Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          5GZ3mfIn9UlnEtsFJwngcSSZgbj4P60uQLmqCg07gtQ=
Subject key identifier:   ED:A5:D8:5C:BB:AD:B8:89:71:85:C6:CF:A3:C5:9B:C8:A4:EC:75:01
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       3FAB7AC2EA0A324CBE6D06F5BB1F46F615CC0C38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          010E
Signing time:             Sun 11 May 2025 13:20:51 +0000
Manifest this update:     Sun 11 May 2025 13:15:51 +0000
Manifest next update:     Mon 12 May 2025 14:21:51 +0000
Files and hashes:         1: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: 2qTmrxUdkbRIvwib6+w7UvGkOQiloJ0+6GGIxAc9vEg=)
                          2: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: nV3EAzkjyjcLJlLYhUzZ1foiT4YiRW1MyOKwg9DBFxU=)
                          3: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: 7GhebfZkMpwDf74rrS7174rTkkTIlJFNXfbzkct2rJU=)
                          4: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: 3Ts042d/UEYTxmGCmrRlmH8gUcNhJn7pIwo1eyDzZ/Q=)
                          5: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: qMiNFX43HpOQVZCIWpr0E9vrcOp7CENY89pg+58dAoo=)
                          6: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: HaHwoyFWVmrHs3VdmJGyyZ+fSHR5dae8NikP/GrmCkE=)
                          7: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: 1qrEyc9df4Z2AG3zLlph44TwEtTy3IHCrOF8zS3oQn0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 14:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:7a:c2:ea:0a:32:4c:be:6d:06:f5:bb:1f:46:f6:15:cc:0c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: May 11 13:15:51 2025 GMT
            Not After : May 12 14:21:51 2025 GMT
        Subject: CN=EDA5D85CBBADB8897185C6CFA3C59BC8A4EC7501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:5c:40:00:c4:5c:3b:68:6a:7f:ca:db:7f:
                    b1:06:bf:57:46:68:43:43:fa:d2:fc:69:f4:08:92:
                    21:34:c1:8d:d9:db:c2:35:eb:24:a7:e2:16:6d:fc:
                    d1:f2:2a:49:6b:9d:e4:c6:cf:2a:0c:a7:39:41:9b:
                    7f:ab:c1:57:4d:fa:f0:b3:f2:60:b2:1f:72:8a:c7:
                    60:33:58:ad:fe:6c:46:53:f9:62:60:c1:81:0a:23:
                    af:94:14:e3:d1:78:29:42:3d:95:31:a6:f5:01:b9:
                    6f:6b:4e:bd:38:c4:da:be:45:aa:e8:e5:4a:57:d9:
                    0b:71:52:cf:9c:5e:15:f2:84:0e:9e:42:a9:f3:0d:
                    b3:c6:bb:3b:2e:c1:23:9b:28:b3:d7:d7:86:65:6d:
                    60:8e:a9:b6:16:e0:83:9c:08:78:af:58:8c:f9:da:
                    df:99:70:81:d0:23:fa:cd:36:14:6a:1a:75:11:0e:
                    37:5b:75:62:5f:73:db:6e:35:fb:2f:0b:1b:7a:2a:
                    6c:5b:72:8d:22:f5:5e:19:58:88:7d:40:12:16:d2:
                    8f:40:36:76:2d:f4:63:50:92:e5:e4:b9:e4:f5:86:
                    d3:53:0d:37:cd:16:8a:f1:fd:5a:38:94:a8:ba:12:
                    bc:eb:8b:cf:1c:bc:29:ad:47:ce:78:5e:d3:ff:8f:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:D8:5C:BB:AD:B8:89:71:85:C6:CF:A3:C5:9B:C8:A4:EC:75:01
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:22:3d:4b:d9:d0:6d:fe:18:3e:9c:2e:c3:5b:1c:1f:49:f3:
         ad:2a:1d:c6:88:29:b5:6b:71:07:28:ea:53:68:5b:5c:f2:a2:
         b3:eb:3f:40:ff:7a:d5:c8:f4:d7:f1:ee:ab:2c:a1:92:40:87:
         10:9f:12:5f:e3:c2:84:f3:01:a2:86:7a:44:94:d5:b4:b2:11:
         99:f9:0f:1d:18:f2:76:e9:8f:65:45:b1:4d:27:17:a1:be:e6:
         40:4c:e0:51:d4:e9:e4:0b:13:90:dc:4e:77:e0:5d:8c:84:a7:
         50:72:83:03:a4:6b:dc:3c:be:c4:78:15:88:c4:27:fb:ed:39:
         e1:1c:c1:54:fd:0e:dc:7b:cf:83:db:75:59:9a:0c:74:03:c9:
         cc:0b:35:bb:4c:76:7c:c1:1c:9a:11:9a:81:5c:18:70:ea:78:
         15:b4:ea:a1:3c:2a:3d:03:19:3c:32:b3:77:0d:d8:03:94:37:
         6c:db:c2:f5:5d:72:28:c9:83:92:19:cc:18:4f:58:86:54:3d:
         7e:1c:51:67:e7:3c:e0:b3:42:f6:bd:f7:06:68:14:e0:35:f4:
         f6:21:79:f4:14:8b:a9:38:a8:22:c8:a6:a7:28:b9:74:14:76:
         ae:c5:96:b8:94:45:f0:46:f9:26:76:f8:2e:ac:66:d7:5e:ac:
         75:04:1c:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP6t6wuoKMky+bQb1ux9G9hXMDDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEzRDYxRUE1ODQ3NjM3MDVBNzI0M0Y4N0QyNjMyN0VD
NUNBNjNCMDAeFw0yNTA1MTExMzE1NTFaFw0yNTA1MTIxNDIxNTFaMDMxMTAvBgNV
BAMTKEVEQTVEODVDQkJBREI4ODk3MTg1QzZDRkEzQzU5QkM4QTRFQzc1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRBFxAAMRcO2hqf8rbf7EGv1dG
aEND+tL8afQIkiE0wY3Z28I16ySn4hZt/NHyKklrneTGzyoMpzlBm3+rwVdN+vCz
8mCyH3KKx2AzWK3+bEZT+WJgwYEKI6+UFOPReClCPZUxpvUBuW9rTr04xNq+Raro
5UpX2QtxUs+cXhXyhA6eQqnzDbPGuzsuwSObKLPX14ZlbWCOqbYW4IOcCHivWIz5
2t+ZcIHQI/rNNhRqGnURDjdbdWJfc9tuNfsvCxt6Kmxbco0i9V4ZWIh9QBIW0o9A
NnYt9GNQkuXkueT1htNTDTfNForx/Vo4lKi6Erzri88cvCmtR854XtP/jzh9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7aXYXLutuIlxhcbPo8WbyKTsdQEwHwYDVR0j
BBgwFoAUIT1h6lhHY3BackP4fSYyfsXKY7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1
VlgvMC8yMTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxM0Q2MUVBNTg0NzYzNzA1
QTcyNDNGODdEMjYzMjdFQzVDQTYzQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1VlgvMC8y
MTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgSI9S9nQbf4YPpwuw1scH0nzrSodxogptWtxByjqU2hbXPKis+s/QP961cj0
1/HuqyyhkkCHEJ8SX+PChPMBooZ6RJTVtLIRmfkPHRjydumPZUWxTScXob7mQEzg
UdTp5AsTkNxOd+BdjISnUHKDA6Rr3Dy+xHgViMQn++054RzBVP0O3HvPg9t1WZoM
dAPJzAs1u0x2fMEcmhGagVwYcOp4FbTqoTwqPQMZPDKzdw3YA5Q3bNvC9V1yKMmD
khnMGE9YhlQ9fhxRZ+c84LNC9r33BmgU4DX09iF59BSLqTioIsimpyi5dBR2rsWW
uJRF8Eb5Jnb4Lqxm116sdQQclw==
-----END CERTIFICATE-----
Generated at Mon May 12 07:31:23 2025 by rpki-client