Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
File:                     4F855F6808FCD163FB20E5E5F939427253847DC2.mft (raw, json)
Hash identifier:          oEd7gGTPxlrUN1vuO+H6gOtzZWh7H6fO8hc+XpeoUQA=
Subject key identifier:   76:72:04:EA:57:2B:C2:2D:59:04:29:89:7C:F6:BD:FF:CD:62:ED:E7
Authority key identifier: 4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2
Certificate issuer:       /CN=4F855F6808FCD163FB20E5E5F939427253847DC2
Certificate serial:       09F609E6A1383B70BB39832B73B575A4AEEAE315
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
Manifest number:          FB
Signing time:             Sun 16 Feb 2025 16:49:51 +0000
Manifest this update:     Sun 16 Feb 2025 16:44:51 +0000
Manifest next update:     Mon 17 Feb 2025 19:23:51 +0000
Files and hashes:         1: 4F855F6808FCD163FB20E5E5F939427253847DC2.crl (hash: JYpO3qmk05A1KZ+t5FZfZFjxQ/9qqtxAqS0l5RqTiXg=)
                          2: 3134332e3133372e3139302e302f32332d3233203d3e20323634303431.roa (hash: Wo/mJDPWzR3CGByg79VMbneCLHy3WWmttVfpCPaDLf8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl
                          rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f6:09:e6:a1:38:3b:70:bb:39:83:2b:73:b5:75:a4:ae:ea:e3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F855F6808FCD163FB20E5E5F939427253847DC2
        Validity
            Not Before: Feb 16 16:44:51 2025 GMT
            Not After : Feb 17 19:23:51 2025 GMT
        Subject: CN=767204EA572BC22D590429897CF6BDFFCD62EDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:ac:53:0d:3a:d1:29:9a:b8:e9:60:33:72:
                    4d:68:29:75:eb:97:7d:73:75:b8:ec:6f:7f:b0:8b:
                    ef:6b:be:ac:79:d2:b4:23:0b:9a:44:8f:e8:9e:f1:
                    61:b4:61:89:91:5d:69:80:22:b0:5b:1a:4a:f9:ef:
                    39:f9:56:fb:cd:d4:be:1a:ed:27:c8:15:61:1c:d8:
                    64:e2:61:90:cd:2e:d5:51:20:41:6a:79:f2:94:b4:
                    5b:6d:b6:f2:15:84:6a:c6:17:5d:af:6b:7f:02:4d:
                    7c:fe:a8:e2:f0:23:25:f8:cd:36:94:72:d4:fc:58:
                    f2:e0:d3:71:ae:84:97:bd:5f:62:fd:80:91:94:b5:
                    51:18:eb:05:68:9d:49:42:d2:5a:6f:5e:a5:a4:3b:
                    30:9d:86:c7:23:d5:98:e2:c0:b0:a5:67:97:42:00:
                    e1:8a:12:9c:35:35:06:25:d0:05:20:71:5d:f4:d0:
                    35:a1:fb:66:c1:3f:52:12:59:16:ab:54:db:3b:53:
                    fe:26:f1:d0:6e:4e:98:16:53:8d:ef:c5:bd:d4:ad:
                    58:ac:ae:e0:a8:e5:7d:70:10:69:07:95:2e:7a:77:
                    c0:02:2e:26:4d:d4:6f:ff:fe:bf:c9:03:c9:19:da:
                    75:15:94:0e:33:56:b4:e2:e5:63:ce:dc:9b:34:ca:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:72:04:EA:57:2B:C2:2D:59:04:29:89:7C:F6:BD:FF:CD:62:ED:E7
            X509v3 Authority Key Identifier:
