo2Wspc4Ctd3wBpPM7KMKpgqzByDQlbvOHqbaULRAQhOhcGX
1I+844HG7ck3QLmbHe9QDdstZv/pxskeh6prOK2FjevaHS/+mMuh5cWi2QnXHneE
fltsNFvy9OmOH0j2xC+NGYxz01O9ZmqtL10+WkaVIwbnm9y1ojjikVr19GqVvpyf
k6USmgbO2Kk7/An3rbvbOamPENKSayz5RLI7HvbAcpdGpwAFeSpWgifXQPaMnJ/m
LS0l1nfjAWwOc7uWMiQnUc9FkQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:15 2025 by rpki-client