Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
File:                     1FF4D84F5EA18738B398382BB8664840225008F9.mft (raw, json)
Hash identifier:          YO2QB2/qgS6CkyT6lC0GDI9uf+7DN4dK3Jgu6OADIn4=
Subject key identifier:   5B:8F:0B:32:96:1B:90:34:14:3F:35:84:6A:A0:24:11:18:D8:8E:65
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       3FACCF675540CE51E654C1B01491E18F9516908B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
Manifest number:          CA
Signing time:             Sun 06 Apr 2025 15:55:59 +0000
Manifest this update:     Sun 06 Apr 2025 15:50:59 +0000
Manifest next update:     Mon 07 Apr 2025 18:19:59 +0000
Files and hashes:         1: 3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa (hash: RE5SjIj0s6sIsHcUuZego13ka2MLkubgMncY7ZwLkNI=)
                          2: 3139302e3132332e382e302f32332d3234203d3e20323730383134.roa (hash: 32DMzs+QTX3aC3wKblAq53W6E3iOjnqEewGr5nUQ4so=)
                          3: 3138392e37362e3137362e302f32302d3234203d3e203238333539.roa (hash: ambLDr5eItNEZkU8Yer7JzsgCsdvaVrPVnHrWPEYMRg=)
                          4: 34352e362e33322e302f32322d3234203d3e20323730383134.roa (hash: XCPjS8fAz/FgOhcIca68SL9q63+ISNuKAkFHakksT6E=)
                          5: 3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa (hash: /uo+xfeY7FzBK9a6s0azjZiz5DpxcgY39Ds6R3snRRk=)
                          6: 3137392e39372e3139322e302f31392d3234203d3e203238333539.roa (hash: hGLPytICL+fFsp2BKh4GTNmLAWqNJ4z2fgPQjpZa+pc=)
                          7: 3138392e34352e3232342e302f32302d3234203d3e20323730383134.roa (hash: xwAhJslSZonyYM2XEVpcyJuPqnh1CGv/wtVhSkOWiwE=)
                          8: 3137372e3132382e3134342e302f32302d3234203d3e20323730383134.roa (hash: STops7HD9zQrt2igW9kNgz+5rZLgJkceyWeJOST9ENs=)
                          9: 1FF4D84F5EA18738B398382BB8664840225008F9.crl (hash: y/PFhkuj2didOz/SEZyiaY+DlO8GA88yXIqbwG1E6P4=)
                          10: 3137372e37302e3139322e302f32302d3234203d3e203238333539.roa (hash: TMsN8Sh6L/ROIaVBvhXCl7nxXC60HXynQCSi0wnRNl4=)
                          11: 3137372e35332e302e302f32312d3234203d3e20323730383134.roa (hash: Azbo2/9oy0XOGWbB2UHQitBo2yaeMmGlxeanyXn4Ht0=)
                          12: 3138372e39342e3134342e302f32302d3234203d3e203238333539.roa (hash: n59RNJD1758wjVnBzVNNdglPb47S3/SLHIF1ZmajR0U=)
                          13: 323830343a373164343a3a2f33322d3438203d3e20323730383134.roa (hash: XG9IPs4Jg+yqGYCYJ01DutTxgJNRdSWG9EtQ6lLBzHs=)
                          14: 3138362e3233352e33322e302f32302d3234203d3e20323730383134.roa (hash: 1/nAvSGDIxnm0CMKgQdomTBZBT1J9vFHsAXo0tmNw8Y=)
                          15: 3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa (hash: oPaEBvdlvl7hK8500ggrONvKFgPX85A/kaAUz4FJihI=)
                          16: 3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (hash: o+XAEZ0iTk7+XrYc8u03MxUQ+1laASrFM559UsVdxE4=)
                          17: 3138392e37362e3139322e302f32302d3234203d3e203238333539.roa (hash: VidbuWJHiiO5elqfj+VSIKFWPxPLlVbCKiYTiZYFIGw=)
                          18: 3133382e302e3232342e302f32322d3234203d3e20323730383134.roa (hash: 0XpheV/T6bmgITFYBo8SW8aHCfqo0doUN9m+6mpFPVk=)
                          19: 3133382e39392e38382e302f32322d3234203d3e20323730383134.roa (hash: iJlG/3z5o4AbDt0z7iiy+sLZFpZ3Ce7eSIQJxajstiY=)
                          20: 3137372e35332e382e302f32312d3234203d3e20323730383134.roa (hash: VeS/Tu0Fo+4cH85d9U6YWlG7E1pL7tycYJfo/ZFe9dQ=)
