Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
File:                     0CEEA1DDF076523B39CF76E704244FA173114D8F.mft (raw, json)
Hash identifier:          TfZwaUDNYCFHhHa23XtlJ/rcRIOxvFiF9pAxCCwZ/Vc=
Subject key identifier:   2E:92:83:FD:47:84:A6:CC:37:E9:D2:F9:5C:2E:8F:B5:C7:87:41:3F
Authority key identifier: 0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Certificate issuer:       /CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
Certificate serial:       541989227EE02EA220CE0262789B9D248446EECA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
Manifest number:          01E9
Signing time:             Fri 04 Apr 2025 23:24:01 +0000
Manifest this update:     Fri 04 Apr 2025 23:19:01 +0000
Manifest next update:     Sun 06 Apr 2025 01:23:01 +0000
Files and hashes:         1: 34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (hash: QK7M7Hn95eoxyqK+R5yWsmr5Y3VALC5NN9+0lKedKxY=)
                          2: 0CEEA1DDF076523B39CF76E704244FA173114D8F.crl (hash: lhq68yj89iLMDIBahoeAxPEaUCOwE8gnSDWVhEvIeRQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:19:89:22:7e:e0:2e:a2:20:ce:02:62:78:9b:9d:24:84:46:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Validity
            Not Before: Apr  4 23:19:01 2025 GMT
            Not After : Apr  6 01:23:01 2025 GMT
        Subject: CN=2E9283FD4784A6CC37E9D2F95C2E8FB5C787413F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:a8:52:8a:9f:b0:60:ae:bd:92:3d:7f:16:
                    0b:b9:8b:83:49:11:92:b5:03:ad:da:a8:2c:00:50:
                    21:af:91:8e:d2:d9:7a:80:4a:11:67:41:56:eb:9c:
                    33:15:09:61:3f:6f:38:93:d1:a9:1f:17:7d:29:7a:
                    2a:cc:88:8e:b3:dd:cb:57:c0:43:f3:12:c0:1c:bd:
                    57:c7:64:af:5f:51:4e:12:6a:51:22:f1:a6:44:35:
                    b2:36:6d:2e:34:c7:37:77:ee:42:f7:cb:04:db:9c:
                    16:18:27:82:2d:8f:d0:99:92:79:37:50:28:3c:d8:
                    4e:52:75:9f:c7:85:f9:4c:a5:ed:12:b8:11:70:92:
                    1e:12:c8:bc:48:49:95:a4:22:cb:e1:ce:6b:99:46:
                    e6:be:e4:34:25:66:0d:63:15:37:40:71:81:d1:7a:
                    47:ed:f8:d0:2e:d8:ea:d3:2c:07:19:d8:aa:f6:38:
                    4e:03:ab:5c:e2:5d:5d:9c:e9:d8:de:2f:50:40:f9:
                    99:b2:6e:59:ae:e9:ee:87:af:d1:00:20:29:b3:cf:
                    56:f9:e2:d3:e4:57:f5:c7:6e:e5:d1:5d:8e:41:cc:
                    7a:e3:ad:ee:82:0e:18:20:8e:ef:c5:40:04:d0:63:
                    ab:04:14:e9:44:a0:fc:78:2d:ae:e8:ad:13:a8:56:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:92:83:FD:47:84:A6:CC:37:E9:D2:F9:5C:2E:8F:B5:C7:87:41:3F
            X509v3 Authority Key Identifier:
                keyid:0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b6:5f:e1:7c:e8:52:2f:ca:0b:6a:0b:38:41:d8:e8:e6:a5:
         ab:72:4d:bd:2c:d7:76:a0:52:d4:d8:13:92:80:c4:1b:fd:30:
         72:08:3d:8c:99:a2:d7:27:d4:e3:2a:91:e9:c4:4d:c0:a3:04:
         ef:e5:db:82:da:a8:2b:b5:22:d9:d6:b5:53:12:e7:5e:40:5d:
         79:37:5f:84:6d:fc:fa:27:00:6c:f2:b6:0b:99:c3:81:b8:5a:
         a8:3d:79:64:4c:e6:2b:e1:38:9a:3f:29:4d:94:84:36:e6:57:
         f7:3b:54:82:70:c0:82:6f:f1:d6:69:3e:0a:26:45:fd:29:24:
         fd:e2:19:e1:40:2a:e8:c9:7c:9f:4e:a5:ae:4d:61:20:84:bc:
         62:80:07:7c:b4:63:73:10:0c:73:be:53:3a:e9:bf:d5:d0:46:
         bb:e0:b3:81:c7:37:9c:c7:19:b4:a3:85:11:1b:b9:bf:91:2b:
         1c:f2:43:aa:47:4c:2b:8e:86:54:8a:53:cf:5a:8a:5b:df:37:
         6d:73:0a:84:ea:03:97:40:83:7f:46:d0:fe:29:e4:49:b5:29:
         3e:b0:bf:8d:a0:8a:d1:60:c2:bd:76:fb:50:68:74:1b:02:b8:
         29:d1:62:e7:6a:d8:a6:b4:cb:83:bf:6d:b3:b2:a0:49:84:df:
         86:a1:ae:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVBmJIn7gLqIgzgJieJudJIRG7sowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENFRUExRERGMDc2NTIzQjM5Q0Y3NkU3MDQyNDRGQTE3
MzExNEQ4RjAeFw0yNTA0MDQyMzE5MDFaFw0yNTA0MDYwMTIzMDFaMDMxMTAvBgNV
BAMTKDJFOTI4M0ZENDc4NEE2Q0MzN0U5RDJGOTVDMkU4RkI1Qzc4NzQxM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsz6hSip+wYK69kj1/Fgu5i4NJ
EZK1A63aqCwAUCGvkY7S2XqAShFnQVbrnDMVCWE/bziT0akfF30peirMiI6z3ctX
wEPzEsAcvVfHZK9fUU4SalEi8aZENbI2bS40xzd37kL3ywTbnBYYJ4Itj9CZknk3
UCg82E5SdZ/HhflMpe0SuBFwkh4SyLxISZWkIsvhzmuZRua+5DQlZg1jFTdAcYHR
ekft+NAu2OrTLAcZ2Kr2OE4Dq1ziXV2c6djeL1BA+Zmyblmu6e6Hr9EAICmzz1b5
4tPkV/XHbuXRXY5BzHrjre6CDhggju/FQATQY6sEFOlEoPx4La7orROoVtrDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULpKD/UeEpsw36dL5XC6PtceHQT8wHwYDVR0j
BBgwFoAUDO6h3fB2Ujs5z3bnBCRPoXMRTY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTN1dUF0aUYzaVpya1NLSG1lWWN5d2NCWmhxVU15Y0c5dnB4c3FDanlN
TnovMS8wQ0VFQTFEREYwNzY1MjNCMzlDRjc2RTcwNDI0NEZBMTczMTE0RDhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRUVBMURERjA3NjUyM0Iz
OUNGNzZFNzA0MjQ0RkExNzMxMTREOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTN1dUF0aUYzaVpya1NLSG1lWWN5d2NCWmhxVU15Y0c5dnB4c3FDanlNTnovMS8w
Q0VFQTFEREYwNzY1MjNCMzlDRjc2RTcwNDI0NEZBMTczMTE0RDhGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAubZf4XzoUi/KC2oLOEHY6Oalq3JNvSzXdqBS1NgTkoDEG/0wcgg9jJmi1yfU
4yqR6cRNwKME7+XbgtqoK7Ui2da1UxLnXkBdeTdfhG38+icAbPK2C5nDgbhaqD15
ZEzmK+E4mj8pTZSENuZX9ztUgnDAgm/x1mk+CiZF/Skk/eIZ4UAq6Ml8n06lrk1h
IIS8YoAHfLRjcxAMc75TOum/1dBGu+Czgcc3nMcZtKOFERu5v5ErHPJDqkdMK46G
VIpTz1qKW983bXMKhOoDl0CDf0bQ/inkSbUpPrC/jaCK0WDCvXb7UGh0GwK4KdFi
52rYprTLg79ts7KgSYTfhqGu/A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:06 2025 by rpki-client