Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          NwLyFpdDVL1RFmecwZt+BAIRkkNdJ+9iJ9EohNqIbBE=
Subject key identifier:   23:33:F0:09:BA:07:58:BE:12:DD:3C:11:99:D9:C2:F0:F3:61:1B:0E
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       1B1EBC36EBAECBF86A2FEA692CBEA99219E8B86C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          0298
Signing time:             Fri 25 Jul 2025 12:19:07 +0000
Manifest this update:     Fri 25 Jul 2025 12:14:07 +0000
Manifest next update:     Sat 26 Jul 2025 17:46:07 +0000
Files and hashes:         1: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          2: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
                          3: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          4: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
                          5: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: kXfxp9ljMX2sDnJOsr+pW+MS3H63B4dczHctYL1Wyvk=)
                          6: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
                          7: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 17:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1e:bc:36:eb:ae:cb:f8:6a:2f:ea:69:2c:be:a9:92:19:e8:b8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Jul 25 12:14:07 2025 GMT
            Not After : Jul 26 17:46:07 2025 GMT
        Subject: CN=2333F009BA0758BE12DD3C1199D9C2F0F3611B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:f0:96:f8:ab:90:33:45:5c:07:dc:cf:a4:
                    67:a2:a4:d9:d1:a6:e2:08:d6:b1:43:61:5d:76:d8:
                    c7:c9:e4:aa:01:79:c1:73:f8:fa:1b:f8:00:70:1e:
                    37:3e:b8:50:b4:0d:3f:03:b2:32:77:62:29:e6:3d:
                    2d:65:66:2b:d3:94:ef:45:46:31:40:2b:ff:7c:6c:
                    bc:14:46:3b:48:5b:cd:02:b3:1c:92:e5:eb:4f:21:
                    fb:e0:0b:b8:72:fb:06:ea:23:fd:39:5f:14:b6:70:
                    bb:d2:c3:55:40:95:63:dd:12:8d:3c:28:d6:d2:28:
                    90:00:f5:8b:c9:0d:0c:a4:e0:11:88:2b:b0:80:7c:
                    56:e3:77:74:4c:d2:14:9f:60:4e:f9:60:35:55:10:
                    7c:6e:cc:4a:31:e2:92:15:aa:0c:22:ca:83:eb:b0:
                    35:0a:ec:bc:e6:de:19:14:57:23:cd:3a:a5:97:c9:
                    91:80:30:85:2f:c8:2c:99:4d:bc:43:94:3a:41:a3:
                    de:0f:79:28:02:f9:e8:42:cf:58:a1:77:e2:35:d0:
                    e6:8e:d6:f3:c2:b5:c5:11:de:41:f9:2c:24:fe:d9:
                    4a:37:0b:78:3e:f7:87:19:ac:85:86:ea:f0:5a:50:
                    28:bb:1b:40:c1:00:33:9b:69:98:8c:3b:c2:49:b0:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:F0:09:BA:07:58:BE:12:DD:3C:11:99:D9:C2:F0:F3:61:1B:0E