                          21: 3137372e3232332e39362e302f32302d3234203d3e20323730383134.roa (hash: /lcSbYreILEUSk0mEMgKJzECp2TeGwFqegRO/ox6hrY=)
                          22: 3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa (hash: WI8nemkbabz/ZucrhcWqjrtd7PXFAEwmjLmBcJiZGkc=)
                          23: 3138372e39342e3132382e302f32302d3234203d3e203238333539.roa (hash: Jt1JyVG60/pkxMtcfDH3gcMeOw44ab0/6K00hj3V7nQ=)
                          24: 323830343a313566633a3a2f33322d3438203d3e203238333539.roa (hash: XKB0nsVrZlWP0JWP/+JJkbuR7z0KEytY1sWrSToq2/0=)
                          25: 3137372e3138352e3134342e302f32312d3234203d3e20323730383134.roa (hash: 3viJ8obYh+T2dYHH7CKw4xEUEjUsdi/C682tshci8tI=)
                          26: 34352e3137372e3131322e302f32322d3234203d3e20323730383134.roa (hash: aPrk8Ek58PvAEO6YkrmGsIyqqqRMNyrqDreVK+qjuAo=)
                          27: 323830343a6637303a3a2f33322d3438203d3e20323730383134.roa (hash: toG2HEE5QtzzPcUE2bHHW/ZGlVtJ58me2W7d6qUWjSY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ac:cf:67:55:40:ce:51:e6:54:c1:b0:14:91:e1:8f:95:16:90:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Apr  6 15:50:59 2025 GMT
            Not After : Apr  7 18:19:59 2025 GMT
        Subject: CN=5B8F0B32961B9034143F35846AA0241118D88E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:4a:32:3a:5c:73:e7:5a:73:93:de:49:a4:
                    a0:38:56:9c:fb:fe:29:5e:5a:b4:9e:71:a3:fe:91:
                    57:51:13:31:bb:a2:a4:14:38:59:a9:6a:8d:2c:51:
                    1c:c1:77:b4:6a:4e:a3:68:be:f2:96:da:7f:67:83:
                    c1:7a:80:5d:51:d1:0d:0c:77:18:b8:a7:51:41:82:
                    c6:41:25:75:1c:32:a4:c4:29:9b:27:ad:95:62:7c:
                    ec:6a:d2:3d:1f:a0:50:bf:a0:2d:12:14:4a:5f:7f:
                    6f:28:c5:50:d4:7d:88:44:9f:3e:99:a3:87:14:a5:
                    dc:a2:5f:26:35:68:93:30:a7:b4:2a:bf:ff:d8:3a:
                    c4:61:19:5a:6c:62:d1:78:3c:f0:24:c6:2b:0b:e4:
                    a3:b3:81:bf:9a:3d:67:34:e1:0e:dc:9c:3a:ae:04:
                    10:83:35:28:5b:90:90:6d:0c:32:c6:83:bb:26:64:
                    0d:2e:12:85:3a:84:56:18:e5:85:19:71:9d:32:8d:
                    7c:db:f3:d3:12:4e:58:13:ae:fe:c3:ca:ee:9b:10:
                    89:67:0c:2d:40:28:a1:ed:d4:92:aa:2c:4a:08:da:
                    22:5a:fb:4f:01:8d:b7:11:e3:e8:05:d4:7c:ba:e2:
                    7b:87:ee:14:f8:07:a9:51:47:04:1b:65:58:89:1c:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:0B:32:96:1B:90:34:14:3F:35:84:6A:A0:24:11:18:D8:8E:65
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:81:83:cc:0e:5e:b6:f2:60:fb:a1:c6:d6:ef:53:e1:fc:
         2b:32:a4:21:48:50:1e:cf:37:7c:c5:ea:d4:32:53:8e:8d:15:
         e8:1a:a7:29:cf:c0:4a:92:ed:db:07:68:ab:c2:e9:5e:a4:0b:
         8c:eb:b5:fc:cc:42:28:ce:52:9d:c8:e2:0c:2b:44:da:04:38:
         a9:bb:97:54:54:41:48:c6:1f:73:23:3a:9e:56:c7:54:6e:45:
         cf:65:cd:0d:8a:26:4f:7e:ab:92:2b:27:5f:41:16:99:15:97:
         0c:ca:7f:86:6f:e4:07:3a:17:78:be:22:3b:1a:c4:0f:b3:4e:
         51:17:7e:f0:cf:62:7f:7b:bd:dd:c6:62:cd:bf:87:e2:7f:d7:
         52:b4:4e:58:ab:17:9e:a2:f5:73:69:24:36:b0:c1:3d:8f:9d:
         e4:5c:87:fd:c0:96:5d:e9:0f:71:87:b4:c1:59:ec:e8:cf:f1:
         8b:37:f4:60:06:26:09:5c:77:0b:ea:6b:fc:6e:e3:f1:16:be:
         76:20:7d:05:5e:3c:01:10:d3:87:de:5a:28:55:e7:24:95:26:
         bc:81:d2:b5:a5:33:3a:da:9c:9e:cd:7b:8d:fc:31:08:7c:63:
         69:c4:90:50:ab:5e:79:ce:46:41:aa:cd:88:a5:45:96:1e:91:
         37:98:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:27:58 2025 by rpki-client