Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
File:                     250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft (raw, json)
Hash identifier:          pS/8sRZfOTt2iRqXHFm/5zd9Zl4Y5yv9jCZlJxlNQzg=
Subject key identifier:   4C:38:0E:F5:AB:90:FB:16:E9:FF:88:6D:8C:11:E8:13:EC:B6:6F:62
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       607535D2E5D7E0D1872D94C19A04291CC5A8DC46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
Manifest number:          02A0
Signing time:             Sat 23 Aug 2025 01:47:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:42:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:52:57 +0000
Files and hashes:         1: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: +FZe3/GZkagt33qvR402xt+sHt5bbMI94in3uZcKxU0=)
                          2: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: SLdN7miKDj6zZuAzWis/kDxA3bVq8JmQYeBgk9u4V2o=)
                          3: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: O4umjiYVU7j4EsoyzkJkKmVp7SWzfxGg5KPRjQx133g=)
                          4: 3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (hash: /odd+Ifzze3NEC/rWSCGt7sN+x7Rpz4jrkNYIPyVaU8=)
                          5: 3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (hash: bwRfzRBEN6OCYcWYenNjpcybKLc7h5APupWGkAS6aoA=)
                          6: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: +EL9N8Kkyxh/h6Yu6nkKSNBOQxAiEN0kM3VLnapBiMk=)
                          7: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: bF23rWLfiATcolX7e+WvWEMbkjG+FJddzU4ENbylUas=)
                          8: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: qEUNQRMsYNR1m04gVAHTSFhJbxEs97UqSXwSoKGJ62o=)
                          9: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl (hash: VWnKN7sz9nVHMRew1Oo7WVvwtuctaijc3G6j/ZVXNU0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:75:35:d2:e5:d7:e0:d1:87:2d:94:c1:9a:04:29:1c:c5:a8:dc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Aug 23 01:42:57 2025 GMT
            Not After : Aug 24 01:52:57 2025 GMT
        Subject: CN=4C380EF5AB90FB16E9FF886D8C11E813ECB66F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:e2:31:3c:87:99:f1:03:3e:2a:ff:ac:72:
                    ec:5d:17:00:1b:17:d3:89:7d:2b:34:14:ad:a9:ae:
                    0c:14:e8:d9:1d:66:4d:56:ad:28:ba:f4:ae:4f:16:
                    45:d5:3c:04:48:9a:29:66:7e:65:22:8a:b9:01:32:
                    ad:8e:0a:09:b3:f4:57:67:62:8a:02:0a:24:f3:d8:
                    9e:26:c6:20:00:16:c1:15:d0:21:ac:86:4f:f3:f8:
                    22:53:84:1b:fb:43:03:2f:1a:44:b4:9d:33:c2:6a:
                    37:5b:72:c1:55:fd:53:fd:d5:52:1e:c9:a8:47:2c:
                    4d:29:d5:16:3c:34:de:7d:f7:5d:e6:1e:df:c5:a6:
                    5c:c6:b3:36:e8:a7:19:12:54:30:4d:71:d0:1e:2f:
                    3d:f6:5b:d3:cb:c7:80:8b:d9:ff:85:fb:16:a0:7a:
                    c0:2e:b0:ee:21:8e:34:fe:0c:aa:02:f1:0c:03:28:
                    77:e0:35:ee:bd:46:5c:d8:aa:b0:8a:c6:10:7d:67:
                    f1:5f:79:3b:cc:4f:b3:9f:25:96:e9:8e:52:37:5c:
                    ae:4e:7c:ac:f1:9a:c6:d8:6c:28:6c:1a:c4:29:6f:
                    e9:77:af:3c:03:a2:19:cd:6c:e9:1b:e6:b7:b7:e0:
                    18:21:fa:eb:c4:3c:92:70:48:f2:0f:b3:d0:bf:15:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:0E:F5:AB:90:FB:16:E9:FF:88:6D:8C:11:E8:13:EC:B6:6F:62
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:35:ae:2b:c6:cb:55:86:df:7f:21:7c:d5:d4:87:b8:51:a7:
         e5:49:a3:1e:a5:03:4d:fe:67:70:9e:a4:d7:61:11:d6:1b:57:
         4a:cd:55:e3:6e:8d:ff:24:31:5e:a2:ae:26:5c:10:31:c4:80:
         4f:5d:32:5f:ed:1c:cb:76:91:42:8b:91:65:ef:97:23:4b:99:
         a8:01:f8:d7:57:31:3c:80:ed:b1:c4:88:3f:fc:00:69:c2:64:
         6b:27:74:7c:34:65:af:d5:c6:fd:7e:42:90:5e:70:e3:a0:f2:
         72:fb:3c:46:d8:35:4c:20:b3:a0:83:c3:dd:bf:a2:fd:24:35:
         49:2c:1e:50:cf:5d:0f:98:2a:f5:58:a2:df:77:8f:28:38:64:
         41:23:a9:72:01:52:ec:87:e2:0f:1e:56:f5:a5:82:04:6f:2b:
         8e:b1:40:3f:1b:f3:d7:ab:03:b5:c6:7e:1b:81:97:a3:f3:8d:
         78:2a:20:d8:24:54:f6:bc:1f:ae:e1:f9:09:1e:a7:15:33:7e:
         e6:30:29:c3:ad:48:a5:aa:f6:08:b7:64:fa:2d:e2:12:66:e3:
         cd:2d:43:e8:aa:1f:82:63:c0:2e:5e:7a:a7:db:dc:b6:e9:96:
         6d:06:e3:c5:6a:e2:d9:0a:1a:9b:08:09:b4:71:91:99:3e:8a:
         be:71:71:aa
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYHU10uXX4NGHLZTBmgQpHMWo3EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJC
MjdDRjg2RDAeFw0yNTA4MjMwMTQyNTdaFw0yNTA4MjQwMTUyNTdaMDMxMTAvBgNV
BAMTKDRDMzgwRUY1QUI5MEZCMTZFOUZGODg2RDhDMTFFODEzRUNCNjZGNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7eIxPIeZ8QM+Kv+scuxdFwAb
F9OJfSs0FK2prgwU6NkdZk1WrSi69K5PFkXVPARImilmfmUiirkBMq2OCgmz9Fdn
YooCCiTz2J4mxiAAFsEV0CGshk/z+CJThBv7QwMvGkS0nTPCajdbcsFV/VP91VIe
yahHLE0p1RY8NN59913mHt/FplzGszbopxkSVDBNcdAeLz32W9PLx4CL2f+F+xag
esAusO4hjjT+DKoC8QwDKHfgNe69RlzYqrCKxhB9Z/FfeTvMT7OfJZbpjlI3XK5O
fKzxmsbYbChsGsQpb+l3rzwDohnNbOkb5re34Bgh+uvEPJJwSPIPs9C/FeRzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUTDgO9auQ+xbp/4htjBHoE+y2b2IwHwYDVR0j
BBgwFoAUJQsK1lpLeMZN1NVool0sK7J8+G0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzEvMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJCMjdDRjg2RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNTBCMEFENjVBNEI3OEM2NERE
NEQ1NjhBMjVEMkMyQkIyN0NGODZELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hw
UXVnVTZZV1dYU3c3Ykg0NlFueG9xNUhpOVBIckgxaEFZR1UyZXJqUncvMS8yNTBC
MEFENjVBNEI3OEM2NERENEQ1NjhBMjVEMkMyQkIyN0NGODZELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
NjWuK8bLVYbffyF81dSHuFGn5UmjHqUDTf5ncJ6k12ER1htXSs1V426N/yQxXqKu
JlwQMcSAT10yX+0cy3aRQouRZe+XI0uZqAH411cxPIDtscSIP/wAacJkayd0fDRl
r9XG/X5CkF5w46Dycvs8Rtg1TCCzoIPD3b+i/SQ1SSweUM9dD5gq9Vii33ePKDhk
QSOpcgFS7IfiDx5W9aWCBG8rjrFAPxvz16sDtcZ+G4GXo/ONeCog2CRU9rwfruH5
CR6nFTN+5jApw61Ipar2CLdk+i3iEmbjzS1D6KofgmPALl56p9vctumWbQbjxWri
2QoamwgJtHGRmT6KvnFxqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:56:36 2025 by rpki-client