Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
File:                     961AE5D479B2534022682B64D7F0EFE6AA11F791.mft (raw, json)
Hash identifier:          yVXgWhLcmjM5L6VzxnxSux4siv/Xt5yu1Z7c7D3YgIY=
Subject key identifier:   A9:DD:FC:23:D5:0E:47:73:37:D4:27:7A:7A:BF:16:B5:85:4D:EE:3C
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       212FF104CB33BEDFED2C694D6DCCC48CD3E142E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
Manifest number:          0288
Signing time:             Mon 28 Jul 2025 19:30:00 +0000
Manifest this update:     Mon 28 Jul 2025 19:25:00 +0000
Manifest next update:     Tue 29 Jul 2025 23:19:00 +0000
Files and hashes:         1: 323830343a6536303a31363a3a2f34382d3438203d3e203631383838.roa (hash: E/h1tLOhdkL5KFxbFlvOj/h05/zhpeS/A+IdOxdsPRQ=)
                          2: 3138362e3233352e3138392e302f32342d3234203d3e203631383838.roa (hash: zfeVWFtm6HQsBkr+I5X4y3WW+gFUhTq4caLn6nEO9Is=)
                          3: 3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa (hash: RgfXB/1M/WrTk9Vz0Ui1Qi7o9zjSdxBM8LC9N3nxNZc=)
                          4: 3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (hash: 0yRyvy8XKt7kGPi85be1EdJXn1/4HpfpCRl+3MvDeZI=)
                          5: 323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (hash: Z9K3XsGWcja3K3XVI0WZGaDWDPU79rCpp4kHaDucdvE=)
                          6: 3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa (hash: 0jeyZaMYCuJa0mo6X22GqFo/7WHGaW0s53Cy+GL5hoA=)
                          7: 323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (hash: xPV/0MJNUFGVx2JSUaKtF4oiZAR0nn8h4o0YidpKOE4=)
                          8: 323830343a6536303a31373a3a2f34382d3438203d3e203631383838.roa (hash: jacaeBYXnH4I9e913shIu8l8OKCuovCiBceX5eJihcs=)
                          9: 323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa (hash: 4lVPZiSKVTkbgXRZzUK2UZn47EyF7/Jd6vxX+jSKbqQ=)
                          10: 323830343a6536303a31353a3a2f34382d3438203d3e203631383838.roa (hash: GN/QpLB2RxzSkmhTxXkNb5cxEyseBDE2FTr+jWehgzc=)
                          11: 323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (hash: CjBlXm7G6TKsmum5E6thrD/wHSYXVVLZHdvj4JFrXKQ=)
                          12: 3138362e3233352e3138382e302f32332d3233203d3e203631383838.roa (hash: zWRHBE3QSuBU0rra3ebDZkOnlvWc4QAAM/X0kbXnYo8=)
                          13: 3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (hash: JUTzTvlYexnFPNLeYVV246OABhn5H9fI6Qm9dt6BRsY=)
                          14: 323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (hash: XnXYekvsY2RVngEnSHnLLlNcex+uYy/z6OB/ZumJLMg=)
                          15: 323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (hash: JCy5QX2qDQGToBiOpXcrOVJMBZIZQ3xQsSLWFpJ90ZE=)
                          16: 961AE5D479B2534022682B64D7F0EFE6AA11F791.crl (hash: 05a6fq9xynLRshb8YNOjMC7lJ+sx5yo+3SiCkWPlADc=)
                          17: 3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa (hash: OghAuGoX8vZDLRv/0sW6u7mYvEBWUas5B+outqbwCvc=)
                          18: 323830343a6536303a31383a3a2f34382d3438203d3e203631383838.roa (hash: T6BgIwPF8LtXzznXZ6r3HMxvjEM64RVq5yHIP8BBTYw=)
                          19: 323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (hash: X9a388FbPLcmnyzU1JjMY3AxDeUQVv1zoeopad1+ico=)
                          20: 323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (hash: PaDPyP5LayriBhgRf/LNvgxizlu9oI2VuzFaY6lqsOI=)
                          21: 323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (hash: jkBItTU6FV9KdcIK+fZYFmA20mUO5O6hqtxy1OzYw5I=)
                          22: 323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa (hash: T55MnXv0Lubpptl7DFzkIv9ZCA9CmUU8Rn2l3RhjdKE=)
                          23: 323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (hash: Dg6QgxjLlU/z9V++ZNu5x+kx/dkHCPlSeP4IrvAXZEM=)
                          24: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (hash: h8zxW6f22GaeKFsKUmLo6gCY+0qqjUDWqCgC4TCEVJY=)
