Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft (raw, json)
Hash identifier:          KPUIaIdT5gZENxPMvZRoFKTU+Dp4MC3uzUhGcSxhBig=
Subject key identifier:   02:AD:2B:4D:90:0D:83:AB:D3:4E:8D:34:60:8D:A1:68:FD:81:3F:0E
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       17A32CC143B7C1B1FD192DEA39693840086EEB3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
Manifest number:          01E0
Signing time:             Fri 04 Apr 2025 05:14:33 +0000
Manifest this update:     Fri 04 Apr 2025 05:09:33 +0000
Manifest next update:     Sat 05 Apr 2025 08:12:33 +0000
Files and hashes:         1: 3137372e38352e3136372e302f32342d3234203d3e203532373433.roa (hash: xZZjbro5zLk1oyGqVK7m76LBNIEgAirpjrwgFYj51So=)
                          2: 3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (hash: DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=)
                          3: 3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (hash: 79YrqQF0IndROrk+cfePatBDpYvG+DokRE6q0LebRRs=)
                          4: B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl (hash: W1pQV9+I9kjAkY6XXPkX4LKOqPsa33Gam//xFWPeZL4=)
                          5: 3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (hash: 2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=)
                          6: 3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (hash: LoNT6rAzouHElCAxQfq7lbXt6avk0AfPnw2zLK+lX6c=)
                          7: 323830343a363566343a3a2f33322d3332203d3e203532373433.roa (hash: ipYqZy2Bw5WltHHZykTTJnZ3JhG9BblnpE6LKfOMyUY=)
                          8: 3137372e38352e3136362e302f32332d3233203d3e203532373433.roa (hash: 9Em0FD++Jb7iPbuHi9g4Eapqpd4aKkp2CQyjnM/Ml0k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 08:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a3:2c:c1:43:b7:c1:b1:fd:19:2d:ea:39:69:38:40:08:6e:eb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr  4 05:09:33 2025 GMT
            Not After : Apr  5 08:12:33 2025 GMT
        Subject: CN=02AD2B4D900D83ABD34E8D34608DA168FD813F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:d1:1f:1a:3e:1e:7c:fa:ca:da:02:ed:8a:
                    87:67:68:4c:b6:fb:30:d0:93:ba:28:28:91:d3:af:
                    e9:b6:00:5a:fe:06:59:15:9f:c9:37:e4:3e:c6:1a:
                    21:f8:b7:be:86:33:1e:43:f6:c2:13:84:e0:d7:02:
                    fc:8e:8e:ee:69:b5:a9:5d:7a:db:5d:e8:fe:88:db:
                    62:ee:79:86:a6:de:85:18:a9:4b:ce:a3:5e:be:7e:
                    80:6f:24:c0:ee:d6:21:be:a4:76:d7:2d:75:32:93:
                    82:03:f1:ba:f5:84:c6:b9:d6:9b:dc:65:d8:03:39:
                    f8:21:6a:85:f8:1a:7b:75:0d:d4:c1:b0:b3:5f:be:
                    fc:44:f9:0f:43:36:00:ba:07:9c:e4:04:1f:7b:d1:
                    ab:a9:de:18:c5:b2:76:e3:8b:37:ac:83:5d:74:24:
                    31:3c:69:4f:57:f6:49:4a:ee:4b:59:fc:77:f4:e9:
                    cb:31:f2:76:ea:bd:90:2b:6b:75:f9:d2:25:8d:fb:
                    b2:d0:c8:42:24:6c:30:6d:0c:51:43:29:f4:e6:48:
