Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          nSsZtKGqo5eB0RhiYRNcSTldqBR729X3sX581KFmZ20=
Subject key identifier:   1E:84:DB:B5:F2:B2:B1:BF:9B:80:69:92:16:6F:EE:86:58:0B:46:A3
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       2C196F7E9F4FAA76D215B32700F08330907D8AA9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          01E9
Signing time:             Wed 09 Apr 2025 19:49:40 +0000
Manifest this update:     Wed 09 Apr 2025 19:44:40 +0000
Manifest next update:     Thu 10 Apr 2025 21:36:40 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=)
                          2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: T8KFr+119Xz+qwzF9OZhtxNTJPca/z+3ondfBEO7ASw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 21:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:6f:7e:9f:4f:aa:76:d2:15:b3:27:00:f0:83:30:90:7d:8a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: Apr  9 19:44:40 2025 GMT
            Not After : Apr 10 21:36:40 2025 GMT
        Subject: CN=1E84DBB5F2B2B1BF9B806992166FEE86580B46A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:3f:c2:9a:45:69:3a:c4:43:69:17:b6:3a:
                    0a:88:2e:cb:60:19:e9:f9:13:0b:4c:8e:eb:75:54:
                    db:2a:87:4f:55:0c:58:40:d7:0c:c2:a0:17:5c:7c:
                    a6:07:ad:9c:73:47:cf:1c:9b:9e:14:0a:b0:0a:b1:
                    79:8c:59:a3:f9:3e:90:a8:7b:be:32:94:63:bf:d2:
                    74:49:b3:dd:e6:ff:5f:63:3c:de:90:99:78:a8:3e:
                    55:dc:7f:4e:2e:2e:75:60:ca:6e:9a:a8:45:39:67:
                    45:98:0b:cd:93:7d:82:d1:2c:b4:dc:68:d4:52:46:
                    5c:18:f7:c6:c6:2b:5d:7c:72:4d:c9:61:e8:9e:b5:
                    3a:e1:f6:48:07:c2:2e:9a:64:7d:36:98:ac:b9:65:
                    99:ec:19:be:30:76:27:7f:9a:a3:37:ba:11:82:3f:
                    0b:18:ec:9a:4c:94:73:f1:2d:62:48:f3:8c:d4:4e:
                    cf:6f:c4:2c:b3:cf:71:bc:51:82:3a:e3:c2:3b:98:
                    03:4f:34:57:3d:50:7b:c6:29:a3:33:28:83:73:5f:
                    76:a2:4d:56:9a:70:52:49:ea:5a:ff:93:3f:23:a4:
                    89:75:85:1c:46:bf:0f:d4:16:8b:18:cd:9a:77:ce:
                    2f:0e:31:3f:7c:22:f6:7f:77:11:f2:59:96:ca:2b:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:DB:B5:F2:B2:B1:BF:9B:80:69:92:16:6F:EE:86:58:0B:46:A3
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1c:a5:40:da:43:eb:1e:3a:58:40:db:a7:d7:b8:0e:99:a8:
         3e:95:9d:da:b0:ff:1d:a0:7f:20:ee:69:ad:f5:a9:37:48:44:
         5d:eb:26:ac:cd:5b:dc:6e:2b:a4:78:e7:b6:3a:87:20:e4:a9:
         dd:ff:76:bc:32:0c:13:51:96:44:38:57:e5:0f:e3:6b:87:0a:
         81:96:15:d8:2d:d2:79:26:f0:9c:4c:02:3c:03:5b:a6:c2:e9:
         4d:07:70:27:19:99:94:3e:bd:01:0d:35:38:9b:38:2a:d3:14:
         93:fb:ca:24:ea:96:70:16:11:64:2c:2c:e3:3c:fd:72:66:92:
         51:f9:52:b1:a4:45:d0:2a:67:34:77:47:65:34:06:c2:a9:4f:
         c9:69:43:41:7b:5a:36:98:36:3d:10:78:cd:5e:24:56:2c:10:
         3c:6a:b3:d4:d8:70:7c:ba:7e:a0:2f:ae:b5:77:77:0d:8b:f2:
         64:5e:91:f7:6e:0a:83:4a:49:df:7e:68:91:b5:57:5c:13:12:
         22:e0:dc:34:98:62:de:c5:ff:82:72:22:70:fd:ea:97:43:21:
         f7:55:9e:5e:96:e8:78:85:54:01:c9:a2:3c:4f:85:5b:5b:17:
         d0:71:1f:31:44:4f:ee:58:dc:ef:7f:26:8f:1f:b5:06:89:d0:
         dd:ea:10:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULBlvfp9PqnbSFbMnAPCDMJB9iqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA2RTBCNDBDNjdGMTFBQTNCRkQzMUUyODQ0QjhEQzNB
MENBMTQ1MjAeFw0yNTA0MDkxOTQ0NDBaFw0yNTA0MTAyMTM2NDBaMDMxMTAvBgNV
BAMTKDFFODREQkI1RjJCMkIxQkY5QjgwNjk5MjE2NkZFRTg2NTgwQjQ2QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbT/CmkVpOsRDaRe2OgqILstg
Gen5EwtMjut1VNsqh09VDFhA1wzCoBdcfKYHrZxzR88cm54UCrAKsXmMWaP5PpCo
e74ylGO/0nRJs93m/19jPN6QmXioPlXcf04uLnVgym6aqEU5Z0WYC82TfYLRLLTc
aNRSRlwY98bGK118ck3JYeietTrh9kgHwi6aZH02mKy5ZZnsGb4wdid/mqM3uhGC
PwsY7JpMlHPxLWJI84zUTs9vxCyzz3G8UYI648I7mANPNFc9UHvGKaMzKINzX3ai
TVaacFJJ6lr/kz8jpIl1hRxGvw/UFosYzZp3zi8OMT98IvZ/dxHyWZbKK1/BAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHoTbtfKysb+bgGmSFm/uhlgLRqMwHwYDVR0j
BBgwFoAUgG4LQMZ/Eao7/THihEuNw6DKFFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN
dVgvMS84MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNkUwQjQwQzY3RjExQUEz
QkZEMzFFMjg0NEI4REMzQTBDQTE0NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMS84
MDZFMEI0MEM2N0YxMUFBM0JGRDMxRTI4NDRCOERDM0EwQ0ExNDUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAihylQNpD6x46WEDbp9e4DpmoPpWd2rD/HaB/IO5prfWpN0hEXesmrM1b3G4r
pHjntjqHIOSp3f92vDIME1GWRDhX5Q/ja4cKgZYV2C3SeSbwnEwCPANbpsLpTQdw
JxmZlD69AQ01OJs4KtMUk/vKJOqWcBYRZCws4zz9cmaSUflSsaRF0CpnNHdHZTQG
wqlPyWlDQXtaNpg2PRB4zV4kViwQPGqz1NhwfLp+oC+utXd3DYvyZF6R924Kg0pJ
335okbVXXBMSIuDcNJhi3sX/gnIicP3ql0Mh91WeXpboeIVUAcmiPE+FW1sX0HEf
MURP7ljc738mjx+1BonQ3eoQCw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:46:37 2025 by rpki-client