Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
File:                     1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft (raw, json)
Hash identifier:          f+FbPEsOd8HyHlFu8Qb7ekaLuEr96FmniwRdWEpkBCI=
Subject key identifier:   AF:A7:49:D5:B5:FE:74:0A:87:52:47:40:0E:49:E9:32:82:1B:C5:62
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       46E16558221EB9CA6FB35946B7AE8B1248D31973
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
Manifest number:          D2
Signing time:             Sat 23 Nov 2024 11:15:16 +0000
Manifest this update:     Sat 23 Nov 2024 11:10:16 +0000
Manifest next update:     Sun 24 Nov 2024 13:32:16 +0000
Files and hashes:         1: 3230302e31392e3139372e302f32342d3234203d3e203131383032.roa (hash: jv/iiKqW2xsRvRdoYTrjhMKhc9+qNDVbWAb1wqWniCs=)
                          2: 3230302e31392e3139332e302f32342d3234203d3e203131383032.roa (hash: 0pvgTAJLaCnt/Oc/pCVmnAPLhVY/ihpL8cWKFp/yD3A=)
                          3: 3230302e31392e3232302e302f32342d3234203d3e203131383032.roa (hash: cx0dEVysRP0ckkL6Uc0ZLSbalOg118S4rB5y7yEhh/k=)
                          4: 3230302e3139322e36342e302f32302d3234203d3e203131383032.roa (hash: J/vYlc4c2whq3XzAYZCRqBEQDLCKg2mn4NkqOxwIIKo=)
                          5: 3230302e31392e3139382e302f32342d3234203d3e203131383032.roa (hash: lQSwEtTqQMBxUgIE3m0HVPWFehVLo/oW9DbQmm0Jkww=)
                          6: 3230302e31392e3139342e302f32342d3234203d3e203131383032.roa (hash: xiJAimbngqcGNTuLIgk50xW6n+NedXbuJOdN1Q8dWOI=)
                          7: 3230302e31392e3230302e302f32342d3234203d3e203131383032.roa (hash: nLHRnNs94bRpTemErfQJf/msP+rCcmW8hkfHpe4vlRc=)
                          8: 3230302e31392e3232322e302f32342d3234203d3e203131383032.roa (hash: C0LYRQgFsRWajJ0qFOV3m9eaUa/MobQKmbbfuZUdobM=)
                          9: 3230302e31392e3230332e302f32342d3234203d3e203131383032.roa (hash: qrZlmvUdpozf27eh8+NjGA+DhJozd687mXKD18m9WN8=)
                          10: 3230302e31392e3230392e302f32342d3234203d3e203131383032.roa (hash: VR9vSmUqHl/SBH8AfGUKloXeQvV8YHWyplraKD39K2Q=)
                          11: 3230302e31392e3231372e302f32342d3234203d3e203131383032.roa (hash: 3EZucIh4yfxdh+462NhuWdB+LMe6YhM0lhlqKUu2dUE=)
                          12: 3230302e31392e3230312e302f32342d3234203d3e203131383032.roa (hash: rwCdfH1yNsTUkjA4OxD4rtAc1TbkXiVFUgr+evfursg=)
                          13: 323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa (hash: 5LVxqAa7bo3Gd9aKgyI4jJ7o2zbGewpFACe0rLi933o=)
                          14: 3230302e31392e3139392e302f32342d3234203d3e203131383032.roa (hash: XXJ+rQzbg5AusW4OZONyjWP8eZetsjmOIJjpOF+QeuY=)
                          15: 3230302e31392e3230342e302f32342d3234203d3e203131383032.roa (hash: ne2+9chRI5T/b8mZPJzy1WIcORzd99kH09dbqUVE8gM=)
                          16: 3230302e31392e3230352e302f32342d3234203d3e203131383032.roa (hash: BIZO8FKSa7c38wjufgEwmTD3ChYb3MnfgXW055w5p+M=)
                          17: 3230302e31392e3232332e302f32342d3234203d3e203131383032.roa (hash: rPkeVZVwaBuxS4rvYA+htgzcs2pwBpKJCx9YUO89phY=)
                          18: 3230302e31392e3231362e302f32342d3234203d3e203131383032.roa (hash: 9V6yY9I+muLlNaqvxw/xIjajYskWVk27n0ZYa5LDyD0=)