                    df:4b:08:74:c7:e3:46:87:4d:4e:5e:be:e6:d3:0d:
                    ab:31:5d:7e:14:0c:09:23:0a:12:94:85:91:76:64:
                    64:ce:49:a1:03:bb:a4:1c:dc:67:06:99:86:3f:4d:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AD:2B:4D:90:0D:83:AB:D3:4E:8D:34:60:8D:A1:68:FD:81:3F:0E
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:22:11:f8:86:9f:3b:3e:02:3f:ba:c9:ad:78:3f:04:9e:
         c8:93:30:f8:53:b0:01:c3:30:6a:b1:0c:92:7a:9f:9a:0e:ad:
         3e:ce:e1:44:3d:4b:94:eb:f7:39:10:b6:a7:ff:e2:2e:f9:10:
         be:3d:e4:82:a1:8b:e0:0b:95:4e:ba:d8:8a:3c:d7:53:8e:5b:
         28:32:8c:b2:f5:79:6d:03:c1:85:ac:31:8f:7d:ce:eb:2d:4a:
         67:2f:82:29:43:63:ce:d8:3a:90:c1:67:01:58:14:8c:03:63:
         21:c3:68:94:0b:72:83:89:4f:79:0b:ef:59:57:09:ae:b7:f3:
         cb:04:27:0a:09:20:79:9b:72:b6:28:8b:79:9e:92:f6:d7:86:
         15:1f:c0:7b:aa:51:a7:12:21:a1:3a:1c:f4:e3:ec:a3:69:a9:
         4f:7a:5e:60:63:e9:13:b8:d6:ed:58:db:4b:c0:d8:ae:0f:c4:
         a2:40:e6:ea:7c:d0:e7:84:00:30:aa:15:2f:a2:1d:26:75:ba:
         a4:b8:98:4b:94:57:46:a2:41:e6:b2:8c:ba:23:80:a4:cf:3f:
         53:64:38:58:47:84:c7:bb:a4:2a:a3:cc:5d:e1:3e:17:73:2f:
         00:ac:c2:e8:c8:71:a4:40:8f:06:99:3d:4c:b8:a8:39:47:fd:
         01:ff:62:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF6MswUO3wbH9GS3qOWk4QAhu6zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg1RENBQ0I5NkY1NUU2RDJBRDE2ODZFMUVERTdCNTU1
NTRDRkU2NjAeFw0yNTA0MDQwNTA5MzNaFw0yNTA0MDUwODEyMzNaMDMxMTAvBgNV
BAMTKDAyQUQyQjREOTAwRDgzQUJEMzRFOEQzNDYwOERBMTY4RkQ4MTNGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GtEfGj4efPrK2gLtiodnaEy2
+zDQk7ooKJHTr+m2AFr+BlkVn8k35D7GGiH4t76GMx5D9sIThODXAvyOju5ptald
ettd6P6I22LueYam3oUYqUvOo16+foBvJMDu1iG+pHbXLXUyk4ID8br1hMa51pvc
ZdgDOfghaoX4Gnt1DdTBsLNfvvxE+Q9DNgC6B5zkBB970aup3hjFsnbjizesg110
JDE8aU9X9klK7ktZ/Hf06csx8nbqvZAra3X50iWN+7LQyEIkbDBtDFFDKfTmSN9L
CHTH40aHTU5evubTDasxXX4UDAkjChKUhZF2ZGTOSaEDu6Qc3GcGmYY/TXzZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAq0rTZANg6vTTo00YI2haP2BPw4wHwYDVR0j
BBgwFoAUuF3Ky5b1Xm0q0WhuHt57VVVM/mYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2R3Q2lUVUdXeW9vSlBNUzFrRUVOWENBM2FCYVI2N0M4Z2NzdkNkNUhG
VTEvMS9CODVEQ0FDQjk2RjU1RTZEMkFEMTY4NkUxRURFN0I1NTU1NENGRTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NURDQUNCOTZGNTVFNkQy
QUQxNjg2RTFFREU3QjU1NTU0Q0ZFNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q2R3Q2lUVUdXeW9vSlBNUzFrRUVOWENBM2FCYVI2N0M4Z2NzdkNkNUhGVTEvMS9C
ODVEQ0FDQjk2RjU1RTZEMkFEMTY4NkUxRURFN0I1NTU1NENGRTY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfswiEfiGnzs+Aj+6ya14PwSeyJMw+FOwAcMwarEMknqfmg6tPs7hRD1LlOv3
ORC2p//iLvkQvj3kgqGL4AuVTrrYijzXU45bKDKMsvV5bQPBhawxj33O6y1KZy+C
KUNjztg6kMFnAVgUjANjIcNolAtyg4lPeQvvWVcJrrfzywQnCgkgeZtytiiLeZ6S
9teGFR/Ae6pRpxIhoToc9OPso2mpT3peYGPpE7jW7VjbS8DYrg/EokDm6nzQ54QA
MKoVL6IdJnW6pLiYS5RXRqJB5rKMuiOApM8/U2Q4WEeEx7ukKqPMXeE+F3MvAKzC
6MhxpECPBpk9TLioOUf9Af9iNg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:46:14 2025 by rpki-client