Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
File:                     0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft (raw, json)
Hash identifier:          dKke/O/jf5YQ+M/u7e5ivgqNBUFR1QB01CkUaxOi7T8=
Subject key identifier:   36:44:F4:0C:63:B7:C7:A2:54:C2:6F:A0:1F:18:10:A5:FF:0B:F4:21
Authority key identifier: 0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58
Certificate issuer:       /CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
Certificate serial:       1C0F496BAE1AB1976AEAB7F40FF8CDCA924EA8A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
Manifest number:          3E
Signing time:             Tue 10 Jun 2025 06:09:00 +0000
Manifest this update:     Tue 10 Jun 2025 06:04:00 +0000
Manifest next update:     Wed 11 Jun 2025 09:56:00 +0000
Files and hashes:         1: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: +HOrbWsIeWd5kgSYjNjFVYSR8P1o1dE9sv1nHGV2r60=)
                          2: 323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (hash: sau3ZA+uFSmmFUIuKDRztWOtW+waliROsZZFvV4FudU=)
                          3: 0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl (hash: pXsarRlcn11uIyFcdzm7ax9NUDitgWngbsTSJ5UIjDI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl
                          rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0f:49:6b:ae:1a:b1:97:6a:ea:b7:f4:0f:f8:cd:ca:92:4e:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
        Validity
            Not Before: Jun 10 06:04:00 2025 GMT
            Not After : Jun 11 09:56:00 2025 GMT
        Subject: CN=3644F40C63B7C7A254C26FA01F1810A5FF0BF421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:f9:56:20:a1:fe:cb:db:5e:04:3a:6e:e7:
                    d1:ab:4c:cc:2f:de:0b:bd:2c:a3:a6:1e:25:0e:01:
                    b5:00:56:fd:80:fb:66:fd:03:a2:a4:36:24:f6:95:
                    e1:ef:fb:53:e7:81:73:21:e5:59:a6:cf:10:0c:ab:
                    64:fb:63:c3:89:f0:2c:b0:90:2c:19:94:98:84:f4:
                    d9:5a:5a:23:d6:88:46:7f:ff:b7:6b:e8:41:9f:92:
                    0a:d8:0c:2c:98:3a:51:63:5e:66:27:35:70:a4:aa:
                    9e:77:3c:8a:78:ae:f7:38:f4:a3:15:6b:77:1f:ad:
                    27:63:4d:d9:5a:98:d5:f5:bf:ea:f6:51:cd:59:f0:
                    45:f7:89:42:27:3b:8e:0a:47:70:f8:f3:ff:ae:5e:
                    ad:a9:2d:5e:2e:43:aa:47:7f:2a:4b:db:9c:c4:28:
                    f8:4b:e5:4d:86:29:de:0f:43:a5:2c:d3:d0:29:0d:
                    b8:0d:b5:18:a1:02:6a:4e:f0:cc:39:3a:ae:44:4d:
                    89:00:0b:82:80:35:3f:74:d3:f8:a8:98:62:d3:8a:
                    4c:2d:46:06:0b:97:59:83:d3:06:a0:90:95:cb:34:
                    91:b6:a9:d9:25:4e:d2:aa:4c:89:10:77:38:1e:bf:
                    2f:8b:14:09:d2:df:9f:5c:a1:52:e6:c3:4c:33:a1:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:F4:0C:63:B7:C7:A2:54:C2:6F:A0:1F:18:10:A5:FF:0B:F4:21
