Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
File:                     2CE7EAA613A389D3132F70754E25E343490494C5.mft (raw, json)
Hash identifier:          p12A+b7RFINC5CRuqiAE52hoaTILPxoO5TBLmQEapB0=
Subject key identifier:   28:3C:9D:71:B0:39:FF:A4:E9:D3:50:29:E1:E9:8F:7D:54:48:19:43
Authority key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Certificate issuer:       /CN=2CE7EAA613A389D3132F70754E25E343490494C5
Certificate serial:       3FC8049C03265110B39DEF6AB224B3100C3AD0AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
Manifest number:          2A
Signing time:             Fri 06 Jun 2025 20:05:48 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:48 +0000
Files and hashes:         1: 323830343a373266633a3a2f33332d3438203d3e20323730383838.roa (hash: Fx4/J/MqE9BRJ4Sq52LysZLWf5WyvTX4Otl3HqF/CM8=)
                          2: 3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa (hash: 5nGGZwTpebh0OCnrveEjEI/2RNQ7fU0miuQxZHXO1nA=)
                          3: 2CE7EAA613A389D3132F70754E25E343490494C5.crl (hash: tvc7bVE5JmdCdXenRWGNja4LBuH0HmkhB4WqDZVVG94=)
                          4: 3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa (hash: IhdcOrs5pmeTTrvWH7LYozCkFl0rY30SxmvROM58D5c=)
                          5: 323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa (hash: kdmXgNEvhfXURz4occhN0+YijpnG+3hZFeIKjD3tDkw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c8:04:9c:03:26:51:10:b3:9d:ef:6a:b2:24:b3:10:0c:3a:d0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Validity
            Not Before: Jun  6 20:00:48 2025 GMT
            Not After : Jun  7 22:00:48 2025 GMT
        Subject: CN=283C9D71B039FFA4E9D35029E1E98F7D54481943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:35:ae:24:8a:d5:94:e3:30:bc:d1:a8:77:ad:
                    a5:f1:f0:40:8e:14:16:1e:36:77:ea:af:6e:40:df:
                    87:5c:71:29:72:91:50:6e:7e:97:ae:c2:2e:36:ac:
                    f6:58:aa:83:15:ba:32:35:2e:da:c3:3e:fb:18:02:
                    dd:6b:83:d8:b6:bb:be:06:ba:fa:6c:11:26:68:20:
                    65:f8:bc:c3:e2:65:df:ee:34:b6:84:26:1e:fd:fd:
                    d3:dd:32:09:c4:19:ad:f0:88:f6:61:64:35:9a:14:
                    01:ae:05:1f:22:e7:0a:d4:af:31:43:0f:54:b6:ac:
                    ac:9c:ba:4e:68:9a:bd:8c:92:c1:fa:ad:0d:7d:af:
                    ae:ac:e3:61:b8:1c:e0:0b:04:29:6d:d4:27:97:4e:
                    2a:80:5b:d9:ea:55:b4:62:c5:1b:0a:75:c3:ad:3d:
                    08:83:7b:6d:6e:82:3e:9a:94:93:83:0e:9e:a1:8e:
                    c8:06:4c:30:62:f6:d2:8e:66:4f:90:07:1c:b1:f9:
                    6b:56:f8:09:61:20:c2:6b:5a:25:08:13:89:24:c9:
                    df:41:4e:5d:63:a4:16:47:5d:9b:d2:ca:4d:df:e0:
                    86:a4:e3:9a:02:71:ab:d0:7a:f9:87:7f:ba:5c:f8:
                    26:91:5f:27:5b:5d:42:ab:59:31:7b:f3:2f:59:b9:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:9D:71:B0:39:FF:A4:E9:D3:50:29:E1:E9:8F:7D:54:48:19:43
            X509v3 Authority Key Identifier:
                keyid:2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:0c:93:33:85:53:94:fd:72:5a:ba:73:23:48:ad:85:cd:
         dd:f4:cd:e2:8c:1b:3d:b4:33:2e:3c:ed:b1:c4:b9:1c:ec:d9:
         01:fe:5c:57:f0:21:95:d5:ea:75:fa:f5:c6:8d:70:16:76:4f:
         3f:b1:7a:5f:0a:e6:20:b6:eb:45:3f:10:ce:a0:ba:4c:84:0c:
         5f:40:40:98:59:a5:a2:b4:82:cb:c0:ff:c5:9b:82:54:32:07:
         7d:e0:ca:37:6a:fa:87:98:61:60:c9:f4:a9:30:a2:de:6a:dd:
         a2:aa:41:03:dc:87:eb:95:ed:61:8b:30:35:5e:90:d5:dc:8a:
         54:ba:ae:ac:34:10:4e:81:82:6c:be:da:a6:21:dc:7c:76:9b:
         34:ed:65:ef:92:95:a5:10:61:9b:77:18:51:91:fa:bc:54:d7:
         51:b5:4b:a3:51:e1:f1:83:8f:89:aa:8e:df:5f:55:d7:ba:ae:
         fa:44:de:1e:81:0c:9e:4f:3a:4e:91:61:27:d3:62:94:62:37:
         63:5a:61:b4:b7:14:ea:3f:6d:b4:53:df:17:f8:1e:06:c6:82:
         b7:39:55:e1:15:15:56:8b:55:47:43:06:52:5a:58:81:49:68:
         24:23:d9:27:b6:fe:d2:90:61:7f:2c:8a:e9:69:db:6d:52:b6:
         f7:79:c4:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP8gEnAMmURCzne9qsiSzEAw60KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNFN0VBQTYxM0EzODlEMzEzMkY3MDc1NEUyNUUzNDM0
OTA0OTRDNTAeFw0yNTA2MDYyMDAwNDhaFw0yNTA2MDcyMjAwNDhaMDMxMTAvBgNV
BAMTKDI4M0M5RDcxQjAzOUZGQTRFOUQzNTAyOUUxRTk4RjdENTQ0ODE5NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNa4kitWU4zC80ah3raXx8ECO
FBYeNnfqr25A34dccSlykVBufpeuwi42rPZYqoMVujI1LtrDPvsYAt1rg9i2u74G
uvpsESZoIGX4vMPiZd/uNLaEJh79/dPdMgnEGa3wiPZhZDWaFAGuBR8i5wrUrzFD
D1S2rKycuk5omr2MksH6rQ19r66s42G4HOALBClt1CeXTiqAW9nqVbRixRsKdcOt
PQiDe21ugj6alJODDp6hjsgGTDBi9tKOZk+QBxyx+WtW+AlhIMJrWiUIE4kkyd9B
Tl1jpBZHXZvSyk3f4Iak45oCcavQevmHf7pc+CaRXydbXUKrWTF78y9ZuZWdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKDydcbA5/6Tp01Ap4emPfVRIGUMwHwYDVR0j
BBgwFoAULOfqphOjidMTL3B1TiXjQ0kElMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZmaEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3
ZlQvMC8yQ0U3RUFBNjEzQTM4OUQzMTMyRjcwNzU0RTI1RTM0MzQ5MDQ5NEM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRTdFQUE2MTNBMzg5RDMx
MzJGNzA3NTRFMjVFMzQzNDkwNDk0QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3ZmaEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3ZlQvMC8y
Q0U3RUFBNjEzQTM4OUQzMTMyRjcwNzU0RTI1RTM0MzQ5MDQ5NEM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjt8MkzOFU5T9clq6cyNIrYXN3fTN4owbPbQzLjztscS5HOzZAf5cV/AhldXq
dfr1xo1wFnZPP7F6XwrmILbrRT8QzqC6TIQMX0BAmFmlorSCy8D/xZuCVDIHfeDK
N2r6h5hhYMn0qTCi3mrdoqpBA9yH65XtYYswNV6Q1dyKVLqurDQQToGCbL7apiHc
fHabNO1l75KVpRBhm3cYUZH6vFTXUbVLo1Hh8YOPiaqO319V17qu+kTeHoEMnk86
TpFhJ9NilGI3Y1phtLcU6j9ttFPfF/geBsaCtzlV4RUVVotVR0MGUlpYgUloJCPZ
J7b+0pBhfyyK6WnbbVK293nEsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:36:24 2025 by rpki-client