Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
File:                     3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft (raw, json)
Hash identifier:          5y8s+KgtmAT9f/qOD+HAsK320w7tC2dRd8QEKoFZeVw=
Subject key identifier:   32:E5:76:FF:B8:28:66:C7:3A:2D:C0:6A:73:36:C4:0B:D5:97:96:AB
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       03F697671A0D94815F06C343B2FFB4D6F8FFD58B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
Manifest number:          0177
Signing time:             Mon 28 Jul 2025 13:33:02 +0000
Manifest this update:     Mon 28 Jul 2025 13:28:02 +0000
Manifest next update:     Tue 29 Jul 2025 16:51:02 +0000
Files and hashes:         1: 3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl (hash: GCSUy5fe+rXCkI+FlsFAoz3AkREsjxdwegP2UE8/rxQ=)
                          2: 3138372e38362e3139342e302f32342d3234203d3e20323639303733.roa (hash: y4SOQkLOvhGBfHQLFwM1r/7fxjaRthcI+m8c8O53EAA=)
                          3: 3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa (hash: 0RNc5bM8iJtAmsYkhMHKnDReQrm9zThsgePlpOiBtts=)
                          4: 3138372e31372e33322e302f32312d3231203d3e20323639303733.roa (hash: jEGltTiGxrCUi+n7QT+IEClNt9BQrnb1b/Cs6V4UZE8=)
                          5: 3138372e3131302e3134342e302f32322d3232203d3e20323639303733.roa (hash: JzxI3J0xaCXN8vAhj/rqoe0ZedmuYtrRd03vkL7yW5I=)
                          6: 3133382e39342e3132342e302f32322d3232203d3e20323639303733.roa (hash: wOjC17/S/kyLiiFPh/us7vwX5Dv8/uJeUJdVGTbrpM8=)
                          7: 3133382e39372e3132302e302f32322d3232203d3e20323639303733.roa (hash: Og3/8TQnqIOEDwA4w+sTtk4rUnfbOf3JcQ0G7MmghYE=)
                          8: 323830343a356630633a3a2f33322d3332203d3e20323639303733.roa (hash: G+lP5RFcdQX/jVDphMVqXgGWjzWObdMuhV//gxNzTjw=)
                          9: 3138372e38362e3139322e302f32332d3233203d3e20323639303733.roa (hash: scaoW/pZ6Fz4ysVy+VRd2tozAzShvoKrIsq89mz0m+c=)
                          10: 3230312e3135302e3134342e302f32322d3234203d3e20323639303733.roa (hash: buUlTBRP4LkUGYwu+XwNSHnoJ7+T+RhxxCqxR3kq8NY=)
                          11: 3138372e31372e33322e302f32302d3230203d3e20323639303733.roa (hash: X9JEX+7PIrEFO8G/psHQJO1sJQssKmyBFHfnKRGV088=)
                          12: 34352e3137392e33362e302f32342d3234203d3e20323639303733.roa (hash: T0JBQ407MqhHBXXA6Yq6ylvDFyKIfNgkocsySTcP0h4=)
                          13: 3138372e3131302e3134342e302f32312d3231203d3e20323639303733.roa (hash: StQq5b6erwxqiiGZCe2AgrDyQYjxdlVa9y8MbG6CvvQ=)
                          14: 3138372e31372e34302e302f32312d3231203d3e20323639303733.roa (hash: /EyH94PAybxRPXj2Pet6J3sVrIOkYvcpuaS08SwOl3I=)
                          15: 3230372e3234382e32382e302f32322d3234203d3e20323639303733.roa (hash: jnhANjFjHJGWbp6bsRoGCuOAGDyU/Q/p451yZn902WM=)
                          16: 34352e3137392e33362e302f32322d3232203d3e20323639303733.roa (hash: qRU1uKnXsm4TVxduIXu7Eny8E1DFJfoFYFsfE3USUMw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 16:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f6:97:67:1a:0d:94:81:5f:06:c3:43:b2:ff:b4:d6:f8:ff:d5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Jul 28 13:28:02 2025 GMT
            Not After : Jul 29 16:51:02 2025 GMT
        Subject: CN=32E576FFB82866C73A2DC06A7336C40BD59796AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:1d:63:38:7e:81:a5:32:e5:59:51:e7:f2:
                    3b:f6:71:44:76:65:c9:24:75:08:a5:b4:57:10:c2:
                    ce:9c:b7:3e:18:16:55:61:bf:60:7d:ad:b1:a7:4e:
                    40:21:3c:46:5f:f7:2b:17:ec:5d:fb:19:00:0a:c2:
                    d3:3f:58:90:bf:59:61:6f:79:04:8b:63:a9:55:de:
                    df:d2:b4:e2:46:39:9e:d5:8a:e2:fc:a3:48:c5:aa:
                    2b:f4:2d:6c:81:3f:04:67:53:e8:b2:20:6e:b5:10:
                    8b:ea:d4:c6:14:ff:d1:93:5c:7c:b7:69:7d:c0:35:
                    de:1a:d7:c4:f5:a4:71:87:0a:b7:90:b6:6e:dd:03:
                    02:72:75:ef:f3:5d:b8:b9:ee:1c:a9:eb:08:23:59:
                    38:1c:72:00:66:77:65:0c:ef:a7:d6:c7:4d:ea:e0:
                    40:65:df:ad:3a:e9:68:13:03:f5:d9:b1:c5:04:ef:
                    69:ca:64:91:47:a0:f1:05:3a:67:e5:e6:fa:17:00:
                    50:a8:0a:94:33:35:23:28:8b:90:5f:e0:78:83:03:
                    30:b0:f6:5b:19:ac:1d:a6:98:37:3d:c1:67:90:8d:
                    08:5b:15:f8:aa:c2:b8:28:57:97:42:08:47:da:a4:
                    49:c3:3d:21:50:4b:cd:e4:d4:76:10:70:3f:dd:3b:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:76:FF:B8:28:66:C7:3A:2D:C0:6A:73:36:C4:0B:D5:97:96:AB
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:cb:8d:89:fe:d8:ba:bd:c8:f5:29:91:b0:44:2e:f6:f0:
         65:b1:c6:7a:7d:71:99:35:3d:e9:7e:16:9d:bb:81:24:fc:18:
         8d:d6:13:79:88:a7:4c:9b:8d:43:30:e4:f4:ff:be:ef:35:45:
         79:cf:4b:ed:c6:ae:47:7f:93:af:7a:81:b6:32:c3:ed:79:fe:
         c6:96:05:d9:71:3d:35:44:bd:85:fb:0b:a2:b0:61:b9:f6:9e:
         7f:28:b5:f8:66:20:bc:42:aa:8f:91:d9:f3:43:1d:95:d1:50:
         9a:8c:2e:1d:13:63:92:eb:64:b8:39:84:d6:92:22:0e:17:11:
         2f:81:4c:f1:d5:dd:ec:b5:3a:65:e6:cd:c0:69:bc:59:ef:0d:
         45:4b:62:a5:dc:e1:58:31:f5:0d:91:f5:08:10:f1:c7:68:2d:
         48:fe:eb:86:ef:56:ee:44:1f:5b:80:b4:b7:d6:93:d1:22:99:
         61:16:42:3b:99:b7:e2:b7:05:27:8e:15:ac:5d:cf:9f:18:49:
         52:ab:93:17:42:0d:bf:74:df:3d:01:c1:ee:1e:69:6e:aa:68:
         26:14:35:32:fa:2c:02:b1:94:85:84:d0:af:36:7b:c0:b5:68:
         8c:16:98:d5:39:e1:d8:cf:a4:1e:17:04:cc:5e:87:6f:51:a4:
         a5:77:3b:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA/aXZxoNlIFfBsNDsv+01vj/1YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNTA3MjgxMzI4MDJaFw0yNTA3MjkxNjUxMDJaMDMxMTAvBgNV
BAMTKDMyRTU3NkZGQjgyODY2QzczQTJEQzA2QTczMzZDNDBCRDU5Nzk2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02h1jOH6BpTLlWVHn8jv2cUR2
ZckkdQiltFcQws6ctz4YFlVhv2B9rbGnTkAhPEZf9ysX7F37GQAKwtM/WJC/WWFv
eQSLY6lV3t/StOJGOZ7ViuL8o0jFqiv0LWyBPwRnU+iyIG61EIvq1MYU/9GTXHy3
aX3ANd4a18T1pHGHCreQtm7dAwJyde/zXbi57hyp6wgjWTgccgBmd2UM76fWx03q
4EBl36066WgTA/XZscUE72nKZJFHoPEFOmfl5voXAFCoCpQzNSMoi5Bf4HiDAzCw
9lsZrB2mmDc9wWeQjQhbFfiqwrgoV5dCCEfapEnDPSFQS83k1HYQcD/dO4urAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMuV2/7goZsc6LcBqczbEC9WXlqswHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2OTMvMC8z
RkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnIPLjYn+2Lq9yPUpkbBELvbwZbHGen1xmTU96X4WnbuBJPwYjdYTeYinTJuN
QzDk9P++7zVFec9L7cauR3+Tr3qBtjLD7Xn+xpYF2XE9NUS9hfsLorBhufaefyi1
+GYgvEKqj5HZ80MdldFQmowuHRNjkutkuDmE1pIiDhcRL4FM8dXd7LU6ZebNwGm8
We8NRUtipdzhWDH1DZH1CBDxx2gtSP7rhu9W7kQfW4C0t9aT0SKZYRZCO5m34rcF
J44VrF3PnxhJUquTF0INv3TfPQHB7h5pbqpoJhQ1MvosArGUhYTQrzZ7wLVojBaY
1Tnh2M+kHhcEzF6Hb1GkpXc7yQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 01:43:42 2025 by rpki-client