Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
File:                     85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft (raw, json)
Hash identifier:          1/en6FfIVjcGOekA0Cml62wLfjLQIUyOTgNpUK53ZpY=
Subject key identifier:   34:DD:D7:3A:AA:B1:22:BF:C0:50:86:75:56:6D:3B:90:DA:EA:49:44
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       2BD14272E6F181CE0EE4CFA51AC26DD3606F17B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
Manifest number:          F5
Signing time:             Mon 12 May 2025 13:26:14 +0000
Manifest this update:     Mon 12 May 2025 13:21:14 +0000
Manifest next update:     Tue 13 May 2025 17:12:14 +0000
Files and hashes:         1: 3138372e36312e3130332e302f32342d3234203d3e203533313533.roa (hash: RkAfGl/Ya6z3mayxEHwx8NT8FjneGcdYKSr+wK07iz4=)
                          2: 3138362e3230392e3130322e302f32342d3234203d3e203533313533.roa (hash: sNIx9TNQrAHgH2IIVEp6hsyFdsjhkcAWYJzd1LvE4QY=)
                          3: 3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (hash: maYcro83r8rrQ1YPXfWBdT93v2MCQxl2UnRridCwvDo=)
                          4: 3138362e3230392e39382e302f32342d3234203d3e203533313533.roa (hash: EcEze2ISv8/KREn5lWIPEzsTzjGsWOZ9omSAtSfdY7o=)
                          5: 3138372e36312e39362e302f32342d3234203d3e203533313533.roa (hash: wJRbKlpNvEEImMmE8QnlHhai1QeCUjS6yQSUe/HEEEQ=)
                          6: 3138372e36312e39382e302f32342d3234203d3e203533313533.roa (hash: zQblqvt92Tz2tJi41gU5Y+bQAI6eydOQkAa1ULaZt3o=)
                          7: 3138372e36312e3130382e302f32342d3234203d3e203533313533.roa (hash: 50n/UDZbaRINe+xOiUDZ74AuFHqf9YcwC6vhTGQIuDo=)
                          8: 3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa (hash: yeY/pgMNdSqA9P2qsSr8xt+fv8+bgbRt6QsuV8RKI0Q=)
                          9: 3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa (hash: dXKzvPyad3GdgzIhGE+mUtVBOpC1j0QjBljV2n5pDco=)
                          10: 3138372e36312e3130362e302f32342d3234203d3e203533313533.roa (hash: xupc/1fr69MIJ4pJIbiXCfEy24nzSFff2rhUVAUHDdU=)
                          11: 3138372e36312e39392e302f32342d3234203d3e203533313533.roa (hash: sgWCKaajf6Qm/CYIVydxZBBBZiMG4RBPOPx4lFASn0M=)
                          12: 3138372e36312e3130352e302f32342d3234203d3e203533313533.roa (hash: QBdk75SjH7c0TbujxyonjvFhAzF31yu8H5JiSq152Ik=)
                          13: 3133382e3230342e3232312e302f32342d3234203d3e203533313533.roa (hash: n9Gmg9ShYfygN8V3ZKGTOyQ1KG6bK0pDPStrmZ1Am3w=)
                          14: 3138362e3230392e39392e302f32342d3234203d3e203533313533.roa (hash: fHOoZCd9X++LBwtH3W9PjfmMRRPNszEpRpBLhctPj5s=)
                          15: 3138372e36312e3130372e302f32342d3234203d3e203533313533.roa (hash: w+UQ2izANVaTQtBHpQKbD0YO7QLH9KoH2O2z1LPLjoo=)
                          16: 3133382e3230342e3232322e302f32342d3234203d3e203533313533.roa (hash: vVJTuP45dU6pgQb2NnpB/C0zFRJaIgj2ysKEBBkYISo=)
                          17: 3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa (hash: ayR4qyhmikFAEB0Cvp5VCEEhYPCi9p6bCXGptmZtAto=)
                          18: 3138362e3230392e3130372e302f32342d3234203d3e203533313533.roa (hash: X0Th6dwdgURo2K9+UCZbhFY6V5N0+zSbF9Bh6/2ub00=)
                          19: 3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa (hash: XMI31OFJpGnSJpt2Bw+aiCZlva6Om8uPZcSYPzlx/mw=)
                          20: 3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa (hash: aoyE1W5ffh7xWp5M0VUCetpWazWGChYfdrSoJ6gvUig=)
                          21: 85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl (hash: JkgeDyVbTlrXwY9zIkNxf+vp0qDMk25tULBzMPVMx7E=)
                          22: 3138372e36312e3130342e302f32342d3234203d3e203533313533.roa (hash: 7ucYF2kYaDBW/jMfz1YRhJoTQr11KpIHFaZXGqt8L2c=)
                          23: 3138362e3230392e3130392e302f32342d3234203d3e203533313533.roa (hash: IB8T/n8sPLj0qchS6W2klUMVIUa2JST3CehxUUmYPYw=)
                          24: 323830343a3733383a663a3a2f34382d3438203d3e203533313533.roa (hash: xWe8RtJr8hJDrBVcRC6QtBrKmnVKslYLrjR6EstR6VU=)
