Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
File:                     8DA0474053F934313743C68AD25CD499279BFBF9.mft (raw, json)
Hash identifier:          HhCxgpU3oQR4BgDGzOUKVs+n2BdGpJF7ynJrQEW0C80=
Subject key identifier:   D8:02:35:97:38:D6:1C:98:A3:94:58:79:B1:70:18:40:A0:48:D4:1B
Authority key identifier: 8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9
Certificate issuer:       /CN=8DA0474053F934313743C68AD25CD499279BFBF9
Certificate serial:       0102FD8504D08D60CA835DF4547E3A43753AB241
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
Manifest number:          1B
Signing time:             Sat 10 May 2025 08:26:02 +0000
Manifest this update:     Sat 10 May 2025 08:21:02 +0000
Manifest next update:     Sun 11 May 2025 12:25:02 +0000
Files and hashes:         1: 34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa (hash: DXy0rYxxt7MRqxMFQccm8RavR3mI5ZmVaMn967hwlDI=)
                          2: 323830343a343732383a3a2f33332d3333203d3e20323637303335.roa (hash: 3cUS7bg70zbmJcmM+U/5oWPdMFCDW3W544qt6iVEW0Y=)
                          3: 323830343a343732383a3a2f33322d3332203d3e20323637303335.roa (hash: iXdxfgala0Og7vAGKUGUSiFkSNboMUWofm9g+9WCXdo=)
                          4: 323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (hash: JXtWl+CBu6/bp0DCenHAyCNFDR91YP/AFTUnnLwFBpQ=)
                          5: 8DA0474053F934313743C68AD25CD499279BFBF9.crl (hash: cpumy+/2N89e3F69q03eCyhmiUujZf+z/OoPQjSvDOs=)
                          6: 34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa (hash: VVo+i9lVdUgSW+ft7E2SEK2dpU1Wus/AMOmavQRgxro=)
                          7: 34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa (hash: +wWEHwIXiKbMKXFxswXueNVgWPCHsSXTi6FIE2g63eo=)
                          8: 34352e3232372e3134382e302f32332d3233203d3e20323637303335.roa (hash: 2lyYChgm+rrJ2Yr0KIRM4ptX1uSYW1RDavB14dm8kW4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:02:fd:85:04:d0:8d:60:ca:83:5d:f4:54:7e:3a:43:75:3a:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA0474053F934313743C68AD25CD499279BFBF9
        Validity
            Not Before: May 10 08:21:02 2025 GMT
            Not After : May 11 12:25:02 2025 GMT
        Subject: CN=D802359738D61C98A3945879B1701840A048D41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:5b:34:30:4d:81:c8:d6:ea:3b:19:71:17:
                    31:44:0f:4c:30:3f:d1:9f:90:16:d6:51:cd:36:69:
                    6b:a5:fc:1d:68:f6:5c:4c:05:69:03:40:06:9b:75:
                    39:4b:4c:58:ff:88:a7:62:48:57:e7:00:93:98:17:
                    a7:4b:e2:bc:5f:b5:61:b4:f7:ed:5c:da:d0:95:23:
                    cc:c3:c7:de:ee:c8:3f:14:9a:02:d9:c5:3b:d0:b6:
                    59:51:31:63:ec:ee:da:e1:02:73:39:97:cb:f1:63:
                    da:5b:96:50:5e:c2:9a:cc:d5:c8:07:3e:dd:1c:e2:
                    fe:92:07:74:0d:f5:13:00:49:22:7d:07:ce:75:f9:
                    ce:18:b4:33:ef:55:95:5f:76:24:fb:30:e4:43:42:
                    d2:9f:9e:7a:9c:26:f4:71:99:e6:84:1e:93:0f:87:
                    3c:62:92:53:71:ed:5b:fa:b2:ba:4a:bf:5e:d1:cd:
                    31:b2:f4:f6:e5:d5:17:76:94:c0:95:39:d3:66:d9:
                    37:bf:64:72:f7:1c:2e:fe:59:f7:1e:44:51:21:69:
