Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
File:                     3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft (raw, json)
Hash identifier:          MMhf4PGYOQQ8DcA6DeP2eMl7yODYZjOzDG7MWk+g5u0=
Subject key identifier:   20:61:5A:E3:51:69:20:FD:70:22:E7:B9:DA:4F:69:B9:6F:01:E9:10
Authority key identifier: 3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
Certificate issuer:       /CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
Certificate serial:       2315E787EF672BAD30584504E2433DFAE722B7FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
Manifest number:          0152
Signing time:             Sat 07 Jun 2025 14:30:57 +0000
Manifest this update:     Sat 07 Jun 2025 14:25:57 +0000
Manifest next update:     Sun 08 Jun 2025 17:26:57 +0000
Files and hashes:         1: 34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa (hash: 2tp6V4w82MiESfNP9vLyXRvrDRql/QI1D59EaBgDtU4=)
                          2: 3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl (hash: ZK33LrvjL1F25VTlhLbVwd/R5QYR4BoYacDfDuafsZo=)
                          3: 323830343a356432633a3a2f33322d3438203d3e20323638393535.roa (hash: jrsAqgIMIw0pTSthuICOecHCQmndkdSHorKwxNDvQ3I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl
                          rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 17:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:15:e7:87:ef:67:2b:ad:30:58:45:04:e2:43:3d:fa:e7:22:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
        Validity
            Not Before: Jun  7 14:25:57 2025 GMT
            Not After : Jun  8 17:26:57 2025 GMT
        Subject: CN=20615AE3516920FD7022E7B9DA4F69B96F01E910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:b8:9c:b8:44:3f:bb:17:57:54:ed:9d:6e:
                    0b:d2:a9:c4:9e:07:78:ac:6d:8c:85:ce:dd:17:1c:
                    36:e1:bb:b2:b8:01:2f:2e:4a:df:62:fc:64:7a:20:
                    2c:fd:8f:e4:61:4a:07:11:00:76:a8:06:5a:22:ec:
                    56:e6:f3:89:e0:e0:88:bd:29:6d:27:d5:c7:47:f4:
                    ac:3e:75:2a:05:c7:cb:25:1f:7e:66:48:6c:ce:32:
                    42:b8:e2:56:79:75:9b:28:63:63:61:09:53:51:01:
                    29:f9:c9:e6:2b:ce:6c:a4:e4:33:21:c7:08:1e:e2:
                    59:0c:d1:93:ed:f9:71:f6:b9:2a:7f:e2:ff:89:d4:
                    9b:a4:56:62:58:d1:b6:85:f6:07:76:da:32:a5:d3:
                    cd:dd:26:f4:06:03:ad:b0:7f:c8:f6:f2:46:e1:9a:
                    2d:4e:0a:4b:70:6b:19:80:99:f8:bf:d4:0b:8f:01:
                    92:ec:98:6d:4d:df:df:90:8d:a3:4c:e2:64:bc:c7:
                    6a:19:15:0f:0c:e7:d6:fb:8e:b0:f8:c0:f1:b0:80:
                    b7:bb:7a:b9:5a:79:32:12:b6:63:91:28:3b:30:a8:
                    5f:c5:df:71:68:76:13:59:53:12:64:03:7a:4b:d5:
