Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
File:                     1370A03EC954E150A22BE78FA96515CB0158F5C1.mft (raw, json)
Hash identifier:          Py2QFcMbMHtwq/+ly5xltfYx9hDTsuzZe0Tfm6p549M=
Subject key identifier:   95:67:EC:42:01:1F:DB:1B:06:7E:BA:92:28:6C:01:75:27:5E:CE:6E
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       3DC0A664062F4EB4530527FFAC18B7971FB36376
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
Manifest number:          01E2
Signing time:             Sat 05 Apr 2025 19:42:56 +0000
Manifest this update:     Sat 05 Apr 2025 19:37:56 +0000
Manifest next update:     Sun 06 Apr 2025 23:34:56 +0000
Files and hashes:         1: 323830343a363639383a3a2f33322d3438203d3e20323639353730.roa (hash: Mo4JQmT9/noVAv8gOE/y5CBbgvRyguqxRLrHjt587No=)
                          2: 1370A03EC954E150A22BE78FA96515CB0158F5C1.crl (hash: +PZMEtRMgPE3OroBMRDVCA50+ACsGc7mJeTd6jS7VSU=)
                          3: 34352e3138392e34302e302f32322d3234203d3e20323639353730.roa (hash: itJwnDXWLQ0MVyofLgzfc8RaLyuOC8MDg6ggRGmwBQo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl
                          rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:a6:64:06:2f:4e:b4:53:05:27:ff:ac:18:b7:97:1f:b3:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Apr  5 19:37:56 2025 GMT
            Not After : Apr  6 23:34:56 2025 GMT
        Subject: CN=9567EC42011FDB1B067EBA92286C0175275ECE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:44:9c:a3:82:6b:05:f8:52:cc:29:f2:58:
                    43:07:57:db:9d:cf:de:a4:cd:38:32:99:1b:16:bf:
                    8a:6a:3f:4a:03:9b:15:2a:65:58:06:26:be:26:01:
                    e6:46:9d:05:0d:53:1f:80:2c:7d:fc:a9:8a:f3:0f:
                    1c:7c:45:0f:c1:05:6b:28:9e:03:0c:ac:c1:4e:ec:
                    c3:96:96:32:a7:26:c1:f3:c8:29:1b:bd:b5:a2:53:
                    26:4a:17:30:fc:19:9f:dd:48:5f:ba:1d:af:0f:47:
                    51:fb:90:49:42:77:13:bb:7f:69:fb:e9:ff:a2:81:
                    8d:a6:ed:33:d2:0d:27:17:16:97:96:17:c6:8f:81:
                    c3:9b:df:fa:40:b0:1e:4e:f3:6f:6b:15:35:56:88:
                    e3:e4:4b:9a:b4:8f:c5:7d:fc:d2:6f:24:ff:56:93:
                    16:ef:42:36:e6:6e:7e:f0:03:63:6f:00:24:d2:e8:
                    c4:28:2c:b3:d1:86:e5:f6:6b:ed:2b:2a:72:c5:d4:
                    0c:a2:dd:97:88:af:d7:63:fb:11:f7:44:2e:59:11:
                    71:81:87:53:1a:8a:b5:22:af:9c:d9:34:ae:5d:10:
                    bf:4a:48:12:25:64:35:01:e2:c5:d5:c2:68:07:e3:
                    94:eb:a3:94:d8:b2:75:07:bd:9e:9e:91:b4:83:eb:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:67:EC:42:01:1F:DB:1B:06:7E:BA:92:28:6C:01:75:27:5E:CE:6E
