Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
File:                     1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft (raw, json)
Hash identifier:          hpHkP08idXkATLjFFhhsliakXuaFC4xydycffSuURN4=
Subject key identifier:   A9:DF:E1:19:80:7E:36:1D:EF:D9:A3:32:BA:96:BD:C5:C8:74:19:79
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       0D97EEB3B1AFB3D39B364B463C5B45F91C56BF1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
Manifest number:          A3
Signing time:             Sat 23 Aug 2025 07:59:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:54:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:14 +0000
Files and hashes:         1: 3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (hash: V/0e23g4mjw9fBs5NjpiXMcIILnanWNLg+Rr6mYaNQ0=)
                          2: 323830343a333334303a3a2f33322d3332203d3e20323635333834.roa (hash: d8VAoWUY5TmzMwGAEnwx6MTRMWFCKtL20+YRiAqZTLQ=)
                          3: 3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa (hash: lr1AQk1lsKg0hRF6wOH9PxXUn0vwVQ518r+73GZL5SI=)
                          4: 323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa (hash: 30AeDq24sFYojOHE89VgPbqo17sbWT2MSYgswi/Ey0U=)
                          5: 323830343a333334303a626230303a3a2f34382d3438203d3e20323635333834.roa (hash: KVu7BWA6lXL2b/fgPF/llndpELv/wWkWLmloLx1QiaM=)
                          6: 3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa (hash: OnaHjVE8LBR+ViTWscLt/2ylgBhkQCooiBqyUxk/8xE=)
                          7: 323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa (hash: 2Gp4yCPlfzwBFqMfG75vKSfVi1qR5c1yyT7dGcLefOE=)
                          8: 3137302e3235342e3234302e302f32322d3232203d3e20323635333834.roa (hash: 3sA6ZP7lORiCotXcfIM6SVmG6TQ1Wgc/zSF931trJR4=)
                          9: 1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl (hash: G6UjTeK553392iGCD99p02tm+yYHxie60s4sfbnSkGM=)
                          10: 3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa (hash: 48k3BtNnutIT2T8u6Oc7twqZjyUY3slO/gMps199O4I=)
                          11: 323830343a333334303a616161613a3a2f34382d3438203d3e20323635333834.roa (hash: CIJa7mf8FndUfmNr9ttE78g8UiYImIP8SIR3k8s5Azc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:97:ee:b3:b1:af:b3:d3:9b:36:4b:46:3c:5b:45:f9:1c:56:bf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Aug 23 07:54:14 2025 GMT
            Not After : Aug 24 10:01:14 2025 GMT
        Subject: CN=A9DFE119807E361DEFD9A332BA96BDC5C8741979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:42:fc:a9:a0:b4:8e:1f:79:75:c0:14:31:
                    24:e6:09:27:5a:51:30:fe:ae:49:34:c9:de:6e:ea:
                    b2:68:3b:0a:1a:56:c9:01:9d:33:17:eb:47:e4:3a:
                    10:ab:e4:bd:c9:13:fe:fb:60:87:28:81:73:c9:0b:
                    3e:7a:d5:3c:e0:eb:ce:ab:d8:86:be:7c:f3:33:ea:
                    93:f0:c4:99:60:cb:54:b8:54:b3:a6:39:1d:99:40:
                    24:8e:cd:b0:a3:10:5d:da:2e:f7:17:f1:01:27:d7:
                    56:a4:b6:7a:ad:e8:da:04:9c:aa:58:b1:e0:89:da:
                    c6:3d:49:3f:a7:e6:ee:23:d7:49:81:9f:e8:33:5d:
                    65:11:d6:09:9a:52:4e:a0:dd:e5:97:96:68:1e:c2:
                    99:71:4e:04:42:f2:77:ab:0c:95:d2:2a:6c:6b:82:
                    39:3c:3e:18:8d:c5:e3:34:2b:76:f0:1a:73:e9:91:
                    f5:f7:98:f9:91:a4:5b:ea:28:9e:1a:c2:72:2f:27:
                    19:83:c4:23:42:dd:57:05:7d:fe:ff:0b:15:3e:10:
                    ef:05:0f:df:8f:c4:42:72:59:24:b7:d9:9e:a3:96:
                    2f:da:35:47:69:14:f8:01:bf:c4:7b:df:3a:5b:5e:
                    bc:51:48:bb:93:6d:47:57:6c:fa:d0:bd:fa:ea:76:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DF:E1:19:80:7E:36:1D:EF:D9:A3:32:BA:96:BD:C5:C8:74:19:79
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:56:48:6a:cc:ca:94:bc:36:c9:ae:ea:58:6e:1d:b2:ca:
         f1:ca:bf:4d:75:d8:c1:a6:cf:fa:e9:66:ed:f4:0e:cd:03:5c:
         3b:1c:bc:8d:62:ef:d4:3b:de:e7:70:1a:8f:ae:05:2b:ab:44:
         8c:82:e0:a2:9b:26:a5:c2:cd:ef:7e:fa:1b:05:78:84:fb:bf:
         31:d3:fe:8d:f7:4c:1a:3b:4b:f3:f7:c0:ae:5e:c2:63:7a:4c:
         23:64:fd:48:81:99:51:21:4e:bf:78:b1:9d:7e:e0:93:68:26:
         44:18:c2:d5:46:a7:0d:17:71:ff:90:51:19:85:f1:2f:42:31:
         4f:1c:bb:08:59:44:b3:c2:66:3d:2d:a2:ee:77:ec:1e:38:01:
         0e:dc:14:6b:c5:fe:d2:fc:7e:77:6f:bd:4c:67:64:3f:1b:0e:
         cf:b5:03:ce:ce:3d:90:a1:9e:70:cb:b6:54:0e:c5:8a:d4:8c:
         44:7e:c6:25:5c:3b:76:e5:82:b7:64:d4:bb:83:25:45:9f:38:
         f5:35:c1:9c:1f:f8:ad:6f:5d:0b:9b:c6:a0:e9:cc:97:2e:81:
         93:b1:82:7b:dc:f9:17:d1:0f:12:de:4e:ec:06:53:74:0a:9e:
         00:ab:38:84:e0:11:a9:35:27:3c:de:8d:73:cb:bd:4f:35:60:
         eb:55:b5:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDZfus7Gvs9ObNktGPFtF+RxWvx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI3QTQyODk2QTRGQkYyRTJFMkIwNDk0MzAwQUI2RjAw
OTRFRjlFNTAeFw0yNTA4MjMwNzU0MTRaFw0yNTA4MjQxMDAxMTRaMDMxMTAvBgNV
BAMTKEE5REZFMTE5ODA3RTM2MURFRkQ5QTMzMkJBOTZCREM1Qzg3NDE5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhEL8qaC0jh95dcAUMSTmCSda
UTD+rkk0yd5u6rJoOwoaVskBnTMX60fkOhCr5L3JE/77YIcogXPJCz561Tzg686r
2Ia+fPMz6pPwxJlgy1S4VLOmOR2ZQCSOzbCjEF3aLvcX8QEn11aktnqt6NoEnKpY
seCJ2sY9ST+n5u4j10mBn+gzXWUR1gmaUk6g3eWXlmgewplxTgRC8nerDJXSKmxr
gjk8PhiNxeM0K3bwGnPpkfX3mPmRpFvqKJ4awnIvJxmDxCNC3VcFff7/CxU+EO8F
D9+PxEJyWSS32Z6jli/aNUdpFPgBv8R73zpbXrxRSLuTbUdXbPrQvfrqdsfXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqd/hGYB+Nh3v2aMyupa9xch0GXkwHwYDVR0j
BBgwFoAUG3pCiWpPvy4uKwSUMAq28AlO+eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC8xQjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCN0E0Mjg5NkE0RkJGMkUy
RTJCMDQ5NDMwMEFCNkYwMDk0RUY5RTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VRcHQvMC8x
QjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALttWSGrMypS8Nsmu6lhuHbLK8cq/TXXYwabP+ulm7fQOzQNcOxy8jWLv1Dve
53Aaj64FK6tEjILgopsmpcLN7376GwV4hPu/MdP+jfdMGjtL8/fArl7CY3pMI2T9
SIGZUSFOv3ixnX7gk2gmRBjC1UanDRdx/5BRGYXxL0IxTxy7CFlEs8JmPS2i7nfs
HjgBDtwUa8X+0vx+d2+9TGdkPxsOz7UDzs49kKGecMu2VA7FitSMRH7GJVw7duWC
t2TUu4MlRZ849TXBnB/4rW9dC5vGoOnMly6Bk7GCe9z5F9EPEt5O7AZTdAqeAKs4
hOARqTUnPN6Nc8u9TzVg61W1yQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:27 2025 by rpki-client