                    bb:40:24:e8:5a:59:69:22:e9:2f:83:4f:dc:75:ac:
                    a5:6b:bb:2c:c8:b4:cf:a6:28:f4:f9:aa:fa:0e:29:
                    45:3f:61:17:0e:08:11:9e:12:d4:71:67:fe:06:86:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:35:97:38:D6:1C:98:A3:94:58:79:B1:70:18:40:A0:48:D4:1B
            X509v3 Authority Key Identifier:
                keyid:8D:A0:47:40:53:F9:34:31:37:43:C6:8A:D2:5C:D4:99:27:9B:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DA0474053F934313743C68AD25CD499279BFBF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/8DA0474053F934313743C68AD25CD499279BFBF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:19:48:42:88:b6:ed:3a:12:16:82:6c:3f:10:53:b3:13:
         69:f2:79:93:d0:0b:af:c2:48:58:9a:79:54:a3:af:93:8f:c5:
         a6:f3:3c:d8:7a:38:be:01:2f:e9:5b:f3:f5:94:7f:cc:58:be:
         0e:7b:81:95:c2:78:35:7d:7a:cc:6f:69:4b:5a:9c:50:c6:a5:
         27:36:53:d4:3c:9f:c5:4b:d1:2d:bb:46:8e:12:22:37:5d:12:
         82:f4:c4:77:f4:53:e1:4e:8e:32:33:2b:15:e3:5b:0e:43:8a:
         60:75:2a:af:f3:a5:ab:81:4a:f3:b9:83:78:87:6b:95:e0:80:
         aa:6d:0c:18:95:bd:88:77:57:4d:26:f3:f0:cc:04:34:48:3d:
         d5:49:1e:44:08:4c:14:b2:87:5b:89:b2:42:1f:38:91:da:ca:
         3e:db:68:2b:da:f7:bc:b7:75:37:58:fb:89:b2:00:ba:21:9e:
         3a:19:13:cd:95:03:5c:ed:74:f7:db:31:b3:db:3c:fd:17:b4:
         35:f9:b0:de:78:29:55:f2:56:36:fe:ba:f5:d3:1b:41:62:9e:
         ad:d1:ba:e7:ec:ad:0a:90:69:75:ec:e4:1d:48:a5:58:f8:09:
         2e:3e:dd:13:1f:27:1a:3c:21:6f:af:3a:2b:39:d0:05:84:37:
         97:76:67:29
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUAQL9hQTQjWDKg130VH46Q3U6skEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBMDQ3NDA1M0Y5MzQzMTM3NDNDNjhBRDI1Q0Q0OTky
NzlCRkJGOTAeFw0yNTA1MTAwODIxMDJaFw0yNTA1MTExMjI1MDJaMDMxMTAvBgNV
BAMTKEQ4MDIzNTk3MzhENjFDOThBMzk0NTg3OUIxNzAxODQwQTA0OEQ0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnj1s0ME2ByNbqOxlxFzFED0ww
P9GfkBbWUc02aWul/B1o9lxMBWkDQAabdTlLTFj/iKdiSFfnAJOYF6dL4rxftWG0
9+1c2tCVI8zDx97uyD8UmgLZxTvQtllRMWPs7trhAnM5l8vxY9pbllBewprM1cgH
Pt0c4v6SB3QN9RMASSJ9B851+c4YtDPvVZVfdiT7MORDQtKfnnqcJvRxmeaEHpMP
hzxiklNx7Vv6srpKv17RzTGy9Pbl1Rd2lMCVOdNm2Te/ZHL3HC7+WfceRFEhabtA
JOhaWWki6S+DT9x1rKVruyzItM+mKPT5qvoOKUU/YRcOCBGeEtRxZ/4GhkkjAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU2AI1lzjWHJijlFh5sXAYQKBI1BswHwYDVR0j
BBgwFoAUjaBHQFP5NDE3Q8aK0lzUmSeb+/kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvOERBMDQ3NDA1M0Y5MzQzMTM3NDNDNjhBRDI1Q0Q0OTkyNzlCRkJGOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84REEwNDc0MDUzRjkzNDMxMzc0
M0M2OEFEMjVDRDQ5OTI3OUJGQkY5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lK
blJCVW9MVnJnVjZ2S29MN21pVXBncTVvTEtrbkxkWUZ5NGhpZFUzRTYvMC84REEw
NDc0MDUzRjkzNDMxMzc0M0M2OEFEMjVDRDQ5OTI3OUJGQkY5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
J5oZSEKItu06EhaCbD8QU7MTafJ5k9ALr8JIWJp5VKOvk4/FpvM82Ho4vgEv6Vvz
9ZR/zFi+DnuBlcJ4NX16zG9pS1qcUMalJzZT1DyfxUvRLbtGjhIiN10SgvTEd/RT
4U6OMjMrFeNbDkOKYHUqr/Olq4FK87mDeIdrleCAqm0MGJW9iHdXTSbz8MwENEg9
1UkeRAhMFLKHW4myQh84kdrKPttoK9r3vLd1N1j7ibIAuiGeOhkTzZUDXO1099sx
s9s8/Re0Nfmw3ngpVfJWNv669dMbQWKerdG65+ytCpBpdezkHUilWPgJLj7dEx8n
Gjwhb686KznQBYQ3l3ZnKQ==
-----END CERTIFICATE-----
Generated at Sat May 10 10:14:09 2025 by rpki-client