Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
File:                     32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft (raw, json)
Hash identifier:          kryrD8GPzNbVCM3dAQ/5TyW/98M9nl1RHzXXsoE62Sg=
Subject key identifier:   A3:87:BE:59:1A:87:BC:65:AB:69:7A:E1:3D:59:14:9C:03:D0:65:00
Authority key identifier: 32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0
Certificate issuer:       /CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
Certificate serial:       3FBBEE0BF397464EFB82DB0134385281486CDD17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
Manifest number:          0102
Signing time:             Fri 06 Jun 2025 21:16:14 +0000
Manifest this update:     Fri 06 Jun 2025 21:11:14 +0000
Manifest next update:     Sun 08 Jun 2025 00:58:14 +0000
Files and hashes:         1: 32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl (hash: BqdcTSWgIA9KpN6u9QKj13tR+F1V+QdIZbqgi9v7QII=)
                          2: 3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (hash: rop4d3c5H1BlFCl8sb/JrVZsMIWJYPAeE2mZAUHcq/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:ee:0b:f3:97:46:4e:fb:82:db:01:34:38:52:81:48:6c:dd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D155FEA2C9BB85294DD20888F5E06CA89F60D0
        Validity
            Not Before: Jun  6 21:11:14 2025 GMT
            Not After : Jun  8 00:58:14 2025 GMT
        Subject: CN=A387BE591A87BC65AB697AE13D59149C03D06500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:73:f6:41:9e:85:72:43:62:81:76:ef:ad:
                    ab:25:44:d1:ee:8d:a1:34:d6:06:a9:d3:c3:8d:7f:
                    37:23:81:6f:8e:48:4e:d6:fe:cc:ed:ea:ec:e9:25:
                    1b:ba:95:06:0d:5a:a4:a7:ab:20:a5:3f:df:a8:ad:
                    bd:62:34:a7:5e:10:07:41:fb:1b:a4:66:fc:09:0c:
                    02:f3:5f:c6:31:60:44:90:41:97:0c:53:b3:6e:7b:
                    f6:09:05:1c:91:ee:52:d5:d8:50:5a:28:25:37:e9:
                    8d:6a:bb:ed:e6:fb:53:ab:f4:37:cb:d8:ef:1f:94:
                    df:1d:1d:93:14:97:7e:c6:4c:9c:3d:6d:b9:07:d8:
                    66:07:dd:5f:c5:dc:4f:e4:48:f0:5b:30:c6:ec:f2:
                    0c:3c:ac:b6:6c:51:00:f0:b6:e7:05:0a:e2:4b:a6:
                    86:21:d3:57:6d:5e:ea:2f:d3:85:35:ee:0b:94:55:
                    4e:6a:f4:58:4c:ea:67:b3:73:93:9a:b1:22:3a:6e:
                    a2:ab:a1:82:d0:c1:9c:44:31:68:23:9a:61:ba:58:
                    bf:64:f2:52:63:a0:ff:e5:0a:90:0d:31:90:bf:33:
                    5b:32:9f:e7:8d:f1:80:6b:a4:f6:7d:5e:33:5c:4e:
                    5a:f6:dd:b5:f5:f6:b0:7e:6a:30:36:03:68:ef:11:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:87:BE:59:1A:87:BC:65:AB:69:7A:E1:3D:59:14:9C:03:D0:65:00
            X509v3 Authority Key Identifier:
                keyid:32:D1:55:FE:A2:C9:BB:85:29:4D:D2:08:88:F5:E0:6C:A8:9F:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/3/32D155FEA2C9BB85294DD20888F5E06CA89F60D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ba:74:39:56:ec:3e:18:49:bd:b5:5e:bf:ad:f8:e1:31:f7:
         af:eb:36:98:b1:e3:93:3d:65:28:1e:f4:43:a5:28:a7:78:70:
         a4:c1:0c:9c:be:e7:db:58:bf:d2:1b:73:cd:ba:5e:30:a5:99:
         9c:ff:90:43:df:48:e1:d0:e6:bc:39:2a:8d:ee:d9:0b:6e:f5:
         49:5f:6f:19:3e:92:86:a2:25:a5:bd:0d:48:79:e8:ec:e3:04:
         69:7e:56:df:cc:cd:c8:1f:cd:dd:a6:bd:86:e6:0e:fc:39:dd:
         14:6c:40:59:1d:2f:23:5b:c4:21:09:26:9a:03:b4:07:15:98:
         ef:a1:38:02:bf:f7:46:93:87:c7:c2:0d:11:c1:74:e5:2f:c9:
         44:ff:61:a7:f8:5c:76:83:4a:5f:8b:bc:8d:8b:5d:b8:fa:69:
         35:55:73:e9:73:18:ed:40:24:71:55:8f:1d:52:bd:f8:75:1e:
         a9:fa:c3:30:2d:0e:56:a7:58:bc:a7:71:bb:40:fc:38:63:a8:
         6e:97:81:f9:43:d8:fe:60:d8:2c:5e:cb:5b:f8:a2:de:4e:33:
         1b:be:63:cb:1b:5f:6b:63:19:d0:b5:ff:87:bf:3b:f0:69:2a:
         11:63:df:88:a6:2d:50:03:66:4a:aa:d5:bd:d4:64:df:e5:62:
         05:51:7e:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP7vuC/OXRk77gtsBNDhSgUhs3RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEMTU1RkVBMkM5QkI4NTI5NEREMjA4ODhGNUUwNkNB
ODlGNjBEMDAeFw0yNTA2MDYyMTExMTRaFw0yNTA2MDgwMDU4MTRaMDMxMTAvBgNV
BAMTKEEzODdCRTU5MUE4N0JDNjVBQjY5N0FFMTNENTkxNDlDMDNEMDY1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZxnP2QZ6FckNigXbvraslRNHu
jaE01gap08ONfzcjgW+OSE7W/szt6uzpJRu6lQYNWqSnqyClP9+orb1iNKdeEAdB
+xukZvwJDALzX8YxYESQQZcMU7Nue/YJBRyR7lLV2FBaKCU36Y1qu+3m+1Or9DfL
2O8flN8dHZMUl37GTJw9bbkH2GYH3V/F3E/kSPBbMMbs8gw8rLZsUQDwtucFCuJL
poYh01dtXuov04U17guUVU5q9FhM6mezc5OasSI6bqKroYLQwZxEMWgjmmG6WL9k
8lJjoP/lCpANMZC/M1syn+eN8YBrpPZ9XjNcTlr23bX19rB+ajA2A2jvERXNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUo4e+WRqHvGWraXrhPVkUnAPQZQAwHwYDVR0j
BBgwFoAUMtFV/qLJu4UpTdIIiPXgbKifYNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMy8zMkQxNTVGRUEyQzlCQjg1Mjk0REQyMDg4OEY1RTA2Q0E4OUY2MEQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRDE1NUZFQTJDOUJCODUy
OTRERDIwODg4RjVFMDZDQTg5RjYwRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40bVkvMy8z
MkQxNTVGRUEyQzlCQjg1Mjk0REQyMDg4OEY1RTA2Q0E4OUY2MEQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLp0OVbsPhhJvbVev6344TH3r+s2mLHjkz1lKB70Q6Uop3hwpMEMnL7n21i/
0htzzbpeMKWZnP+QQ99I4dDmvDkqje7ZC271SV9vGT6ShqIlpb0NSHno7OMEaX5W
38zNyB/N3aa9huYO/DndFGxAWR0vI1vEIQkmmgO0BxWY76E4Ar/3RpOHx8INEcF0
5S/JRP9hp/hcdoNKX4u8jYtduPppNVVz6XMY7UAkcVWPHVK9+HUeqfrDMC0OVqdY
vKdxu0D8OGOobpeB+UPY/mDYLF7LW/ii3k4zG75jyxtfa2MZ0LX/h7878GkqEWPf
iKYtUANmSqrVvdRk3+ViBVF+Ew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:03:00 2025 by rpki-client