Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          GT17FQ6YVPoHD+2x1MNXRQWjMMIu68c674+fegNg/+4=
Subject key identifier:   0F:7F:FB:D2:A7:8C:D3:67:61:5F:36:EC:08:A5:4B:CD:D3:53:7F:38
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       2B40F641E3E36776C1DF1FDDC916DF3C83188FD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          0220
Signing time:             Fri 16 May 2025 02:15:17 +0000
Manifest this update:     Fri 16 May 2025 02:10:17 +0000
Manifest next update:     Sat 17 May 2025 02:36:17 +0000
Files and hashes:         1: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: UsoK1E4xojwEmL5lGIIC2QJyIGhJDLI7BwOxgoRjb88=)
                          2: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: qS5l42jMTMud52+Q5WuCosVZYWIuJec8+7s4K9zvd2M=)
                          3: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: fq1tAY/Hvr8TiBRRAGWAcmB1gFi2EhTX6NTMAkPcoCA=)
                          4: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: 9CSAPHN+viGAg80cmPbSF9EDb77vYGOvsBdu/ZyZuPY=)
                          5: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=)
                          6: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: Y+fE8BkqszrbIP4g4wpzOkGPcdjysr1CqPeEWpUGIuA=)
                          7: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: Sp3SopNcKakB7jI3Q/O4d4reeHmpO06eDlmoon4YLWM=)
                          8: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: cyVUhf1TZuNChMUYn5qaQqNw6BdaLkM3NTVtQTPrLe8=)
                          9: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: 5odB5yWTm4uAB6rsgPg3I+OPxNXaHhdycLs/wC5tT3I=)
                          10: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: fWTQGGAEgyjxZtjmRsuyRP78+BLG6hXDmo3CHjmYpHc=)
                          11: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: SfIJW5WPLYXsHY31oI4k3snKmNhXfICkKaFJev5pT9Q=)
                          12: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: 2lcSwgY6plo6lzCSLskE1qyNDmDYzzc+dJyZYNREMVs=)
                          13: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: V3vQoWj/pcT74SkEXQYJqSIiwsCNzpVOZJ9AUjyQ4sQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 02:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:40:f6:41:e3:e3:67:76:c1:df:1f:dd:c9:16:df:3c:83:18:8f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: May 16 02:10:17 2025 GMT
            Not After : May 17 02:36:17 2025 GMT
        Subject: CN=0F7FFBD2A78CD367615F36EC08A54BCDD3537F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:89:a3:14:e6:14:5d:90:65:68:d0:b5:60:
                    dc:89:3a:28:44:26:ad:04:59:f6:a4:b4:51:95:86:
                    df:58:4b:e1:70:c4:e1:18:3b:52:38:21:8f:ed:a0:
                    d3:8a:00:1e:3b:3a:05:ff:94:e3:69:30:6e:1b:4b:
                    69:3b:c2:a8:b5:bf:31:39:7e:d6:cf:c9:ce:4d:2d:
                    8c:18:5a:d2:20:3b:87:fb:d3:d1:29:06:04:b0:3f:
                    ab:72:40:e4:85:97:e7:7d:79:5a:ac:30:5c:1c:d3:
                    06:a5:dd:80:df:9f:70:80:8c:6a:7c:15:63:6d:91:
                    04:c5:27:51:86:b9:e0:f1:d1:5d:07:57:56:74:f3:
