Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
File:                     9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft (raw, json)
Hash identifier:          /2QzNjBkLlRQmQaVEge+otpcdZZsBImS0nw7bHXjuj0=
Subject key identifier:   3C:9B:A5:64:FA:96:6F:48:11:A3:D7:43:FC:06:55:3B:EA:D6:83:FA
Authority key identifier: 9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47
Certificate issuer:       /CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
Certificate serial:       2480A74D38FA5EAC60FA42A8BCBC391731956FD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
Manifest number:          021D
Signing time:             Wed 20 Aug 2025 07:13:21 +0000
Manifest this update:     Wed 20 Aug 2025 07:08:21 +0000
Manifest next update:     Thu 21 Aug 2025 07:53:21 +0000
Files and hashes:         1: 3230302e3130362e3137362e302f32322d3332203d3e20323731323632.roa (hash: kWIHzD0y5GXw8oi2jQKsjvmzMk3ObH8EiiM16pmOXtA=)
                          2: 323830343a373862633a3a2f33322d313238203d3e20323731323632.roa (hash: W8hsSOKjJTpzYWQXdLpDwkH1spfBNRqGKdniteFHpVU=)
                          3: 9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl (hash: hIJOOXsdowbaB2I79gFbRTbD/NhHAUEgdMxNVd2hEys=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 07:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:80:a7:4d:38:fa:5e:ac:60:fa:42:a8:bc:bc:39:17:31:95:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E17AE12E54FEC7BF015C94EBD811062D85D7047
        Validity
            Not Before: Aug 20 07:08:21 2025 GMT
            Not After : Aug 21 07:53:21 2025 GMT
        Subject: CN=3C9BA564FA966F4811A3D743FC06553BEAD683FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:d4:38:1c:ff:46:af:58:71:05:36:bc:44:
                    b8:1c:64:20:d9:7f:e1:09:49:48:1f:44:95:b6:8b:
                    72:07:15:1d:55:27:5e:50:1b:dc:87:ab:d5:fe:86:
                    40:7d:a5:29:ca:60:29:3f:f8:c8:a7:42:ea:dd:ab:
                    c3:19:50:02:1a:88:2c:41:d9:2c:d8:07:92:ae:cc:
                    13:8b:ba:e5:41:3f:c7:ba:a6:9b:b0:66:ec:4b:b5:
                    6b:44:8b:9a:7d:02:10:48:33:33:6a:72:63:84:d2:
                    46:f5:69:7c:24:49:7a:53:d6:67:84:96:a5:77:2d:
                    ed:83:98:ac:0e:16:a8:b3:67:00:f7:7f:bb:0a:56:
                    a0:cc:4c:f6:b5:42:2c:af:5a:62:e0:62:46:00:10:
                    3b:7c:43:35:8e:b0:c0:19:14:f4:11:c0:fe:c0:6e:
                    c0:04:de:4f:f0:84:79:90:65:1c:0f:d9:d5:9c:6a:
                    02:ed:f5:be:c2:e8:8c:13:38:57:3e:8d:d3:25:53:
                    25:ae:88:f5:cf:74:3a:cb:47:2d:2f:b2:f3:3b:46:
                    44:2b:f3:e6:8d:81:a6:96:38:1f:37:98:85:ea:d3:
                    e7:25:7f:bd:26:6c:66:84:5c:88:64:2f:12:c3:be:
                    b5:a8:f4:7a:ca:79:8a:54:f9:0b:f5:d5:e7:03:04:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9B:A5:64:FA:96:6F:48:11:A3:D7:43:FC:06:55:3B:EA:D6:83:FA
            X509v3 Authority Key Identifier:
                keyid:9E:17:AE:12:E5:4F:EC:7B:F0:15:C9:4E:BD:81:10:62:D8:5D:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E17AE12E54FEC7BF015C94EBD811062D85D7047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/9E17AE12E54FEC7BF015C94EBD811062D85D7047.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:68:2e:5a:5b:70:6a:2f:63:8d:40:5e:4c:ac:cb:4d:30:
         c7:37:81:6b:7e:7c:84:7a:70:83:59:2f:4f:b0:3a:37:8d:7c:
         be:6e:ac:47:83:2a:97:89:cb:24:1f:05:67:44:b9:74:23:19:
         63:33:c6:64:ba:cb:2b:7a:a6:75:a9:19:3f:e6:6e:29:70:e5:
         5d:a4:62:e2:9c:91:30:d6:b3:2d:e9:0d:c3:b6:1e:e2:96:ca:
         bf:cc:4f:1d:b6:32:54:c2:3b:0f:3e:a1:76:62:c2:c8:53:50:
         c2:6b:7a:82:ee:93:26:1a:64:c6:6a:21:ec:5d:2d:74:f9:79:
         a0:ac:f1:88:3a:59:4e:61:1f:ee:48:d3:ca:17:b6:9d:fd:77:
         bb:7e:05:a1:01:f7:e2:c0:15:50:55:ec:10:58:50:6e:ca:2a:
         f5:f4:2b:6d:1e:19:ef:c1:67:8e:5a:21:90:e2:2d:a4:86:53:
         71:1d:1d:49:56:90:7b:69:d3:df:64:55:cb:cc:e5:ad:54:4d:
         dd:dc:33:65:98:c8:bd:66:1b:fd:f5:9b:16:57:3b:ec:5a:ae:
         43:9a:7d:eb:cc:4b:b4:1c:5c:18:c6:a5:0d:e3:a1:7f:26:5b:
         48:a8:17:2a:e3:67:cd:a0:ca:54:d8:8e:c7:3b:7e:a2:48:69:
         98:1e:13:a1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUJICnTTj6Xqxg+kKovLw5FzGVb9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUxN0FFMTJFNTRGRUM3QkYwMTVDOTRFQkQ4MTEwNjJE
ODVENzA0NzAeFw0yNTA4MjAwNzA4MjFaFw0yNTA4MjEwNzUzMjFaMDMxMTAvBgNV
BAMTKDNDOUJBNTY0RkE5NjZGNDgxMUEzRDc0M0ZDMDY1NTNCRUFENjgzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9dQ4HP9Gr1hxBTa8RLgcZCDZ
f+EJSUgfRJW2i3IHFR1VJ15QG9yHq9X+hkB9pSnKYCk/+MinQurdq8MZUAIaiCxB
2SzYB5KuzBOLuuVBP8e6ppuwZuxLtWtEi5p9AhBIMzNqcmOE0kb1aXwkSXpT1meE
lqV3Le2DmKwOFqizZwD3f7sKVqDMTPa1QiyvWmLgYkYAEDt8QzWOsMAZFPQRwP7A
bsAE3k/whHmQZRwP2dWcagLt9b7C6IwTOFc+jdMlUyWuiPXPdDrLRy0vsvM7RkQr
8+aNgaaWOB83mIXq0+clf70mbGaEXIhkLxLDvrWo9HrKeYpU+Qv11ecDBD5BAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUPJulZPqWb0gRo9dD/AZVO+rWg/owHwYDVR0j
BBgwFoAUnheuEuVP7HvwFclOvYEQYthdcEcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mWGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZ
LzAvOUUxN0FFMTJFNTRGRUM3QkYwMTVDOTRFQkQ4MTEwNjJEODVENzA0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85RTE3QUUxMkU1NEZFQzdCRjAx
NUM5NEVCRDgxMTA2MkQ4NUQ3MDQ3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZY
aTVVOTRIeDhqbmZjQ1Q4SDNNeVFxYVl0Slltckt4MkdtQzc0Ym9NdFkvMC85RTE3
QUUxMkU1NEZFQzdCRjAxNUM5NEVCRDgxMTA2MkQ4NUQ3MDQ3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
lvJoLlpbcGovY41AXkysy00wxzeBa358hHpwg1kvT7A6N418vm6sR4Mql4nLJB8F
Z0S5dCMZYzPGZLrLK3qmdakZP+ZuKXDlXaRi4pyRMNazLekNw7Ye4pbKv8xPHbYy
VMI7Dz6hdmLCyFNQwmt6gu6TJhpkxmoh7F0tdPl5oKzxiDpZTmEf7kjTyhe2nf13
u34FoQH34sAVUFXsEFhQbsoq9fQrbR4Z78FnjlohkOItpIZTcR0dSVaQe2nT32RV
y8zlrVRN3dwzZZjIvWYb/fWbFlc77FquQ5p968xLtBxcGMalDeOhfyZbSKgXKuNn
zaDKVNiOxzt+okhpmB4ToQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 16:16:03 2025 by rpki-client