Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft
File:                     CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft (raw, json)
Hash identifier:          brM1qwBn84xkdzGI6bCZ9uSMssiYK5HxjQ/8C5v0gOs=
Subject key identifier:   77:6D:DC:71:AD:32:AB:A1:86:DB:C3:F3:52:FA:09:B4:A7:7B:52:3F
Authority key identifier: CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5
Certificate issuer:       /CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
Certificate serial:       7CE182F86823576FE8724086419E16E3AC816CCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft
Manifest number:          018F
Signing time:             Sun 20 Apr 2025 11:02:15 +0000
Manifest this update:     Sun 20 Apr 2025 10:57:15 +0000
Manifest next update:     Mon 21 Apr 2025 11:24:15 +0000
Files and hashes:         1: 323830343a373634303a3a2f33322d3332203d3e20323731303939.roa (hash: u2YO1EtgHmFKQa5CZ4WDvB/RoYXpHivE3VprhVjHpQc=)
                          2: CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl (hash: yjGYULgR6mmsjMoXqt4SGM3JMRmC1Es6CZiv+bE0xeg=)
                          3: 3137392e34382e3230382e302f32322d3234203d3e20323731303939.roa (hash: E5Yl2e5USjvb2/CqX3sylA35ITMRmGUBxJcibgynCcg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl
                          rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e1:82:f8:68:23:57:6f:e8:72:40:86:41:9e:16:e3:ac:81:6c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5
        Validity
            Not Before: Apr 20 10:57:15 2025 GMT
            Not After : Apr 21 11:24:15 2025 GMT
        Subject: CN=776DDC71AD32ABA186DBC3F352FA09B4A77B523F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:d8:69:99:18:4c:e0:aa:ac:d0:d7:9d:45:
                    a4:d6:b3:04:27:fb:86:d7:8a:40:e0:40:c5:38:c7:
                    b8:00:49:4e:b4:cc:09:8c:20:80:79:e7:c9:ee:d9:
                    c2:e9:0c:d8:fa:d7:c0:2a:1c:35:25:e0:93:3f:96:
                    8f:3f:fc:24:64:e9:d3:94:df:da:9e:a3:65:4c:e3:
                    75:76:d4:f6:2a:05:0c:a6:fd:e9:24:2c:c1:b5:d6:
                    6b:05:10:be:6e:5f:54:de:a9:fd:44:f3:f0:f7:19:
                    86:43:93:2c:cd:d4:66:59:27:7e:96:3a:a0:25:76:
                    80:91:c9:f6:71:94:d0:5f:4e:52:71:54:e4:79:e8:
                    b7:df:64:b4:88:81:c7:bd:6b:d7:f7:e5:32:a8:b2:
                    c6:3b:54:e8:7c:94:76:ee:7e:75:d2:06:31:51:0f:
                    fc:d3:5b:df:0d:a9:4c:42:4a:af:49:c0:77:56:35:
                    33:a5:89:c0:2d:03:b4:c6:90:7e:9d:e9:34:61:9e:
                    89:e3:49:c8:36:0c:ae:b7:a7:04:0c:81:bb:c2:5c:
                    bd:a3:94:3b:f1:0b:d4:7b:e9:53:e8:bd:d8:ea:88:
                    b6:1a:d6:74:0d:8a:5c:7b:9a:5f:59:31:95:4f:bc:
                    b2:e3:66:fe:5f:cd:0c:1f:84:b3:95:ee:28:eb:d7:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6D:DC:71:AD:32:AB:A1:86:DB:C3:F3:52:FA:09:B4:A7:7B:52:3F
            X509v3 Authority Key Identifier:
                keyid:CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:c4:77:6a:24:d5:86:fd:55:c8:7b:51:d1:5d:c9:2e:31:
         96:66:c2:7d:df:5c:2c:9b:3a:ed:78:02:1e:bd:6f:91:04:ca:
         ab:47:24:5e:dc:f2:27:c4:69:c9:a6:e4:fa:10:0e:df:44:e8:
         87:3a:24:b8:9c:2c:a5:60:a7:29:0d:00:98:b2:e7:5e:0e:1f:
         76:62:91:b9:1a:34:18:45:0d:41:d4:d1:97:51:de:b9:aa:52:
         1e:18:1f:a2:3c:ae:6a:8b:fe:3b:32:50:4e:48:cb:f0:e9:91:
         a8:4e:1a:32:f5:0a:1e:6c:70:54:ba:d0:0f:1d:3c:74:c1:0c:
         b9:3b:c2:02:e7:c6:4e:6a:09:36:6c:ea:38:42:4b:c5:94:5c:
         3b:df:40:2f:42:de:2e:6f:95:c5:bf:5f:9a:61:c5:a1:fd:91:
         b9:89:f2:18:9f:3e:f1:43:62:6b:b1:51:fa:09:3c:f2:e8:69:
         20:04:c6:ca:1a:83:72:53:e2:55:69:63:76:2a:ea:1e:d8:53:
         dd:d6:71:fa:62:42:f5:2f:2a:55:ea:ce:4c:0c:65:1e:30:bc:
         1f:9f:f8:ed:35:3e:08:02:e2:b0:dd:6e:79:25:4c:d4:a6:5e:
         ff:71:05:aa:73:f4:db:8f:7b:0e:28:cb:4f:25:72:0a:d0:5f:
         f7:4b:cb:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfOGC+GgjV2/ockCGQZ4W46yBbMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E3N0U3MkNGM0MyREExREUwOEU2NTM1NjcxOEIzRTQ5
RTgwMzhFNTAeFw0yNTA0MjAxMDU3MTVaFw0yNTA0MjExMTI0MTVaMDMxMTAvBgNV
BAMTKDc3NkREQzcxQUQzMkFCQTE4NkRCQzNGMzUyRkEwOUI0QTc3QjUyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwNhpmRhM4Kqs0NedRaTWswQn
+4bXikDgQMU4x7gASU60zAmMIIB558nu2cLpDNj618AqHDUl4JM/lo8//CRk6dOU
39qeo2VM43V21PYqBQym/ekkLMG11msFEL5uX1Teqf1E8/D3GYZDkyzN1GZZJ36W
OqAldoCRyfZxlNBfTlJxVOR56LffZLSIgce9a9f35TKossY7VOh8lHbufnXSBjFR
D/zTW98NqUxCSq9JwHdWNTOlicAtA7TGkH6d6TRhnonjScg2DK63pwQMgbvCXL2j
lDvxC9R76VPovdjqiLYa1nQNilx7ml9ZMZVPvLLjZv5fzQwfhLOV7ijr19clAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUd23cca0yq6GG28PzUvoJtKd7Uj8wHwYDVR0j
BBgwFoAUynfnLPPC2h3gjmU1Zxiz5J6AOOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVk
Qm4vMC9DQTc3RTcyQ0YzQzJEQTFERTA4RTY1MzU2NzE4QjNFNDlFODAzOEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzdFNzJDRjNDMkRBMURF
MDhFNjUzNTY3MThCM0U0OUU4MDM4RTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVkQm4vMC9D
QTc3RTcyQ0YzQzJEQTFERTA4RTY1MzU2NzE4QjNFNDlFODAzOEU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASdfEd2ok1Yb9Vch7UdFdyS4xlmbCfd9cLJs67XgCHr1vkQTKq0ckXtzyJ8Rp
yabk+hAO30TohzokuJwspWCnKQ0AmLLnXg4fdmKRuRo0GEUNQdTRl1HeuapSHhgf
ojyuaov+OzJQTkjL8OmRqE4aMvUKHmxwVLrQDx08dMEMuTvCAufGTmoJNmzqOEJL
xZRcO99AL0LeLm+Vxb9fmmHFof2RuYnyGJ8+8UNia7FR+gk88uhpIATGyhqDclPi
VWljdirqHthT3dZx+mJC9S8qVerOTAxlHjC8H5/47TU+CALisN1ueSVM1KZe/3EF
qnP02497DijLTyVyCtBf90vLow==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:01 2025 by rpki-client