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:66:28:20:7a:21:0f:45:ab:aa:b9:df:9d:0e:3b:7c:b5:
         14:38:fd:e1:93:b1:09:de:55:3b:72:a9:6a:9a:ee:f5:41:d4:
         ee:d6:c7:16:32:38:18:f8:4b:35:14:b6:9c:72:96:43:80:4c:
         0f:8c:84:eb:a8:d5:ef:98:e8:90:83:13:0f:60:07:21:15:55:
         64:bb:51:ef:99:c1:18:d8:bf:03:59:fa:c2:19:95:91:74:80:
         fa:8e:7c:24:63:7f:a7:b2:f0:16:11:87:55:ed:8d:b2:ae:cf:
         3c:74:fb:22:ed:f1:15:ae:d6:21:a3:d3:71:b1:a6:e9:f3:04:
         14:51:3e:31:21:13:26:6d:12:83:8c:05:cf:17:02:56:8b:96:
         dc:b1:20:e8:4f:08:08:f0:a3:81:10:44:8b:c3:cd:4d:aa:74:
         c8:04:90:72:57:79:e1:e0:e3:1f:b5:c7:dc:50:ae:f0:5f:b9:
         2a:77:c6:30:b1:fa:db:8e:43:24:e2:67:8d:cf:6c:a9:04:3f:
         77:7c:61:94:6a:02:0f:67:7d:63:cb:e1:82:aa:c2:3a:94:92:
         5d:69:35:09:6d:12:7a:1b:cf:7c:c7:c3:c7:c8:70:42:80:8f:
         fb:b4:db:50:13:43:19:c3:01:8d:0b:e7:c7:75:f3:f1:6f:84:
         f5:1b:34:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPcCmZAYvTrRTBSf/rBi3lx+zY3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3MEEwM0VDOTU0RTE1MEEyMkJFNzhGQTk2NTE1Q0Iw
MTU4RjVDMTAeFw0yNTA0MDUxOTM3NTZaFw0yNTA0MDYyMzM0NTZaMDMxMTAvBgNV
BAMTKDk1NjdFQzQyMDExRkRCMUIwNjdFQkE5MjI4NkMwMTc1Mjc1RUNFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYUSco4JrBfhSzCnyWEMHV9ud
z96kzTgymRsWv4pqP0oDmxUqZVgGJr4mAeZGnQUNUx+ALH38qYrzDxx8RQ/BBWso
ngMMrMFO7MOWljKnJsHzyCkbvbWiUyZKFzD8GZ/dSF+6Ha8PR1H7kElCdxO7f2n7
6f+igY2m7TPSDScXFpeWF8aPgcOb3/pAsB5O829rFTVWiOPkS5q0j8V9/NJvJP9W
kxbvQjbmbn7wA2NvACTS6MQoLLPRhuX2a+0rKnLF1Ayi3ZeIr9dj+xH3RC5ZEXGB
h1MairUir5zZNK5dEL9KSBIlZDUB4sXVwmgH45Tro5TYsnUHvZ6ekbSD68LJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUlWfsQgEf2xsGfrqSKGwBdSdezm4wHwYDVR0j
BBgwFoAUE3CgPslU4VCiK+ePqWUVywFY9cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVn
TmovMC8xMzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNzBBMDNFQzk1NEUxNTBB
MjJCRTc4RkE5NjUxNUNCMDE1OEY1QzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0tEakNqMWtObXhvQnRDcTM2RFVnblNhUWRDa3M5cWRQZ2Y3WDFiZnVnTmovMC8x
MzcwQTAzRUM5NTRFMTUwQTIyQkU3OEZBOTY1MTVDQjAxNThGNUMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD2BmKCB6IQ9Fq6q5350OO3y1FDj94ZOxCd5VO3Kpapru9UHU7tbHFjI4GPhL
NRS2nHKWQ4BMD4yE66jV75jokIMTD2AHIRVVZLtR75nBGNi/A1n6whmVkXSA+o58
JGN/p7LwFhGHVe2Nsq7PPHT7Iu3xFa7WIaPTcbGm6fMEFFE+MSETJm0Sg4wFzxcC
VouW3LEg6E8ICPCjgRBEi8PNTap0yASQcld54eDjH7XH3FCu8F+5KnfGMLH6245D
JOJnjc9sqQQ/d3xhlGoCD2d9Y8vhgqrCOpSSXWk1CW0SehvPfMfDx8hwQoCP+7Tb
UBNDGcMBjQvnx3Xz8W+E9Rs0Zg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:57:36 2025 by rpki-client