                keyid:4F:85:5F:68:08:FC:D1:63:FB:20:E5:E5:F9:39:42:72:53:84:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F855F6808FCD163FB20E5E5F939427253847DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaEJEHrb1nbPsQKUXVDYBe37x9roX8cpE4qQGNjrNRc4/0/4F855F6808FCD163FB20E5E5F939427253847DC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:fa:91:9c:77:6e:6a:11:23:9a:b3:64:2c:89:53:6d:97:
         3a:9f:74:bb:d4:ba:95:53:a9:a1:e3:b4:25:1f:92:73:93:eb:
         bd:16:16:4a:71:bf:ee:aa:a5:6a:d3:39:a0:05:59:c9:85:cd:
         6a:d8:c1:ae:2f:d6:69:47:d6:88:04:e2:ff:7f:eb:b8:cb:4c:
         ec:99:61:bf:d4:77:fa:86:dc:61:ad:8f:aa:ad:a9:40:c8:7a:
         cc:b0:4f:d6:c2:79:37:a8:7d:6f:a2:a0:1c:4e:ef:a9:63:fd:
         ff:07:3d:b5:8e:f5:cd:f6:4b:6d:90:ab:27:cf:c6:4d:76:cf:
         ba:ef:33:4e:9b:4d:ed:c4:ac:07:17:26:b1:b6:21:52:ba:8e:
         99:98:ed:c9:e0:4e:e6:2d:48:27:3c:3d:b5:6d:71:6f:19:75:
         6a:56:53:03:23:61:74:ac:40:16:45:d1:93:79:4b:6a:51:d1:
         4e:d6:a8:3f:50:05:7c:06:95:50:75:f3:6a:2b:32:9b:a3:af:
         52:6f:56:0a:7b:7b:44:49:23:43:60:3c:06:37:3a:9f:89:59:
         29:19:47:9a:62:f4:5b:46:69:26:55:7a:30:0c:e8:56:ec:6a:
         60:2b:f1:48:a9:38:8a:d6:08:d0:4e:9f:46:d0:26:5e:28:66:
         15:de:2c:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCfYJ5qE4O3C7OYMrc7V1pK7q4xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY4NTVGNjgwOEZDRDE2M0ZCMjBFNUU1RjkzOTQyNzI1
Mzg0N0RDMjAeFw0yNTAyMTYxNjQ0NTFaFw0yNTAyMTcxOTIzNTFaMDMxMTAvBgNV
BAMTKDc2NzIwNEVBNTcyQkMyMkQ1OTA0Mjk4OTdDRjZCREZGQ0Q2MkVERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLaxTDTrRKZq46WAzck1oKXXr
l31zdbjsb3+wi+9rvqx50rQjC5pEj+ie8WG0YYmRXWmAIrBbGkr57zn5VvvN1L4a
7SfIFWEc2GTiYZDNLtVRIEFqefKUtFtttvIVhGrGF12va38CTXz+qOLwIyX4zTaU
ctT8WPLg03GuhJe9X2L9gJGUtVEY6wVonUlC0lpvXqWkOzCdhscj1ZjiwLClZ5dC
AOGKEpw1NQYl0AUgcV300DWh+2bBP1ISWRarVNs7U/4m8dBuTpgWU43vxb3UrVis
ruCo5X1wEGkHlS56d8ACLiZN1G///r/JA8kZ2nUVlA4zVrTi5WPO3Js0yhKrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdnIE6lcrwi1ZBCmJfPa9/81i7ecwHwYDVR0j
BBgwFoAUT4VfaAj80WP7IOXl+TlCclOEfcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFFSkVIcmIxbmJQc1FLVVhWRFlCZTM3eDlyb1g4Y3BFNHFRR05qck5S
YzQvMC80Rjg1NUY2ODA4RkNEMTYzRkIyMEU1RTVGOTM5NDI3MjUzODQ3REMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGODU1RjY4MDhGQ0QxNjNG
QjIwRTVFNUY5Mzk0MjcyNTM4NDdEQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGFFSkVIcmIxbmJQc1FLVVhWRFlCZTM3eDlyb1g4Y3BFNHFRR05qck5SYzQvMC80
Rjg1NUY2ODA4RkNEMTYzRkIyMEU1RTVGOTM5NDI3MjUzODQ3REMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZX76kZx3bmoRI5qzZCyJU22XOp90u9S6lVOpoeO0JR+Sc5PrvRYWSnG/7qql
atM5oAVZyYXNatjBri/WaUfWiATi/3/ruMtM7Jlhv9R3+obcYa2Pqq2pQMh6zLBP
1sJ5N6h9b6KgHE7vqWP9/wc9tY71zfZLbZCrJ8/GTXbPuu8zTptN7cSsBxcmsbYh
UrqOmZjtyeBO5i1IJzw9tW1xbxl1alZTAyNhdKxAFkXRk3lLalHRTtaoP1AFfAaV
UHXzaisym6OvUm9WCnt7REkjQ2A8Bjc6n4lZKRlHmmL0W0ZpJlV6MAzoVuxqYCvx
SKk4itYI0E6fRtAmXihmFd4svg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:21 2025 by rpki-client