Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          Iwq4FEUQ8BtC/4w0noA1/ZifVVzd5QSf7TxwMgEk4W8=
Subject key identifier:   DA:DB:4C:BE:79:46:A2:B3:1E:31:1A:D4:99:A7:F8:C5:D8:A5:7D:B4
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       6229FD13F0ADFC88659A19DDC5ED40D7EDF3DBD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          0241
Signing time:             Mon 09 Jun 2025 14:53:31 +0000
Manifest this update:     Mon 09 Jun 2025 14:48:31 +0000
Manifest next update:     Tue 10 Jun 2025 17:49:31 +0000
Files and hashes:         1: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          2: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          3: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
                          4: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          5: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: aV183wWi1eSsTU9LtlkWWQi2udFbRVzDmojqq9sm3+w=)
                          6: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          7: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          8: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          9: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          10: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          11: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          12: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          13: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          14: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:29:fd:13:f0:ad:fc:88:65:9a:19:dd:c5:ed:40:d7:ed:f3:db:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Jun  9 14:48:31 2025 GMT
            Not After : Jun 10 17:49:31 2025 GMT
        Subject: CN=DADB4CBE7946A2B31E311AD499A7F8C5D8A57DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:d8:9c:52:d3:07:8b:81:1c:b1:cd:18:05:
                    dd:07:69:49:50:a1:3e:13:8b:b0:1f:e6:6e:6f:2d:
                    a3:6c:e0:1b:51:b3:53:ca:54:05:b4:9d:37:e4:19:
                    f3:e3:06:75:fe:63:c8:0d:70:31:45:03:7b:4a:c1:
                    e1:f6:f0:cc:1b:50:f1:ee:5d:12:b6:96:b4:29:1e:
                    37:2d:e1:83:9b:48:f2:33:53:1a:32:be:42:c3:2f:
                    94:85:22:1b:b4:6b:1f:0e:6e:88:df:d5:fc:85:94:
                    07:8a:eb:43:aa:28:0a:ca:28:77:68:27:f3:6a:22:
                    ac:f0:80:12:62:91:a6:df:40:74:10:fc:58:cc:e3:
                    d2:a7:b1:08:37:41:38:83:b3:8f:2d:74:ed:35:ed:
                    1f:fe:3a:87:35:cf:ee:7e:a6:31:7a:02:08:23:d9:
                    b2:c4:f9:4f:64:cd:65:a1:04:a9:7e:4e:cc:5c:06:
                    5d:91:34:de:2b:f1:01:d6:9c:57:e6:49:cd:ca:9c:
                    96:c7:6d:0e:23:0e:bd:31:10:80:cc:33:2a:8a:70:
                    e0:40:d5:6e:d1:2e:8a:c5:8e:82:5f:6d:79:08:b5:
                    70:79:38:fb:2b:90:ee:bf:b8:7b:ab:9c:8f:a6:13:
                    8d:93:9f:09:b5:fb:c2:7e:a3:f8:6f:8d:00:bf:37:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DB:4C:BE:79:46:A2:B3:1E:31:1A:D4:99:A7:F8:C5:D8:A5:7D:B4
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:3e:b2:23:46:de:b3:44:6d:2e:24:e7:29:f0:d2:81:55:
         be:a8:41:d1:6e:4a:9e:83:25:4d:03:fd:64:ed:75:33:b2:e1:
         60:1c:cf:1a:bf:b2:64:55:17:97:f4:39:03:7f:b3:f1:23:48:
         00:7a:86:e6:24:46:57:f9:b6:4c:c0:37:e5:59:0f:8e:c8:1d:
         4f:9a:91:ab:ea:8c:49:cb:c8:8b:e9:f5:e2:7e:97:89:60:77:
         9e:f1:50:b9:ac:23:7e:45:67:49:a0:6b:fb:f4:5e:6a:ec:68:
         da:b9:61:a0:d3:54:39:f9:4b:9d:92:24:42:9a:6b:c3:30:b1:
         7f:9c:d6:85:64:bb:f9:58:18:75:27:69:3b:11:0d:50:fb:94:
         fe:57:d1:03:16:b7:f3:bb:ed:6d:b0:9d:fb:31:c7:28:8c:e0:
         03:1a:e6:cd:15:01:31:76:36:9f:24:e4:d4:0b:f3:6f:df:d8:
         9f:e5:5f:0e:64:7b:04:08:e0:6c:c7:d1:eb:60:d0:9e:99:35:
         d1:ae:e8:dc:b7:a2:11:e9:9c:bf:ab:2e:a7:b0:aa:3c:41:e3:
         8f:b5:65:16:f7:2f:df:f6:11:e1:e5:b2:6a:db:41:f5:4a:9b:
         be:10:40:94:98:b5:a7:3e:a4:c3:ee:1d:b9:1d:3b:d3:83:d4:
         f0:21:50:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYin9E/Ct/Ihlmhndxe1A1+3z29QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBMzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEz
MTE5QThBRjAeFw0yNTA2MDkxNDQ4MzFaFw0yNTA2MTAxNzQ5MzFaMDMxMTAvBgNV
BAMTKERBREI0Q0JFNzk0NkEyQjMxRTMxMUFENDk5QTdGOEM1RDhBNTdEQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUNicUtMHi4Ecsc0YBd0HaUlQ
oT4Ti7Af5m5vLaNs4BtRs1PKVAW0nTfkGfPjBnX+Y8gNcDFFA3tKweH28MwbUPHu
XRK2lrQpHjct4YObSPIzUxoyvkLDL5SFIhu0ax8Obojf1fyFlAeK60OqKArKKHdo
J/NqIqzwgBJikabfQHQQ/FjM49KnsQg3QTiDs48tdO017R/+Ooc1z+5+pjF6Aggj
2bLE+U9kzWWhBKl+TsxcBl2RNN4r8QHWnFfmSc3KnJbHbQ4jDr0xEIDMMyqKcOBA
1W7RLorFjoJfbXkItXB5OPsrkO6/uHurnI+mE42Tnwm1+8J+o/hvjQC/N9bxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2ttMvnlGorMeMRrUmaf4xdilfbQwHwYDVR0j
BBgwFoAUcaNOjfAJZcohwapOPDesKjEZqK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMS83MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQTM0RThERjAwOTY1Q0Ey
MUMxQUE0RTNDMzdBQzJBMzExOUE4QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS83
MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMe8+siNG3rNEbS4k5ynw0oFVvqhB0W5KnoMlTQP9ZO11M7LhYBzPGr+yZFUX
l/Q5A3+z8SNIAHqG5iRGV/m2TMA35VkPjsgdT5qRq+qMScvIi+n14n6XiWB3nvFQ
uawjfkVnSaBr+/Reauxo2rlhoNNUOflLnZIkQpprwzCxf5zWhWS7+VgYdSdpOxEN
UPuU/lfRAxa387vtbbCd+zHHKIzgAxrmzRUBMXY2nyTk1Avzb9/Yn+VfDmR7BAjg
bMfR62DQnpk10a7o3LeiEemcv6sup7CqPEHjj7VlFvcv3/YR4eWyattB9UqbvhBA
lJi1pz6kw+4duR0704PU8CFQrg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:33:18 2025 by rpki-client