                    cc:97:e8:1c:45:3a:d1:2f:6a:01:8c:ec:c0:bf:b8:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:61:5A:E3:51:69:20:FD:70:22:E7:B9:DA:4F:69:B9:6F:01:E9:10
            X509v3 Authority Key Identifier:
                keyid:3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:33:47:e9:54:76:d7:b6:5f:6b:bd:44:b9:df:61:11:19:74:
         2c:84:fc:68:47:2b:65:db:6f:d1:78:17:06:f0:66:37:e2:c9:
         01:48:79:b6:82:a7:f3:cd:59:d8:f1:89:5b:fa:37:5f:6c:11:
         9e:78:07:29:53:6f:4e:c2:0c:44:77:dd:8e:94:a4:5f:b1:1f:
         cc:fe:4b:92:d4:cc:6d:8a:fc:ba:34:8b:4f:99:ef:ae:05:a8:
         20:62:16:e5:dd:84:b8:8f:66:25:c5:9c:12:7a:fa:08:5a:14:
         b3:8d:15:61:81:b3:b9:3b:7a:56:ed:e5:93:da:d4:81:2d:be:
         ca:a9:ab:6e:0b:f2:78:f6:69:31:42:00:1e:2d:50:ae:70:c9:
         bd:67:26:9d:70:12:0c:fe:06:a2:4c:0c:3b:a1:d3:2c:e7:1a:
         4d:a5:b1:15:ca:e9:42:c1:fc:72:e9:a3:64:97:ec:fe:25:66:
         9b:f2:dc:f8:7f:97:df:73:f7:c9:59:db:ba:0b:ff:80:49:5f:
         b1:c3:66:bb:0b:9d:b5:b8:7d:00:62:5a:ea:9a:0e:b3:93:87:
         83:b4:c4:fa:fd:ed:86:80:32:f1:91:2d:8b:ed:68:20:83:d5:
         41:8e:12:93:6a:e8:53:15:0d:17:d9:2f:ac:7d:4a:56:b3:70:
         27:98:fc:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIxXnh+9nK60wWEUE4kM9+ucit/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y4NEY1MTQwOENEODhEMTY1Q0U5MzFCMTVFNDhEQzlD
QjgwODRCRTAeFw0yNTA2MDcxNDI1NTdaFw0yNTA2MDgxNzI2NTdaMDMxMTAvBgNV
BAMTKDIwNjE1QUUzNTE2OTIwRkQ3MDIyRTdCOURBNEY2OUI5NkYwMUU5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUh7icuEQ/uxdXVO2dbgvSqcSe
B3isbYyFzt0XHDbhu7K4AS8uSt9i/GR6ICz9j+RhSgcRAHaoBloi7Fbm84ng4Ii9
KW0n1cdH9Kw+dSoFx8slH35mSGzOMkK44lZ5dZsoY2NhCVNRASn5yeYrzmyk5DMh
xwge4lkM0ZPt+XH2uSp/4v+J1JukVmJY0baF9gd22jKl083dJvQGA62wf8j28kbh
mi1OCktwaxmAmfi/1AuPAZLsmG1N39+QjaNM4mS8x2oZFQ8M59b7jrD4wPGwgLe7
erlaeTIStmORKDswqF/F33FodhNZUxJkA3pL1cyX6BxFOtEvagGM7MC/uIJvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIGFa41FpIP1wIue52k9puW8B6RAwHwYDVR0j
BBgwFoAUP4T1FAjNiNFlzpMbFeSNycuAhL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNwMjUzcEg5cERzRWs5UG5YeTI2N2ZrZkNlNW00cnVnVXZZazd0bkpm
TTYvMC8zRjg0RjUxNDA4Q0Q4OEQxNjVDRTkzMUIxNUU0OERDOUNCODA4NEJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGODRGNTE0MDhDRDg4RDE2
NUNFOTMxQjE1RTQ4REM5Q0I4MDg0QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUNwMjUzcEg5cERzRWs5UG5YeTI2N2ZrZkNlNW00cnVnVXZZazd0bkpmTTYvMC8z
Rjg0RjUxNDA4Q0Q4OEQxNjVDRTkzMUIxNUU0OERDOUNCODA4NEJFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMDNH6VR217Zfa71Eud9hERl0LIT8aEcrZdtv0XgXBvBmN+LJAUh5toKn881Z
2PGJW/o3X2wRnngHKVNvTsIMRHfdjpSkX7EfzP5LktTMbYr8ujSLT5nvrgWoIGIW
5d2EuI9mJcWcEnr6CFoUs40VYYGzuTt6Vu3lk9rUgS2+yqmrbgvyePZpMUIAHi1Q
rnDJvWcmnXASDP4GokwMO6HTLOcaTaWxFcrpQsH8cumjZJfs/iVmm/Lc+H+X33P3
yVnbugv/gElfscNmuwudtbh9AGJa6poOs5OHg7TE+v3thoAy8ZEti+1oIIPVQY4S
k2roUxUNF9kvrH1KVrNwJ5j8aA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:39 2025 by rpki-client