Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
File:                     642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft (raw, json)
Hash identifier:          td+r1T/j2lx7PSPKmq1jXpO4cn6O6QH6CbiANblsvmA=
Subject key identifier:   F7:71:29:BF:84:AC:FB:35:72:FE:48:D4:30:BE:81:0A:4F:28:11:C1
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       225590E3FE1E91419F69778AF448D86BCEE22C46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
Manifest number:          C5
Signing time:             Sat 05 Apr 2025 07:32:45 +0000
Manifest this update:     Sat 05 Apr 2025 07:27:45 +0000
Manifest next update:     Sun 06 Apr 2025 10:57:45 +0000
Files and hashes:         1: 323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (hash: WEnoKN8Q2d5UmUIkM/SpEBblmOrv6HpXC417B/GS2hI=)
                          2: 642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl (hash: +zG5FVto4YvWnFN1yMUH9uzS+ha/VHqV/+pV97FXgU8=)
                          3: 3137392e3132342e3231362e302f32312d3234203d3e20323633363234.roa (hash: vfhK6uXnkz0BfEyzPSuUuB609t1rPfOECYXZf3FTzac=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:55:90:e3:fe:1e:91:41:9f:69:77:8a:f4:48:d8:6b:ce:e2:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Apr  5 07:27:45 2025 GMT
            Not After : Apr  6 10:57:45 2025 GMT
        Subject: CN=F77129BF84ACFB3572FE48D430BE810A4F2811C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:97:50:69:6d:f2:66:67:55:67:13:6d:8b:
                    d3:61:5e:43:39:01:aa:5f:91:46:49:62:43:09:1c:
                    74:9b:df:63:73:52:99:a9:dc:ba:f7:38:72:39:b4:
                    9c:ae:19:41:aa:5e:5f:d4:19:60:9e:78:e9:ba:d3:
                    e2:23:6c:81:f0:19:d8:5b:09:d6:ef:63:5c:15:6e:
                    6a:35:83:b0:44:7f:f8:64:0b:5b:6c:4c:a4:1d:1c:
                    8c:d8:92:13:00:18:70:2b:76:0f:9c:fa:77:1c:9f:
                    14:3a:57:17:31:6d:8d:df:c9:51:7e:5e:4e:b0:93:
                    79:17:f7:33:3d:10:a0:a4:ef:e3:68:b1:e2:53:a2:
                    07:c9:12:7e:aa:8f:af:01:bd:a7:8c:0d:c4:6a:a0:
                    e5:07:f6:7e:71:d1:8e:37:09:8c:d3:9a:c0:73:d6:
                    47:d7:95:b7:b3:59:b6:a1:4a:ef:39:d9:52:52:d3:
                    45:60:bb:70:96:04:e4:f6:e0:a9:1c:bf:24:84:ed:
                    49:1a:05:65:62:67:ca:5c:7a:9f:37:ea:ae:ce:2d:
                    e7:f7:d8:da:07:ad:d5:5c:0f:68:74:18:90:c0:0e:
                    97:12:3e:94:7b:25:8e:1a:40:d6:3d:7d:23:29:bb:
                    f8:67:ae:99:5f:a9:e4:04:de:3e:66:8b:08:e4:c9:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:71:29:BF:84:AC:FB:35:72:FE:48:D4:30:BE:81:0A:4F:28:11:C1