                          19: 3230302e31392e3139322e302f31392d3139203d3e203131383032.roa (hash: 60wSuYcmXuHaw23pekNP8ok1L/jikLnQ4ZnV3so5N3c=)
                          20: 3230302e31392e3231312e302f32342d3234203d3e203131383032.roa (hash: d3fGMqkPewaLsTHGdYlbge+DVUuQF4wwbpkuuj8KdyI=)
                          21: 323830343a316630303a3a2f33322d3438203d3e203131383032.roa (hash: HL+zlEOzYgOB2XkYwCgHpLVBkbIIOarv99dEzz/QMlQ=)
                          22: 3230302e31392e3231302e302f32342d3234203d3e203131383032.roa (hash: VesvsTp5F3s2a6GMJitLGX3R5eaH4iW+q7R40B1+iN0=)
                          23: 3230302e31392e3231352e302f32342d3234203d3e203131383032.roa (hash: nwvESta+3o//K7CYWGkMNKtOaKe2soHnYdNi4a0dp38=)
                          24: 3230302e31392e3230372e302f32342d3234203d3e203131383032.roa (hash: Uh/ngcMRMjS1ymppUolJkVNafIPxo3UfCuoi57VxHEI=)
                          25: 3230302e31392e3231332e302f32342d3234203d3e203131383032.roa (hash: sML192DK6XD4ZlWG7cXRMcLtDIesLadwXnBYEE0aNG8=)
                          26: 3230302e31392e3231382e302f32342d3234203d3e203131383032.roa (hash: rWB8AJy2Y51kZp9I3KBMASuBDC41h4BLUH0dYMcEij4=)
                          27: 3230302e31392e3139322e302f32342d3234203d3e203131383032.roa (hash: whLpkr1ZiD6ULfcO1LOBiSCcOV8O6IMhOX0Jp87lEDA=)
                          28: 3230302e31392e3231342e302f32342d3234203d3e203131383032.roa (hash: bfycAAJHg2d1iNaek5xiyzDqYKhCDdwT1akvHvicmko=)
                          29: 3230302e31392e3139352e302f32342d3234203d3e203131383032.roa (hash: OHHPvhY+Fb2O9a5fuKGITWnURxa5zsIQU1aEIOk46mE=)
                          30: 3230302e31392e3230362e302f32342d3234203d3e203131383032.roa (hash: NGB0/ONm4jC6lUh0lva6sk7BHduXAIL+dkAvxlR0OMI=)
                          31: 3230302e31392e3139362e302f32342d3234203d3e203131383032.roa (hash: wIhXaUgYV21MtR7Ts2aZQx1lbbTCiMEtNThyQXIKn4Y=)
                          32: 3230302e31392e3230382e302f32342d3234203d3e203131383032.roa (hash: g8+fC4kJwbodGLEKVoilJRiaRbH5wSsRbeQylyN8UEw=)
                          33: 3230302e31392e3230322e302f32342d3234203d3e203131383032.roa (hash: JfKTTp/9LuWPdtlLWZiws/p25J6ZIvq6nqjWDHV6OWI=)
                          34: 3230302e31392e3232312e302f32342d3234203d3e203131383032.roa (hash: c9GTYB3W0/KVRzuItSYpV7dTSFU7aRDCIKMEzztGBWE=)
                          35: 1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl (hash: 0OCBtsx3SI4bZgMcZsk66pS8IHPo3ih/Ia/aG5tKh+E=)
                          36: 3230302e31392e3231322e302f32342d3234203d3e203131383032.roa (hash: OIyiLgC04uOx0KMzLun4ATili9YLCWGRa2k1Q3UHZoA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e1:65:58:22:1e:b9:ca:6f:b3:59:46:b7:ae:8b:12:48:d3:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Nov 23 11:10:16 2024 GMT
            Not After : Nov 24 13:32:16 2024 GMT
        Subject: CN=AFA749D5B5FE740A875247400E49E932821BC562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:21:10:4e:6d:e7:49:e4:d9:f0:e9:6f:5a:
                    43:f9:41:58:b6:77:60:c8:47:75:70:c7:44:fa:0d:
                    a4:59:12:87:ee:ab:ac:e7:b8:d4:d1:99:2d:ef:91:
                    7c:56:d9:c3:0a:41:ef:05:c0:82:2b:64:21:6e:1d:
                    d1:77:c5:a0:15:90:e0:00:6c:bc:55:55:92:b9:7b:
                    3b:4b:d2:97:62:c5:d6:29:78:ce:ba:78:77:49:b1:
                    2e:d2:08:dd:2c:2b:9e:f2:86:b8:2c:9c:48:7c:42:
                    a3:c3:c0:9f:83:9e:d2:dc:ff:d9:0d:93:06:bf:5d:
                    39:fa:97:13:12:5c:3d:05:c3:28:d6:f9:15:2a:7b:
                    4c:f5:ec:92:b4:bc:1d:c7:6a:cf:ba:69:9f:6a:e1:
                    19:76:51:30:5e:af:2c:fa:71:f2:80:95:97:b8:ea:
                    c8:37:c3:54:ec:9a:51:7d:4b:e2:14:00:8f:1c:0c:
                    97:e9:15:dc:4d:07:6a:c5:bf:f6:da:a9:e0:7a:3b:
                    c0:49:c2:85:3d:20:56:28:a9:56:0e:17:ff:4c:2c:
                    36:84:c2:5c:08:72:ca:f4:28:1c:b5:26:13:1e:d4:
                    80:70:e4:86:d7:86:ea:15:f0:6b:2f:b2:f3:b8:ca:
                    2c:dc:64:e0:bb:72:75:7e:a3:69:3b:ad:e3:22:eb:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A7:49:D5:B5:FE:74:0A:87:52:47:40:0E:49:E9:32:82:1B:C5:62
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:5c:4e:9d:df:a2:1a:a3:f6:e2:57:c2:80:b9:de:84:4d:
         73:b8:ed:87:21:25:0f:21:6f:3f:de:97:63:40:a9:00:b7:9e:
         47:e5:ec:ca:58:89:02:51:cf:e9:3d:7e:dd:0f:87:9e:56:83:
         be:1c:c3:a1:b8:75:2a:3c:2f:20:3f:79:a6:51:67:43:0b:68:
         9a:f4:35:ad:89:19:66:75:3e:8b:c1:26:d1:6f:52:fe:47:3e:
         41:6b:56:9d:5a:24:9f:6e:f2:47:a5:92:c9:79:77:fb:76:7d:
         0a:eb:e2:49:ca:a9:71:7a:09:52:c5:0c:e2:44:1c:40:48:09:
         6f:92:e5:89:66:85:25:13:9e:77:77:e2:a2:61:65:18:d9:b7:
         27:ab:84:95:83:cb:c2:72:56:14:d7:f9:2b:aa:e5:b4:91:11:
         1a:a5:e0:c0:af:de:64:cf:e0:0f:9e:28:bd:7c:24:fd:ea:4f:
         24:60:5e:6d:8d:09:67:1a:6a:c4:ff:c7:a5:46:1c:a7:74:93:
         5d:1d:f9:a5:b7:47:21:d9:1a:1e:1b:03:5a:03:0f:24:fc:44:
         bc:a0:e9:80:e2:3d:de:09:a2:b0:9f:51:62:57:77:6b:fc:74:
         1a:97:74:5c:c2:93:db:10:bd:ae:c3:60:55:ad:b0:79:a6:93:
         2b:8a:1e:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURuFlWCIeucpvs1lGt66LEkjTGXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDExMjMxMTEwMTZaFw0yNDExMjQxMzMyMTZaMDMxMTAvBgNV
BAMTKEFGQTc0OUQ1QjVGRTc0MEE4NzUyNDc0MDBFNDlFOTMyODIxQkM1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttyEQTm3nSeTZ8OlvWkP5QVi2
d2DIR3Vwx0T6DaRZEofuq6znuNTRmS3vkXxW2cMKQe8FwIIrZCFuHdF3xaAVkOAA
bLxVVZK5eztL0pdixdYpeM66eHdJsS7SCN0sK57yhrgsnEh8QqPDwJ+DntLc/9kN
kwa/XTn6lxMSXD0FwyjW+RUqe0z17JK0vB3Has+6aZ9q4Rl2UTBeryz6cfKAlZe4
6sg3w1TsmlF9S+IUAI8cDJfpFdxNB2rFv/baqeB6O8BJwoU9IFYoqVYOF/9MLDaE
wlwIcsr0KBy1JhMe1IBw5IbXhuoV8GsvsvO4yizcZOC7cnV+o2k7reMi691VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr6dJ1bX+dAqHUkdADknpMoIbxWIwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUyWmIvMC8x
NTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjQhcTp3fohqj9uJXwoC53oRNc7jthyElDyFvP96XY0CpALeeR+XsyliJAlHP
6T1+3Q+HnlaDvhzDobh1KjwvID95plFnQwtomvQ1rYkZZnU+i8Em0W9S/kc+QWtW
nVokn27yR6WSyXl3+3Z9CuviScqpcXoJUsUM4kQcQEgJb5LliWaFJROed3fiomFl
GNm3J6uElYPLwnJWFNf5K6rltJERGqXgwK/eZM/gD54ovXwk/epPJGBebY0JZxpq
xP/HpUYcp3STXR35pbdHIdkaHhsDWgMPJPxEvKDpgOI93gmisJ9RYld3a/x0Gpd0
XMKT2xC9rsNgVa2weaaTK4oeaQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org