Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
File:                     371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft (raw, json)
Hash identifier:          tAlDdtB5ECha4MwQ4cwvoviws6o1Vmqd/WYk9ANPWHA=
Subject key identifier:   9D:E1:59:D6:BC:A3:8C:39:E1:0A:EB:70:9E:2B:54:AA:07:92:8C:B2
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       2CB2A1BFF358F66E8BD3EF73F5976DE470FFBDB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
Manifest number:          024A
Signing time:             Thu 05 Jun 2025 23:03:42 +0000
Manifest this update:     Thu 05 Jun 2025 22:58:42 +0000
Manifest next update:     Sat 07 Jun 2025 01:54:42 +0000
Files and hashes:         1: 34352e37312e3132382e302f32342d3234203d3e20323637363038.roa (hash: qf/ifLxO4i/OIstnGGhG3v1/EFKyXmACRVL6r47Afoc=)
                          2: 34352e37312e3132382e302f32332d3233203d3e20323637363038.roa (hash: 9qWl4hwMibeKAiZpIyVI1iM3J7skBh7jywpg7D0opeg=)
                          3: 34352e37312e3132392e302f32342d3234203d3e20323637363038.roa (hash: WUCDWvohRvrvS96YeTgKOoiwhEFdcMNtCYW0E426cwU=)
                          4: 34352e37312e3133302e302f32332d3233203d3e20323637363038.roa (hash: uf7J7psKvd5pCyNhlzKOIDuxSVC/CGMOp13XEE+MuLU=)
                          5: 323830343a343433303a383030303a3a2f33342d3334203d3e20323637363038.roa (hash: nV8fWfhf9MyPFf7uS9x8q+9U1c9j1k9FxtgZ4jeo6iI=)
                          6: 323830343a343433303a3a2f33342d3334203d3e20323637363038.roa (hash: a70HXg85l8p3A/g9HTVTPdkMj0CdTM5aVfc7Je+7ba0=)
                          7: 323830343a343433303a3a2f33332d3333203d3e20323637363038.roa (hash: jwLHQr7ZWHriS7degR1SnFwlzCpURUphe1Il44N+7r4=)
                          8: 34352e37312e3132382e302f32322d3232203d3e20323637363038.roa (hash: ulYeIl9UPPnpVMoe5KnmWK9c8qEhiEEIpwaJTXw23tE=)
                          9: 323830343a343433303a3a2f33322d3332203d3e20323637363038.roa (hash: qiEzNfr2ChhRdtRA1HhxCWjX6YfKPgIyNoVZp3jc4hA=)
                          10: 371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl (hash: x74FFt6n+iQFGZJeSyn9fo2PTsRebGLPKa6Bk6gFLho=)
                          11: 323830343a343433303a633030303a3a2f33342d3334203d3e20323637363038.roa (hash: bszfv4h0vfGexsbm5DcanWAdgAOpmAzHbaNMH/tyB+M=)
                          12: 34352e37312e3133302e302f32342d3234203d3e20323637363038.roa (hash: r1lnJW+EB5CfPBugk54Iwu6hjb9HmQwL98ykHnhR3/s=)
                          13: 323830343a343433303a343030303a3a2f33342d3334203d3e20323637363038.roa (hash: XRwhLOu+0I7Jc56acIWwfCWrojziirrhWI7tAZZn3vg=)
                          14: 323830343a343433303a383030303a3a2f33332d3333203d3e20323637363038.roa (hash: WCWkNTRisSo9WTGa0Zr2B8nvTYDaH8r2oHByVbfLMPE=)
                          15: 34352e37312e3133312e302f32342d3234203d3e20323637363038.roa (hash: s1C8HQGasDWGKocmfA1qGREmOAhCh4q6OiEB2xKOn+E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 01:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:a1:bf:f3:58:f6:6e:8b:d3:ef:73:f5:97:6d:e4:70:ff:bd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: Jun  5 22:58:42 2025 GMT
            Not After : Jun  7 01:54:42 2025 GMT
        Subject: CN=9DE159D6BCA38C39E10AEB709E2B54AA07928CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:53:80:4a:ed:47:a2:c5:43:65:ca:4a:79:
                    55:d1:71:be:37:f2:62:c7:01:eb:1b:6b:38:c4:2d:
                    41:53:6b:c3:fa:41:6a:85:bd:b5:54:36:e2:c5:b3:
                    bf:2c:b7:f0:26:64:2e:cb:5b:e2:e9:78:8a:7f:dc:
                    24:23:91:7b:50:6f:8a:b5:46:8c:a4:cd:be:95:09:
                    36:cf:94:6a:8a:6d:9d:9e:4d:f5:b1:23:08:dc:99:
                    91:18:47:78:ab:d6:f0:97:5d:4a:38:99:76:ae:a7:
                    3c:9f:f0:96:27:73:f2:7d:e9:b4:9b:71:0d:68:74:
                    d6:13:77:37:fe:35:ea:f6:a4:dc:bd:7a:32:ce:a0:
                    02:a1:ee:71:68:0e:84:1c:fe:41:74:67:37:cc:72:
                    aa:85:00:9b:c3:59:a8:0f:3f:cc:85:7a:41:94:60:
                    72:b0:13:61:dc:3a:a4:e6:91:b0:85:24:6d:53:85:
                    3b:e5:dd:b7:1a:f3:fd:a5:e2:20:ff:41:ce:28:30:
                    9b:68:77:a7:de:82:f0:a0:f4:72:ef:d9:f5:2c:1c:
                    04:73:d4:0b:12:9e:63:f6:d4:8d:e7:3a:35:22:e2:
                    55:2f:4e:54:59:06:f9:49:4d:4e:2b:bc:f9:3a:61:
                    79:17:cf:0d:f3:67:9b:02:f7:97:b5:08:a9:62:9b:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:59:D6:BC:A3:8C:39:E1:0A:EB:70:9E:2B:54:AA:07:92:8C:B2
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:4f:ce:b2:3a:e8:a9:41:3b:f7:32:ca:2b:c3:31:2a:c8:
         b6:8b:b8:c1:8f:72:34:48:bc:ad:5b:e8:f9:f6:40:f7:ab:c3:
         3a:b2:5e:91:6e:c0:84:a3:f1:36:5d:75:55:f9:be:eb:22:21:
         f7:73:cf:c3:db:a3:7c:71:63:1f:ce:db:b8:5a:41:74:7d:4e:
         53:8c:7c:d1:32:a5:4a:67:de:fc:a9:d8:62:23:9f:ce:b3:82:
         9e:8f:2d:af:af:29:a4:27:3f:37:e7:e6:4b:ea:d4:71:94:80:
         67:44:36:42:ca:6d:a2:22:ac:7b:2c:66:ad:ef:6d:0e:cf:f3:
         ce:ed:83:60:19:b6:39:cd:07:54:ca:bb:04:7d:cb:c5:c6:fb:
         0a:75:78:d3:70:ac:60:36:90:4b:f6:04:34:ee:d8:f1:11:fa:
         7c:64:81:17:c4:b9:c4:93:8f:53:c2:b9:37:08:e2:67:d4:4b:
         cb:05:2f:47:32:9a:f0:3a:47:10:ac:40:0d:9a:2a:fa:c0:45:
         28:4b:b8:78:17:84:8d:a1:9b:f8:2d:6d:1e:8e:f8:14:20:c0:
         94:8e:af:90:aa:b4:cb:8d:3e:80:02:dc:f1:d5:62:d4:c6:e7:
         62:f5:c9:1e:1f:e6:78:41:4c:46:80:43:ae:16:15:a5:1b:78:
         e3:a3:52:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULLKhv/NY9m6L0+9z9Zdt5HD/vbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcxMDcwREIzQUY5NDg5QUMwNDRBMDE4OTRGN0YzREVB
NTAxNkMxRjAeFw0yNTA2MDUyMjU4NDJaFw0yNTA2MDcwMTU0NDJaMDMxMTAvBgNV
BAMTKDlERTE1OUQ2QkNBMzhDMzlFMTBBRUI3MDlFMkI1NEFBMDc5MjhDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98FOASu1HosVDZcpKeVXRcb43
8mLHAesbazjELUFTa8P6QWqFvbVUNuLFs78st/AmZC7LW+LpeIp/3CQjkXtQb4q1
Roykzb6VCTbPlGqKbZ2eTfWxIwjcmZEYR3ir1vCXXUo4mXaupzyf8JYnc/J96bSb
cQ1odNYTdzf+Ner2pNy9ejLOoAKh7nFoDoQc/kF0ZzfMcqqFAJvDWagPP8yFekGU
YHKwE2HcOqTmkbCFJG1ThTvl3bca8/2l4iD/Qc4oMJtod6fegvCg9HLv2fUsHARz
1AsSnmP21I3nOjUi4lUvTlRZBvlJTU4rvPk6YXkXzw3zZ5sC95e1CKlim85jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUneFZ1ryjjDnhCutwnitUqgeSjLIwHwYDVR0j
BBgwFoAUNxBw2zr5SJrARKAYlPfz3qUBbB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlO
TG8vMS8zNzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MTA3MERCM0FGOTQ4OUFD
MDQ0QTAxODk0RjdGM0RFQTUwMTZDMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlOTG8vMS8z
NzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAagxPzrI66KlBO/cyyivDMSrItou4wY9yNEi8rVvo+fZA96vDOrJekW7AhKPx
Nl11Vfm+6yIh93PPw9ujfHFjH87buFpBdH1OU4x80TKlSmfe/KnYYiOfzrOCno8t
r68ppCc/N+fmS+rUcZSAZ0Q2QsptoiKseyxmre9tDs/zzu2DYBm2Oc0HVMq7BH3L
xcb7CnV403CsYDaQS/YENO7Y8RH6fGSBF8S5xJOPU8K5NwjiZ9RLywUvRzKa8DpH
EKxADZoq+sBFKEu4eBeEjaGb+C1tHo74FCDAlI6vkKq0y40+gALc8dVi1MbnYvXJ
Hh/meEFMRoBDrhYVpRt446NSlw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:12:17 2025 by rpki-client