Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          n2/hx5ubUhrvupKqaMI7KNqNmSdoVcYFO1YngJMgYYQ=
Subject key identifier:   29:11:3E:19:F0:2B:C8:21:49:A1:7B:32:69:05:43:41:75:1C:50:A5
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       3FA1B8B3EE5F0DBFE8F146F4BBCC481FA828A919
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          0240
Signing time:             Sun 08 Jun 2025 22:08:28 +0000
Manifest this update:     Sun 08 Jun 2025 22:03:28 +0000
Manifest next update:     Mon 09 Jun 2025 22:52:28 +0000
Files and hashes:         1: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: XIv9WzY4xRxIDoOE65UiEaBHqMQtJR1q8gLnmje33ys=)
                          2: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          3: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          4: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          5: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          6: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
                          7: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          8: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          9: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          10: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          11: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          12: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          13: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          14: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:b8:b3:ee:5f:0d:bf:e8:f1:46:f4:bb:cc:48:1f:a8:28:a9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Jun  8 22:03:28 2025 GMT
            Not After : Jun  9 22:52:28 2025 GMT
        Subject: CN=29113E19F02BC82149A17B3269054341751C50A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:ab:a2:03:de:13:c3:59:9d:cf:1f:7c:0e:
                    67:a7:46:30:76:e9:f6:a7:75:1a:ea:6f:5b:d7:5a:
                    d4:4a:8a:23:46:d4:e2:d9:63:0c:f6:07:a9:ab:dd:
                    1d:c4:4c:13:9c:e0:cf:2c:14:a3:5a:9a:96:91:b7:
                    b6:40:80:91:c5:58:b7:e1:e7:0e:64:25:bf:6d:9c:
                    c4:f4:d8:d8:71:83:3c:71:8a:03:16:bd:08:bb:20:
                    f9:68:c3:27:6a:75:ae:61:64:35:5b:6a:90:c8:8a:
                    13:3f:f8:de:b4:6e:dd:d0:7f:ff:a6:88:e4:3f:49:
                    b2:45:08:93:36:70:46:1d:96:a0:3c:44:c5:94:24:
                    c9:63:ca:07:8e:fb:cf:f6:a8:49:85:eb:18:73:2a:
                    53:ea:bd:2e:6f:62:24:99:f4:a8:87:2a:62:59:07:
                    72:53:16:c0:d4:c0:da:66:5d:45:87:db:1a:69:eb:
                    b8:71:9d:7c:81:c9:21:47:10:e1:93:b9:4a:0c:87:
                    7e:42:65:00:ff:a9:47:68:ef:1c:bd:a7:e8:cb:36:
                    cf:7b:bd:12:1d:17:15:d5:ad:8f:be:ad:b8:8a:c3:
                    08:59:39:d7:9d:04:ad:17:14:cb:63:db:37:c5:bd:
                    19:9f:22:c4:bc:d0:f2:d0:2a:c7:98:bc:1d:7f:30:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:3E:19:F0:2B:C8:21:49:A1:7B:32:69:05:43:41:75:1C:50:A5
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:93:cc:a6:27:32:49:b6:c9:e7:23:fa:68:e5:ef:8a:cc:52:
         22:af:70:b5:4e:66:aa:2f:1f:7f:61:72:ec:0c:e0:bb:14:9f:
         d4:a8:2c:ca:08:e6:a6:69:56:9c:f2:0c:30:6d:af:0f:53:99:
         63:37:9f:33:95:fe:7f:d5:06:12:a7:d6:1e:5e:a1:34:00:60:
         21:da:ec:6b:d4:e5:65:b0:89:07:79:e7:fe:00:0e:36:b6:97:
         5f:ce:9f:94:8f:40:ee:16:56:d2:b4:e0:df:3c:86:42:ca:52:
         3d:7a:bf:bf:23:6e:d5:55:63:88:8a:91:83:20:15:8f:76:4c:
         ea:f3:4e:5e:30:c5:03:40:96:f8:cc:f0:4f:44:7a:33:87:fe:
         4e:a8:cd:fa:19:95:c5:fe:85:66:19:97:26:b9:95:b2:e0:fc:
         6a:f3:a4:aa:0f:d4:c6:63:4e:02:67:2b:c2:6d:5b:70:81:c1:
         4e:5c:85:0d:40:c5:55:21:6e:09:0e:d8:03:6a:79:f1:d8:07:
         7a:30:39:65:bc:1c:e8:c3:aa:1d:de:c2:3b:34:b9:b7:63:83:
         6e:7d:4a:7b:2b:21:ce:f2:72:1b:98:be:ca:cc:f5:d0:e1:1f:
         06:8c:f0:17:5e:e3:34:05:8e:9a:31:53:9f:ac:3d:5a:83:ba:
         81:16:9d:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP6G4s+5fDb/o8Ub0u8xIH6goqRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBMzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEz
MTE5QThBRjAeFw0yNTA2MDgyMjAzMjhaFw0yNTA2MDkyMjUyMjhaMDMxMTAvBgNV
BAMTKDI5MTEzRTE5RjAyQkM4MjE0OUExN0IzMjY5MDU0MzQxNzUxQzUwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqquiA94Tw1mdzx98DmenRjB2
6fandRrqb1vXWtRKiiNG1OLZYwz2B6mr3R3ETBOc4M8sFKNampaRt7ZAgJHFWLfh
5w5kJb9tnMT02NhxgzxxigMWvQi7IPlowydqda5hZDVbapDIihM/+N60bt3Qf/+m
iOQ/SbJFCJM2cEYdlqA8RMWUJMljygeO+8/2qEmF6xhzKlPqvS5vYiSZ9KiHKmJZ
B3JTFsDUwNpmXUWH2xpp67hxnXyBySFHEOGTuUoMh35CZQD/qUdo7xy9p+jLNs97
vRIdFxXVrY++rbiKwwhZOdedBK0XFMtj2zfFvRmfIsS80PLQKseYvB1/MFIDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKRE+GfAryCFJoXsyaQVDQXUcUKUwHwYDVR0j
BBgwFoAUcaNOjfAJZcohwapOPDesKjEZqK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMS83MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQTM0RThERjAwOTY1Q0Ey
MUMxQUE0RTNDMzdBQzJBMzExOUE4QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS83
MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2JPMpicySbbJ5yP6aOXvisxSIq9wtU5mqi8ff2Fy7AzguxSf1KgsygjmpmlW
nPIMMG2vD1OZYzefM5X+f9UGEqfWHl6hNABgIdrsa9TlZbCJB3nn/gAONraXX86f
lI9A7hZW0rTg3zyGQspSPXq/vyNu1VVjiIqRgyAVj3ZM6vNOXjDFA0CW+MzwT0R6
M4f+TqjN+hmVxf6FZhmXJrmVsuD8avOkqg/UxmNOAmcrwm1bcIHBTlyFDUDFVSFu
CQ7YA2p58dgHejA5Zbwc6MOqHd7COzS5t2ODbn1KeyshzvJyG5i+ysz10OEfBozw
F17jNAWOmjFTn6w9WoO6gRadCA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:28:57 2025 by rpki-client