Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
File:                     416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft (raw, json)
Hash identifier:          kVsLeWkjQOeczdKqOLZse/eX2TZD6GcvaiUbrjIxy9c=
Subject key identifier:   58:4D:9E:8B:42:92:8C:14:2C:A2:AF:B7:38:83:2C:8E:AF:C4:8A:71
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       4EB5194EDA3A74A3ECD41D0FB59233FA7E050A7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
Manifest number:          01AE
Signing time:             Wed 02 Jul 2025 20:04:00 +0000
Manifest this update:     Wed 02 Jul 2025 19:59:00 +0000
Manifest next update:     Thu 03 Jul 2025 23:33:00 +0000
Files and hashes:         1: 3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa (hash: Lb1dzQOkIQbIQmM4oSo3A07BaQmaXEFs6hM1hdRPcPQ=)
                          2: 3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa (hash: acfsvWHii4fb1tdKPkquwmWZzQDjZHXIDezBdt96+rU=)
                          3: 323830343a366536383a383030303a3a2f33342d3334203d3e20323730353935.roa (hash: wD5l5WjjUa2AyzCqUHRG8NkvCf8QAejguwhthurorHU=)
                          4: 323830343a366536383a3a2f33342d3334203d3e20323730353935.roa (hash: Ti8m79rPHY2UyQZHG1U2eDXbCpoNDjJmZFoix+2GDvA=)
                          5: 323830343a366536383a343030303a3a2f33342d3334203d3e20323730353935.roa (hash: 5NPDvMK3Y0v5S1oDxbONX8oUzzOZ7xE54y3Os/D9nlE=)
                          6: 3137372e3135322e3131302e302f32342d3234203d3e20323730353935.roa (hash: vUAKk3ShyoryDunnLoOtiYxgQL9av7RSfiUcQRZUQyU=)
                          7: 3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa (hash: gM2mycpFegWVccScJDUN3Ah3Utp42nV1LlQHPr1ZyVI=)
                          8: 323830343a366536383a3a2f33322d3332203d3e20323730353935.roa (hash: QG4moDwZOQXLpwJdJiWlvUiUrE6Ubv+Nh9F4ADrfp3w=)
                          9: 323830343a366536383a633030303a3a2f33342d3334203d3e20323730353935.roa (hash: QLKnAhtWCQq37Q7kO7y/FxJv/uFPonkVLOAnF/g6TJ8=)
                          10: 416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl (hash: j8KeXabvRr/ws72l5iSoH1jpLGXgUHlztB9iIUI0bEw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b5:19:4e:da:3a:74:a3:ec:d4:1d:0f:b5:92:33:fa:7e:05:0a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Jul  2 19:59:00 2025 GMT
            Not After : Jul  3 23:33:00 2025 GMT
        Subject: CN=584D9E8B42928C142CA2AFB738832C8EAFC48A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:52:92:8f:8e:24:9d:9e:2f:d1:af:f6:be:
                    52:cf:1c:39:0a:cb:f1:72:f8:46:73:48:66:a8:07:
                    f5:05:ef:bf:47:ba:9f:0a:11:b7:22:be:f7:5c:18:
                    be:0e:6e:49:da:dc:5e:a6:40:f1:c5:2d:2c:ba:69:
                    9a:f4:51:b5:a0:b0:99:a4:f3:c9:c4:58:bf:d9:ef:
                    eb:18:75:c8:26:ac:a8:e4:f2:e5:a5:ad:e6:7e:6d:
                    e9:a0:3f:ed:dd:93:e3:ae:ce:01:76:89:a8:97:54:
                    79:a0:28:b1:80:cc:37:67:34:f9:90:56:15:64:6d:
                    b9:c5:a5:00:74:e1:df:d2:3e:2b:dc:1c:bb:82:de:
                    1d:48:b2:18:ee:7c:98:8b:04:a2:ae:8a:19:b4:b1:
                    6d:f2:b6:e5:33:fb:ff:46:f3:5e:4d:ef:bd:1c:ca:
                    c9:78:70:4c:7e:67:ff:b7:5f:9c:8b:56:92:4d:e7:
                    56:56:e4:19:09:d2:a9:94:0d:4d:f8:7d:23:d6:56:
                    92:c8:e1:0e:5e:34:58:6b:e9:99:d3:60:97:10:8e:
                    44:98:2c:27:8e:b3:9c:fa:13:34:4e:1b:dd:62:51:
                    22:4e:04:21:90:6b:14:1c:57:9b:e8:0f:a8:2e:fa:
                    5a:5d:a2:12:b7:29:5e:a2:cc:d5:82:53:cd:ca:6f:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:9E:8B:42:92:8C:14:2C:A2:AF:B7:38:83:2C:8E:AF:C4:8A:71
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:68:3a:95:f7:91:2e:26:f8:21:ce:41:c9:4c:96:38:e2:
         0f:9b:ca:49:a5:c7:56:a7:f8:9f:d3:e3:46:9f:14:f4:4d:52:
         94:08:70:59:64:3a:13:92:7a:19:10:02:e1:0c:35:af:bd:ef:
         2d:4d:2c:2e:e3:63:b3:61:b8:17:62:96:97:ad:34:8d:59:bb:
         d5:03:d5:06:2d:e1:3d:f0:29:81:d8:f9:c7:fe:38:df:ef:0d:
         97:20:59:f7:ab:5e:aa:fa:9c:81:f8:0f:45:76:77:33:67:5c:
         89:5b:a3:1f:a9:00:ab:48:cf:42:7c:c7:d2:ec:e4:13:1f:c9:
         48:4c:4c:5d:20:39:ce:8d:b2:09:79:3e:93:10:47:f4:9c:bc:
         90:a6:4d:8b:c4:fc:82:1d:88:3f:00:93:54:0a:2f:d2:39:d5:
         4d:2a:61:d7:06:58:b2:da:42:eb:cd:4a:9f:71:7a:5d:78:1a:
         42:71:9c:77:01:68:af:06:01:30:94:26:77:80:c8:22:62:0c:
         bf:f3:e0:9b:de:34:b2:88:95:3c:ce:42:19:9b:07:51:1f:04:
         63:c6:cd:f0:18:d1:7a:b9:4d:dd:81:33:c8:83:9c:f0:d9:4a:
         22:fc:64:23:38:1b:ea:48:ef:ab:bf:3c:ce:29:46:64:29:c7:
         86:15:61:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTrUZTto6dKPs1B0PtZIz+n4FCn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2QUIwRTUwNUE5QjAyNzlFRjM3RkZBNzg2QTRCQkRG
OEJCRkQ0QTAeFw0yNTA3MDIxOTU5MDBaFw0yNTA3MDMyMzMzMDBaMDMxMTAvBgNV
BAMTKDU4NEQ5RThCNDI5MjhDMTQyQ0EyQUZCNzM4ODMyQzhFQUZDNDhBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBb1KSj44knZ4v0a/2vlLPHDkK
y/Fy+EZzSGaoB/UF779Hup8KEbcivvdcGL4Obkna3F6mQPHFLSy6aZr0UbWgsJmk
88nEWL/Z7+sYdcgmrKjk8uWlreZ+bemgP+3dk+OuzgF2iaiXVHmgKLGAzDdnNPmQ
VhVkbbnFpQB04d/SPivcHLuC3h1IshjufJiLBKKuihm0sW3ytuUz+/9G815N770c
ysl4cEx+Z/+3X5yLVpJN51ZW5BkJ0qmUDU34fSPWVpLI4Q5eNFhr6ZnTYJcQjkSY
LCeOs5z6EzROG91iUSJOBCGQaxQcV5voD6gu+lpdohK3KV6izNWCU83Kb/tJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUWE2ei0KSjBQsoq+3OIMsjq/EinEwHwYDVR0j
BBgwFoAUQWqw5QWpsCee83/6eGpLvfi7/UowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhZM1lDRFgzN3g5dkxUR1NNNHhtOHBTcW5GNWdVWjU4d3U1UUhKQ3FS
VDgvMC80MTZBQjBFNTA1QTlCMDI3OUVGMzdGRkE3ODZBNEJCREY4QkJGRDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNkFCMEU1MDVBOUIwMjc5
RUYzN0ZGQTc4NkE0QkJERjhCQkZENEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGhZM1lDRFgzN3g5dkxUR1NNNHhtOHBTcW5GNWdVWjU4d3U1UUhKQ3FSVDgvMC80
MTZBQjBFNTA1QTlCMDI3OUVGMzdGRkE3ODZBNEJCREY4QkJGRDRBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdaxoOpX3kS4m+CHOQclMljjiD5vKSaXHVqf4n9PjRp8U9E1SlAhwWWQ6E5J6
GRAC4Qw1r73vLU0sLuNjs2G4F2KWl600jVm71QPVBi3hPfApgdj5x/443+8NlyBZ
96teqvqcgfgPRXZ3M2dciVujH6kAq0jPQnzH0uzkEx/JSExMXSA5zo2yCXk+kxBH
9Jy8kKZNi8T8gh2IPwCTVAov0jnVTSph1wZYstpC681Kn3F6XXgaQnGcdwForwYB
MJQmd4DIImIMv/Pgm940soiVPM5CGZsHUR8EY8bN8BjRerlN3YEzyIOc8NlKIvxk
Izgb6kjvq788zilGZCnHhhVhKg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:01:26 2025 by rpki-client