Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
File:                     D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft (raw, json)
Hash identifier:          UWXJawoMVXJ/Z4MdpDAqTVF76Jr5qFlwAIZ+lz/Bjbo=
Subject key identifier:   6D:99:D3:B5:0B:8C:3D:15:E0:20:60:BB:3E:3E:4F:47:7E:C4:3D:FA
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       3A83D25B6D499BDAB3950B7A8C8B76D49FD1CB3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
Manifest number:          29
Signing time:             Tue 25 Jun 2024 15:33:20 +0000
Manifest this update:     Tue 25 Jun 2024 15:28:20 +0000
Manifest next update:     Wed 26 Jun 2024 16:25:20 +0000
Files and hashes:         1: 323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa (hash: O1HXsLyWs12GT8+z+AtDIogpnZSEpXC7L9Vlq/oRsnc=)
                          2: 323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa (hash: /giJEreBiSNnp5EKv3XnPaER+ra9xhGm8pK370+Mnro=)
                          3: 3137302e38342e3130322e302f32342d3234203d3e20323635303130.roa (hash: hrP/HEAP5FAP8LLP0ZZsF+1X6wzlwDJN0mIvmvAOE4g=)
                          4: 323830343a333136303a343030303a3a2f33362d3336203d3e20323635303130.roa (hash: 3UK3AF7fyeVDo9/Bbe4Iod1ugL7Ib3JFEVXBk4xX6Wc=)
                          5: 323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa (hash: MsRCGQDpLwJRjwJBBN5D8F3KSyxSj2G8SclQPiFuCt0=)
                          6: 3137302e38342e3130302e302f32322d3232203d3e20323635303130.roa (hash: 3vJBHi+tyGdF+uMpX7tmeHbPzzXNn99wPJF24FkVcqs=)
                          7: 323830343a333136303a373030333a3a2f34382d3438203d3e20323635303130.roa (hash: inmVc5WNpvdn/R46Cp7VKIH6PA5PhknL7cjC9yJjPNc=)
                          8: 3137302e38342e3130302e302f32342d3234203d3e20323635303130.roa (hash: lYftVevm0eCfOJqXd7ALOK7TMvC5c4nnt+aU92+ThFs=)
                          9: 323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa (hash: I8eOYgNtJgIUkuJ8bfaFRIJ6kAXFyhUM2LI9DQLqPTk=)
                          10: 323830343a333136303a3a2f33362d3336203d3e20323635303130.roa (hash: m5A9PqCg7CWFF6zlCX79dmzVDktDqpv498l8fF0wFCo=)
                          11: 323830343a333136303a3a2f34362d3436203d3e20323635303130.roa (hash: EFaZCjawKOH0MC5zhWhi0f2IyoY93GD+CujOdyHsyqI=)
                          12: 323830343a333136303a333030303a3a2f33362d3336203d3e20323635303130.roa (hash: T8PNgOGLTT/NpCkv/ckEenKCp3sbMDXSkNbYkIdfkVo=)
                          13: D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl (hash: hROaRsqEctfDOzuF+xjOPFr7OFLz8rl9FNNWViV867g=)
                          14: 3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa (hash: E3ejvHsnSztYi1UrTIt5lb0MefAommisHIX/cTpLHlg=)
                          15: 323830343a333136303a333a3a2f34382d3438203d3e20323635303130.roa (hash: Y4sgu3GyvkI22vOU3HD6R9UjtnBQkhFVu4GKE37/8y0=)
