Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
File:                     A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json)
Hash identifier:          PXI1kwsZMbTE2i3de8FMPCbXPHoNM5C/7g9sk+NWeW0=
Subject key identifier:   AE:61:84:76:F8:7A:42:6A:E7:33:71:68:03:CD:ED:59:BC:12:0C:36
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       7B8B2F44B7AF2E814E779BE877EBFA5880F2B061
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
Manifest number:          021A
Signing time:             Wed 11 Jun 2025 10:38:45 +0000
Manifest this update:     Wed 11 Jun 2025 10:33:45 +0000
Manifest next update:     Thu 12 Jun 2025 14:37:45 +0000
Files and hashes:         1: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=)
                          2: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=)
                          3: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=)
                          4: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: xao/md82SaeKGUCrO65o+5pR6bZIAOqb13u/55D1XQc=)
                          5: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 14:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:2f:44:b7:af:2e:81:4e:77:9b:e8:77:eb:fa:58:80:f2:b0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Jun 11 10:33:45 2025 GMT
            Not After : Jun 12 14:37:45 2025 GMT
        Subject: CN=AE618476F87A426AE733716803CDED59BC120C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:77:a9:82:3a:9f:18:4c:23:e0:39:54:17:
                    f5:e7:e0:39:70:51:f8:c3:7c:99:db:79:5e:d4:fc:
                    c2:19:60:fe:a2:2a:62:44:40:42:c9:9e:be:0a:78:
                    52:dd:6e:b0:64:36:27:fc:3d:28:c1:a9:69:57:f1:
                    39:9e:3d:df:cd:dd:de:2f:0b:f8:03:3a:4e:d7:6f:
                    a7:16:bf:44:96:d9:0d:4c:96:d3:80:f7:3e:d1:ca:
                    d6:5e:91:81:39:82:fa:c7:88:db:98:61:60:07:57:
                    d4:e9:47:3d:9b:57:fe:1e:3f:4e:61:2c:2d:1c:75:
                    fa:2c:cf:3a:7b:cb:e8:80:a4:7b:60:67:e5:78:7c:
                    70:7c:4f:ef:60:96:13:ca:7f:c3:1c:98:97:0c:95:
                    39:a8:66:c3:b9:49:9c:d5:b5:f8:c9:b2:33:15:89:
                    fc:3f:a4:55:e6:9b:51:b2:d4:8d:b3:83:18:7e:0c:
                    df:42:e5:ca:d7:86:39:96:78:7f:35:83:d6:42:28:
                    f2:1d:1c:28:ab:ad:28:43:94:71:12:ce:1c:6f:52:
                    10:e4:07:e3:12:f5:70:23:3c:7a:5b:20:58:d7:f1:
                    92:1b:66:f3:02:3d:fd:5a:81:00:24:a8:7d:08:62:
                    6c:52:c9:b5:a6:dd:0b:32:e1:ee:e8:44:74:41:a7:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:84:76:F8:7A:42:6A:E7:33:71:68:03:CD:ED:59:BC:12:0C:36
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:16:8d:1b:85:6f:d0:c2:16:a2:ee:50:56:23:e3:da:8f:64:
         91:27:1a:3b:89:ee:d2:9d:45:c9:1b:7d:bb:74:18:f4:59:9c:
         17:5a:b3:64:9c:47:62:44:59:8e:52:45:dc:ef:c1:e7:10:73:
         96:c3:d9:df:90:f8:26:fd:1a:ab:8b:f1:7e:24:fb:52:c7:e6:
         e2:1a:ba:18:47:45:c2:61:05:b2:00:5c:35:04:96:48:ab:14:
         22:90:25:75:3d:e6:82:37:f2:c1:47:71:33:dd:d8:b9:aa:b8:
         6c:a5:b4:a8:10:60:a4:7c:b1:94:37:23:bf:4c:ae:72:7e:97:
         d5:0a:f4:5f:48:cd:97:d2:9a:a8:84:76:0d:56:aa:93:22:16:
         2a:f5:99:8a:87:5c:c3:f1:f3:9d:c1:d0:9e:a1:be:81:90:97:
         3b:b9:17:f6:9c:a2:9c:5c:fc:16:ac:a9:06:44:5a:92:7f:17:
         95:ec:02:73:27:50:6b:29:ec:19:2d:e1:e5:ef:db:45:21:7d:
         99:d8:8b:fe:ce:bd:80:fb:63:88:21:44:37:f3:0a:06:09:1d:
         ad:71:20:99:f9:e1:08:73:dd:fd:ab:5e:9a:70:1e:9e:00:f9:
         7e:4c:2c:ff:03:dc:e4:55:2f:e5:c2:d9:aa:9a:3f:3b:8b:e8:
         2d:d1:c6:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe4svRLevLoFOd5vod+v6WIDysGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB
QjlENzNDODAeFw0yNTA2MTExMDMzNDVaFw0yNTA2MTIxNDM3NDVaMDMxMTAvBgNV
BAMTKEFFNjE4NDc2Rjg3QTQyNkFFNzMzNzE2ODAzQ0RFRDU5QkMxMjBDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY3epgjqfGEwj4DlUF/Xn4Dlw
UfjDfJnbeV7U/MIZYP6iKmJEQELJnr4KeFLdbrBkNif8PSjBqWlX8TmePd/N3d4v
C/gDOk7Xb6cWv0SW2Q1MltOA9z7RytZekYE5gvrHiNuYYWAHV9TpRz2bV/4eP05h
LC0cdfoszzp7y+iApHtgZ+V4fHB8T+9glhPKf8McmJcMlTmoZsO5SZzVtfjJsjMV
ifw/pFXmm1Gy1I2zgxh+DN9C5crXhjmWeH81g9ZCKPIdHCirrShDlHESzhxvUhDk
B+MS9XAjPHpbIFjX8ZIbZvMCPf1agQAkqH0IYmxSybWm3Qsy4e7oRHRBp7GVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrmGEdvh6QmrnM3FoA83tWbwSDDYwHwYDVR0j
BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ
RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD
MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQRzEvMC9B
ODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQhaNG4Vv0MIWou5QViPj2o9kkScaO4nu0p1FyRt9u3QY9FmcF1qzZJxHYkRZ
jlJF3O/B5xBzlsPZ35D4Jv0aq4vxfiT7Usfm4hq6GEdFwmEFsgBcNQSWSKsUIpAl
dT3mgjfywUdxM93Yuaq4bKW0qBBgpHyxlDcjv0yucn6X1Qr0X0jNl9KaqIR2DVaq
kyIWKvWZiodcw/HzncHQnqG+gZCXO7kX9pyinFz8FqypBkRakn8XlewCcydQayns
GS3h5e/bRSF9mdiL/s69gPtjiCFEN/MKBgkdrXEgmfnhCHPd/atemnAengD5fkws
/wPc5FUv5cLZqpo/O4voLdHGkQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:05:10 2025 by rpki-client