Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
File:                     1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft (raw, json)
Hash identifier:          GL81d2OXF+sKVuBLrs/kDmktETn2verY8z5ebVpWkio=
Subject key identifier:   47:DD:6C:76:D5:29:86:16:BE:02:E3:5D:F0:35:D5:F1:A5:63:20:8A
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       430BFA60A08D86FB90EB26044F1982B400816E26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
Manifest number:          0217
Signing time:             Thu 08 May 2025 13:29:48 +0000
Manifest this update:     Thu 08 May 2025 13:24:48 +0000
Manifest next update:     Fri 09 May 2025 14:16:48 +0000
Files and hashes:         1: 323830343a373462633a3a2f33342d3334203d3e20323731303030.roa (hash: LBzseJQFBYOzX2kFlFzDSspdH9msy9WYfzkZqH5RVC4=)
                          2: 323830343a373462633a383030303a3a2f33332d3333203d3e20323731303030.roa (hash: UT1Qo9jWpNXCeoK8TpsmwpaEEr7IdRF0GXFiz6yQBAw=)
                          3: 323830343a373462633a343030303a3a2f33342d3334203d3e20323731303030.roa (hash: HyVszwwiBUG77VRN2aPkwHz1Ib4slK0nCT3FwTW9tuk=)
                          4: 323830343a373462633a633030303a3a2f33342d3334203d3e20323731303030.roa (hash: fgZeLnfZ9mI0Vy+2GBCtlM/Lar0qCuq0vaXpAO/IUIE=)
                          5: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl (hash: 9w76NkmP3AdlloBJBszPyVX6Ou2QcTal/yLgi+aQi4w=)
                          6: 323830343a373462633a3a2f33332d3333203d3e20323731303030.roa (hash: q1NLMI7cM2e/T4XNMr+qGcbIp52bsbZ6mXNgwR+wi5M=)
                          7: 323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (hash: i3X2PnejB28nRZIfGxqt9RFnTyfUqqOfONIh4nxooKA=)
                          8: 3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (hash: 2s9hs+kwMjjO6qbwwoZtnUG31mVPWkLhTujJzlJMdcw=)
                          9: 323830343a373462633a383030303a3a2f33342d3334203d3e20323731303030.roa (hash: c7B2oBNU+NSQ80AJaKEXqc/7UE0T9xREF7Z8vDxvfEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 14:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0b:fa:60:a0:8d:86:fb:90:eb:26:04:4f:19:82:b4:00:81:6e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: May  8 13:24:48 2025 GMT
            Not After : May  9 14:16:48 2025 GMT
        Subject: CN=47DD6C76D5298616BE02E35DF035D5F1A563208A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:71:45:44:43:a6:c9:5c:b8:fd:34:b1:e4:
                    eb:ab:17:18:45:d4:ba:2a:64:40:55:f6:f3:e4:8f:
                    21:50:bc:62:ef:c2:bc:50:77:68:40:c7:71:f1:d9:
                    0e:25:20:16:ca:d3:c3:fd:77:13:3b:6e:84:5b:f3:
                    0e:be:01:47:d5:09:48:96:44:86:3e:48:36:7a:59:
                    8f:a1:00:14:aa:26:72:d3:3c:a5:4b:59:21:a6:e7:
                    62:13:e3:a7:89:8d:f4:ee:a3:f2:05:8f:4e:f8:1e:
                    73:db:ba:c7:84:30:1b:08:0b:03:0d:33:f2:ad:4d:
                    5a:b5:c3:57:17:23:0f:07:da:94:0e:56:77:25:30:
                    9e:ce:92:e1:78:8f:44:50:fb:9d:a5:94:45:f4:76:
                    c0:8f:61:20:5f:8e:a6:3c:e3:3d:a8:d4:b1:8b:1e:
                    d8:51:aa:c3:c7:85:5d:23:5c:3b:2b:94:9d:df:11:
                    af:a6:7f:93:11:30:9f:7d:8a:42:f5:f4:8b:64:96:
                    90:f5:b1:8b:db:3a:fc:bf:7e:66:f0:4e:07:07:d4:
                    28:04:a8:84:3c:ad:33:45:7d:04:93:42:00:a4:d0:
                    fd:8d:3b:08:eb:06:6c:fe:53:b8:1d:47:a2:f3:e8:
                    4d:1d:6c:27:d8:79:1b:46:85:0a:e0:18:81:97:1a:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DD:6C:76:D5:29:86:16:BE:02:E3:5D:F0:35:D5:F1:A5:63:20:8A
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:85:bf:49:d8:6d:a1:0a:2e:67:d2:e6:21:ba:c1:b2:0c:77:
         20:3a:39:e6:17:12:68:e3:f6:72:c6:ea:02:33:cb:b5:e8:a8:
         02:41:03:6c:c5:ae:b8:45:18:0a:cb:61:49:20:d2:71:51:c8:
         81:3f:70:37:90:c6:7a:16:06:c8:93:d8:f6:b3:b4:0f:ae:15:
         b2:1e:b0:c8:c6:2c:8f:30:de:06:a5:f7:72:0d:c1:cf:47:4e:
         40:37:b2:96:3a:a8:6b:a0:27:ed:cb:2e:94:a5:78:1f:6c:41:
         95:f4:66:06:d2:4e:c2:f6:d6:a6:f8:a1:19:19:3d:fc:80:28:
         55:ca:c1:d8:fe:6b:70:41:b3:24:2a:04:9e:ad:03:1a:dc:81:
         92:5e:ad:2e:6d:f8:21:99:80:51:fd:ba:ea:27:8b:b9:ef:ca:
         5c:09:57:33:5c:45:7d:d8:fa:c2:1d:b8:52:7d:52:63:23:3d:
         98:f2:d3:19:0d:46:45:09:81:7c:01:83:b8:06:e5:bf:cb:66:
         14:22:be:64:e7:e9:a9:b3:95:d2:16:de:91:11:9d:9f:c7:b8:
         f2:9f:f1:9b:73:0c:83:1a:1d:71:52:fb:2a:fe:53:1c:e4:b4:
         da:52:21:4b:b7:09:a8:4d:c6:2d:ec:fd:ae:66:a7:50:50:15:
         b1:24:77:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQwv6YKCNhvuQ6yYETxmCtACBbiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4REE0NUMzOUMwREY2RkI3NEIwNkYwRjgwOThBQzY5
MTY4NjREQjAeFw0yNTA1MDgxMzI0NDhaFw0yNTA1MDkxNDE2NDhaMDMxMTAvBgNV
BAMTKDQ3REQ2Qzc2RDUyOTg2MTZCRTAyRTM1REYwMzVENUYxQTU2MzIwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW3FFREOmyVy4/TSx5OurFxhF
1LoqZEBV9vPkjyFQvGLvwrxQd2hAx3Hx2Q4lIBbK08P9dxM7boRb8w6+AUfVCUiW
RIY+SDZ6WY+hABSqJnLTPKVLWSGm52IT46eJjfTuo/IFj074HnPbuseEMBsICwMN
M/KtTVq1w1cXIw8H2pQOVnclMJ7OkuF4j0RQ+52llEX0dsCPYSBfjqY84z2o1LGL
HthRqsPHhV0jXDsrlJ3fEa+mf5MRMJ99ikL19ItklpD1sYvbOvy/fmbwTgcH1CgE
qIQ8rTNFfQSTQgCk0P2NOwjrBmz+U7gdR6Lz6E0dbCfYeRtGhQrgGIGXGtL/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUR91sdtUphha+AuNd8DXV8aVjIIowHwYDVR0j
BBgwFoAUG42kXDnA32+3Swbw+AmKxpFoZNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1
WWcvMS8xQjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCOERBNDVDMzlDMERGNkZC
NzRCMDZGMEY4MDk4QUM2OTE2ODY0REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1WWcvMS8x
QjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMYW/SdhtoQouZ9LmIbrBsgx3IDo55hcSaOP2csbqAjPLteioAkEDbMWuuEUY
CsthSSDScVHIgT9wN5DGehYGyJPY9rO0D64Vsh6wyMYsjzDeBqX3cg3Bz0dOQDey
ljqoa6An7csulKV4H2xBlfRmBtJOwvbWpvihGRk9/IAoVcrB2P5rcEGzJCoEnq0D
GtyBkl6tLm34IZmAUf266ieLue/KXAlXM1xFfdj6wh24Un1SYyM9mPLTGQ1GRQmB
fAGDuAblv8tmFCK+ZOfpqbOV0hbekRGdn8e48p/xm3MMgxodcVL7Kv5THOS02lIh
S7cJqE3GLez9rmanUFAVsSR3IA==
-----END CERTIFICATE-----
Generated at Thu May 8 20:40:19 2025 by rpki-client