Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
File:                     53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft (raw, json)
Hash identifier:          E5TjudEZIHfqYFW2ngN69uewmS9K5La0SpIJIujOnQo=
Subject key identifier:   E0:6D:38:10:DF:3D:F0:38:7E:53:2F:98:EF:0B:48:C0:76:86:07:8E
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       31CDBE0F722CA05C3A0D093626EB7F73EEBAF492
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
Manifest number:          021B
Signing time:             Sun 11 May 2025 00:28:04 +0000
Manifest this update:     Sun 11 May 2025 00:23:04 +0000
Manifest next update:     Mon 12 May 2025 01:20:04 +0000
Files and hashes:         1: 3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (hash: umDd0lEDcpspU7G4Y4AhnpIYaD2RJZN3CgI4wb4FFr0=)
                          2: 53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl (hash: ugX4xo+UDJp4xKlvj3RiN54oV3toWbXhzKL1/OkHnso=)
                          3: 3136382e3230352e39312e302f32342d3234203d3e20323635333634.roa (hash: Zc/5jvsB4HVd60hYbQgvNohyHOPs7Sax4SvVnNvWCUQ=)
                          4: 323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa (hash: 8C2FWVuRLzJfFxZLVUlVKXoeJo2gAfwZSovoMfh64Dc=)
                          5: 323830343a326563303a3a2f33332d3333203d3e20323635333634.roa (hash: SHP/5v9KOQwA4P4tezMEWYRvfox3pD2DXg55O5MxmH8=)
                          6: 3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa (hash: jXhcZtUqvpHftd8Xdbh609+svLSq/keL2E+2h4WX+8Y=)
                          7: 3136382e3230352e39302e302f32342d3234203d3e20323635333634.roa (hash: wxQVRJxxbu9xuBlSqdeKP5WnBZ6kf9mm/LjarC6zPH0=)
                          8: 323830343a326563303a3a2f33322d3332203d3e20323635333634.roa (hash: GdYMzlLZm6BgE+/Ll424GxMGKNolyEbAlFewXbO27OA=)
                          9: 3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (hash: opEQiFuULK4apG+/SSXfZ9GYmaNW0E4GnB8T34Tzy3s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 01:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:be:0f:72:2c:a0:5c:3a:0d:09:36:26:eb:7f:73:ee:ba:f4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: May 11 00:23:04 2025 GMT
            Not After : May 12 01:20:04 2025 GMT
        Subject: CN=E06D3810DF3DF0387E532F98EF0B48C07686078E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:ea:bb:40:57:cf:84:02:79:dd:fe:2e:4b:
                    77:0b:fb:ad:34:e3:13:3b:35:51:43:dd:8b:80:08:
                    9a:41:d2:68:e3:84:3e:7b:90:28:32:8e:4d:6e:69:
                    86:04:e5:62:23:f3:af:bf:3b:60:e7:ca:6e:2a:02:
                    be:f4:19:d8:26:3b:dc:53:81:4a:d0:db:e5:d9:a2:
                    65:79:48:e4:a0:91:ab:5a:8b:66:5d:ca:09:d1:a6:
                    36:ae:d0:1e:35:87:5f:eb:64:43:17:f4:e7:ba:fc:
                    2e:d8:60:ea:fa:2b:5f:7c:45:ca:29:be:ae:d2:3d:
                    34:78:c5:22:e0:1b:63:cc:a5:9b:a3:e5:a9:ba:69:
                    03:08:0b:b4:5a:93:19:56:eb:e0:84:69:ff:09:e5:
                    90:ec:21:24:d1:d2:f7:d2:50:af:d7:94:71:ae:6c:
                    b4:29:ee:52:1e:47:cd:cd:3b:f8:8b:dd:f6:f7:97:
                    95:a8:2a:b5:71:53:bd:29:66:df:e0:75:5b:b4:4c:
                    48:56:12:09:18:c1:eb:58:31:09:c7:31:74:34:8c:
                    c3:f9:e7:39:f9:74:5c:ba:83:21:50:30:c0:74:ac:
                    88:f2:c2:52:0e:39:af:16:db:96:39:9c:05:9a:cd:
                    bb:00:de:dd:e1:a1:d3:d2:bf:0a:3c:ae:cc:9a:a3:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:38:10:DF:3D:F0:38:7E:53:2F:98:EF:0B:48:C0:76:86:07:8E
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:af:d0:a2:62:8e:70:53:64:e7:6d:05:44:3e:83:54:0f:
         88:e3:55:78:84:d3:38:62:ca:f8:35:98:c2:aa:8c:d2:c4:97:
         40:54:67:d9:ee:98:97:d3:b6:e5:28:93:df:28:28:7e:e0:3c:
         7e:1e:07:5f:2b:93:4e:ae:cc:b2:8c:c6:7c:cc:4b:65:25:75:
         5b:7b:bc:07:22:38:a7:4d:f6:db:ff:1a:68:b5:5d:d5:f3:a2:
         4a:4f:ab:54:62:0c:00:1a:93:b7:f9:33:5d:bb:00:96:a6:95:
         3e:24:c7:3d:ae:61:6a:81:9b:50:4b:7b:b9:58:13:25:b8:81:
         50:d3:82:28:7c:a9:09:eb:f5:cd:8c:1c:f8:3d:8c:79:54:b6:
         00:ac:fd:9c:a4:f3:0f:1f:64:ab:08:72:cf:f0:9c:e7:70:61:
         08:23:f9:fd:59:39:dc:dc:8b:90:1f:21:14:62:f8:ff:06:cf:
         ec:0c:bd:06:46:e3:52:bd:43:cf:f0:d2:fe:fd:35:11:15:47:
         69:0c:a5:27:6d:fa:8e:3e:bf:60:bf:60:0f:ca:0f:70:8a:c5:
         44:dd:f8:db:4d:d5:60:f6:05:74:ca:9a:9a:d6:89:8b:2e:76:
         7f:2c:f1:5c:35:a2:f3:e3:3e:b3:cd:c9:fa:0f:4f:17:c9:cf:
         a9:87:ad:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMc2+D3IsoFw6DQk2Jut/c+669JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCOEVGODkwRTE1OUM5N0M4NTRBMkZEOEE2QTUxQjNF
MzRFNjI2QzAeFw0yNTA1MTEwMDIzMDRaFw0yNTA1MTIwMTIwMDRaMDMxMTAvBgNV
BAMTKEUwNkQzODEwREYzREYwMzg3RTUzMkY5OEVGMEI0OEMwNzY4NjA3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkOq7QFfPhAJ53f4uS3cL+600
4xM7NVFD3YuACJpB0mjjhD57kCgyjk1uaYYE5WIj86+/O2Dnym4qAr70GdgmO9xT
gUrQ2+XZomV5SOSgkatai2ZdygnRpjau0B41h1/rZEMX9Oe6/C7YYOr6K198Rcop
vq7SPTR4xSLgG2PMpZuj5am6aQMIC7RakxlW6+CEaf8J5ZDsISTR0vfSUK/XlHGu
bLQp7lIeR83NO/iL3fb3l5WoKrVxU70pZt/gdVu0TEhWEgkYwetYMQnHMXQ0jMP5
5zn5dFy6gyFQMMB0rIjywlIOOa8W25Y5nAWazbsA3t3hodPSvwo8rsyao0qBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4G04EN898Dh+Uy+Y7wtIwHaGB44wHwYDVR0j
BBgwFoAUU7jviQ4VnJfIVKL9impRs+NOYmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMS81M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQjhFRjg5MEUxNTlDOTdD
ODU0QTJGRDhBNkE1MUIzRTM0RTYyNkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1luSmIvMS81
M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjbmv0KJijnBTZOdtBUQ+g1QPiONVeITTOGLK+DWYwqqM0sSXQFRn2e6Yl9O2
5SiT3ygofuA8fh4HXyuTTq7MsozGfMxLZSV1W3u8ByI4p0322/8aaLVd1fOiSk+r
VGIMABqTt/kzXbsAlqaVPiTHPa5haoGbUEt7uVgTJbiBUNOCKHypCev1zYwc+D2M
eVS2AKz9nKTzDx9kqwhyz/Cc53BhCCP5/Vk53NyLkB8hFGL4/wbP7Ay9BkbjUr1D
z/DS/v01ERVHaQylJ236jj6/YL9gD8oPcIrFRN34203VYPYFdMqamtaJiy52fyzx
XDWi8+M+s83J+g9PF8nPqYetlA==
-----END CERTIFICATE-----
Generated at Sun May 11 12:29:06 2025 by rpki-client