Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
File:                     99075A5B6164230A73705A6E393D26CF802B45B4.mft (raw, json)
Hash identifier:          rzimhZvlB5TKnqaPJGs01A8qIDr8OjVgDKv8W5UFKZk=
Subject key identifier:   CB:E0:2C:80:64:52:CB:A4:CF:0E:53:28:27:DA:76:70:92:64:BD:A5
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       29C7F4703AE41CE951F3DFF57445B432C94F4AF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
Manifest number:          0201
Signing time:             Sat 05 Apr 2025 23:06:11 +0000
Manifest this update:     Sat 05 Apr 2025 23:01:10 +0000
Manifest next update:     Mon 07 Apr 2025 02:02:10 +0000
Files and hashes:         1: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: UdkFxQj9p6CyFEon8jZU/HUcokk1So9oR7adqbbUwBs=)
                          2: 99075A5B6164230A73705A6E393D26CF802B45B4.crl (hash: U4NE9GHIJ+DYW2yxNwB6WKGRCsPHFmrkx5XZo2cCFDg=)
                          3: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: bLhYklkTXbCMG9WvTOKnPEs0ugoZrgk7Yu+wVK/LBtI=)
                          4: 323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa (hash: apxmS+Kfg1td3pUDRJrU3d+FMamvLKgAH5R6sDtk/GU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c7:f4:70:3a:e4:1c:e9:51:f3:df:f5:74:45:b4:32:c9:4f:4a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Apr  5 23:01:10 2025 GMT
            Not After : Apr  7 02:02:10 2025 GMT
        Subject: CN=CBE02C806452CBA4CF0E532827DA76709264BDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:71:cf:92:64:09:7d:64:23:36:b9:e7:24:
                    2b:bd:34:20:d9:fe:61:54:33:3b:b1:62:cb:83:3c:
                    cf:83:e5:35:87:6b:e2:e0:db:04:2c:8c:88:74:da:
                    09:52:cc:95:ec:1b:9a:c7:98:12:e4:72:c1:56:c9:
                    22:f3:68:45:18:4c:9c:09:7b:d9:a5:58:13:1c:9a:
                    5e:eb:cb:fb:7b:d8:bf:83:5f:b7:90:fb:79:87:01:
                    b5:9a:d5:64:fe:08:a6:50:d0:20:3f:da:6b:25:0a:
                    2e:22:c4:56:d3:26:9f:63:b9:6b:04:7d:e6:ac:d8:
                    44:2c:5a:40:2c:98:1e:c2:63:e6:dd:11:86:da:bd:
                    80:fa:ed:4b:e7:d8:4e:ac:0c:72:6a:5f:9c:1f:96:
                    c3:3a:6e:21:d2:c0:cc:e5:d1:53:a6:fd:33:d2:0e:
                    a1:51:8d:bb:a8:26:52:46:50:8b:7e:55:3a:31:56:
                    6b:6d:e6:f5:9e:72:bf:de:74:4e:84:77:3f:22:f6:
                    93:48:25:c3:39:30:1d:a0:86:c5:a9:ea:c5:bd:84:
                    f7:e3:83:79:1d:ae:ea:0c:34:4d:90:78:60:4d:a7:
                    30:a4:bc:e5:f0:04:c2:38:3b:34:52:66:4c:6f:f6:
                    46:66:2a:80:80:19:85:c2:75:1c:59:bf:51:bb:d6:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E0:2C:80:64:52:CB:A4:CF:0E:53:28:27:DA:76:70:92:64:BD:A5