            X509v3 Authority Key Identifier:
                keyid:0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d2:2d:95:7b:79:0d:0c:e4:15:6a:d9:b4:c9:c5:9e:f3:f1:
         82:1c:2c:4d:e1:00:a4:6d:4d:af:ee:4c:88:ba:9e:fe:d2:32:
         3d:3c:7d:05:18:8d:06:bf:de:ad:a1:92:55:e4:b8:e0:64:42:
         ea:ed:25:03:e0:ae:34:f6:c6:d9:f9:61:67:02:d2:68:73:9d:
         4b:07:f4:c2:d0:17:bf:4c:27:09:5b:34:65:a7:85:07:fc:5f:
         f8:19:3d:3f:86:46:c6:3a:35:8f:79:2f:a8:ae:91:11:12:aa:
         f9:3c:36:eb:6d:27:ff:b1:06:f2:a9:d9:49:21:07:e3:2b:cb:
         24:f9:f8:75:19:cd:f6:5d:e9:41:f9:c5:c8:82:12:2c:06:2c:
         fb:c9:30:ea:84:83:0e:fa:8b:1a:20:6e:4f:a5:6e:9f:8e:b4:
         8f:f1:74:3e:63:b8:74:25:e9:be:a3:ba:8d:3a:4c:73:17:a8:
         98:27:e0:bb:c8:b2:9a:ca:61:2b:a9:ad:7e:8f:70:1c:79:55:
         f5:ba:d8:4e:1c:4f:e4:55:99:44:9b:a0:73:28:60:58:5a:8a:
         ba:56:98:7b:ff:79:d9:4a:69:87:32:c9:5f:9c:3f:bd:72:0c:
         19:8c:a0:b0:4c:16:b7:1f:83:e3:d8:f5:90:ce:96:a9:a8:5e:
         0c:30:4a:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHA9Ja64asZdq6rf0D/jNypJOqKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY4M0U3RUI0OTg0QTcxMjdGOEQ5MUFBRUJBNUFEMDA1
Nzc2N0M1ODAeFw0yNTA2MTAwNjA0MDBaFw0yNTA2MTEwOTU2MDBaMDMxMTAvBgNV
BAMTKDM2NDRGNDBDNjNCN0M3QTI1NEMyNkZBMDFGMTgxMEE1RkYwQkY0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7vlWIKH+y9teBDpu59GrTMwv
3gu9LKOmHiUOAbUAVv2A+2b9A6KkNiT2leHv+1PngXMh5VmmzxAMq2T7Y8OJ8Cyw
kCwZlJiE9NlaWiPWiEZ//7dr6EGfkgrYDCyYOlFjXmYnNXCkqp53PIp4rvc49KMV
a3cfrSdjTdlamNX1v+r2Uc1Z8EX3iUInO44KR3D48/+uXq2pLV4uQ6pHfypL25zE
KPhL5U2GKd4PQ6Us09ApDbgNtRihAmpO8Mw5Oq5ETYkAC4KANT900/iomGLTikwt
RgYLl1mD0wagkJXLNJG2qdklTtKqTIkQdzgevy+LFAnS359coVLmw0wzodE1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNkT0DGO3x6JUwm+gHxgQpf8L9CEwHwYDVR0j
BBgwFoAUD4Pn60mEpxJ/jZGq66WtAFd2fFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFTUDdpd0hLNFBialFIVExqWDNKQXZKcmNLbnd2ZEtlTGJ0WFhWdUZj
cG4vMC8wRjgzRTdFQjQ5ODRBNzEyN0Y4RDkxQUFFQkE1QUQwMDU3NzY3QzU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGODNFN0VCNDk4NEE3MTI3
RjhEOTFBQUVCQTVBRDAwNTc3NjdDNTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTFTUDdpd0hLNFBialFIVExqWDNKQXZKcmNLbnd2ZEtlTGJ0WFhWdUZjcG4vMC8w
RjgzRTdFQjQ5ODRBNzEyN0Y4RDkxQUFFQkE1QUQwMDU3NzY3QzU4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEdItlXt5DQzkFWrZtMnFnvPxghwsTeEApG1Nr+5MiLqe/tIyPTx9BRiNBr/e
raGSVeS44GRC6u0lA+CuNPbG2flhZwLSaHOdSwf0wtAXv0wnCVs0ZaeFB/xf+Bk9
P4ZGxjo1j3kvqK6RERKq+Tw2620n/7EG8qnZSSEH4yvLJPn4dRnN9l3pQfnFyIIS
LAYs+8kw6oSDDvqLGiBuT6Vun460j/F0PmO4dCXpvqO6jTpMcxeomCfgu8iymsph
K6mtfo9wHHlV9brYThxP5FWZRJugcyhgWFqKulaYe/952UpphzLJX5w/vXIMGYyg
sEwWtx+D49j1kM6WqaheDDBKPA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:58 2025 by rpki-client