Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.mft
File:                     A8C6F7327E34841D9D5C617086EFE9AC109AE305.mft (raw, json)
Hash identifier:          DD3rKXcC6uM8AQY4UQSBtediDX4qyL5AFOkOFecf0gI=
Subject key identifier:   1C:46:76:7C:1E:1A:ED:A4:47:E0:E4:0C:CE:84:72:1E:56:9B:95:60
Authority key identifier: A8:C6:F7:32:7E:34:84:1D:9D:5C:61:70:86:EF:E9:AC:10:9A:E3:05
Certificate issuer:       /CN=A8C6F7327E34841D9D5C617086EFE9AC109AE305
Certificate serial:       46FFC4435C85208CEE8772182B0090A25A2579AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C6F7327E34841D9D5C617086EFE9AC109AE305.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.mft
Manifest number:          39
Signing time:             Mon 07 Apr 2025 09:10:15 +0000
Manifest this update:     Mon 07 Apr 2025 09:05:15 +0000
Manifest next update:     Tue 08 Apr 2025 11:51:15 +0000
Files and hashes:         1: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: FkZzqjdKOJ6/ax0ZwSocdVBvm7lw84tgdZJCqDFbFPQ=)
                          2: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: tEbNbYhrhtzV89rm6svUU939Ad1ZhTz+QCl9C9LCVJI=)
                          3: A8C6F7327E34841D9D5C617086EFE9AC109AE305.crl (hash: lJrULCtc54F4jAN393UQvleJuubYHqMSIfe6TAyfO2Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C6F7327E34841D9D5C617086EFE9AC109AE305.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:c4:43:5c:85:20:8c:ee:87:72:18:2b:00:90:a2:5a:25:79:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C6F7327E34841D9D5C617086EFE9AC109AE305
        Validity
            Not Before: Apr  7 09:05:15 2025 GMT
            Not After : Apr  8 11:51:15 2025 GMT
        Subject: CN=1C46767C1E1AEDA447E0E40CCE84721E569B9560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:64:5b:ac:6f:ba:dc:7d:d2:36:cf:b6:d1:
                    a5:44:7e:74:d0:dc:2c:2c:48:36:70:a3:d4:ef:21:
                    0a:82:29:c8:de:e2:98:b7:1d:17:28:6e:d6:6c:31:
                    d6:34:88:20:c2:42:f9:19:1b:2b:86:d0:8f:9b:bf:
                    29:6a:dc:64:38:86:24:e7:60:b6:26:2a:1c:0f:8d:
                    e3:c8:20:47:18:58:12:c8:1f:97:d6:6e:ce:57:9c:
                    68:ae:85:51:29:58:8a:e7:f4:7a:63:9a:dd:79:d6:
                    0b:df:a2:ea:ef:db:fa:68:62:ce:bc:4c:63:e7:08:
                    69:ea:84:3b:0e:9a:93:75:f4:74:31:8f:ab:8c:1f:
                    52:da:0b:26:c2:71:c2:92:28:70:8d:57:04:1d:bf:
                    e5:57:02:3a:87:cd:37:69:27:e7:40:3c:54:aa:d9:
                    d8:09:de:15:39:2f:c3:aa:74:83:48:3d:6b:04:95:
                    56:8f:eb:c1:55:d0:b5:85:c2:86:f3:ec:75:11:60:
                    cf:25:de:fc:2c:a9:e1:20:81:33:2a:c0:18:6c:7f:
                    d7:2d:da:b0:e2:03:5d:7d:5a:92:ad:32:45:a0:02:
                    98:bc:8b:c0:51:b4:89:9e:1d:0e:15:51:b6:df:b6:
                    c9:3b:30:9d:07:76:9b:0f:8a:bb:8a:0d:f8:df:5b:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:76:7C:1E:1A:ED:A4:47:E0:E4:0C:CE:84:72:1E:56:9B:95:60
