Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
File:                     C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json)
Hash identifier:          2qkwOZ3bnGu6eUS6sKS3/xv1SEDdykKxSETjfSsXMs4=
Subject key identifier:   73:D0:BF:C1:93:C0:5F:B0:2D:30:C1:07:B3:85:10:0F:54:D6:D9:88
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       7961DAA27050DE2730E9F4D5F9E66134A3BA6FB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
Manifest number:          0278
Signing time:             Mon 30 Jun 2025 13:13:02 +0000
Manifest this update:     Mon 30 Jun 2025 13:08:02 +0000
Manifest next update:     Tue 01 Jul 2025 13:37:02 +0000
Files and hashes:         1: 34352e3137382e32322e302f32332d3233203d3e20323639303135.roa (hash: U84hye//TVmWhcw8rp4tLUflTahYMHuZwnLhXtdT6Hs=)
                          2: 34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (hash: u4tVnKQMiI7xln4HjGSAN2pOvOD9fwo30FgGzumnvHg=)
                          3: 34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (hash: o3kISJ0/aoAoMDJPo4R48K2sjVd8rE2zX6rpSUX9nVQ=)
                          4: 323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (hash: ZiMxoWMdS6pRVJ0zFGXPOD4whus6U107d7fdr1rD5e4=)
                          5: 34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (hash: xfkgFyeLFoBLrI7IkBpWU8FnZE9hCfmULh3pOIbJp/A=)
                          6: 34352e3137382e32322e302f32342d3234203d3e20323639303135.roa (hash: CbVslRPWsWnQaG3Or+0Nnr9Cx9uWleUmozdJGAf3sBE=)
                          7: 34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (hash: qlJCBsC4gyEX+/bGy9Db5eySkdW8MtQfSDLz7zJxxlA=)
                          8: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: uy80y3/lsIu+V2t/RyvEIXbe/el3veANaiHOzoU79ig=)
                          9: 34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (hash: nZoTO6V13fdeP4F7qu6XoMPlBc9UnexQz7l/L7lHCFY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 13:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:61:da:a2:70:50:de:27:30:e9:f4:d5:f9:e6:61:34:a3:ba:6f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jun 30 13:08:02 2025 GMT
            Not After : Jul  1 13:37:02 2025 GMT
        Subject: CN=73D0BFC193C05FB02D30C107B385100F54D6D988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:86:c0:a7:1f:fe:74:89:fc:83:21:dd:95:
                    58:45:de:fa:f4:89:6b:20:47:87:b7:f7:92:80:4d:
                    9a:f9:10:44:f7:bd:b8:ab:65:5c:c0:41:a4:c7:c1:
                    e7:6d:e8:5c:72:b9:0e:5e:0d:4b:9e:37:8c:96:a3:
                    f7:b2:43:e5:27:3c:e2:36:4d:7f:e5:76:07:37:e2:
                    48:7a:21:fe:81:8c:62:d0:b1:07:5b:36:b9:af:70:
                    e2:cf:a9:af:e6:dd:e7:c8:b5:4a:91:31:a1:58:fb:
                    b2:d6:e1:23:2a:61:cc:20:fa:aa:a9:9b:93:ac:9d:
                    d1:6d:2c:53:b8:61:50:6d:60:a5:ee:04:04:6c:c9:
                    06:f3:e3:2e:25:26:8e:cd:49:e9:cc:9e:4e:8d:95:
                    96:10:d6:7a:6e:54:bf:b3:e0:8f:a9:2c:58:80:5f:
                    6e:d9:cb:99:bd:5c:99:63:b0:fa:19:dc:d7:9b:0c:
                    22:80:6f:2d:fb:b7:d8:18:0a:ef:1f:a1:6e:83:fc:
                    1e:c9:81:b0:5f:28:c4:a0:38:f1:77:a7:60:10:ce:
                    17:14:63:04:cc:48:96:fd:60:92:cf:e0:8b:76:36:
                    11:9e:a5:db:52:06:40:6a:bd:ad:dc:46:ef:9c:f7:
                    fb:bc:1d:24:fc:6e:a6:cb:e0:ba:30:2d:54:32:a4:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:BF:C1:93:C0:5F:B0:2D:30:C1:07:B3:85:10:0F:54:D6:D9:88
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6e:4e:78:a0:09:75:6d:fd:6c:02:6e:e6:db:db:90:1c:88:
         24:e8:ba:a7:44:1e:4f:cf:e2:6d:6d:d6:e6:11:08:58:9a:c4:
         77:4b:b5:b1:22:b4:b9:ad:d0:51:a9:b0:bf:5e:a2:87:43:f1:
         82:e8:af:f7:8e:c3:5d:00:1d:8f:dc:a4:6c:a3:98:0c:d5:ff:
         d4:d3:39:e9:88:16:fa:51:4f:fa:bb:c5:e9:20:df:7b:30:09:
         f9:d8:44:d8:ab:fc:2e:3f:2f:b5:d6:4e:d1:76:ee:0b:69:35:
         68:34:3a:26:e3:a1:c6:87:86:1b:ca:c8:44:38:7c:a0:7f:9f:
         06:08:fb:61:54:b7:66:dd:6c:63:70:09:b9:c0:57:54:42:a3:
         02:0b:f7:fe:eb:b7:cc:4e:ec:71:bf:ad:ec:60:dc:f8:6e:cf:
         6e:3a:56:5d:9c:9b:fc:16:e4:d5:cd:16:fe:f0:77:2f:90:a7:
         e2:66:9c:56:64:c0:71:73:f4:bc:56:ba:f1:67:25:bc:50:88:
         93:91:11:e4:04:63:6a:3f:68:ee:07:08:b8:88:6a:3a:57:22:
         4a:39:63:9f:a1:1b:e8:8f:a7:ba:f3:fa:a7:4a:d4:e2:83:af:
         78:1b:05:82:82:a6:ec:88:32:9b:83:a4:63:a5:7b:00:8d:5a:
         11:6b:cf:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeWHaonBQ3icw6fTV+eZhNKO6b7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE
QUUwNDdEODAeFw0yNTA2MzAxMzA4MDJaFw0yNTA3MDExMzM3MDJaMDMxMTAvBgNV
BAMTKDczRDBCRkMxOTNDMDVGQjAyRDMwQzEwN0IzODUxMDBGNTRENkQ5ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGobApx/+dIn8gyHdlVhF3vr0
iWsgR4e395KATZr5EET3vbirZVzAQaTHwedt6FxyuQ5eDUueN4yWo/eyQ+UnPOI2
TX/ldgc34kh6If6BjGLQsQdbNrmvcOLPqa/m3efItUqRMaFY+7LW4SMqYcwg+qqp
m5OsndFtLFO4YVBtYKXuBARsyQbz4y4lJo7NSenMnk6NlZYQ1npuVL+z4I+pLFiA
X27Zy5m9XJljsPoZ3NebDCKAby37t9gYCu8foW6D/B7JgbBfKMSgOPF3p2AQzhcU
YwTMSJb9YJLP4It2NhGepdtSBkBqva3cRu+c9/u8HST8bqbL4LowLVQypIAzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUc9C/wZPAX7AtMMEHs4UQD1TW2YgwHwYDVR0j
BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky
Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D
MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhG5OeKAJdW39bAJu5tvbkByIJOi6p0QeT8/ibW3W5hEIWJrEd0u1sSK0ua3Q
Uamwv16ih0Pxguiv947DXQAdj9ykbKOYDNX/1NM56YgW+lFP+rvF6SDfezAJ+dhE
2Kv8Lj8vtdZO0XbuC2k1aDQ6JuOhxoeGG8rIRDh8oH+fBgj7YVS3Zt1sY3AJucBX
VEKjAgv3/uu3zE7scb+t7GDc+G7PbjpWXZyb/Bbk1c0W/vB3L5Cn4macVmTAcXP0
vFa68WclvFCIk5ER5ARjaj9o7gcIuIhqOlciSjljn6Eb6I+nuvP6p0rU4oOveBsF
goKm7Igym4OkY6V7AI1aEWvPfw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:48:08 2025 by rpki-client