Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
File:                     4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft (raw, json)
Hash identifier:          ZcctYZYvYlYIY7hbmWzPus5Fw1+YAt/Vy6Dr6ZbO7ew=
Subject key identifier:   22:62:84:30:AE:45:A7:11:C5:F1:04:4C:38:B1:5B:A5:83:02:FB:30
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       608D2C65F19007CB0A866BC205D9043BD32A9094
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
Manifest number:          025B
Signing time:             Thu 08 May 2025 19:20:00 +0000
Manifest this update:     Thu 08 May 2025 19:15:00 +0000
Manifest next update:     Fri 09 May 2025 19:20:00 +0000
Files and hashes:         1: 3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa (hash: b5u6wlPF7EShO6uaC7na2EIB4MoLrsSCJEwgBshg2Ws=)
                          2: 323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa (hash: gkpUhjaFwoqPDt59t+CIWnrFQMO0V6Dl6XIiLUnYsbk=)
                          3: 323830343a346132303a383036303a3a2f34342d3434203d3e20323637323230.roa (hash: qVnn98/2im6Mgq6+4iayDUYuA12/Sspq/vGJSCP4g6s=)
                          4: 34352e3233312e33362e302f32322d3234203d3e20323637323230.roa (hash: YfFqYAjWQxr3WlTttHr97Z9Lj82F3Z/n3Y6JNlslAGU=)
                          5: 323830343a346132303a3a2f33322d3336203d3e20323637323230.roa (hash: 61rNpAD1q/Cw/IP595PjZ6Ar/NI/wIKvq7Zo+9XTqL8=)
                          6: 4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl (hash: 4MmW8MUyE78hg/URTQWdrOrXES0AMRbIO63n+thSTyc=)
                          7: 323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa (hash: hiLWLPz+Q0WehzSlWDIOVAdx/Z6HtXePArAie2p3beE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:2c:65:f1:90:07:cb:0a:86:6b:c2:05:d9:04:3b:d3:2a:90:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: May  8 19:15:00 2025 GMT
            Not After : May  9 19:20:00 2025 GMT
        Subject: CN=3082010A0282010100B1058E41C627844FCC17C4C1C08D45C6416FDF72933C2E1CC6288E7CF6BA9D7946FD85C5A3E3C804E1227D3059D3730488F85EE40C063ABEB68C6B5817441B167F172056F06BAF31A6D9B52C3D2C28FE9EFB12541DB0C570A2A54EFEE78531EAD42DEDBE99D4356E2E340B7D1E2D5752F3A2331A171CE4A994DBF2D9121145C787E8C42779C60BA728A23867FC5E2E1126CFB879478AF10E594A2A94DE0385F44B9B8E325BF8D6277FB209FBC4565F30CC1D191E8657DB9356AF8CB80150C9D69E7A3D7F938D0736020C5A1F1D31C33C42A1E84FEB6A19C0FA65488A901C4A5CF2100DB518B5DD94BEBE8D0D3F903CE7061533AF6C9BBCEBAC4A4E2AC2AAF3910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:8e:41:c6:27:84:4f:cc:17:c4:c1:c0:8d:
                    45:c6:41:6f:df:72:93:3c:2e:1c:c6:28:8e:7c:f6:
                    ba:9d:79:46:fd:85:c5:a3:e3:c8:04:e1:22:7d:30:
                    59:d3:73:04:88:f8:5e:e4:0c:06:3a:be:b6:8c:6b:
                    58:17:44:1b:16:7f:17:20:56:f0:6b:af:31:a6:d9:
                    b5:2c:3d:2c:28:fe:9e:fb:12:54:1d:b0:c5:70:a2:
                    a5:4e:fe:e7:85:31:ea:d4:2d:ed:be:99:d4:35:6e:
                    2e:34:0b:7d:1e:2d:57:52:f3:a2:33:1a:17:1c:e4:
                    a9:94:db:f2:d9:12:11:45:c7:87:e8:c4:27:79:c6:
                    0b:a7:28:a2:38:67:fc:5e:2e:11:26:cf:b8:79:47:
                    8a:f1:0e:59:4a:2a:94:de:03:85:f4:4b:9b:8e:32:
                    5b:f8:d6:27:7f:b2:09:fb:c4:56:5f:30:cc:1d:19:
                    1e:86:57:db:93:56:af:8c:b8:01:50:c9:d6:9e:7a:
                    3d:7f:93:8d:07:36:02:0c:5a:1f:1d:31:c3:3c:42:
                    a1:e8:4f:eb:6a:19:c0:fa:65:48:8a:90:1c:4a:5c:
                    f2:10:0d:b5:18:b5:dd:94:be:be:8d:0d:3f:90:3c:
                    e7:06:15:33:af:6c:9b:bc:eb:ac:4a:4e:2a:c2:aa:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:84:30:AE:45:A7:11:C5:F1:04:4C:38:B1:5B:A5:83:02:FB:30
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:59:3c:03:08:b1:3a:88:07:8b:d9:ee:6c:a9:d8:91:ae:b0:
         ff:70:75:44:3d:12:79:db:9f:94:6c:51:89:72:19:60:92:6d:
         17:aa:cd:34:66:e9:55:4f:6f:f1:4a:7a:fe:fd:a3:63:35:e4:
         18:e0:78:b5:9e:05:37:ea:66:cd:29:93:ac:24:7f:b6:65:1c:
         c3:c1:0f:8a:87:36:e2:29:a5:fd:2b:fa:6e:d0:5c:c9:17:4c:
         d0:7a:fe:62:f3:f4:3d:73:07:47:d6:d7:0c:51:5d:52:f2:6c:
         28:e9:df:b0:45:68:90:ed:cb:9d:52:25:b3:33:06:05:aa:48:
         12:fa:ad:b1:09:ec:c1:0f:8a:a2:e4:0e:3b:9a:39:74:ac:cf:
         62:d2:34:33:6b:48:5e:2d:9e:1e:a1:0a:d3:e0:00:20:08:ce:
         dc:05:85:46:c8:c8:35:25:b0:7b:e8:84:56:91:e3:43:05:ee:
         32:71:f7:46:3e:d0:68:70:9a:31:14:ce:72:eb:33:d3:65:0b:
         15:0d:65:e7:bf:9f:fc:46:39:f7:0d:1d:fd:1e:25:1d:8a:23:
         bb:3e:ff:85:aa:e3:37:de:d9:59:91:6b:0e:d3:fd:d1:1b:33:
         8b:db:49:33:fe:3f:ad:18:11:0b:cb:a1:9f:5e:b6:6d:72:7e:
         ec:94:e6:2b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUYI0sZfGQB8sKhmvCBdkEO9MqkJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5QkE4RDkwM0Y1QTBBM0Q2OTJDOUYyRENEMUVFNUND
MDhBMjEzQjAeFw0yNTA1MDgxOTE1MDBaFw0yNTA1MDkxOTIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjEwNThFNDFDNjI3ODQ0RkND
MTdDNEMxQzA4RDQ1QzY0MTZGREY3MjkzM0MyRTFDQzYyODhFN0NGNkJBOUQ3OTQ2
RkQ4NUM1QTNFM0M4MDRFMTIyN0QzMDU5RDM3MzA0ODhGODVFRTQwQzA2M0FCRUI2
OEM2QjU4MTc0NDFCMTY3RjE3MjA1NkYwNkJBRjMxQTZEOUI1MkMzRDJDMjhGRTlF
RkIxMjU0MURCMEM1NzBBMkE1NEVGRUU3ODUzMUVBRDQyREVEQkU5OUQ0MzU2RTJF
MzQwQjdEMUUyRDU3NTJGM0EyMzMxQTE3MUNFNEE5OTREQkYyRDkxMjExNDVDNzg3
RThDNDI3NzlDNjBCQTcyOEEyMzg2N0ZDNUUyRTExMjZDRkI4Nzk0NzhBRjEwRTU5
NEEyQTk0REUwMzg1RjQ0QjlCOEUzMjVCRjhENjI3N0ZCMjA5RkJDNDU2NUYzMEND
MUQxOTFFODY1N0RCOTM1NkFGOENCODAxNTBDOUQ2OUU3QTNEN0Y5MzhEMDczNjAy
MEM1QTFGMUQzMUMzM0M0MkExRTg0RkVCNkExOUMwRkE2NTQ4OEE5MDFDNEE1Q0Yy
MTAwREI1MThCNUREOTRCRUJFOEQwRDNGOTAzQ0U3MDYxNTMzQUY2QzlCQkNFQkFD
NEE0RTJBQzJBQUYzOTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsQWOQcYnhE/MF8TBwI1FxkFv33KTPC4cxiiOfPa6nXlG/YXFo+PI
BOEifTBZ03MEiPhe5AwGOr62jGtYF0QbFn8XIFbwa68xptm1LD0sKP6e+xJUHbDF
cKKlTv7nhTHq1C3tvpnUNW4uNAt9Hi1XUvOiMxoXHOSplNvy2RIRRceH6MQnecYL
pyiiOGf8Xi4RJs+4eUeK8Q5ZSiqU3gOF9EubjjJb+NYnf7IJ+8RWXzDMHRkehlfb
k1avjLgBUMnWnno9f5ONBzYCDFofHTHDPEKh6E/rahnA+mVIipAcSlzyEA21GLXd
lL6+jQ0/kDznBhUzr2ybvOusSk4qwqrzkQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FCJihDCuRacRxfEETDixW6WDAvswMB8GA1UdIwQYMBaAFE2bqNkD9aCj1pLJ8tzR
7lzAiiE7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dETWpiUGlCQjNtc1Zx
MkNKVm02MW54WEdVV2RKYTJvclAzRldXblZzR1JvLzEvNEQ5QkE4RDkwM0Y1QTBB
M0Q2OTJDOUYyRENEMUVFNUNDMDhBMjEzQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RDlCQThEOTAzRjVBMEEzRDY5MkM5RjJEQ0QxRUU1Q0MwOEEy
MTNCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dETWpiUGlCQjNtc1ZxMkNKVm02
MW54WEdVV2RKYTJvclAzRldXblZzR1JvLzEvNEQ5QkE4RDkwM0Y1QTBBM0Q2OTJD
OUYyRENEMUVFNUNDMDhBMjEzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL9ZPAMIsTqIB4vZ7myp2JGu
sP9wdUQ9Ennbn5RsUYlyGWCSbReqzTRm6VVPb/FKev79o2M15BjgeLWeBTfqZs0p
k6wkf7ZlHMPBD4qHNuIppf0r+m7QXMkXTNB6/mLz9D1zB0fW1wxRXVLybCjp37BF
aJDty51SJbMzBgWqSBL6rbEJ7MEPiqLkDjuaOXSsz2LSNDNrSF4tnh6hCtPgACAI
ztwFhUbIyDUlsHvohFaR40MF7jJx90Y+0GhwmjEUznLrM9NlCxUNZee/n/xGOfcN
Hf0eJR2KI7s+/4Wq4zfe2VmRaw7T/dEbM4vbSTP+P60YEQvLoZ9etm1yfuyU5is=
-----END CERTIFICATE-----
Generated at Thu May 8 21:09:49 2025 by rpki-client