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:3e:64:df:60:3b:f1:04:bc:54:99:28:40:ed:e1:9a:31:
         2f:0f:eb:dd:cc:74:58:ae:e2:f6:55:d9:08:a6:74:4e:82:c0:
         da:86:c7:9d:17:99:f7:ac:01:91:7d:76:e7:47:24:ba:81:b6:
         bd:e9:99:5a:9f:19:0f:27:b8:9a:2c:99:c9:84:79:a5:2a:99:
         94:49:12:0d:cd:fc:75:f9:4e:1f:70:27:2a:40:ef:7a:0f:64:
         72:97:14:7a:c1:e3:40:34:6c:2b:2b:dc:7c:18:7f:5a:e8:77:
         80:54:fc:cc:77:06:9f:12:52:52:58:b7:40:77:41:28:bc:c9:
         1f:fd:4e:85:00:8e:d2:44:1a:01:5e:1c:f3:c7:f0:8c:d7:b3:
         4b:66:17:df:31:26:47:65:f5:b5:b7:c4:fb:74:83:07:81:62:
         4f:35:cb:09:8f:46:db:f9:c9:04:b8:a4:67:95:01:e8:dd:bc:
         36:69:1a:7d:15:95:13:08:38:0d:0a:36:2f:1c:e3:f2:33:0e:
         ae:91:4d:90:0d:31:dc:9b:f3:09:76:10:a8:41:83:df:1b:ff:
         7b:e9:e0:20:3f:f3:b8:e1:d2:9c:fb:42:ff:62:dd:a8:7b:48:
         da:13:22:3c:70:b9:a7:a1:27:97:f0:9c:43:53:a3:24:5c:54:
         cd:7c:b5:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGx68Nuuuy/hqL+ppLL6pkhnouGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBBMDY0OUJFQjc4NEQ3Nzg5ODM4MTNDRkZEOUQwMUY0
MkYyNEM5NTAeFw0yNTA3MjUxMjE0MDdaFw0yNTA3MjYxNzQ2MDdaMDMxMTAvBgNV
BAMTKDIzMzNGMDA5QkEwNzU4QkUxMkREM0MxMTk5RDlDMkYwRjM2MTFCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qfCW+KuQM0VcB9zPpGeipNnR
puII1rFDYV122MfJ5KoBecFz+Pob+ABwHjc+uFC0DT8DsjJ3YinmPS1lZivTlO9F
RjFAK/98bLwURjtIW80CsxyS5etPIfvgC7hy+wbqI/05XxS2cLvSw1VAlWPdEo08
KNbSKJAA9YvJDQyk4BGIK7CAfFbjd3RM0hSfYE75YDVVEHxuzEox4pIVqgwiyoPr
sDUK7Lzm3hkUVyPNOqWXyZGAMIUvyCyZTbxDlDpBo94PeSgC+ehCz1ihd+I10OaO
1vPCtcUR3kH5LCT+2Uo3C3g+94cZrIWG6vBaUCi7G0DBADObaZiMO8JJsAJRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIzPwCboHWL4S3TwRmdnC8PNhGw4wHwYDVR0j
BBgwFoAUAKBkm+t4TXeJg4E8/9nQH0LyTJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM056WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVyU0JhSzFKOEV2
eVcvMC8wMEEwNjQ5QkVCNzg0RDc3ODk4MzgxM0NGRkQ5RDAxRjQyRjI0Qzk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQTA2NDlCRUI3ODRENzc4
OTgzODEzQ0ZGRDlEMDFGNDJGMjRDOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M056WmtiS3BHVUF4b1BZYjZVVldBcGYyaFFrS3hSUnVyU0JhSzFKOEV2eVcvMC8w
MEEwNjQ5QkVCNzg0RDc3ODk4MzgxM0NGRkQ5RDAxRjQyRjI0Qzk1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMHw+ZN9gO/EEvFSZKEDt4ZoxLw/r3cx0WK7i9lXZCKZ0ToLA2obHnReZ96wB
kX1250ckuoG2vemZWp8ZDye4miyZyYR5pSqZlEkSDc38dflOH3AnKkDveg9kcpcU
esHjQDRsKyvcfBh/Wuh3gFT8zHcGnxJSUli3QHdBKLzJH/1OhQCO0kQaAV4c88fw
jNezS2YX3zEmR2X1tbfE+3SDB4FiTzXLCY9G2/nJBLikZ5UB6N28NmkafRWVEwg4
DQo2Lxzj8jMOrpFNkA0x3JvzCXYQqEGD3xv/e+ngID/zuOHSnPtC/2LdqHtI2hMi
PHC5p6Enl/CcQ1OjJFxUzXy12A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 05:48:41 2025 by rpki-client