Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          Ty547B8My/xhfs6kraSaJq4b6sT05wkYQgEmnWPe+LI=
Subject key identifier:   71:4C:0C:10:6D:CB:45:05:42:5D:C2:9A:8B:9E:44:D5:14:A0:96:8F
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       730A544116A36979D8F1400E1B48DBCA166CF4AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          01C8
Signing time:             Fri 06 Jun 2025 03:39:02 +0000
Manifest this update:     Fri 06 Jun 2025 03:34:02 +0000
Manifest next update:     Sat 07 Jun 2025 05:39:02 +0000
Files and hashes:         1: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: bEmLg3I6pol+5iPkrw/VZ3wfhjnHQY3JTBAcNZpoHeM=)
                          2: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: 7dK9IjQo7l30GXdriklsLv1LlGLMCS0TSARyyYDtDWM=)
                          3: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: fXfboTPcVmcsKoPSJSHRy8UwiwNEyGoQv+7iPwATm0A=)
                          4: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: sTeZiCPYeUDs6CjQlF6oSnGzG0jAMwAmHwVN9MYVKrk=)
                          5: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: rgpcqEBw/6xlqS8WEKJnjQSuNRzcCbcMWUc188ZsBrY=)
                          6: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: 52lsjaJNpUCe2AcAV81o+4/grCzfEtC6pQ/EefJtw3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:54:41:16:a3:69:79:d8:f1:40:0e:1b:48:db:ca:16:6c:f4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jun  6 03:34:02 2025 GMT
            Not After : Jun  7 05:39:02 2025 GMT
        Subject: CN=714C0C106DCB4505425DC29A8B9E44D514A0968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:f3:63:2e:2f:ab:e3:16:98:e9:a8:3d:f9:
                    f6:3a:3c:a9:8b:04:81:f4:fe:dd:ea:dd:3d:01:10:
                    53:fa:77:e7:99:1b:93:23:28:d6:23:69:de:cb:fa:
                    f2:a6:2f:c9:6c:1f:81:97:eb:60:2f:80:8f:34:71:
                    55:d3:65:1a:01:ff:74:a3:7f:9d:73:b2:c0:4a:a3:
                    67:81:39:2d:62:13:36:cf:b5:89:c3:b9:02:72:60:
                    a0:58:2b:ed:ce:4c:37:ad:0e:8d:5d:35:e3:21:51:
                    98:30:a9:93:dd:6a:c6:9c:7e:bf:ef:9a:b0:10:9d:
                    d9:e7:28:43:28:f5:91:40:9d:4f:70:4b:18:55:8f:
                    be:b9:7a:80:32:92:4d:d0:d8:c9:7b:aa:22:7c:5d:
                    54:4e:c0:d7:47:34:75:01:54:53:e2:0d:cc:52:68:
                    75:b0:75:f1:23:eb:e8:26:16:c3:ca:21:ca:b9:66:
                    4a:e8:3e:fc:dc:e3:d5:1c:f5:5b:98:6e:37:14:88:
                    9e:b3:c9:c2:cc:d4:cd:7d:ad:41:ff:d6:22:0d:9b:
                    6d:1f:9f:22:8d:9a:93:c4:93:73:bb:3d:bb:75:be:
                    18:8c:b2:b1:6e:78:8a:a6:e6:83:02:26:da:e2:6d:
                    f1:0b:c6:bb:8e:c7:3b:a8:b3:81:8e:e7:3f:61:91:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4C:0C:10:6D:CB:45:05:42:5D:C2:9A:8B:9E:44:D5:14:A0:96:8F
