Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
File:                     A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft (raw, json)
Hash identifier:          Paa/K/tqanWeacD5mQhWx6uG7vz7tDQDVtMw2YfuhxA=
Subject key identifier:   CF:5A:66:08:74:EF:0D:3E:2D:79:51:E2:11:55:5E:65:48:52:89:7E
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       106096699D938359E7415D338BA2AFCB346983C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
Manifest number:          023C
Signing time:             Fri 18 Apr 2025 03:00:00 +0000
Manifest this update:     Fri 18 Apr 2025 02:55:00 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:00 +0000
Files and hashes:         1: 323830343a383038303a383030303a3a2f33332d3333203d3e20323731373534.roa (hash: s5l4q/3P2UU9UAG1MqM+KP+HHM7XZY6H/k7vZsXdtCo=)
                          2: 323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (hash: 10wEGWQJjodShwtbNjfwSGtxzRRG6xY5FPd7dmvALjU=)
                          3: 323830343a383038303a633030303a3a2f33342d3334203d3e20323731373534.roa (hash: SvqXoKeVyxMGMkyRqTX7O8wrkticDCUMEabiWX+eXY0=)
                          4: 323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (hash: vp7GIr1AuxnLNDmVxonw4f1fVMYDa+c0mmvcWA0dXNE=)
                          5: 323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (hash: SDdJtxWMH6VIkQnfvEmAoo4GCxbrBmE2je5LpBEZHbY=)
                          6: 323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (hash: Z76ovSANgHJGP+sM/lxSiStmUvcI+SG3aC8iOHrSWnM=)
                          7: A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl (hash: OQXOhdCVUW2z/wAg7DrFojD1eBp3bMmhtgMp8QiQxVY=)
                          8: 323830343a383038303a3a2f33342d3334203d3e20323731373534.roa (hash: 3ovTN9AIasCdTWBoskIU4oqlsI0dbT3aXe4z4ef17zk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:96:69:9d:93:83:59:e7:41:5d:33:8b:a2:af:cb:34:69:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr 18 02:55:00 2025 GMT
            Not After : Apr 19 03:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:ba:e9:fc:26:c3:34:b2:bd:60:73:a0:47:
                    be:65:99:1e:97:9c:ed:f8:b1:07:a4:c0:f1:e9:85:
                    38:79:f0:75:d6:e6:73:af:dc:63:3b:3f:08:18:cd:
                    78:60:82:13:95:a4:6f:86:bc:82:5b:e5:97:1e:85:
                    ff:0a:be:93:69:23:1a:6e:7f:fd:e8:af:42:8b:41:
                    46:d5:c3:9c:b3:1e:e6:fc:d5:c0:99:36:b0:92:11:
                    1c:50:03:cb:f9:1c:84:5f:1e:56:34:9d:9d:a4:97:
                    6c:8d:01:57:b9:52:05:b2:ec:b3:05:37:64:39:f6:
                    69:f6:f5:e9:10:30:cf:ae:47:3c:25:6e:a7:b9:cf:
                    4c:b6:65:5e:b1:d0:bb:85:9a:02:cd:24:b6:70:ac:
                    4d:4f:45:a3:9e:e5:89:1e:55:99:f8:09:c0:50:63:
                    31:56:6f:68:02:6d:1c:2e:56:68:c8:e9:b9:ad:ee:
                    cd:93:9e:c3:c9:02:12:7d:4c:19:9e:15:a0:85:9b:
                    3c:99:f5:b4:ae:4b:0b:53:96:d5:0f:79:8e:7d:2a:
                    2a:79:25:4b:00:42:fb:c7:0b:cd:14:96:5c:5f:9b:
                    eb:67:e4:46:e5:2c:62:33:9f:67:80:4e:6a:28:52:
                    0d:a5:87:73:51:03:da:e8:53:88:67:a7:99:a8:64:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:66:08:74:EF:0D:3E:2D:79:51:E2:11:55:5E:65:48:52:89:7E
