Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
File:                     4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft (raw, json)
Hash identifier:          mIYSsxoneL2+LYFJxiglTUAAIHLInZG2ARJuRwz0roo=
Subject key identifier:   5D:F5:10:FF:00:65:6B:61:FB:D2:53:DC:0C:BA:CB:9C:29:B7:1D:F9
Authority key identifier: 4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
Certificate issuer:       /CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
Certificate serial:       4538431A00B76DB989308E3F0FF9444C3AC5387A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
Manifest number:          01EC
Signing time:             Sun 06 Apr 2025 17:30:00 +0000
Manifest this update:     Sun 06 Apr 2025 17:25:00 +0000
Manifest next update:     Mon 07 Apr 2025 18:28:00 +0000
Files and hashes:         1: 34352e3138392e38382e302f32322d3234203d3e20323639353734.roa (hash: BBaxEAWu2E1aOalv2z7Tgj8vV4e938vkTqJRb/BBopk=)
                          2: 323830343a363661383a3a2f33322d3335203d3e20323639353734.roa (hash: O6I4+Uwv28zSPJEmQqZghTlUxsjEP5rmvyrChvUOhRI=)
                          3: 4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl (hash: s+Aqv1PpOYZNKLF64IMLobLqhjJaY1rv6Z4l1lB8x7o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:38:43:1a:00:b7:6d:b9:89:30:8e:3f:0f:f9:44:4c:3a:c5:38:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
        Validity
            Not Before: Apr  6 17:25:00 2025 GMT
            Not After : Apr  7 18:28:00 2025 GMT
        Subject: CN=5DF510FF00656B61FBD253DC0CBACB9C29B71DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:bf:93:ed:51:83:80:0b:68:d6:de:a2:53:
                    1d:a0:97:f2:92:f0:33:51:45:ea:90:2d:6d:ba:d4:
                    68:a5:32:92:43:9c:a1:31:f3:7e:81:57:67:cc:7e:
                    7a:0e:b3:8f:b5:37:ea:3a:54:05:f8:97:ea:e0:a0:
                    27:7b:04:28:96:04:a9:61:b4:97:4e:76:bc:58:92:
                    6f:a1:ec:75:c7:ae:2b:36:1d:da:15:da:99:a9:16:
                    e7:fc:5f:9b:eb:68:98:7e:96:1b:8f:2e:0d:5a:b1:
                    ec:d1:62:ac:50:35:48:4b:e4:75:7f:99:d3:37:7d:
                    51:dc:50:40:5e:0a:ae:be:0a:3c:ca:c3:a6:b0:0b:
                    4b:73:c9:81:2a:a2:fb:9c:45:8c:e8:e6:ce:2b:df:
                    30:03:56:f7:0c:3c:8a:5b:1b:10:65:9d:3e:c3:d5:
                    4b:22:7c:33:be:25:3a:53:71:ba:f4:8c:77:7d:99:
                    0c:da:80:8a:23:f0:2f:a7:b7:df:90:90:0f:2a:b4:
                    a1:4e:2f:c2:dc:01:a8:b3:7e:ef:74:3d:3c:7d:d6:
                    8a:b1:b0:c3:c3:ff:76:54:98:07:bd:64:46:fc:2b:
                    eb:e7:24:ea:a3:59:e7:6f:5f:40:4a:85:83:97:c3:
                    b5:c0:81:2f:6c:65:a5:b6:a1:39:ad:6e:98:d1:4d:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:10:FF:00:65:6B:61:FB:D2:53:DC:0C:BA:CB:9C:29:B7:1D:F9