                          25: 323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (hash: IxmH8crHtxVQvG1YjQgvt0CGE0vqicuiP7dBfaW5cYk=)
                          26: 3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (hash: nA/OvwBKOsuVB7obdUjchPl+jWcy869HFASYU6GGRpI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2f:f1:04:cb:33:be:df:ed:2c:69:4d:6d:cc:c4:8c:d3:e1:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Jul 28 19:25:00 2025 GMT
            Not After : Jul 29 23:19:00 2025 GMT
        Subject: CN=A9DDFC23D50E477337D4277A7ABF16B5854DEE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:f9:0c:19:a0:ac:9f:4b:73:10:e4:57:23:
                    3e:73:a8:14:93:59:0c:69:2a:dc:fc:2e:3f:1a:7c:
                    d9:b8:8b:92:93:28:7a:70:99:e7:6c:5b:88:04:ed:
                    ee:ed:ca:36:97:cc:5f:45:12:e6:77:fe:a0:0c:29:
                    09:31:3b:f9:f0:f1:6a:51:61:f9:3f:90:af:93:38:
                    16:b3:45:45:8b:2e:75:68:a8:8b:8b:7b:32:9e:8f:
                    2d:50:e0:0d:e6:e8:93:fa:d5:0f:6f:08:73:74:0f:
                    15:29:e9:a5:f3:5c:bd:96:fd:8f:e8:5b:11:14:10:
                    a4:f4:01:d8:34:64:d1:6d:31:76:8a:e4:e2:83:c1:
                    22:1c:f6:bf:ea:22:53:55:49:3b:74:9e:60:68:3d:
                    1a:e1:23:77:80:c5:22:8f:75:91:16:22:0f:95:c4:
                    70:fe:a7:28:98:d2:23:9a:9e:f2:7a:7f:e4:22:ac:
                    1a:00:7a:35:24:be:4b:1d:6e:b3:11:1b:9c:b9:95:
                    5f:53:00:43:6b:cf:6e:e8:20:09:4b:ab:07:87:6e:
                    ce:b2:87:bd:d4:31:41:18:c3:1f:27:33:40:43:65:
                    39:19:7b:ff:15:d5:48:f0:21:3c:65:cb:a2:74:6a:
                    17:2f:29:fb:e7:6c:3a:0e:62:d7:f9:c7:7a:83:71:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DD:FC:23:D5:0E:47:73:37:D4:27:7A:7A:BF:16:B5:85:4D:EE:3C
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:94:2e:5d:b5:a1:b7:4f:30:2f:fc:da:ac:00:14:3d:fd:a5:
         db:73:5a:02:fb:c4:74:fb:d0:4a:ea:72:c6:4c:34:67:9b:c8:
         11:36:9b:6c:0b:a0:5d:8b:56:20:88:e6:e3:ec:5b:76:1c:8e:
         80:d5:c6:87:c7:0b:14:11:ee:5e:12:96:7f:9b:5f:86:49:e0:
         5b:fe:5c:fe:a4:56:5d:1b:55:11:d6:a3:fb:ad:5e:7b:0e:a2:
         1f:6e:a5:0c:35:62:ea:f6:01:75:97:d9:f7:79:a2:2e:b7:e5:
         65:eb:1c:21:1e:9f:7b:a6:43:76:64:55:5c:34:4c:60:b5:8c:
         3f:11:d8:05:d7:b3:fd:c2:6b:44:72:53:74:1d:1e:f2:3c:89:
         53:9d:6c:c7:b5:dd:cc:7f:f0:40:de:06:10:24:f1:34:40:5c:
         e6:78:87:9d:31:55:59:bf:1a:56:4c:8e:4e:1c:68:19:0a:0a:
         3e:c0:6d:a6:4e:16:b2:16:3b:f4:11:a4:af:76:30:23:46:13:
         33:2a:39:e4:89:f5:43:1d:a2:5c:c3:b8:26:ce:c1:44:09:95:
         ee:f7:4d:26:36:0a:59:b9:af:c0:0f:8c:cf:30:3f:83:0c:df:
         9c:ab:58:86:75:8a:cf:42:ec:26:b2:e0:9e:74:f0:bc:59:98:
         1f:7c:8f:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIS/xBMszvt/tLGlNbczEjNPhQuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNTA3MjgxOTI1MDBaFw0yNTA3MjkyMzE5MDBaMDMxMTAvBgNV
BAMTKEE5RERGQzIzRDUwRTQ3NzMzN0Q0Mjc3QTdBQkYxNkI1ODU0REVFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9PkMGaCsn0tzEORXIz5zqBST
WQxpKtz8Lj8afNm4i5KTKHpwmedsW4gE7e7tyjaXzF9FEuZ3/qAMKQkxO/nw8WpR
Yfk/kK+TOBazRUWLLnVoqIuLezKejy1Q4A3m6JP61Q9vCHN0DxUp6aXzXL2W/Y/o
WxEUEKT0Adg0ZNFtMXaK5OKDwSIc9r/qIlNVSTt0nmBoPRrhI3eAxSKPdZEWIg+V
xHD+pyiY0iOanvJ6f+QirBoAejUkvksdbrMRG5y5lV9TAENrz27oIAlLqweHbs6y
h73UMUEYwx8nM0BDZTkZe/8V1UjwITxly6J0ahcvKfvnbDoOYtf5x3qDcd2fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqd38I9UOR3M31Cd6er8WtYVN7jwwHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JCQmUvMS85
NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3JQuXbWht08wL/zarAAUPf2l23NaAvvEdPvQSupyxkw0Z5vIETabbAugXYtW
IIjm4+xbdhyOgNXGh8cLFBHuXhKWf5tfhkngW/5c/qRWXRtVEdaj+61eew6iH26l
DDVi6vYBdZfZ93miLrflZescIR6fe6ZDdmRVXDRMYLWMPxHYBdez/cJrRHJTdB0e
8jyJU51sx7XdzH/wQN4GECTxNEBc5niHnTFVWb8aVkyOThxoGQoKPsBtpk4WshY7
9BGkr3YwI0YTMyo55In1Qx2iXMO4Js7BRAmV7vdNJjYKWbmvwA+MzzA/gwzfnKtY
hnWKz0LsJrLgnnTwvFmYH3yPRw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:22 2025 by rpki-client