Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
File:                     24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft (raw, json)
Hash identifier:          xN+pdzaXbcqu6PqVjv786hic2cZT1jmVGasXk03uiD0=
Subject key identifier:   F3:8B:C3:3B:01:6D:A5:B8:1E:78:A2:14:7A:41:36:22:45:D9:12:9A
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       0D8C4CE57F62D288BD3A3700BE917D0E8FA7DB9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
Manifest number:          022E
Signing time:             Wed 11 Jun 2025 13:05:52 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:52 +0000
Manifest next update:     Thu 12 Jun 2025 16:54:52 +0000
Files and hashes:         1: 323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (hash: aoSEe9vgZrtfcwTR0oWLHW8rJL7zCJXvVWuuSVGzvNY=)
                          2: 24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl (hash: FiveBWyw35n0AhintEmiocGLXqhZe7fRu1COdeFRS08=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 16:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:4c:e5:7f:62:d2:88:bd:3a:37:00:be:91:7d:0e:8f:a7:db:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Jun 11 13:00:52 2025 GMT
            Not After : Jun 12 16:54:52 2025 GMT
        Subject: CN=F38BC33B016DA5B81E78A2147A41362245D9129A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:3e:f7:9e:d5:71:3d:63:ce:e1:6d:c8:6f:
                    35:dd:55:6d:df:43:db:62:64:44:53:c9:26:2d:4c:
                    e0:3e:75:1b:35:0c:0d:16:66:71:88:d3:41:b1:64:
                    16:87:e8:92:c0:f4:2e:f8:c4:88:0a:25:29:47:32:
                    be:a4:37:e0:12:34:de:74:0a:04:f7:c2:61:e6:f2:
                    6e:a2:b3:86:e6:9b:08:e0:1a:d5:5d:c3:ed:6b:77:
                    7e:01:ff:0d:7f:62:8c:3f:f6:3d:ce:c3:4e:03:bf:
                    d5:6a:d7:48:d7:5b:d4:dc:c7:78:4f:b0:fe:d7:c3:
                    8b:b7:0e:ac:0e:46:d3:f7:3e:f7:24:61:47:4b:6b:
                    22:e7:53:6f:28:57:61:29:d1:4a:56:7c:32:fc:6d:
                    88:1d:f6:4d:5a:2c:1c:03:f2:ec:b2:24:67:37:17:
                    3f:a3:4c:ae:63:5f:b3:c0:eb:c9:14:bf:39:e8:a5:
                    74:f0:f3:60:59:42:11:f2:92:f7:3d:18:9b:d6:f9:
                    f6:e4:94:7e:50:89:41:97:61:3c:a0:49:fc:c7:0c:
                    89:a2:db:3e:98:e6:e6:22:75:00:fe:e4:6b:d5:b1:
                    dc:94:ff:fa:03:e2:92:01:85:e6:5d:94:e5:f0:cd:
                    f0:22:7f:ec:0a:06:25:c4:57:f1:ec:e7:00:04:6f:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:C3:3B:01:6D:A5:B8:1E:78:A2:14:7A:41:36:22:45:D9:12:9A
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:15:76:3f:08:88:e0:40:cd:39:d3:25:96:a7:7d:db:a5:76:
         5d:15:d8:e7:21:a3:80:3d:c4:ca:de:cc:0d:49:dd:db:3a:e7:
         8a:e5:63:aa:fa:d7:b5:2a:ae:d6:56:e4:f9:85:10:f4:1e:14:
         8a:f3:ed:7a:df:25:80:22:cd:db:48:cd:da:ad:2a:4c:68:7c:
         57:d3:b2:71:6c:29:ec:cf:dd:c3:b5:dd:ac:02:7c:db:a1:d7:
         49:68:ea:d2:4e:d3:30:a5:f7:e2:3b:84:73:dd:56:4a:6c:d1:
         c7:c4:9d:8b:13:6f:ed:03:e2:ce:d3:76:98:f6:c9:f3:04:f4:
         02:21:5d:0d:d5:35:96:a8:b3:3e:2a:20:89:97:f8:b3:8b:7b:
         9b:11:8a:39:75:d2:af:fd:f0:56:8d:fd:c0:86:46:71:0f:d3:
         f9:28:8f:e2:9f:02:2f:63:ed:50:a2:83:52:2e:82:ea:49:c8:
         78:9a:9c:3b:fd:c4:4d:50:7e:fc:27:10:b0:48:d0:91:14:a1:
         c9:e7:28:3e:7f:c4:cb:8b:c6:3a:85:48:1d:cc:82:4f:2a:0b:
         7b:30:6d:25:cd:84:d1:d5:5a:a9:55:4e:b3:7a:85:f8:30:7b:
         b6:5e:7e:12:36:2e:5e:0d:e5:ad:da:ec:db:11:25:ab:92:76:
         e5:e6:07:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDYxM5X9i0oi9OjcAvpF9Do+n258wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyMjA3NzZBM0ZDRTA4MzhCMkYyNjlFQjBBQjQ3M0Uw
NUQ1OUNCRDAeFw0yNTA2MTExMzAwNTJaFw0yNTA2MTIxNjU0NTJaMDMxMTAvBgNV
BAMTKEYzOEJDMzNCMDE2REE1QjgxRTc4QTIxNDdBNDEzNjIyNDVEOTEyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVj73ntVxPWPO4W3IbzXdVW3f
Q9tiZERTySYtTOA+dRs1DA0WZnGI00GxZBaH6JLA9C74xIgKJSlHMr6kN+ASNN50
CgT3wmHm8m6is4bmmwjgGtVdw+1rd34B/w1/Yow/9j3Ow04Dv9Vq10jXW9Tcx3hP
sP7Xw4u3DqwORtP3PvckYUdLayLnU28oV2Ep0UpWfDL8bYgd9k1aLBwD8uyyJGc3
Fz+jTK5jX7PA68kUvznopXTw82BZQhHykvc9GJvW+fbklH5QiUGXYTygSfzHDImi
2z6Y5uYidQD+5GvVsdyU//oD4pIBheZdlOXwzfAif+wKBiXEV/Hs5wAEb0htAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU84vDOwFtpbgeeKIUekE2IkXZEpowHwYDVR0j
BBgwFoAUJCIHdqP84IOLLyaesKtHPgXVnL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO
SFMvMC8yNDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjIwNzc2QTNGQ0UwODM4
QjJGMjY5RUIwQUI0NzNFMDVENTlDQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejROSFMvMC8y
NDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQRV2PwiI4EDNOdMllqd926V2XRXY5yGjgD3Eyt7MDUnd2zrniuVjqvrXtSqu
1lbk+YUQ9B4UivPtet8lgCLN20jN2q0qTGh8V9OycWwp7M/dw7XdrAJ826HXSWjq
0k7TMKX34juEc91WSmzRx8SdixNv7QPiztN2mPbJ8wT0AiFdDdU1lqizPiogiZf4
s4t7mxGKOXXSr/3wVo39wIZGcQ/T+SiP4p8CL2PtUKKDUi6C6knIeJqcO/3ETVB+
/CcQsEjQkRShyecoPn/Ey4vGOoVIHcyCTyoLezBtJc2E0dVaqVVOs3qF+DB7tl5+
EjYuXg3lrdrs2xElq5J25eYHew==
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:24:42 2025 by rpki-client