Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          qELnKW9v/sVlpOc/N5AGIcXjIl8fD0u/s+tGUTQXHxc=
Subject key identifier:   16:6C:C0:A3:B7:B2:46:34:02:9D:AF:D8:0D:82:0F:50:88:4F:43:1C
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       77CF098A3C016D58E0F696CB9407AA88A6598BB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          0243
Signing time:             Mon 09 Jun 2025 06:10:14 +0000
Manifest this update:     Mon 09 Jun 2025 06:05:13 +0000
Manifest next update:     Tue 10 Jun 2025 07:22:13 +0000
Files and hashes:         1: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)
                          2: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
                          3: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: CBAwQYovVNouSlh7brBG7oKv8O/+i24Hh1TWRyoj3lk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:09:8a:3c:01:6d:58:e0:f6:96:cb:94:07:aa:88:a6:59:8b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Jun  9 06:05:13 2025 GMT
            Not After : Jun 10 07:22:13 2025 GMT
        Subject: CN=166CC0A3B7B24634029DAFD80D820F50884F431C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:79:fc:ff:e6:bc:11:87:78:b0:d3:e3:c2:
                    86:d5:6c:33:8a:f3:55:72:d2:ac:f3:c2:08:d5:62:
                    c2:7f:cd:f1:d3:d1:f0:89:32:1a:43:47:eb:d0:38:
                    1b:0a:2f:15:cf:24:60:64:1a:64:12:e1:0b:61:4d:
                    8a:50:80:fd:e8:18:bc:37:7a:86:fc:51:e8:73:57:
                    88:ac:c2:2d:ac:26:e7:5b:47:65:6f:ea:6b:7c:d0:
                    91:2f:13:e2:d8:2f:8b:58:22:2b:3d:59:e7:c3:f9:
                    50:ff:c7:d7:68:fa:65:d4:ec:48:dd:24:db:d1:42:
                    cf:21:08:9f:d3:4a:d4:24:d4:93:a3:5b:92:53:d1:
                    62:c8:ff:71:1f:08:6a:5a:23:48:de:89:e5:59:26:
                    e1:6f:18:0a:00:3c:85:0d:8a:4d:55:c3:67:ac:0d:
                    79:28:98:4e:ee:d2:b6:89:59:59:c9:83:a3:72:de:
                    4e:f7:52:32:c5:f0:bc:c2:b4:5e:4d:20:b4:cb:cc:
                    03:1a:ae:e1:57:ef:1e:8e:cf:0e:2f:28:c1:59:53:
                    0b:8f:7c:e9:fa:50:d8:5c:46:60:41:ad:f3:59:08:
                    6f:bb:76:3c:08:09:66:de:55:23:ef:39:5b:b7:1b:
                    c7:b1:53:9e:04:a4:15:54:77:c2:f6:79:ae:72:f6:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6C:C0:A3:B7:B2:46:34:02:9D:AF:D8:0D:82:0F:50:88:4F:43:1C
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:28:52:b8:4f:ca:6d:72:2c:a1:8d:0b:1b:36:90:db:f7:9d:
         31:7c:6f:b0:ff:01:aa:67:bd:be:eb:b3:03:90:73:ef:4c:eb:
         d0:fd:90:89:fd:f6:ee:d6:c0:13:60:7f:80:5a:46:f2:e3:24:
         5e:3b:0f:1f:86:37:86:b1:0a:35:0e:b3:ec:29:7c:36:9f:ec:
         ea:a3:9d:df:73:93:99:df:ea:fc:95:12:60:15:4e:e9:1e:e8:
         ef:2e:2e:bd:d8:c2:5c:39:4b:e5:bb:37:98:7a:59:fd:22:36:
         90:bd:cd:22:82:cf:2e:db:f2:77:94:be:72:6d:5e:bd:f7:79:
         c9:30:65:11:76:e5:bd:80:13:2a:e9:8f:3c:f3:4b:4a:70:0b:
         6e:24:85:aa:53:b5:72:78:e5:9f:56:67:26:f2:74:81:5c:fa:
         5f:0d:f4:31:f7:16:d5:b4:b8:4e:66:7e:55:6d:b6:e3:c8:29:
         85:8b:7d:a2:b7:db:e7:6f:99:ff:85:5d:61:a1:3c:78:08:77:
         3d:37:d1:53:87:75:9d:d1:fa:73:d4:d3:a0:59:87:b1:3d:e9:
         45:f8:dc:44:e0:2a:7e:8a:6a:9b:bd:b6:4f:7d:af:7c:f0:82:
         48:ea:7a:dd:ea:f6:b1:a3:f9:23:f5:c2:f3:fe:a2:4a:9a:f6:
         07:b5:f4:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd88JijwBbVjg9pbLlAeqiKZZi7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0REQzODM3REQ5OEY4OUUzRjdCQzA5RDdEMTdCMjZD
Qjk3NENFOTAeFw0yNTA2MDkwNjA1MTNaFw0yNTA2MTAwNzIyMTNaMDMxMTAvBgNV
BAMTKDE2NkNDMEEzQjdCMjQ2MzQwMjlEQUZEODBEODIwRjUwODg0RjQzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhHn8/+a8EYd4sNPjwobVbDOK
81Vy0qzzwgjVYsJ/zfHT0fCJMhpDR+vQOBsKLxXPJGBkGmQS4QthTYpQgP3oGLw3
eob8UehzV4iswi2sJudbR2Vv6mt80JEvE+LYL4tYIis9WefD+VD/x9do+mXU7Ejd
JNvRQs8hCJ/TStQk1JOjW5JT0WLI/3EfCGpaI0jeieVZJuFvGAoAPIUNik1Vw2es
DXkomE7u0raJWVnJg6Ny3k73UjLF8LzCtF5NILTLzAMaruFX7x6Ozw4vKMFZUwuP
fOn6UNhcRmBBrfNZCG+7djwICWbeVSPvOVu3G8exU54EpBVUd8L2ea5y9isxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFmzAo7eyRjQCna/YDYIPUIhPQxwwHwYDVR0j
BBgwFoAUQk3Tg33Zj4nj97wJ19F7JsuXTOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJBQ1RVRFE2N1pvRm9SZFB0cGE5dVZDS1ZoVEdLTlE4ZThyWUViNFR1
TFovMS80MjRERDM4MzdERDk4Rjg5RTNGN0JDMDlEN0QxN0IyNkNCOTc0Q0U5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNEREMzgzN0REOThGODlF
M0Y3QkMwOUQ3RDE3QjI2Q0I5NzRDRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUJBQ1RVRFE2N1pvRm9SZFB0cGE5dVZDS1ZoVEdLTlE4ZThyWUViNFR1TFovMS80
MjRERDM4MzdERDk4Rjg5RTNGN0JDMDlEN0QxN0IyNkNCOTc0Q0U5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcihSuE/KbXIsoY0LGzaQ2/edMXxvsP8Bqme9vuuzA5Bz70zr0P2Qif327tbA
E2B/gFpG8uMkXjsPH4Y3hrEKNQ6z7Cl8Np/s6qOd33OTmd/q/JUSYBVO6R7o7y4u
vdjCXDlL5bs3mHpZ/SI2kL3NIoLPLtvyd5S+cm1evfd5yTBlEXblvYATKumPPPNL
SnALbiSFqlO1cnjln1ZnJvJ0gVz6Xw30MfcW1bS4TmZ+VW2248gphYt9orfb52+Z
/4VdYaE8eAh3PTfRU4d1ndH6c9TToFmHsT3pRfjcROAqfopqm722T32vfPCCSOp6
3er2saP5I/XC8/6iSpr2B7X0OQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:18:17 2025 by rpki-client