Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          vjyKsgfxX82EANTxzMGsX6s5/HOxyGMyqE640S4V5fA=
Subject key identifier:   3D:CD:55:2D:83:9C:5B:DE:ED:9E:F0:2B:06:B4:05:2B:0F:03:01:C1
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       4C31CDDEAAC1ABBFAAE3B471B9F95E0D30771FE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          C3
Signing time:             Thu 10 Apr 2025 19:43:11 +0000
Manifest this update:     Thu 10 Apr 2025 19:38:11 +0000
Manifest next update:     Fri 11 Apr 2025 20:05:11 +0000
Files and hashes:         1: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
                          2: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
                          3: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: yAXssEea+ChE1fPwYTWE/+OGqyz7eaJxWRRcqOTihIg=)
                          4: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)
                          5: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          6: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          7: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 20:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:31:cd:de:aa:c1:ab:bf:aa:e3:b4:71:b9:f9:5e:0d:30:77:1f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Apr 10 19:38:11 2025 GMT
            Not After : Apr 11 20:05:11 2025 GMT
        Subject: CN=3DCD552D839C5BDEED9EF02B06B4052B0F0301C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:d4:47:ba:f0:6d:2c:aa:e9:36:13:4a:95:
                    64:76:ce:81:4e:f4:bc:8d:3c:0c:d2:09:ab:04:0f:
                    36:5e:f0:d5:fd:a5:af:5b:b7:06:32:55:29:35:08:
                    e6:77:b8:48:5e:37:c5:83:38:12:e7:6d:ec:3c:41:
                    25:25:c2:3e:9e:14:12:c6:66:52:34:9e:36:ef:dc:
                    23:b8:f0:f7:1f:8b:4c:b8:2d:1f:dd:2b:4e:c4:40:
                    57:ce:e4:3c:d0:cf:23:77:63:e4:7a:93:85:c2:69:
                    ec:0b:09:e2:f9:30:08:f0:02:36:ec:0f:a9:7d:17:
                    b8:a7:0b:f1:57:bf:fe:a1:3b:f9:16:aa:82:8b:cd:
                    01:b6:50:4f:c2:de:30:82:d4:26:b2:ae:37:52:0f:
                    0b:ae:16:13:36:fa:b7:3d:d1:be:a8:77:26:97:92:
                    c7:11:81:b8:02:36:bd:5a:b1:1e:d3:55:db:77:f7:
                    ab:23:c8:24:c9:1f:92:06:b8:3f:1f:c1:a4:7f:b3:
                    95:6d:f3:72:49:e2:c8:77:d6:ed:b3:4c:9c:96:c7:
                    e7:55:06:64:3c:e9:36:4c:14:70:f8:58:5f:5f:8b:
                    17:80:54:1e:ad:5c:0a:2a:a0:64:3d:01:b0:9c:58:
                    56:c9:2e:84:b5:ca:1a:9b:f2:35:04:3d:07:d4:1b:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CD:55:2D:83:9C:5B:DE:ED:9E:F0:2B:06:B4:05:2B:0F:03:01:C1
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:6e:20:33:c2:b4:05:a8:9c:d2:09:cb:f5:1a:2e:a8:79:
         fe:67:48:74:d6:8b:40:0f:3c:2a:8b:40:d7:b1:55:b1:fd:f7:
         f7:27:a8:31:3e:70:39:54:ff:c1:2c:2e:2d:04:bd:f4:5e:1b:
         c4:fc:ee:88:9f:81:7e:3f:d9:a2:a8:20:3e:a4:49:1c:b5:ef:
         06:94:33:0a:bc:08:10:ee:18:c1:6d:4a:08:43:53:50:d6:d2:
         86:a8:8f:41:46:0e:7a:59:be:f5:60:c5:d7:e1:3f:3c:3a:8d:
         53:75:a4:6e:63:df:e6:f5:30:82:c2:eb:55:03:ea:18:58:91:
         34:b3:b7:2a:27:d0:26:0d:ee:d3:9f:f8:73:b6:7f:c9:8e:1c:
         fe:d9:95:c4:17:2b:53:d9:f1:bf:b4:d1:b6:7d:60:05:29:14:
         96:46:f4:8a:21:9d:be:05:18:28:d0:c3:e2:95:da:29:5e:8b:
         27:c2:42:3e:de:31:20:4e:b0:14:5e:29:5e:29:85:c7:e6:39:
         8e:33:b6:e8:99:0c:a4:99:9b:86:e9:d1:e7:e3:e7:40:5a:06:
         6f:94:56:4c:93:03:82:d1:68:db:80:35:d2:59:db:37:7c:a4:
         77:91:7f:22:5e:17:5c:4d:28:07:4e:78:17:69:52:16:45:79:
         0a:d3:c3:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTDHN3qrBq7+q47RxufleDTB3H+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQyOTkwNzY4RTM5M0Y2OEZBMTRCRjNGMUYyQjk3MzIw
ODkwM0ZCQzAeFw0yNTA0MTAxOTM4MTFaFw0yNTA0MTEyMDA1MTFaMDMxMTAvBgNV
BAMTKDNEQ0Q1NTJEODM5QzVCREVFRDlFRjAyQjA2QjQwNTJCMEYwMzAxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZtRHuvBtLKrpNhNKlWR2zoFO
9LyNPAzSCasEDzZe8NX9pa9btwYyVSk1COZ3uEheN8WDOBLnbew8QSUlwj6eFBLG
ZlI0njbv3CO48Pcfi0y4LR/dK07EQFfO5DzQzyN3Y+R6k4XCaewLCeL5MAjwAjbs
D6l9F7inC/FXv/6hO/kWqoKLzQG2UE/C3jCC1CayrjdSDwuuFhM2+rc90b6odyaX
kscRgbgCNr1asR7TVdt396sjyCTJH5IGuD8fwaR/s5Vt83JJ4sh31u2zTJyWx+dV
BmQ86TZMFHD4WF9fixeAVB6tXAoqoGQ9AbCcWFbJLoS1yhqb8jUEPQfUGwCZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPc1VLYOcW97tnvArBrQFKw8DAcEwHwYDVR0j
BBgwFoAUTSmQdo45P2j6FL8/HyuXMgiQP7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMC80RDI5OTA3NjhFMzkzRjY4RkExNEJGM0YxRjJCOTczMjA4OTAzRkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREMjk5MDc2OEUzOTNGNjhG
QTE0QkYzRjFGMkI5NzMyMDg5MDNGQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgxNGcvMC80
RDI5OTA3NjhFMzkzRjY4RkExNEJGM0YxRjJCOTczMjA4OTAzRkJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZtuIDPCtAWonNIJy/UaLqh5/mdIdNaLQA88KotA17FVsf339yeoMT5wOVT/
wSwuLQS99F4bxPzuiJ+Bfj/ZoqggPqRJHLXvBpQzCrwIEO4YwW1KCENTUNbShqiP
QUYOelm+9WDF1+E/PDqNU3WkbmPf5vUwgsLrVQPqGFiRNLO3KifQJg3u05/4c7Z/
yY4c/tmVxBcrU9nxv7TRtn1gBSkUlkb0iiGdvgUYKNDD4pXaKV6LJ8JCPt4xIE6w
FF4pXimFx+Y5jjO26JkMpJmbhunR5+PnQFoGb5RWTJMDgtFo24A10lnbN3ykd5F/
Il4XXE0oB054F2lSFkV5CtPDEg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:31:38 2025 by rpki-client