Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
File:                     CF46A132348143E7B60D54AC599BE74868B00829.mft (raw, json)
Hash identifier:          wAYF64nd172RgbR2Xkj6/0x20d6Z7qcoAEk0E9rXO3Q=
Subject key identifier:   4F:C3:6D:AC:6C:04:6B:F3:B7:A7:E6:C9:62:BE:CC:22:F2:40:4F:08
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       6F4693BB0F9639ADB59535BBAC8EA0CA1C9CAC08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
Manifest number:          0298
Signing time:             Tue 29 Jul 2025 18:00:04 +0000
Manifest this update:     Tue 29 Jul 2025 17:55:04 +0000
Manifest next update:     Wed 30 Jul 2025 19:37:04 +0000
Files and hashes:         1: CF46A132348143E7B60D54AC599BE74868B00829.crl (hash: z3+6g4ETcr4JCrNgHLZYxcLNyJpmntAptJydVN12P4c=)
                          2: 323830343a3836633a3a2f33322d3438203d3e20323632333639.roa (hash: Ckk2/C3yX5sNIr7EK5kU0NqhxNP4ilrxVTM4BKyM7B4=)
                          3: 3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa (hash: jl+0su74W0b6u+BIAuCeDaZ8ZQq8KdRTGbuO+vh0ADM=)
                          4: 3137372e3133302e38302e302f32302d3234203d3e20323632333639.roa (hash: tXHsxz7tAZC3y2RpTkqsLmy+UScXR6kvNeqCltX2ja0=)
                          5: 3137302e3235342e3138342e302f32322d3234203d3e20323632333639.roa (hash: HsBRneav2ZC308BPSA04zSeXz10enYxoEEISZbzRjPE=)
                          6: 3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa (hash: FVb9ZZ4WvUJeaUEWPb1lRsJulOiqXqmN/UIWVK6dnPs=)
                          7: 3133382e302e34342e302f32322d3234203d3e20323632333639.roa (hash: l898D7IGOnDfaSfbuCtYAWlE3rNzmp0ALEOKeZErLes=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 19:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:93:bb:0f:96:39:ad:b5:95:35:bb:ac:8e:a0:ca:1c:9c:ac:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Jul 29 17:55:04 2025 GMT
            Not After : Jul 30 19:37:04 2025 GMT
        Subject: CN=4FC36DAC6C046BF3B7A7E6C962BECC22F2404F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:16:fa:06:a1:80:83:19:74:af:23:cf:a5:
                    7e:8c:ab:7a:5f:6c:a8:4d:3a:bd:26:97:e5:77:25:
                    b3:67:7f:6f:94:aa:57:68:8c:68:1b:01:66:3d:89:
                    7e:82:2d:9d:5e:dd:ae:50:b0:20:cf:f9:49:03:e1:
                    50:f5:2e:0d:9b:89:ad:0b:1f:a0:fe:37:92:92:96:
                    29:2f:81:fa:be:14:1d:65:5f:c3:c0:86:e1:97:c1:
                    45:77:0c:b3:23:a0:7f:44:cd:77:d8:a5:73:4e:34:
                    9b:ba:f5:06:73:12:18:90:61:51:c6:8e:73:73:95:
                    86:36:2e:a2:b4:c2:bc:58:d2:1c:3f:74:16:70:eb:
                    3e:88:17:ce:bf:2d:09:39:62:d8:b5:ed:57:e4:dc:
                    74:4b:0d:86:7e:04:dc:ae:08:77:b8:93:02:bc:77:
                    5f:f5:3d:82:fb:e7:a2:ec:9d:1e:1c:df:6f:66:a0:
                    2e:78:3a:68:35:e8:17:7c:50:75:1c:58:15:ad:93:
                    f3:24:cb:7f:ba:a5:23:2c:94:8c:42:e8:2a:c4:4e:
                    27:f3:42:c3:99:bc:8a:e6:48:dc:c0:3b:72:d0:c3:
                    ab:e9:ac:3b:11:8b:de:e4:31:ce:f6:f4:d9:87:99:
                    ce:0d:86:7b:bb:68:dc:9e:86:6e:f6:39:13:1a:6c:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C3:6D:AC:6C:04:6B:F3:B7:A7:E6:C9:62:BE:CC:22:F2:40:4F:08
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c7:0c:1b:66:7b:7d:4d:be:06:8e:bd:0f:d5:c1:90:89:ef:
         38:9d:8a:40:58:ea:96:eb:a7:09:b5:3d:c2:2e:7b:c9:89:f7:
         7c:e6:db:d7:c1:22:b1:be:cc:c6:3a:b0:df:a6:fd:cc:81:86:
         3f:03:e0:93:7d:55:64:a5:3b:e9:08:05:1d:18:ae:92:fa:3a:
         42:66:bf:87:af:25:3e:51:b3:2e:1b:3b:f9:9d:25:c8:a0:2c:
         45:34:22:d6:e3:cb:de:96:33:f6:4f:6e:f8:6c:8c:b7:1e:81:
         73:13:6c:4d:4e:fc:f8:c0:f5:30:0b:2a:39:56:bf:f6:36:6d:
         42:81:f2:8d:a2:66:0a:1f:88:7b:1a:be:dc:18:c6:73:07:b4:
         ee:e7:aa:85:51:b7:b9:f1:50:5b:8f:b2:9d:69:08:69:6d:c3:
         16:6d:d5:49:e4:e7:ab:fc:fa:c6:7a:c5:5e:a6:c0:c8:fa:f4:
         f9:e8:c7:bb:2f:86:af:01:23:eb:6c:51:ae:f5:ba:2a:ce:ae:
         07:03:16:2c:a6:6a:af:20:b5:91:58:4b:13:aa:be:b7:ff:79:
         5a:fc:65:04:dc:c2:f7:d5:e1:7f:be:28:63:6d:00:b6:01:23:
         f2:da:f9:bb:83:51:f7:f5:95:f3:c6:6e:fe:de:15:96:ed:57:
         2e:8e:a6:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb0aTuw+WOa21lTW7rI6gyhycrAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y0NkExMzIzNDgxNDNFN0I2MEQ1NEFDNTk5QkU3NDg2
OEIwMDgyOTAeFw0yNTA3MjkxNzU1MDRaFw0yNTA3MzAxOTM3MDRaMDMxMTAvBgNV
BAMTKDRGQzM2REFDNkMwNDZCRjNCN0E3RTZDOTYyQkVDQzIyRjI0MDRGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFxb6BqGAgxl0ryPPpX6Mq3pf
bKhNOr0ml+V3JbNnf2+UqldojGgbAWY9iX6CLZ1e3a5QsCDP+UkD4VD1Lg2bia0L
H6D+N5KSlikvgfq+FB1lX8PAhuGXwUV3DLMjoH9EzXfYpXNONJu69QZzEhiQYVHG
jnNzlYY2LqK0wrxY0hw/dBZw6z6IF86/LQk5Yti17Vfk3HRLDYZ+BNyuCHe4kwK8
d1/1PYL756LsnR4c329moC54Omg16Bd8UHUcWBWtk/Mky3+6pSMslIxC6CrETifz
QsOZvIrmSNzAO3LQw6vprDsRi97kMc729NmHmc4Nhnu7aNyehm72ORMabFZNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT8NtrGwEa/O3p+bJYr7MIvJATwgwHwYDVR0j
BBgwFoAUz0ahMjSBQ+e2DVSsWZvnSGiwCCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMS9DRjQ2QTEzMjM0ODE0M0U3QjYwRDU0QUM1OTlCRTc0ODY4QjAwODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNDZBMTMyMzQ4MTQzRTdC
NjBENTRBQzU5OUJFNzQ4NjhCMDA4MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3dXIvMS9D
RjQ2QTEzMjM0ODE0M0U3QjYwRDU0QUM1OTlCRTc0ODY4QjAwODI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApscMG2Z7fU2+Bo69D9XBkInvOJ2KQFjqluunCbU9wi57yYn3fObb18Eisb7M
xjqw36b9zIGGPwPgk31VZKU76QgFHRiukvo6Qma/h68lPlGzLhs7+Z0lyKAsRTQi
1uPL3pYz9k9u+GyMtx6BcxNsTU78+MD1MAsqOVa/9jZtQoHyjaJmCh+Iexq+3BjG
cwe07ueqhVG3ufFQW4+ynWkIaW3DFm3VSeTnq/z6xnrFXqbAyPr0+ejHuy+GrwEj
62xRrvW6Ks6uBwMWLKZqryC1kVhLE6q+t/95WvxlBNzC99Xhf74oY20AtgEj8tr5
u4NR9/WV88Zu/t4Vlu1XLo6mqQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 21:39:19 2025 by rpki-client