            X509v3 Authority Key Identifier:
                keyid:A8:C6:F7:32:7E:34:84:1D:9D:5C:61:70:86:EF:E9:AC:10:9A:E3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C6F7327E34841D9D5C617086EFE9AC109AE305.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/A8C6F7327E34841D9D5C617086EFE9AC109AE305.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2a:fb:55:d3:f8:13:e7:e0:da:e6:ec:3d:4b:79:ec:20:a4:
         02:c6:e6:fe:8d:c0:f5:21:2e:ce:95:a7:17:b1:8c:cc:9a:41:
         4c:2e:d2:dd:f7:24:9c:d2:c6:2c:b7:ab:50:b8:16:26:75:2c:
         c7:5a:11:84:1c:fb:2d:a8:8c:d4:34:3f:b7:19:e3:3d:a5:3e:
         64:56:ec:6a:76:51:a9:bc:ec:6b:bf:2d:11:ce:b2:26:18:41:
         fb:4d:f3:56:26:41:83:77:55:9d:1e:e1:60:de:e5:3d:11:4c:
         68:f4:c4:1e:97:17:7b:0d:90:8b:0f:4f:1d:12:f8:c6:31:a2:
         51:1c:0d:c1:3f:50:20:06:86:e1:44:b1:dd:8b:2e:07:ba:28:
         42:22:ea:4b:b2:23:d0:c7:be:04:2c:fa:f9:f7:72:08:98:a8:
         7c:eb:36:49:f5:54:0d:61:c5:84:9d:9f:6c:d9:f5:48:c6:a2:
         b5:2e:3f:75:d3:86:50:c5:fc:77:4f:c1:93:2a:c0:4e:58:d4:
         27:07:7c:d5:17:3e:85:e9:de:d0:ff:a1:df:7c:84:8b:52:be:
         7b:e7:2a:c8:8d:c2:47:20:6b:30:a0:31:18:6b:0f:c0:1e:f0:
         81:73:9f:cf:61:8e:b2:ee:59:c9:dc:47:47:2a:95:c6:33:ed:
         fc:c4:f4:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURv/EQ1yFIIzuh3IYKwCQololeaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDNkY3MzI3RTM0ODQxRDlENUM2MTcwODZFRkU5QUMx
MDlBRTMwNTAeFw0yNTA0MDcwOTA1MTVaFw0yNTA0MDgxMTUxMTVaMDMxMTAvBgNV
BAMTKDFDNDY3NjdDMUUxQUVEQTQ0N0UwRTQwQ0NFODQ3MjFFNTY5Qjk1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELGRbrG+63H3SNs+20aVEfnTQ
3CwsSDZwo9TvIQqCKcje4pi3HRcobtZsMdY0iCDCQvkZGyuG0I+bvylq3GQ4hiTn
YLYmKhwPjePIIEcYWBLIH5fWbs5XnGiuhVEpWIrn9Hpjmt151gvfourv2/poYs68
TGPnCGnqhDsOmpN19HQxj6uMH1LaCybCccKSKHCNVwQdv+VXAjqHzTdpJ+dAPFSq
2dgJ3hU5L8OqdINIPWsElVaP68FV0LWFwobz7HURYM8l3vwsqeEggTMqwBhsf9ct
2rDiA119WpKtMkWgApi8i8BRtImeHQ4VUbbftsk7MJ0HdpsPiruKDfjfWzjTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHEZ2fB4a7aRH4OQMzoRyHlablWAwHwYDVR0j
BBgwFoAUqMb3Mn40hB2dXGFwhu/prBCa4wUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl
U2UvMC9BOEM2RjczMjdFMzQ4NDFEOUQ1QzYxNzA4NkVGRTlBQzEwOUFFMzA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QzZGNzMyN0UzNDg0MUQ5
RDVDNjE3MDg2RUZFOUFDMTA5QUUzMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC9B
OEM2RjczMjdFMzQ4NDFEOUQ1QzYxNzA4NkVGRTlBQzEwOUFFMzA1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwir7VdP4E+fg2ubsPUt57CCkAsbm/o3A9SEuzpWnF7GMzJpBTC7S3fcknNLG
LLerULgWJnUsx1oRhBz7LaiM1DQ/txnjPaU+ZFbsanZRqbzsa78tEc6yJhhB+03z
ViZBg3dVnR7hYN7lPRFMaPTEHpcXew2Qiw9PHRL4xjGiURwNwT9QIAaG4USx3Ysu
B7ooQiLqS7Ij0Me+BCz6+fdyCJiofOs2SfVUDWHFhJ2fbNn1SMaitS4/ddOGUMX8
d0/BkyrATljUJwd81Rc+hene0P+h33yEi1K+e+cqyI3CRyBrMKAxGGsPwB7wgXOf
z2GOsu5ZydxHRyqVxjPt/MT0zQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:48 2025 by rpki-client