Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          PEl+wRA/Y5O34dVk3slmsOxuzyAAkFyDUM5YK+6Qh5g=
Subject key identifier:   67:31:17:81:6B:C8:D8:3A:20:AE:D0:64:A3:6A:3A:6D:95:65:93:3C
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       63214A58814C80EE57D0C7D10E097666B9026CD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          024D
Signing time:             Sat 14 Jun 2025 03:43:40 +0000
Manifest this update:     Sat 14 Jun 2025 03:38:40 +0000
Manifest next update:     Sun 15 Jun 2025 06:36:40 +0000
Files and hashes:         1: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: IeqfO60APtI/aiujhRBbK+p5lGRCUGsDS7H6b+Gn6jY=)
                          2: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: 5lvhdKKVxPcZ3/nd628FoXyR2ITdSGX90BwjYAK8rAQ=)
                          3: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: BcM6j+OwDyoPY5saIhljxjNWGNX33CnT7EmA2Ywuaco=)
                          4: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: j1Avox9NgQODW3LhBzJuljIRz5meY02BEta5hWYd8Ak=)
                          5: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: DLXwjCeMLBvIeKOLzFt3HCcPZ+8cjQuMJE3Kyj0FUk0=)
                          6: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: 1ke442G4sr1gdXVL5S2dIvsAioTdoxCJCdzpNrSzpFk=)
                          7: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: fW5wENPwhhevEK5ILGk1+o6hNBK6RgaJcyN+A9LteE0=)
                          8: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: Q+6zb8/52SCseUccO/k8n9a/FXB90wWY4SheKioGF5I=)
                          9: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: fgaktkZvREqEdKxhCwkQM0vrGN+uJ33xvruPLYDVzIA=)
                          10: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: HodIiouYpi5HRYferTFJC9p/9oItbt3HQJ/8I8MD+HI=)
                          11: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: 9+ioA8iW3wDN9f27KoCoYuS2Xxc1WiJBzblSsKv38+c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 06:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:21:4a:58:81:4c:80:ee:57:d0:c7:d1:0e:09:76:66:b9:02:6c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Jun 14 03:38:40 2025 GMT
            Not After : Jun 15 06:36:40 2025 GMT
        Subject: CN=673117816BC8D83A20AED064A36A3A6D9565933C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:c8:d9:f2:6a:ac:b7:ed:1c:32:c2:29:4a:
                    bc:77:08:ea:7d:43:c2:50:16:04:15:a6:54:81:cf:
                    7b:6f:33:3c:20:b0:42:41:6c:29:9c:fb:06:33:c3:
                    b3:ed:11:ac:5d:88:27:1f:cc:b1:89:6d:5b:46:fb:
                    ab:01:5e:d1:a4:83:ae:6a:c2:d5:e3:da:f3:0f:49:
                    7c:dd:4e:72:46:d7:db:8d:72:28:42:65:74:b9:18:
                    f8:7b:35:b5:0e:8f:7f:08:0d:b6:ec:91:c7:43:86:
                    8c:87:f0:8b:cf:0a:74:79:e0:cb:24:65:9e:a5:28:
                    ef:9c:88:df:04:9c:a2:c5:76:a1:c9:19:7d:9e:bc:
                    56:6e:8b:98:44:c5:4e:18:69:23:83:fe:81:ea:be:
                    02:8b:3d:ef:7a:99:96:9b:17:01:9e:a1:39:cf:c0:
                    8d:cd:60:e2:70:e1:7e:3e:1f:c1:6e:4f:9c:8c:f0:
                    bb:db:32:89:b5:fd:4c:5b:27:96:c9:16:1f:83:3f:
                    a5:a7:51:5f:15:24:69:fb:b7:ec:2d:01:ba:b0:63:
                    63:2b:d8:7d:ff:4e:ec:51:9d:c4:08:11:e6:8a:1d:
                    a0:cc:89:72:ca:dc:45:a1:b8:e3:e9:c1:78:cc:e2:
                    77:95:56:a2:62:05:14:d5:6a:53:e1:ca:b3:6c:8e:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:17:81:6B:C8:D8:3A:20:AE:D0:64:A3:6A:3A:6D:95:65:93:3C
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:6e:14:60:88:be:72:31:b7:02:54:16:5a:6f:d4:f8:00:
         7b:c9:a1:75:fd:fd:11:98:05:45:01:f5:d5:dc:be:dd:83:44:
         73:b6:2a:d5:51:aa:1f:13:a8:47:f3:1a:d2:e2:1b:bf:e3:b5:
         f7:89:1e:8c:01:b2:de:73:67:9f:f5:d9:a6:40:be:60:ba:43:
         fd:ae:46:fc:f4:d6:99:ef:e7:51:c2:86:32:44:a2:48:52:6d:
         a9:8b:fe:c6:ef:29:0a:4b:b6:40:88:3e:3b:bc:2b:ee:c2:cf:
         96:58:dd:dd:fe:1e:d0:f0:dd:ce:67:c2:ae:40:39:77:31:d2:
         37:ea:7b:9e:9a:cb:33:35:28:e0:8f:2d:64:73:26:29:00:6e:
         ae:32:0f:2b:32:fb:d5:22:6d:c1:17:b5:96:78:1d:2e:eb:e5:
         7a:59:4c:67:42:00:c9:06:84:39:74:92:7f:78:da:d5:95:f2:
         b5:7d:01:df:dc:57:69:64:50:ae:d3:57:fc:fd:64:e6:07:0b:
         41:19:ec:9a:5f:86:9c:cc:cd:9e:23:e0:fd:a0:89:07:a8:da:
         4c:2a:17:be:7a:1c:a2:f3:61:29:98:96:44:d0:f8:bf:f7:90:
         54:71:0b:93:42:4c:58:49:cc:3e:1e:2b:a9:32:9e:3c:99:98:
         b6:be:8a:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYyFKWIFMgO5X0MfRDgl2ZrkCbNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NzA4MzIyNTcwRDA3Q0E0QkU3NUVGNDg0QjY4MzE2
NjRGRTg2NDAeFw0yNTA2MTQwMzM4NDBaFw0yNTA2MTUwNjM2NDBaMDMxMTAvBgNV
BAMTKDY3MzExNzgxNkJDOEQ4M0EyMEFFRDA2NEEzNkEzQTZEOTU2NTkzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4cjZ8mqst+0cMsIpSrx3COp9
Q8JQFgQVplSBz3tvMzwgsEJBbCmc+wYzw7PtEaxdiCcfzLGJbVtG+6sBXtGkg65q
wtXj2vMPSXzdTnJG19uNcihCZXS5GPh7NbUOj38IDbbskcdDhoyH8IvPCnR54Msk
ZZ6lKO+ciN8EnKLFdqHJGX2evFZui5hExU4YaSOD/oHqvgKLPe96mZabFwGeoTnP
wI3NYOJw4X4+H8FuT5yM8LvbMom1/UxbJ5bJFh+DP6WnUV8VJGn7t+wtAbqwY2Mr
2H3/TuxRncQIEeaKHaDMiXLK3EWhuOPpwXjM4neVVqJiBRTValPhyrNsjtXPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZzEXgWvI2DogrtBko2o6bZVlkzwwHwYDVR0j
BBgwFoAUD5cIMiVw0HykvnXvSEtoMWZP6GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZk
U1MvMS8wRjk3MDgzMjI1NzBEMDdDQTRCRTc1RUY0ODRCNjgzMTY2NEZFODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOTcwODMyMjU3MEQwN0NB
NEJFNzVFRjQ4NEI2ODMxNjY0RkU4NjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QTVxTm92TE5NTVNOUWNrVGl5elNIaVJVaDlHZWFRQzJ6enExZHVLcUZkU1MvMS8w
Rjk3MDgzMjI1NzBEMDdDQTRCRTc1RUY0ODRCNjgzMTY2NEZFODY0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXq1uFGCIvnIxtwJUFlpv1PgAe8mhdf39EZgFRQH11dy+3YNEc7Yq1VGqHxOo
R/Ma0uIbv+O194kejAGy3nNnn/XZpkC+YLpD/a5G/PTWme/nUcKGMkSiSFJtqYv+
xu8pCku2QIg+O7wr7sLPlljd3f4e0PDdzmfCrkA5dzHSN+p7nprLMzUo4I8tZHMm
KQBurjIPKzL71SJtwRe1lngdLuvlellMZ0IAyQaEOXSSf3ja1ZXytX0B39xXaWRQ
rtNX/P1k5gcLQRnsml+GnMzNniPg/aCJB6jaTCoXvnocovNhKZiWRND4v/eQVHEL
k0JMWEnMPh4rqTKePJmYtr6Kxw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:38:06 2025 by rpki-client