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:f0:0a:2e:8e:89:d2:b4:d8:68:13:f6:62:39:0f:25:76:
         e8:0e:be:7e:ea:3a:8a:34:7e:41:fa:7d:a1:70:ec:b8:9c:6b:
         25:f0:2b:78:04:d2:0e:49:8a:f6:89:15:fb:c9:ba:a9:18:ea:
         a5:c9:10:ea:bb:5d:62:d2:8b:d9:0d:9d:b7:e5:19:c0:41:c1:
         ed:b8:57:4f:fa:e5:89:3c:c7:74:a6:71:5b:e3:c4:6a:75:9e:
         a3:21:14:ac:62:84:3c:80:8d:a7:d6:71:e4:6a:e0:f6:55:30:
         ce:3d:37:68:16:6f:a1:30:55:24:d6:4f:4b:c4:58:e8:7b:c8:
         0f:dc:7f:ca:4c:ae:89:6d:35:bb:97:1d:db:da:eb:11:49:b9:
         f8:cc:61:f3:5b:07:73:5b:fa:2a:e4:02:35:57:0b:28:02:4f:
         4f:0b:12:02:95:25:2c:48:fb:a2:6f:5d:5f:10:d0:af:ad:ef:
         82:a0:3f:d5:a7:ee:3e:ef:2d:be:d0:50:72:e3:35:dc:82:9a:
         d2:19:b2:0e:79:0e:af:63:d5:d7:3b:c4:db:df:ee:41:b1:6c:
         ac:3a:bd:8d:c0:59:fa:f9:24:4c:de:62:84:5f:1a:6b:97:63:
         5c:49:be:6b:c3:fa:4e:51:f9:90:55:4a:ae:92:18:6a:3c:f7:
         a1:ab:5b:f7
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUEGCWaZ2Tg1nnQV0zi6KvyzRpg8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE2NTMxOUFBMzZENEZGRDJBNUQ5QTJCRTQyRjVDMkVG
MEUyMEI4RTAeFw0yNTA0MTgwMjU1MDBaFw0yNTA0MTkwMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlBN0JBRTlGQzI2QzMzNEIy
QkQ2MDczQTA0N0JFNjU5OTFFOTc5Q0VERjhCMTA3QTRDMEYxRTk4NTM4NzlGMDc1
RDZFNjczQUZEQzYzM0IzRjA4MThDRDc4NjA4MjEzOTVBNDZGODZCQzgyNUJFNTk3
MUU4NUZGMEFCRTkzNjkyMzFBNkU3RkZERThBRjQyOEI0MTQ2RDVDMzlDQjMxRUU2
RkNENUMwOTkzNkIwOTIxMTFDNTAwM0NCRjkxQzg0NUYxRTU2MzQ5RDlEQTQ5NzZD
OEQwMTU3Qjk1MjA1QjJFQ0IzMDUzNzY0MzlGNjY5RjZGNUU5MTAzMENGQUU0NzND
MjU2RUE3QjlDRjRDQjY2NTVFQjFEMEJCODU5QTAyQ0QyNEI2NzBBQzRENEY0NUEz
OUVFNTg5MUU1NTk5RjgwOUMwNTA2MzMxNTY2RjY4MDI2RDFDMkU1NjY4QzhFOUI5
QURFRUNEOTM5RUMzQzkwMjEyN0Q0QzE5OUUxNUEwODU5QjNDOTlGNUI0QUU0QjBC
NTM5NkQ1MEY3OThFN0QyQTJBNzkyNTRCMDA0MkZCQzcwQkNEMTQ5NjVDNUY5QkVC
NjdFNDQ2RTUyQzYyMzM5RjY3ODA0RTZBMjg1MjBEQTU4NzczNTEwM0RBRTg1Mzg4
NjdBNzk5QTg2NDhCRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuae66fwmwzSyvWBzoEe+ZZkel5zt+LEHpMDx6YU4efB11uZzr9xj
Oz8IGM14YIITlaRvhryCW+WXHoX/Cr6TaSMabn/96K9Ci0FG1cOcsx7m/NXAmTaw
khEcUAPL+RyEXx5WNJ2dpJdsjQFXuVIFsuyzBTdkOfZp9vXpEDDPrkc8JW6nuc9M
tmVesdC7hZoCzSS2cKxNT0WjnuWJHlWZ+AnAUGMxVm9oAm0cLlZoyOm5re7Nk57D
yQISfUwZnhWghZs8mfW0rksLU5bVD3mOfSoqeSVLAEL7xwvNFJZcX5vrZ+RG5Sxi
M59ngE5qKFINpYdzUQPa6FOIZ6eZqGSL8QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FM9aZgh07w0+LXlR4hFVXmVIUol+MB8GA1UdIwQYMBaAFKFlMZqjbU/9Kl2aK+Qv
XC7w4guOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5
WEdEMkJTY2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZG
RDJBNUQ5QTJCRTQyRjVDMkVGMEUyMEI4RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BMTY1MzE5QUEzNkQ0RkZEMkE1RDlBMkJFNDJGNUMyRUYwRTIw
QjhFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JxZDRrdWtLbWVOb2Y5WEdEMkJT
Y2hzZHFkYUJVQ3RtM3gzM3JTcEZMY0gyLzEvQTE2NTMxOUFBMzZENEZGRDJBNUQ5
QTJCRTQyRjVDMkVGMEUyMEI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIHP8AoujonStNhoE/ZiOQ8l
dugOvn7qOoo0fkH6faFw7LicayXwK3gE0g5JivaJFfvJuqkY6qXJEOq7XWLSi9kN
nbflGcBBwe24V0/65Yk8x3SmcVvjxGp1nqMhFKxihDyAjafWceRq4PZVMM49N2gW
b6EwVSTWT0vEWOh7yA/cf8pMroltNbuXHdva6xFJufjMYfNbB3Nb+irkAjVXCygC
T08LEgKVJSxI+6JvXV8Q0K+t74KgP9Wn7j7vLb7QUHLjNdyCmtIZsg55Dq9j1dc7
xNvf7kGxbKw6vY3AWfr5JEzeYoRfGmuXY1xJvmvD+k5R+ZBVSq6SGGo896GrW/c=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:36:02 2025 by rpki-client