Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
File:                     864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json)
Hash identifier:          Ld9gLay6XP5KumjtKLfpf7a3Re6frHY3DdDDaR0qBas=
Subject key identifier:   8A:F1:03:83:1C:D9:5D:4E:6F:91:71:10:9B:CF:02:71:FA:EA:C5:3C
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Certificate issuer:       /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial:       1E46126CEBB55F62781EEBF5D2CBE00F6B841A1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
Manifest number:          A8
Signing time:             Mon 09 Jun 2025 18:13:51 +0000
Manifest this update:     Mon 09 Jun 2025 18:08:51 +0000
Manifest next update:     Tue 10 Jun 2025 19:56:51 +0000
Files and hashes:         1: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: h5wiMdhxxhKSJhThtO9izAKD+kHV57sLnEeAoQx2kf0=)
                          2: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=)
                          3: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=)
                          4: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:12:6c:eb:b5:5f:62:78:1e:eb:f5:d2:cb:e0:0f:6b:84:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
        Validity
            Not Before: Jun  9 18:08:51 2025 GMT
            Not After : Jun 10 19:56:51 2025 GMT
        Subject: CN=8AF103831CD95D4E6F9171109BCF0271FAEAC53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:ac:ab:5f:3e:80:e5:7d:bb:f2:a9:09:64:
                    98:3b:29:b4:46:59:0d:4b:85:e0:92:29:5a:d4:b2:
                    70:15:e7:00:d3:32:c7:c1:05:2c:ff:f7:44:fa:3a:
                    a4:ae:f0:4e:6d:ef:18:62:fa:a9:29:a4:6e:7a:a0:
                    bf:00:2b:37:4c:e3:db:d5:a7:ae:5b:c6:dc:28:55:
                    8d:dd:9d:dd:77:08:1b:80:ce:f7:ba:4f:f0:7b:cc:
                    16:51:b1:8a:71:40:b1:b7:97:5e:c0:3c:7f:9f:3a:
                    10:46:3a:38:3f:26:be:ee:92:4f:a0:38:2e:09:5c:
                    99:3c:35:f0:ed:02:f5:c1:d8:09:d3:59:f6:65:24:
                    2d:59:f1:40:0c:9b:10:07:03:78:9a:b1:0f:53:01:
                    84:f3:a1:c0:b7:05:99:9b:e0:cd:06:6f:2f:80:48:
                    ea:9c:cf:2f:b6:01:ea:15:0a:dd:7c:be:e5:20:d8:
                    8e:d2:82:a5:86:3c:3b:77:d1:48:c4:4a:2f:a9:d3:
                    d1:3e:4c:4b:a6:19:1d:d8:04:65:96:15:d0:f5:d9:
                    d0:53:f0:42:b8:ff:03:52:44:fb:64:84:6b:52:03:
                    c4:8b:e3:e6:b6:7e:ea:7e:72:07:76:1e:90:86:d3:
                    16:b2:46:53:c2:d6:e5:ff:25:e8:d6:dc:0f:3b:ab:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F1:03:83:1C:D9:5D:4E:6F:91:71:10:9B:CF:02:71:FA:EA:C5:3C
            X509v3 Authority Key Identifier:
                keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:9f:90:03:1a:43:73:b9:be:ae:7d:f2:c6:52:45:ad:8f:
         65:27:54:7e:17:51:f5:31:90:2c:2a:ed:b8:bd:a6:e5:5d:88:
         09:4b:99:f6:b3:5d:df:93:c9:00:ec:1d:3d:38:f1:56:7f:26:
         f5:d3:76:5c:18:83:c7:1c:78:08:96:e9:b3:29:9e:9d:6e:8a:
         43:6c:e6:29:4a:ad:84:4f:cc:05:b6:84:dd:1a:78:d5:97:9e:
         ca:bb:b2:89:1b:d8:99:f0:8f:e6:f4:f0:22:fb:5d:16:41:92:
         17:f9:29:94:d1:cb:28:0c:c2:7e:07:73:34:e6:8e:73:59:13:
         0d:68:21:2a:47:7f:d1:7d:9e:a1:c6:f8:fa:54:38:94:4a:db:
         04:35:d6:a6:10:a6:37:c2:da:43:21:9c:74:5f:09:e1:cf:20:
         25:d5:ba:1d:82:a2:d2:b4:01:0b:98:08:d9:62:94:fa:34:0e:
         8c:52:e0:29:2b:30:b5:d7:48:31:ec:ee:0c:51:3a:d9:e1:b3:
         94:d8:53:d2:aa:77:47:c5:ef:20:0f:e3:9e:96:37:0e:4c:be:
         6f:22:e0:c4:d5:3b:cd:29:5d:7f:e6:94:84:c9:66:d7:ab:bd:
         b2:eb:3e:07:37:6d:d2:c2:fb:bd:5c:a3:f5:6c:32:f8:de:ea:
         75:03:c0:5f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUHkYSbOu1X2J4Huv10svgD2uEGhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2
NEQ4QUI1OTAeFw0yNTA2MDkxODA4NTFaFw0yNTA2MTAxOTU2NTFaMDMxMTAvBgNV
BAMTKDhBRjEwMzgzMUNEOTVENEU2RjkxNzExMDlCQ0YwMjcxRkFFQUM1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh6yrXz6A5X278qkJZJg7KbRG
WQ1LheCSKVrUsnAV5wDTMsfBBSz/90T6OqSu8E5t7xhi+qkppG56oL8AKzdM49vV
p65bxtwoVY3dnd13CBuAzve6T/B7zBZRsYpxQLG3l17APH+fOhBGOjg/Jr7ukk+g
OC4JXJk8NfDtAvXB2AnTWfZlJC1Z8UAMmxAHA3iasQ9TAYTzocC3BZmb4M0Gby+A
SOqczy+2AeoVCt18vuUg2I7SgqWGPDt30UjESi+p09E+TEumGR3YBGWWFdD12dBT
8EK4/wNSRPtkhGtSA8SL4+a2fup+cgd2HpCG0xayRlPC1uX/JejW3A87q6mHAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUivEDgxzZXU5vkXEQm88CcfrqxTwwHwYDVR0j
BBgwFoAUhkvLER/79xoXlIDH3Xf8xmTYq1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xOWc2QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8x
LzAvODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2NEQ4QUI1OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjRCQ0IxMTFGRkJGNzFBMTc5
NDgwQzdERDc3RkNDNjY0RDhBQjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E5
ZzZBUVVWZVVkaFlKUURUZjgxcWNTZUpqbkNNS29mWDE0MUdSREVtbzEvMC84NjRC
Q0IxMTFGRkJGNzFBMTc5NDgwQzdERDc3RkNDNjY0RDhBQjU5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
iMyfkAMaQ3O5vq598sZSRa2PZSdUfhdR9TGQLCrtuL2m5V2ICUuZ9rNd35PJAOwd
PTjxVn8m9dN2XBiDxxx4CJbpsymenW6KQ2zmKUqthE/MBbaE3Rp41ZeeyruyiRvY
mfCP5vTwIvtdFkGSF/kplNHLKAzCfgdzNOaOc1kTDWghKkd/0X2eocb4+lQ4lErb
BDXWphCmN8LaQyGcdF8J4c8gJdW6HYKi0rQBC5gI2WKU+jQOjFLgKSswtddIMezu
DFE62eGzlNhT0qp3R8XvIA/jnpY3Dky+byLgxNU7zSldf+aUhMlm16u9sus+Bzdt
0sL7vVyj9Wwy+N7qdQPAXw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:47:44 2025 by rpki-client