                          16: 3137302e38342e3130332e302f32342d3234203d3e20323635303130.roa (hash: eim7GNwIPHQhyIPbLVXbZZTZUygI2eTA0Q7nvucooYU=)
                          17: 323830343a333136303a3a2f34382d3438203d3e20323635303130.roa (hash: BmjP9Xb4oIosnDV5u71Tmp6p0Gs+gaB9VOKQGViALGw=)
                          18: 323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa (hash: cFIfr0eRBKrTt7GkrbjvV7Ms1rnky1TuDLeusuWo+O4=)
                          19: 323830343a333136303a363030303a3a2f33362d3336203d3e20323635303130.roa (hash: UC8tzoEHJI0R+OeGyQ7NpF+3bkwdjSZnq8lEaO19qjE=)
                          20: 323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa (hash: nxi36Ppats8J1Cs23clEk7ckDLCZt0j8GkTvUutE9m4=)
                          21: 323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa (hash: fXHjPlvLhWcPtuJxMlZpEvSTEgcPG1dXG2IYwb8wFfw=)
                          22: 323830343a333136303a3a2f33322d3332203d3e20323635303130.roa (hash: rbuv0wvD+sCREfGRnpOoxqR7u3HBQxlajIlPLwNdqbc=)
                          23: 323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa (hash: oX1g4yfz2tHJVVyBd+SoB5c9h7hoZJiWHqkBKpHoFgY=)
                          24: 323830343a333136303a353030303a3a2f33362d3336203d3e20323635303130.roa (hash: k8ENzyoNUkUjwjcai0UEqz/mKJ/TN0bKL33bsj8rTjo=)
                          25: 323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa (hash: QbFrFKuMuiEubR7xgneoes4dgyWWudcUQ6N9b8dNZho=)
                          26: 323830343a333136303a373030303a3a2f34382d3438203d3e20323635303130.roa (hash: QjeaDs2pjjHBy5v2csMb+0W6bfLFTrIhLsaytbGsJ54=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 16:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:83:d2:5b:6d:49:9b:da:b3:95:0b:7a:8c:8b:76:d4:9f:d1:cb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: Jun 25 15:28:20 2024 GMT
            Not After : Jun 26 16:25:20 2024 GMT
        Subject: CN=6D99D3B50B8C3D15E02060BB3E3E4F477EC43DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:cd:ad:cb:f3:9f:60:d9:15:2e:ea:46:4b:
                    b1:f1:c4:74:fa:c4:d9:1c:32:f7:22:a9:12:d4:eb:
                    79:18:b3:79:cb:62:ae:4b:2e:53:2e:f7:90:19:f0:
                    3f:41:ee:1b:fc:9c:c8:d6:8f:e7:96:a3:9f:fd:46:
                    4c:d2:d3:ed:aa:00:0d:e2:d8:28:6f:d1:0d:87:c7:
                    71:a2:b1:0b:1a:e6:9e:f3:11:7a:62:d1:4a:2c:59:
                    73:b4:7c:08:23:bc:67:3d:26:5b:fa:72:fb:dd:d7:
                    d2:ed:6a:54:c2:cc:2d:de:bb:23:d8:8c:73:bb:28:
                    6b:cf:83:d1:03:94:65:37:17:6e:19:ea:51:63:4b:
                    3e:49:44:7a:f7:6b:8b:00:7e:60:6b:af:d9:dd:db:
                    f6:42:ce:93:2d:7f:0a:ce:c9:ac:a9:42:60:9a:1c:
                    18:95:84:b9:ce:e3:74:ae:3d:e9:d3:b7:ab:0d:4b:
                    ed:4a:d9:b1:47:c1:c6:1b:57:75:86:76:75:7a:4e:
                    03:61:05:20:c1:51:89:16:bd:56:28:6c:15:34:e5:
                    89:d7:dc:6f:6f:e5:c2:72:d7:ec:ee:6d:d1:0c:5d:
                    6d:8c:1c:20:67:4e:63:83:23:df:fc:ba:2b:4a:e6:
                    bb:e6:3b:ef:ad:23:ec:94:6a:c6:a5:32:3f:d4:ac:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:D3:B5:0B:8C:3D:15:E0:20:60:BB:3E:3E:4F:47:7E:C4:3D:FA
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:be:96:71:f4:3f:c9:ca:f2:c6:cc:36:31:a6:ec:33:0c:77:
         c5:8c:06:4b:cf:58:f1:d4:9d:62:b5:4e:60:3d:59:4d:c3:62:
         41:44:ca:2c:4e:85:90:77:da:6f:d5:eb:cb:3a:a1:31:d7:a5:
         67:96:2e:f3:86:55:e8:6d:5c:cf:3e:57:0e:2a:62:85:12:0f:
         3f:76:4f:1b:9e:a5:68:e3:22:38:49:d3:d9:7a:b4:55:37:f6:
         c9:d1:18:94:62:27:03:ce:3e:8d:be:84:78:48:c3:99:b6:15:
         93:00:00:da:fb:31:43:33:8f:56:f3:d7:06:00:b1:7d:1f:e2:
         4f:31:2a:0f:af:31:a1:fb:83:d2:c6:d2:94:79:12:ea:55:c4:
         13:9c:53:6d:4e:4f:ed:ea:0e:6e:9b:bf:03:20:a5:ff:0e:a0:
         bc:8f:dd:27:ad:d7:ab:ac:e6:6b:01:d2:fc:9e:22:6b:1e:25:
         13:5e:4e:d0:51:4b:68:1f:5c:5e:6f:e9:ca:e2:fe:34:63:fb:
         b6:e2:39:aa:4f:f0:e7:37:42:35:7d:71:5a:54:09:0f:91:ee:
         3d:31:8c:de:48:82:41:d5:50:01:eb:34:20:57:dd:6e:e2:1e:
         9a:5a:10:65:39:14:93:3e:5d:38:0c:2b:7b:0e:c7:bd:d6:09:
         6d:be:f9:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOoPSW21Jm9qzlQt6jIt21J/Ryz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNEOUM5MjQ3QzJDQUM2OTJFMEM2ODFBRENGQTY5MjY2
OUNCQ0ZENzAeFw0yNDA2MjUxNTI4MjBaFw0yNDA2MjYxNjI1MjBaMDMxMTAvBgNV
BAMTKDZEOTlEM0I1MEI4QzNEMTVFMDIwNjBCQjNFM0U0RjQ3N0VDNDNERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2c2ty/OfYNkVLupGS7HxxHT6
xNkcMvciqRLU63kYs3nLYq5LLlMu95AZ8D9B7hv8nMjWj+eWo5/9RkzS0+2qAA3i
2Chv0Q2Hx3GisQsa5p7zEXpi0UosWXO0fAgjvGc9Jlv6cvvd19LtalTCzC3euyPY
jHO7KGvPg9EDlGU3F24Z6lFjSz5JRHr3a4sAfmBrr9nd2/ZCzpMtfwrOyaypQmCa
HBiVhLnO43SuPenTt6sNS+1K2bFHwcYbV3WGdnV6TgNhBSDBUYkWvVYobBU05YnX
3G9v5cJy1+zubdEMXW2MHCBnTmODI9/8uitK5rvmO++tI+yUasalMj/UrI1vAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbZnTtQuMPRXgIGC7Pj5PR37EPfowHwYDVR0j
BBgwFoAU09nJJHwsrGkuDGga3PppJmnLz9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMC9EM0Q5QzkyNDdDMkNBQzY5MkUwQzY4MUFEQ0ZBNjkyNjY5Q0JDRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRDlDOTI0N0MyQ0FDNjky
RTBDNjgxQURDRkE2OTI2NjlDQkNGRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1UncvMC9E
M0Q5QzkyNDdDMkNBQzY5MkUwQzY4MUFEQ0ZBNjkyNjY5Q0JDRkQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAL6WcfQ/ycryxsw2MabsMwx3xYwGS89Y8dSdYrVOYD1ZTcNiQUTKLE6FkHfa
b9XryzqhMdelZ5Yu84ZV6G1czz5XDipihRIPP3ZPG56laOMiOEnT2Xq0VTf2ydEY
lGInA84+jb6EeEjDmbYVkwAA2vsxQzOPVvPXBgCxfR/iTzEqD68xofuD0sbSlHkS
6lXEE5xTbU5P7eoObpu/AyCl/w6gvI/dJ63Xq6zmawHS/J4iax4lE15O0FFLaB9c
Xm/pyuL+NGP7tuI5qk/w5zdCNX1xWlQJD5HuPTGM3kiCQdVQAes0IFfdbuIemloQ
ZTkUkz5dOAwrew7HvdYJbb75jw==
-----END CERTIFICATE-----
Generated at Tue Jun 25 19:35:35 2024 by rpki-client on console-fra.rpki-client.org