Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          OsPhup+kBP5LjmcEkpcwBE3+GvtLMHHWW25VxHpLx1Y=
Subject key identifier:   C0:ED:AB:72:44:FA:6D:81:9B:2D:E1:E8:6F:03:43:0D:66:97:FE:D3
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       4996E2ED2D22AB5364964E9D2C9F25257442622D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          0237
Signing time:             Tue 03 Jun 2025 16:58:52 +0000
Manifest this update:     Tue 03 Jun 2025 16:53:52 +0000
Manifest next update:     Wed 04 Jun 2025 18:41:52 +0000
Files and hashes:         1: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=)
                          2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: ozmmLKbFMLrF/zgdNNsqQLol8xZvSm/ngOSql6cnQ8M=)
                          3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 18:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:e2:ed:2d:22:ab:53:64:96:4e:9d:2c:9f:25:25:74:42:62:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Jun  3 16:53:52 2025 GMT
            Not After : Jun  4 18:41:52 2025 GMT
        Subject: CN=C0EDAB7244FA6D819B2DE1E86F03430D6697FED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:b3:43:ae:a8:51:b4:c5:58:4e:8a:7e:ca:
                    74:e6:ef:28:f1:70:b0:ec:6f:c9:3d:e0:60:41:a6:
                    e3:ba:61:2e:bb:e2:a9:51:f1:25:0a:79:5e:7b:99:
                    d2:1f:0b:f8:67:b3:69:2a:a0:75:42:c9:56:39:72:
                    6a:d6:d3:c1:87:96:4e:91:7b:35:0d:a4:e8:06:52:
                    7b:ea:95:2a:3b:c3:5c:8c:23:64:38:9d:b4:d6:da:
                    49:df:da:a8:88:0f:aa:10:b7:ab:42:4d:01:fa:69:
                    9c:cc:b7:2f:bb:96:76:1e:b4:c8:62:2b:53:a8:5d:
                    a0:91:f9:8a:d0:a4:95:71:8b:6e:a5:0b:56:e2:ae:
                    54:89:0a:88:43:8d:1c:e9:cc:a5:53:06:da:00:d8:
                    dc:a8:c0:97:8b:ec:41:f1:11:97:d9:07:e7:7a:1e:
                    51:02:7f:e8:11:38:2a:77:11:3c:6c:b4:59:31:33:
                    d4:72:1b:8a:60:67:13:17:72:47:09:06:0e:6c:04:
                    a5:e1:04:a2:d4:bb:03:a4:86:0e:1b:4a:42:2d:47:
                    46:cb:99:88:af:b9:ea:68:c7:55:98:7b:4f:67:b9:
                    79:cf:26:4b:3b:c0:9a:8d:f0:c4:c2:d1:78:34:d3:
                    34:98:44:c5:59:75:eb:62:9f:27:0c:04:a7:44:90:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:AB:72:44:FA:6D:81:9B:2D:E1:E8:6F:03:43:0D:66:97:FE:D3
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:51:7e:89:db:07:49:7b:6d:7c:3e:c7:f7:39:7f:7d:2a:
         37:e4:50:46:bf:2c:65:9e:dd:46:d5:54:6b:7e:97:8f:6a:cf:
         a3:c9:bd:18:77:b3:28:de:05:f1:a1:df:05:c1:89:6d:2b:f0:
         b9:67:9a:7e:de:6d:a2:c0:be:ca:9c:3e:1d:42:45:2b:65:c9:
         f0:79:ff:47:61:c2:2d:b8:ce:ae:33:3a:01:a3:4e:f2:c2:ab:
         e0:17:f1:5a:a9:c4:f1:8a:8e:5a:4f:0b:fe:91:58:13:ba:0b:
         56:c8:98:6c:21:d7:10:46:63:29:9e:5c:82:f5:e0:ab:74:ed:
         dc:28:5a:86:da:c6:22:ca:68:a8:0d:94:da:2e:35:cf:a1:aa:
         cd:55:9c:b0:84:23:b1:08:16:f5:3d:d8:57:78:e6:0c:16:2e:
         24:6e:c3:42:42:56:49:75:3d:87:cc:b6:81:08:ef:fc:68:cd:
         5a:ec:d7:8c:e6:73:a2:f2:9b:a7:2b:36:80:2e:22:ed:5e:4f:
         e8:ae:b4:77:cb:0d:d5:f8:09:d2:9e:26:aa:28:00:b0:ea:3c:
         fc:a1:46:30:2b:15:ce:a6:d2:5a:13:8f:15:c4:8e:1e:cd:90:
         f4:5d:5b:54:9f:4e:ab:a4:10:fe:a3:51:3c:4d:f7:60:46:9c:
         10:ff:5a:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSZbi7S0iq1Nklk6dLJ8lJXRCYi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC
MkI0MjJERjAeFw0yNTA2MDMxNjUzNTJaFw0yNTA2MDQxODQxNTJaMDMxMTAvBgNV
BAMTKEMwRURBQjcyNDRGQTZEODE5QjJERTFFODZGMDM0MzBENjY5N0ZFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQrNDrqhRtMVYTop+ynTm7yjx
cLDsb8k94GBBpuO6YS674qlR8SUKeV57mdIfC/hns2kqoHVCyVY5cmrW08GHlk6R
ezUNpOgGUnvqlSo7w1yMI2Q4nbTW2knf2qiID6oQt6tCTQH6aZzMty+7lnYetMhi
K1OoXaCR+YrQpJVxi26lC1birlSJCohDjRzpzKVTBtoA2NyowJeL7EHxEZfZB+d6
HlECf+gROCp3ETxstFkxM9RyG4pgZxMXckcJBg5sBKXhBKLUuwOkhg4bSkItR0bL
mYivuepox1WYe09nuXnPJks7wJqN8MTC0Xg00zSYRMVZdetinycMBKdEkIyhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwO2rckT6bYGbLeHobwNDDWaX/tMwHwYDVR0j
BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy
UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4
QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C
OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPrJRfonbB0l7bXw+x/c5f30qN+RQRr8sZZ7dRtVUa36Xj2rPo8m9GHezKN4F
8aHfBcGJbSvwuWeaft5tosC+ypw+HUJFK2XJ8Hn/R2HCLbjOrjM6AaNO8sKr4Bfx
WqnE8YqOWk8L/pFYE7oLVsiYbCHXEEZjKZ5cgvXgq3Tt3ChahtrGIspoqA2U2i41
z6GqzVWcsIQjsQgW9T3YV3jmDBYuJG7DQkJWSXU9h8y2gQjv/GjNWuzXjOZzovKb
pys2gC4i7V5P6K60d8sN1fgJ0p4mqigAsOo8/KFGMCsVzqbSWhOPFcSOHs2Q9F1b
VJ9Oq6QQ/qNRPE33YEacEP9aPw==
-----END CERTIFICATE-----
Generated at Wed Jun 4 10:15:16 2025 by rpki-client