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:05:d7:31:13:43:85:1d:35:39:a0:1e:12:81:11:98:b4:bd:
         c0:fd:53:5c:ff:86:df:d8:cb:ec:c9:8a:e5:ba:9c:ec:f3:df:
         1d:fe:a0:b3:a8:fd:8f:d3:95:82:93:3f:10:be:9c:72:d8:69:
         e9:9f:e3:38:6a:72:1d:0d:9e:5f:b5:39:2b:eb:0b:3a:00:c2:
         7e:08:78:0e:af:b7:98:84:3a:a6:f3:c6:bc:6b:a1:49:11:2e:
         2f:0b:45:9e:02:7a:4c:8e:c3:f2:c9:8a:c7:c0:e0:12:cf:3c:
         43:0a:db:ed:9a:5f:0e:f7:a2:f4:94:4b:e9:23:81:3d:16:b0:
         83:c0:ab:39:f6:54:a5:12:e9:e1:e0:09:a6:51:35:ac:a8:52:
         5c:e4:54:67:fa:e9:4c:68:0d:be:69:dd:89:ab:7f:ee:58:7f:
         2a:a0:cf:8f:03:55:70:2e:1c:40:c4:15:84:80:99:ec:85:db:
         53:12:4a:d3:27:a2:9c:b4:02:20:42:41:6d:bf:e1:e3:ff:39:
         ca:f8:00:b6:06:64:dc:da:09:d6:0f:5a:69:6b:b7:f9:68:1b:
         d4:6e:68:9c:21:ba:06:09:f4:34:04:0a:56:2c:02:31:cb:ee:
         60:d3:ba:48:0b:ff:51:b4:e9:05:e2:fe:90:91:15:ed:48:0e:
         40:7c:2f:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKcf0cDrkHOlR89/1dEW0MslPSvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkwNzVBNUI2MTY0MjMwQTczNzA1QTZFMzkzRDI2Q0Y4
MDJCNDVCNDAeFw0yNTA0MDUyMzAxMTBaFw0yNTA0MDcwMjAyMTBaMDMxMTAvBgNV
BAMTKENCRTAyQzgwNjQ1MkNCQTRDRjBFNTMyODI3REE3NjcwOTI2NEJEQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7XHPkmQJfWQjNrnnJCu9NCDZ
/mFUMzuxYsuDPM+D5TWHa+Lg2wQsjIh02glSzJXsG5rHmBLkcsFWySLzaEUYTJwJ
e9mlWBMcml7ry/t72L+DX7eQ+3mHAbWa1WT+CKZQ0CA/2mslCi4ixFbTJp9juWsE
feas2EQsWkAsmB7CY+bdEYbavYD67Uvn2E6sDHJqX5wflsM6biHSwMzl0VOm/TPS
DqFRjbuoJlJGUIt+VToxVmtt5vWecr/edE6Edz8i9pNIJcM5MB2ghsWp6sW9hPfj
g3kdruoMNE2QeGBNpzCkvOXwBMI4OzRSZkxv9kZmKoCAGYXCdRxZv1G71vxhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUy+AsgGRSy6TPDlMoJ9p2cJJkvaUwHwYDVR0j
BBgwFoAUmQdaW2FkIwpzcFpuOT0mz4ArRbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMS85OTA3NUE1QjYxNjQyMzBBNzM3MDVBNkUzOTNEMjZDRjgwMkI0NUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MDc1QTVCNjE2NDIzMEE3
MzcwNUE2RTM5M0QyNkNGODAyQjQ1QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMS85
OTA3NUE1QjYxNjQyMzBBNzM3MDVBNkUzOTNEMjZDRjgwMkI0NUI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACQXXMRNDhR01OaAeEoERmLS9wP1TXP+G39jL7MmK5bqc7PPfHf6gs6j9j9OV
gpM/EL6ccthp6Z/jOGpyHQ2eX7U5K+sLOgDCfgh4Dq+3mIQ6pvPGvGuhSREuLwtF
ngJ6TI7D8smKx8DgEs88Qwrb7ZpfDvei9JRL6SOBPRawg8CrOfZUpRLp4eAJplE1
rKhSXORUZ/rpTGgNvmndiat/7lh/KqDPjwNVcC4cQMQVhICZ7IXbUxJK0yeinLQC
IEJBbb/h4/85yvgAtgZk3NoJ1g9aaWu3+Wgb1G5onCG6Bgn0NAQKViwCMcvuYNO6
SAv/UbTpBeL+kJEV7UgOQHwvUg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:44 2025 by rpki-client