            X509v3 Authority Key Identifier:
                keyid:4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:dc:41:f0:66:de:8c:a6:0c:6e:6f:ba:c7:4e:ea:85:65:
         28:fd:36:fc:44:8b:2c:9f:36:5c:7d:20:f8:04:d5:7b:83:41:
         22:98:3e:22:be:58:be:4f:e6:13:8d:b1:c0:93:28:93:8f:4d:
         9b:b1:68:5c:b3:ac:cb:44:c1:18:88:13:ee:2e:38:81:ca:a2:
         27:e2:01:e2:f2:59:27:7f:5c:35:55:62:bc:ca:ec:db:9f:fa:
         64:73:3e:d7:b1:f8:e7:4a:d0:0b:02:d2:59:b2:90:df:de:58:
         1d:c2:b2:27:7a:3c:69:7e:dc:ab:73:bf:c2:0b:95:29:9a:bf:
         ab:dc:2e:52:35:42:db:54:c0:c6:aa:4a:8e:03:ea:a6:12:cb:
         97:f6:73:33:a9:d6:48:89:77:db:1a:89:a7:b6:e7:5c:b3:f9:
         22:45:2d:82:85:08:72:a4:22:79:87:6e:a5:fd:c7:16:db:9c:
         35:90:bf:d5:99:f7:6a:d7:b0:be:f7:6a:54:41:9a:73:1f:dd:
         86:80:a2:5c:c3:8c:1d:0e:80:d5:8f:fd:48:fe:66:79:72:a1:
         66:72:5a:d6:96:2a:bb:ec:b0:ff:10:68:2a:f4:1b:28:9b:df:
         da:2e:96:57:27:3b:f1:11:21:e0:43:ed:1b:fc:66:75:81:4b:
         cd:e9:09:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURThDGgC3bbmJMI4/D/lETDrFOHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZDQzcwMTc0MjVCMUNCMjNDRDFCRTA0RUU0RkZBRDAw
RjQzNDUyMDAeFw0yNTA0MDYxNzI1MDBaFw0yNTA0MDcxODI4MDBaMDMxMTAvBgNV
BAMTKDVERjUxMEZGMDA2NTZCNjFGQkQyNTNEQzBDQkFDQjlDMjlCNzFERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Tr+T7VGDgAto1t6iUx2gl/KS
8DNRReqQLW261GilMpJDnKEx836BV2fMfnoOs4+1N+o6VAX4l+rgoCd7BCiWBKlh
tJdOdrxYkm+h7HXHris2HdoV2pmpFuf8X5vraJh+lhuPLg1asezRYqxQNUhL5HV/
mdM3fVHcUEBeCq6+CjzKw6awC0tzyYEqovucRYzo5s4r3zADVvcMPIpbGxBlnT7D
1UsifDO+JTpTcbr0jHd9mQzagIoj8C+nt9+QkA8qtKFOL8LcAaizfu90PTx91oqx
sMPD/3ZUmAe9ZEb8K+vnJOqjWedvX0BKhYOXw7XAgS9sZaW2oTmtbpjRTVpFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXfUQ/wBla2H70lPcDLrLnCm3HfkwHwYDVR0j
BBgwFoAUT8xwF0JbHLI80b4E7k/60A9DRSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dCcU5BeFh4bWFDbk03ZVA2ekd6ZUMxRGp3NDF6YThUTko2SDU1ZlI0
QlAvMy80RkNDNzAxNzQyNUIxQ0IyM0NEMUJFMDRFRTRGRkFEMDBGNDM0NTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGQ0M3MDE3NDI1QjFDQjIz
Q0QxQkUwNEVFNEZGQUQwMEY0MzQ1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2dCcU5BeFh4bWFDbk03ZVA2ekd6ZUMxRGp3NDF6YThUTko2SDU1ZlI0QlAvMy80
RkNDNzAxNzQyNUIxQ0IyM0NEMUJFMDRFRTRGRkFEMDBGNDM0NTIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKbPcQfBm3oymDG5vusdO6oVlKP02/ESLLJ82XH0g+ATVe4NBIpg+Ir5Yvk/m
E42xwJMok49Nm7FoXLOsy0TBGIgT7i44gcqiJ+IB4vJZJ39cNVVivMrs25/6ZHM+
17H450rQCwLSWbKQ395YHcKyJ3o8aX7cq3O/wguVKZq/q9wuUjVC21TAxqpKjgPq
phLLl/ZzM6nWSIl32xqJp7bnXLP5IkUtgoUIcqQieYdupf3HFtucNZC/1Zn3atew
vvdqVEGacx/dhoCiXMOMHQ6A1Y/9SP5meXKhZnJa1pYqu+yw/xBoKvQbKJvf2i6W
Vyc78REh4EPtG/xmdYFLzekJXg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:43:55 2025 by rpki-client