Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          iLSEj13GaU7yBBtHhYk9AZxY/55JLVwuIX6K4Q2ZLao=
Subject key identifier:   C4:30:18:CE:F6:23:6D:4C:17:A5:C5:64:E6:FD:2D:C2:66:9C:6E:47
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       77988635330B61E933551857941F2B1339BE7A09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          025D
Signing time:             Wed 02 Jul 2025 22:17:57 +0000
Manifest this update:     Wed 02 Jul 2025 22:12:56 +0000
Manifest next update:     Fri 04 Jul 2025 00:23:56 +0000
Files and hashes:         1: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          2: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          3: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          4: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          5: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
                          6: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: hxJRNX5tIgxDVvcQtA5CK7VIttshNf9ZfdL8GD1h+rs=)
                          7: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
                          8: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:98:86:35:33:0b:61:e9:33:55:18:57:94:1f:2b:13:39:be:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Jul  2 22:12:56 2025 GMT
            Not After : Jul  4 00:23:56 2025 GMT
        Subject: CN=C43018CEF6236D4C17A5C564E6FD2DC2669C6E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:ac:f8:10:25:b7:64:b8:d6:dd:45:cf:45:
                    ea:d4:36:c2:b0:22:07:71:e9:8b:3c:36:c2:18:3e:
                    06:50:a6:94:1f:63:4a:59:05:d2:11:ec:4a:2c:c0:
                    39:65:0f:74:47:62:fa:f2:0e:7b:1c:b3:6c:a6:6c:
                    54:29:80:aa:87:32:a1:48:7b:c6:b8:21:d0:e5:29:
                    06:28:74:4c:76:67:2f:02:28:c5:6d:89:8f:24:e9:
                    1c:f1:ad:ce:be:67:a7:00:a8:a1:89:be:4d:2e:1a:
                    48:55:8d:5a:1c:2c:99:45:23:06:94:8d:a8:4d:98:
                    32:0e:31:8c:78:e4:ab:d9:42:15:b4:cb:06:72:ba:
                    c5:b6:49:a5:43:84:a6:61:a1:8f:33:17:57:6f:8f:
                    7f:4d:0a:83:66:4d:b0:5c:9f:84:af:ae:79:e4:6c:
                    5e:45:9a:13:01:bf:d9:37:68:d3:d9:73:24:43:8c:
                    b1:3a:c9:7c:15:7d:f6:36:c0:e0:3a:cc:8f:e1:03:
                    79:35:73:d8:ad:94:f0:98:c9:3f:96:a4:5d:77:6f:
                    4c:d3:95:b6:7c:24:81:75:cf:b1:6c:37:42:f8:39:
                    c5:b8:b1:10:e3:f9:03:5f:c9:6a:78:6b:7b:73:1e:
                    93:5d:95:96:56:85:f4:59:0a:12:f4:79:ef:72:f4:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:18:CE:F6:23:6D:4C:17:A5:C5:64:E6:FD:2D:C2:66:9C:6E:47
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:33:d7:46:03:e8:5c:6c:59:64:5a:de:7f:33:7b:c5:48:54:
         39:db:fa:50:f4:bf:a5:c0:d5:a2:0c:46:2a:74:f6:42:80:5f:
         c2:ae:e7:70:3a:ca:5e:9b:49:08:a4:b6:59:5b:be:6c:a0:75:
         c2:0c:f0:95:d9:45:43:dc:89:41:b9:80:30:2a:0f:64:04:53:
         9d:10:c7:7f:ad:64:fe:3c:3e:37:22:a6:bb:c9:b7:fc:98:ed:
         6e:98:0f:7f:88:71:e5:45:28:1c:11:19:39:5e:aa:92:2b:d8:
         8c:ec:36:d6:f2:0f:bd:d2:8f:44:5a:b4:16:b8:3c:90:52:a4:
         d9:82:9a:3e:da:2c:c0:77:b0:df:52:7c:58:77:2e:c6:d9:5c:
         5b:5e:03:73:8d:13:c1:ed:b5:0f:eb:b3:c7:0e:e4:70:ca:5c:
         3e:e3:0c:86:07:39:c5:bf:a7:5c:a1:f1:7d:e7:74:97:5d:b4:
         a8:b2:74:16:a9:fd:50:26:52:46:79:ea:01:f0:73:6f:9a:3e:
         9a:f7:12:ac:39:75:0a:46:54:f0:c3:c6:5c:5f:f7:ed:a1:2d:
         55:a5:8b:78:6e:83:33:db:94:f7:9b:78:b5:d9:3c:c6:91:94:
         c8:9b:40:65:b5:10:f9:96:dd:6c:99:cb:86:8c:2c:1f:21:d0:
         fb:9a:fa:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd5iGNTMLYekzVRhXlB8rEzm+egkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2RkZEM0MzMjA0NjE4RUYzQ0NFQjI5N0ZEMUE0MjA3
M0NENzEyQTAeFw0yNTA3MDIyMjEyNTZaFw0yNTA3MDQwMDIzNTZaMDMxMTAvBgNV
BAMTKEM0MzAxOENFRjYyMzZENEMxN0E1QzU2NEU2RkQyREMyNjY5QzZFNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG76z4ECW3ZLjW3UXPRerUNsKw
Igdx6Ys8NsIYPgZQppQfY0pZBdIR7EoswDllD3RHYvryDnscs2ymbFQpgKqHMqFI
e8a4IdDlKQYodEx2Zy8CKMVtiY8k6Rzxrc6+Z6cAqKGJvk0uGkhVjVocLJlFIwaU
jahNmDIOMYx45KvZQhW0ywZyusW2SaVDhKZhoY8zF1dvj39NCoNmTbBcn4Svrnnk
bF5FmhMBv9k3aNPZcyRDjLE6yXwVffY2wOA6zI/hA3k1c9itlPCYyT+WpF13b0zT
lbZ8JIF1z7FsN0L4OcW4sRDj+QNfyWp4a3tzHpNdlZZWhfRZChL0ee9y9AqVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxDAYzvYjbUwXpcVk5v0twmacbkcwHwYDVR0j
BBgwFoAUDW/9PDIEYY7zzOspf9GkIHPNcSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1a
NWcvMy8wRDZGRkQzQzMyMDQ2MThFRjNDQ0VCMjk3RkQxQTQyMDczQ0Q3MTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkZGRDNDMzIwNDYxOEVG
M0NDRUIyOTdGRDFBNDIwNzNDRDcxMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1aNWcvMy8w
RDZGRkQzQzMyMDQ2MThFRjNDQ0VCMjk3RkQxQTQyMDczQ0Q3MTJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAATPXRgPoXGxZZFrefzN7xUhUOdv6UPS/pcDVogxGKnT2QoBfwq7ncDrKXptJ
CKS2WVu+bKB1wgzwldlFQ9yJQbmAMCoPZARTnRDHf61k/jw+NyKmu8m3/JjtbpgP
f4hx5UUoHBEZOV6qkivYjOw21vIPvdKPRFq0Frg8kFKk2YKaPtoswHew31J8WHcu
xtlcW14Dc40Twe21D+uzxw7kcMpcPuMMhgc5xb+nXKHxfed0l120qLJ0Fqn9UCZS
RnnqAfBzb5o+mvcSrDl1CkZU8MPGXF/37aEtVaWLeG6DM9uU95t4tdk8xpGUyJtA
ZbUQ+ZbdbJnLhowsHyHQ+5r6gQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:18 2025 by rpki-client