Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          PYq/8CkeeefVZSHJ6ef6yn17jEBVmhTec9aVoXZBXV8=
Subject key identifier:   C6:93:83:A4:8E:D7:84:E8:B8:69:09:1E:45:0A:81:6B:09:95:86:F2
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       1F300CC7175DE8D6A96A45F8FEE339CAD901B2A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          02A3
Signing time:             Sat 23 Aug 2025 10:22:11 +0000
Manifest this update:     Sat 23 Aug 2025 10:17:11 +0000
Manifest next update:     Sun 24 Aug 2025 13:48:11 +0000
Files and hashes:         1: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          2: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          3: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          4: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          5: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
                          6: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          7: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: axZ1dwJQ16E8drS64rHAfSsVSJ4hNqlHBegE845OSUU=)
                          8: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          9: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          10: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          11: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          12: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          13: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          14: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:0c:c7:17:5d:e8:d6:a9:6a:45:f8:fe:e3:39:ca:d9:01:b2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Aug 23 10:17:11 2025 GMT
            Not After : Aug 24 13:48:11 2025 GMT
        Subject: CN=C69383A48ED784E8B869091E450A816B099586F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:99:f8:11:f8:44:15:aa:db:92:fb:00:35:
                    09:44:89:b4:34:c4:24:fd:07:67:a6:13:ff:31:3f:
                    e7:af:b2:ab:76:a4:8f:78:bc:ad:83:3c:2b:cd:35:
                    23:3b:48:42:bd:c1:34:1c:a0:f4:38:d5:f3:dd:f3:
                    0d:65:9f:ce:82:6d:01:ac:79:c5:3c:a1:ee:8b:c5:
                    a3:87:df:85:06:95:eb:2c:e7:4f:b4:a5:e5:90:21:
                    7c:55:f1:c4:c5:57:11:5e:92:20:b2:28:f3:31:5c:
                    fc:3e:be:a1:7d:d8:11:0b:87:65:1c:62:5d:75:f8:
                    a2:db:c6:02:74:d5:cc:27:c5:98:32:46:77:11:04:
                    b8:a8:88:f3:57:a3:ef:44:6f:ca:bc:01:81:2c:e7:
                    68:b7:68:a8:f2:7a:3d:20:ec:53:b4:70:74:55:d5:
                    79:a8:13:78:75:b4:44:f3:cb:af:09:e7:81:2c:af:
                    4f:55:d5:b7:a1:c9:0b:25:e1:a1:37:cf:e5:20:dd:
                    6e:e3:bd:06:e8:82:11:00:ab:73:32:fa:c5:2f:2a:
                    4f:3e:ae:c7:a8:7a:a9:06:5a:c6:32:87:5e:22:4b:
                    15:2d:09:15:67:9c:02:dc:68:7b:ac:36:5b:6c:e9:
                    1c:c1:d2:5a:8d:43:01:52:75:01:b7:ec:bd:4b:68:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:83:A4:8E:D7:84:E8:B8:69:09:1E:45:0A:81:6B:09:95:86:F2
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:88:51:2f:b2:a5:78:2a:b0:0d:75:42:62:b6:6e:85:7c:
         e2:bc:17:15:08:b2:d8:3e:60:29:3c:f3:6e:98:a7:92:a1:2d:
         53:64:79:fb:09:29:1b:f0:93:4e:f4:c0:15:91:29:f0:a8:37:
         1f:d7:3f:33:9f:9c:31:e1:ed:67:f4:cf:b9:b1:5f:49:0b:9c:
         14:89:42:cd:e5:70:ee:05:93:21:96:e8:e8:75:a5:e4:13:69:
         87:3e:e8:a0:ad:0a:0e:30:05:d8:2b:3a:ca:54:82:12:dd:23:
         fb:b2:96:3d:d6:99:65:de:70:73:fb:10:f9:aa:62:cb:d2:77:
         47:e4:76:54:f8:89:8c:24:66:1b:37:c2:fa:08:2a:ff:97:5c:
         01:de:d0:4f:aa:8d:f0:e8:92:48:c3:35:aa:73:4b:be:d5:b3:
         b4:70:d7:ac:2a:f4:e2:ab:29:47:f2:81:85:44:2d:ca:2b:f7:
         a3:59:e3:62:29:a9:1e:92:b3:63:83:c3:7a:d9:a3:95:66:e5:
         ef:d2:8a:79:b9:1a:a5:42:dc:34:3b:42:85:84:70:02:19:7c:
         82:64:b3:7d:ae:85:58:2e:64:b0:ef:5b:a4:17:4e:0c:48:4d:
         25:1b:39:e0:e8:40:df:31:7a:95:fe:d7:fc:2e:0a:c4:4f:5e:
         49:0e:96:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHzAMxxdd6NapakX4/uM5ytkBsqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBMzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEz
MTE5QThBRjAeFw0yNTA4MjMxMDE3MTFaFw0yNTA4MjQxMzQ4MTFaMDMxMTAvBgNV
BAMTKEM2OTM4M0E0OEVENzg0RThCODY5MDkxRTQ1MEE4MTZCMDk5NTg2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlS5n4EfhEFarbkvsANQlEibQ0
xCT9B2emE/8xP+evsqt2pI94vK2DPCvNNSM7SEK9wTQcoPQ41fPd8w1ln86CbQGs
ecU8oe6LxaOH34UGless50+0peWQIXxV8cTFVxFekiCyKPMxXPw+vqF92BELh2Uc
Yl11+KLbxgJ01cwnxZgyRncRBLioiPNXo+9Eb8q8AYEs52i3aKjyej0g7FO0cHRV
1XmoE3h1tETzy68J54Esr09V1behyQsl4aE3z+Ug3W7jvQboghEAq3My+sUvKk8+
rseoeqkGWsYyh14iSxUtCRVnnALcaHusNlts6RzB0lqNQwFSdQG37L1LaEVDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxpODpI7XhOi4aQkeRQqBawmVhvIwHwYDVR0j
BBgwFoAUcaNOjfAJZcohwapOPDesKjEZqK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMS83MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQTM0RThERjAwOTY1Q0Ey
MUMxQUE0RTNDMzdBQzJBMzExOUE4QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS83
MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMOSIUS+ypXgqsA11QmK2boV84rwXFQiy2D5gKTzzbpinkqEtU2R5+wkpG/CT
TvTAFZEp8Kg3H9c/M5+cMeHtZ/TPubFfSQucFIlCzeVw7gWTIZbo6HWl5BNphz7o
oK0KDjAF2Cs6ylSCEt0j+7KWPdaZZd5wc/sQ+apiy9J3R+R2VPiJjCRmGzfC+ggq
/5dcAd7QT6qN8OiSSMM1qnNLvtWztHDXrCr04qspR/KBhUQtyiv3o1njYimpHpKz
Y4PDetmjlWbl79KKebkapULcNDtChYRwAhl8gmSzfa6FWC5ksO9bpBdODEhNJRs5
4OhA3zF6lf7X/C4KxE9eSQ6W4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:00 2025 by rpki-client