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:ff:d8:1e:78:b0:0b:3c:d4:2c:ea:1f:21:83:0e:74:7d:
         ab:9f:91:2c:58:c3:94:2c:a9:ee:0b:ce:73:f6:6c:a9:4f:df:
         63:96:00:91:6c:40:a5:7c:06:21:79:93:28:58:a3:7d:0c:f5:
         e3:bf:d7:94:43:9d:5a:39:2c:38:14:c1:51:fa:d5:52:a4:07:
         5a:72:af:aa:97:bc:1a:46:38:10:2f:71:c5:68:f7:93:98:f2:
         0d:34:1a:ea:75:c1:c4:d0:b9:c7:f6:2f:03:94:61:13:53:bd:
         29:27:ad:e3:ad:e4:d3:98:9d:fc:ef:58:8c:3e:e4:00:d1:1a:
         c2:70:ce:b2:5f:75:f1:ab:2e:94:75:dd:59:42:aa:5d:01:68:
         66:39:66:4d:d3:96:6f:55:9f:be:2a:c0:c1:e6:05:4c:e9:78:
         d6:2a:a4:27:1b:af:17:b6:b0:70:ce:a9:aa:9c:99:1b:0f:ec:
         d2:e2:5a:ed:37:75:2c:cb:f0:85:78:1f:ed:04:69:6c:e4:63:
         4c:e7:6c:1e:6b:40:dd:2b:58:cb:51:23:56:a6:39:b0:b9:4a:
         d6:f5:1b:f0:da:03:23:fc:30:c4:2c:9a:24:32:64:29:8f:b6:
         91:af:f3:56:de:1f:21:fd:35:3a:55:49:69:1d:6a:ed:ff:5c:
         55:98:31:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIlWQ4/4ekUGfaXeK9EjYa87iLEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyRUEyN0VBMTI3NkZBMUNBNTVFRjNGRDg4N0NGQzZE
REEwNUM0NzAeFw0yNTA0MDUwNzI3NDVaFw0yNTA0MDYxMDU3NDVaMDMxMTAvBgNV
BAMTKEY3NzEyOUJGODRBQ0ZCMzU3MkZFNDhENDMwQkU4MTBBNEYyODExQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBspdQaW3yZmdVZxNti9NhXkM5
AapfkUZJYkMJHHSb32NzUpmp3Lr3OHI5tJyuGUGqXl/UGWCeeOm60+IjbIHwGdhb
CdbvY1wVbmo1g7BEf/hkC1tsTKQdHIzYkhMAGHArdg+c+nccnxQ6VxcxbY3fyVF+
Xk6wk3kX9zM9EKCk7+NoseJTogfJEn6qj68BvaeMDcRqoOUH9n5x0Y43CYzTmsBz
1kfXlbezWbahSu852VJS00Vgu3CWBOT24KkcvySE7UkaBWViZ8pcep836q7OLef3
2NoHrdVcD2h0GJDADpcSPpR7JY4aQNY9fSMpu/hnrplfqeQE3j5miwjkybVFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU93Epv4Ss+zVy/kjUML6BCk8oEcEwHwYDVR0j
BBgwFoAUZC6ifqEnb6HKVe8/2IfPxt2gXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZB
aWcvMC82NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkVBMjdFQTEyNzZGQTFD
QTU1RUYzRkQ4ODdDRkM2RERBMDVDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QVpKZFF1RmM1QzM1Z3hkRldEcXMzekVkVkxTNXFlS0p5UWRwWUFES0ZBaWcvMC82
NDJFQTI3RUExMjc2RkExQ0E1NUVGM0ZEODg3Q0ZDNkREQTA1QzQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/T/2B54sAs81CzqHyGDDnR9q5+RLFjDlCyp7gvOc/ZsqU/fY5YAkWxApXwG
IXmTKFijfQz147/XlEOdWjksOBTBUfrVUqQHWnKvqpe8GkY4EC9xxWj3k5jyDTQa
6nXBxNC5x/YvA5RhE1O9KSet463k05id/O9YjD7kANEawnDOsl918asulHXdWUKq
XQFoZjlmTdOWb1WfvirAweYFTOl41iqkJxuvF7awcM6pqpyZGw/s0uJa7Td1LMvw
hXgf7QRpbORjTOdsHmtA3StYy1EjVqY5sLlK1vUb8NoDI/wwxCyaJDJkKY+2ka/z
Vt4fIf01OlVJaR1q7f9cVZgxGA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:23 2025 by rpki-client