                    ee:e0:0e:e9:a5:e3:e6:88:2f:37:0d:a6:82:9a:35:
                    5f:64:a3:d8:21:e0:55:d3:e2:08:51:74:b5:90:3f:
                    0c:7c:55:66:38:8c:29:da:33:5d:44:14:db:05:d8:
                    7f:58:b8:3e:ff:c9:bb:fa:7d:f1:39:48:a7:9c:86:
                    5c:d6:2b:7a:ff:27:9c:99:e2:3f:0c:11:82:b3:65:
                    3b:c3:d1:cd:b8:7c:2c:a6:20:03:c6:70:5b:a3:7f:
                    03:03:6a:b0:ad:9f:89:0c:61:96:5b:01:80:83:18:
                    2f:78:93:32:b7:0d:bd:a9:ea:63:42:7f:82:3c:a1:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7F:FB:D2:A7:8C:D3:67:61:5F:36:EC:08:A5:4B:CD:D3:53:7F:38
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:67:80:ad:7c:9f:12:1b:96:22:d1:e5:e4:ae:2f:bd:61:
         51:fd:dd:e3:f4:ef:bb:ab:51:37:2d:45:85:ed:30:26:15:6a:
         09:ef:8e:75:f1:5e:ed:bc:12:56:a6:62:2f:f4:6f:d0:1d:ba:
         d4:1d:fd:00:23:c4:c1:89:f9:80:1c:26:9a:5e:ed:b7:47:85:
         ab:8e:5c:b9:f7:b8:1d:d3:44:cc:19:37:6a:5e:aa:7e:82:4e:
         e6:72:db:45:22:ed:24:ac:fa:16:f0:05:25:1d:34:f3:d2:8e:
         6d:34:c6:e8:6e:25:ef:70:ce:4f:ff:32:a8:e0:f9:68:99:5c:
         14:2a:e1:85:8b:54:27:ac:f6:d4:2f:1b:db:6e:34:16:5f:74:
         0a:b1:99:58:2d:08:b7:df:9d:ba:95:aa:2f:2d:9a:d2:9e:85:
         69:d3:58:5f:ae:f7:37:ae:1f:84:1d:ac:8c:cf:ba:9f:f7:e3:
         00:78:a4:22:ee:e6:b0:83:f1:12:e3:00:e2:c6:2a:84:7a:99:
         fa:51:66:68:dd:0e:b4:46:ed:e4:dd:98:2e:31:03:e9:47:fc:
         a8:85:50:90:86:7e:80:4d:5a:48:76:04:1f:fc:4c:d9:4f:4c:
         66:e4:d2:e7:a9:e5:f6:7b:63:6b:ff:90:e5:5d:bc:bc:f1:39:
         b7:c7:e9:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUK0D2QePjZ3bB3x/dyRbfPIMYj9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1Rjc4RTYzMDM5ODQ3N0U5QkFFOTc2QjNFQUVEQjAw
NTk5OTREQjAeFw0yNTA1MTYwMjEwMTdaFw0yNTA1MTcwMjM2MTdaMDMxMTAvBgNV
BAMTKDBGN0ZGQkQyQTc4Q0QzNjc2MTVGMzZFQzA4QTU0QkNERDM1MzdGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYYmjFOYUXZBlaNC1YNyJOihE
Jq0EWfaktFGVht9YS+FwxOEYO1I4IY/toNOKAB47OgX/lONpMG4bS2k7wqi1vzE5
ftbPyc5NLYwYWtIgO4f709EpBgSwP6tyQOSFl+d9eVqsMFwc0wal3YDfn3CAjGp8
FWNtkQTFJ1GGueDx0V0HV1Z08+7gDuml4+aILzcNpoKaNV9ko9gh4FXT4ghRdLWQ
Pwx8VWY4jCnaM11EFNsF2H9YuD7/ybv6ffE5SKechlzWK3r/J5yZ4j8MEYKzZTvD
0c24fCymIAPGcFujfwMDarCtn4kMYZZbAYCDGC94kzK3Db2p6mNCf4I8ofQDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUD3/70qeM02dhXzbsCKVLzdNTfzgwHwYDVR0j
BBgwFoAU2V945jA5hHfpuul2s+rtsAWZlNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMS9EOTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NUY3OEU2MzAzOTg0NzdF
OUJBRTk3NkIzRUFFREIwMDU5OTk0REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBRTDUvMS9E
OTVGNzhFNjMwMzk4NDc3RTlCQUU5NzZCM0VBRURCMDA1OTk5NERCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjq5ngK18nxIbliLR5eSuL71hUf3d4/Tvu6tRNy1Fhe0wJhVqCe+OdfFe7bwS
VqZiL/Rv0B261B39ACPEwYn5gBwmml7tt0eFq45cufe4HdNEzBk3al6qfoJO5nLb
RSLtJKz6FvAFJR0089KObTTG6G4l73DOT/8yqOD5aJlcFCrhhYtUJ6z21C8b2240
Fl90CrGZWC0It9+dupWqLy2a0p6FadNYX673N64fhB2sjM+6n/fjAHikIu7msIPx
EuMA4sYqhHqZ+lFmaN0OtEbt5N2YLjED6Uf8qIVQkIZ+gE1aSHYEH/xM2U9MZuTS
56nl9ntja/+Q5V28vPE5t8fpXw==
-----END CERTIFICATE-----
Generated at Fri May 16 17:53:53 2025 by rpki-client