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:fc:ac:9d:ad:36:dd:7f:6f:19:3e:f8:d8:c4:e9:bd:ea:
         88:76:93:56:f7:ca:0b:2d:12:33:ed:f9:cf:1d:0c:b7:d9:b0:
         55:cf:b9:47:cd:8c:4c:40:b6:80:73:5b:c9:0d:07:3c:e5:9a:
         93:d8:96:21:55:b9:1a:29:09:2f:f4:e7:4f:f5:76:f3:af:19:
         d5:30:75:4b:9d:96:74:a2:15:83:5e:8b:7d:11:4e:c1:58:69:
         28:db:04:8e:a7:57:b5:81:97:99:e3:bd:d9:c9:58:4d:da:b3:
         0b:59:ff:c2:3f:2f:5d:05:4b:e0:f2:4d:c3:ad:f7:71:bf:5c:
         6e:7b:22:b2:01:94:a3:78:88:ff:0b:0e:52:b0:73:e9:db:e7:
         30:28:1d:8d:99:56:5d:f8:3e:26:b9:40:a0:d9:5d:ef:0a:d3:
         55:95:fd:aa:6c:ae:c4:73:5c:db:12:5f:84:b1:24:8a:9b:09:
         8e:36:75:bc:5d:0a:5c:2f:fb:a9:ef:26:c4:dd:33:ab:46:f4:
         0d:c3:b3:d4:69:04:f9:19:6a:b9:e6:9e:0f:76:0f:56:15:85:
         63:dc:d0:6f:ca:24:08:41:cf:fd:19:4c:99:33:99:73:b2:de:
         e7:96:5a:e8:7e:d2:f8:6b:b9:af:0d:3a:b1:15:d9:a7:d1:df:
         ce:39:c0:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcwpUQRajaXnY8UAOG0jbyhZs9K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM5NkE1QkQ0NUIwRkI4RUI0REM2MDM1MjRGOUFGRTg0
MUQzMEQ1QTAeFw0yNTA2MDYwMzM0MDJaFw0yNTA2MDcwNTM5MDJaMDMxMTAvBgNV
BAMTKDcxNEMwQzEwNkRDQjQ1MDU0MjVEQzI5QThCOUU0NEQ1MTRBMDk2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGPNjLi+r4xaY6ag9+fY6PKmL
BIH0/t3q3T0BEFP6d+eZG5MjKNYjad7L+vKmL8lsH4GX62AvgI80cVXTZRoB/3Sj
f51zssBKo2eBOS1iEzbPtYnDuQJyYKBYK+3OTDetDo1dNeMhUZgwqZPdasacfr/v
mrAQndnnKEMo9ZFAnU9wSxhVj765eoAykk3Q2Ml7qiJ8XVROwNdHNHUBVFPiDcxS
aHWwdfEj6+gmFsPKIcq5ZkroPvzc49Uc9VuYbjcUiJ6zycLM1M19rUH/1iINm20f
nyKNmpPEk3O7Pbt1vhiMsrFueIqm5oMCJtribfELxruOxzuos4GO5z9hkam5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcUwMEG3LRQVCXcKai55E1RSglo8wHwYDVR0j
BBgwFoAUnJalvUWw+4603GA1JPmv6EHTDVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1IzejJwcmM0cnJ1cGVCYmVvekJhVUZVNDlCWUdaNkFuTUVHYWFKM2FM
UjEvMC85Qzk2QTVCRDQ1QjBGQjhFQjREQzYwMzUyNEY5QUZFODQxRDMwRDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDOTZBNUJENDVCMEZCOEVC
NERDNjAzNTI0RjlBRkU4NDFEMzBENUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1IzejJwcmM0cnJ1cGVCYmVvekJhVUZVNDlCWUdaNkFuTUVHYWFKM2FMUjEvMC85
Qzk2QTVCRDQ1QjBGQjhFQjREQzYwMzUyNEY5QUZFODQxRDMwRDVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf/v8rJ2tNt1/bxk++NjE6b3qiHaTVvfKCy0SM+35zx0Mt9mwVc+5R82MTEC2
gHNbyQ0HPOWak9iWIVW5GikJL/TnT/V2868Z1TB1S52WdKIVg16LfRFOwVhpKNsE
jqdXtYGXmeO92clYTdqzC1n/wj8vXQVL4PJNw633cb9cbnsisgGUo3iI/wsOUrBz
6dvnMCgdjZlWXfg+JrlAoNld7wrTVZX9qmyuxHNc2xJfhLEkipsJjjZ1vF0KXC/7
qe8mxN0zq0b0DcOz1GkE+RlqueaeD3YPVhWFY9zQb8okCEHP/RlMmTOZc7Le55Za
6H7S+Gu5rw06sRXZp9HfzjnAUg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:48 2025 by rpki-client