                          25: 3138362e3230392e39372e302f32342d3234203d3e203533313533.roa (hash: qQ/p6d8D6nlUpSNlr6MvfEW1GZnPf2GJd+cXHbWwKes=)
                          26: 3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa (hash: jTYc3I2BW4aZhyp9zAZ9FLAlexIqZ5QFXrjtcjgIoQM=)
                          27: 3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (hash: Hw5OppDUQMe2TzMT20L/HLeZ8QvvNVS4UNAPSuctJWM=)
                          28: 3138362e3230392e3130362e302f32342d3234203d3e203533313533.roa (hash: 5xL8CeMQf4wOh8vHxgF5s7GUz/ZyLzL9kVzhI+o5qAQ=)
                          29: 3138372e36312e3130322e302f32342d3234203d3e203533313533.roa (hash: XbNvqd6M+Fa8l2SZBIQOa5N/1THHP0gCrKivMwEEMJ4=)
                          30: 3138372e36312e39372e302f32342d3234203d3e203533313533.roa (hash: 34WP1ptp+T3NvK67iPDOGUCsf6htzTs4SlPYLnXJAjQ=)
                          31: 3133382e3230342e3232302e302f32342d3234203d3e203533313533.roa (hash: tDJzK86fapDnGm18Y60QbWk8HITpk6u0sK6H4XU2xbU=)
                          32: 3138372e36312e3130302e302f32332d3233203d3e203533313533.roa (hash: AQkrj1Zvf7/GBNroCKR7KIgg2A/0VLtn0o5TTZIil1A=)
                          33: 3138372e36312e3131302e302f32342d3234203d3e203533313533.roa (hash: 2NTYOuAgVzBp11ycY7tA/rcq6rHdLRRr/7XZJVGBP3I=)
                          34: 3138362e3230392e3131302e302f32342d3234203d3e203533313533.roa (hash: 0I8o3gUGJ97Ujvo8R+fDl2qieisRPkgv8XOfzAjB8/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d1:42:72:e6:f1:81:ce:0e:e4:cf:a5:1a:c2:6d:d3:60:6f:17:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: May 12 13:21:14 2025 GMT
            Not After : May 13 17:12:14 2025 GMT
        Subject: CN=34DDD73AAAB122BFC0508675566D3B90DAEA4944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:c3:3c:d5:1c:e3:8b:d2:34:0c:fd:3c:88:
                    00:2d:be:d0:b3:5d:dc:b0:4c:6c:a8:13:de:2c:9b:
                    04:7b:50:94:13:08:46:d6:fd:36:c0:aa:bc:ef:d0:
                    77:e0:13:75:f1:89:77:27:d1:c4:95:af:07:11:4b:
                    db:27:e0:1e:c1:eb:82:66:80:b6:1e:4d:1a:c0:49:
                    35:a3:70:99:1f:15:31:a2:fa:db:74:db:66:f3:b5:
                    41:14:b9:f2:1d:35:d6:aa:1a:52:d0:39:ee:0a:46:
                    74:d2:4b:c6:74:05:18:ea:e4:0f:e4:2b:d8:59:7f:
                    c5:bd:a6:43:d3:19:a7:af:8f:6e:4e:3b:44:63:e1:
                    a2:a6:0e:8f:56:9f:f7:85:2f:11:72:34:a2:5d:66:
                    51:06:4a:bc:79:60:64:56:61:c6:81:1d:50:aa:b5:
                    8d:90:49:50:56:9e:67:0f:b8:3e:f5:80:09:ad:a2:
                    6f:fd:88:26:38:e7:20:6e:b9:a1:6d:7a:2c:41:20:
                    b9:4f:f2:5d:d3:e8:8e:76:50:8f:1a:5f:f7:97:fd:
                    1a:06:c6:e1:15:03:d1:f6:46:2f:ff:d4:53:c1:b6:
                    8d:21:b3:1d:ae:33:d5:40:5f:4d:be:45:1c:08:00:
                    04:24:2d:8c:73:d0:55:e4:98:31:cc:4a:dd:50:29:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:D7:3A:AA:B1:22:BF:C0:50:86:75:56:6D:3B:90:DA:EA:49:44
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:93:29:17:00:7c:76:30:27:20:79:0d:94:b2:6a:da:b3:
         23:7e:0b:50:c7:3f:6e:24:ac:99:c1:27:ed:cc:e2:34:e7:b9:
         46:7e:18:2e:b6:71:b8:7f:31:1a:72:9c:ac:62:ac:16:cc:91:
         5b:d9:15:d4:ef:3d:c6:ec:fa:f4:75:0c:ca:21:75:4b:a0:df:
         59:27:3b:e0:15:ff:cf:2d:16:ec:3a:e7:19:1e:78:8d:f1:e2:
         bf:fe:99:1e:11:9b:c0:23:b7:df:7a:ee:bf:d7:f1:26:a1:c1:
         5f:fb:ae:53:2d:07:4f:53:1b:f9:c8:c8:49:27:e3:91:9e:0d:
         5d:4f:53:dd:94:aa:de:8e:84:0e:70:d3:a8:0b:85:3b:30:f2:
         5e:3a:84:08:bc:fb:86:d4:6b:3a:1b:eb:76:ed:36:19:83:cd:
         4c:73:b1:0c:b3:fb:09:85:7e:c7:27:b0:19:56:ec:e8:1c:3e:
         4a:4d:74:e9:bc:07:3a:1f:fe:8e:b2:af:e3:89:50:e5:ef:80:
         a6:03:f3:d0:02:9b:ce:2b:c4:7c:f3:c5:c8:ff:f1:d6:d7:64:
         d2:91:1f:53:e1:56:12:48:76:06:87:a5:f7:11:7c:53:fa:c6:
         5d:c2:91:ee:cb:bc:0b:96:29:72:82:4a:58:3d:3b:72:72:7e:
         12:36:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:58:03 2025 by rpki-client