Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
File:                     2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft (raw, json)
Hash identifier:          6m2kgpOpZvw+QNS3Xq0PSgFog3gVpAALkfbutn3/arE=
Subject key identifier:   3E:DA:68:68:E3:5B:F8:F4:5E:93:F5:2A:B0:97:40:A8:DF:1A:85:98
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       2C737D049D96E1DCCC8117EDD74F68864B9BE030
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
Manifest number:          1A
Signing time:             Wed 20 Aug 2025 02:27:57 +0000
Manifest this update:     Wed 20 Aug 2025 02:22:57 +0000
Manifest next update:     Thu 21 Aug 2025 02:42:57 +0000
Files and hashes:         1: 323830343a353361303a3a2f33322d3332203d3e20323638353936.roa (hash: dzBtqfmKe4o7LAQTKYAad47sisc2jjp0Uzay+UlUeME=)
                          2: 323830343a353361303a3a2f33362d3336203d3e20323638353936.roa (hash: 2An9Q4ta7h61fkdeDV3sf9CSi64j2uzNp+YmK0VqDBQ=)
                          3: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl (hash: dOOLLcP+ymeouEY3/aUhHCKFUkdsWEP+PSpW1Kywo0U=)
                          4: 323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa (hash: vhscWwnndPZ1Ru19ptnhey/xnyFYkWuqHsJq0xK3ka4=)
                          5: 34352e3136342e34312e302f32342d3234203d3e20323638353936.roa (hash: 3djr4zaaOHBQVszvNS4ML3YDInpoO3/XomP175oDp3c=)
                          6: 34352e3136342e34332e302f32342d3234203d3e20323638353936.roa (hash: gq7fg+wBaiVgmgfuf2Dg65NF7fc1bJNj5LIFoOOf4NE=)
                          7: 323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa (hash: sl3cwGy0IuwQvH+kXQlq1pH3BmH2yD1EomOT+cSmPTY=)
                          8: 323830343a353361303a3a2f33332d3333203d3e20323638353936.roa (hash: K8iKTG2U8R5SYRlE2Di2/vXAZlczfGx0bjx4Q5xUxx0=)
                          9: 323830343a353361303a323030303a3a2f34382d3438203d3e20323638353936.roa (hash: 7i12mx6/N2coFADkmJLlg989Qb3rTE2wFBukYOIanyw=)
                          10: 34352e3136342e34322e302f32342d3234203d3e20323638353936.roa (hash: p/E0OvTKOQImYrbkiAqCQBiNaunJ3Eq1T7t6hAvC+MA=)
                          11: 34352e3136342e34322e302f32332d3233203d3e20323638353936.roa (hash: 6KlQD+pV8geK79mH9wLDg7MsB4W34HBF9ATCCOIaeos=)
                          12: 323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa (hash: pQ/6+QROnTD45yVH85SByk4DEU8dobh5Dw9HlvLQl4w=)
                          13: 323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa (hash: DOtLrlSGEtofaMvg6f/zdBYXZlGo6XcD29xO7xyBCAw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 02:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:7d:04:9d:96:e1:dc:cc:81:17:ed:d7:4f:68:86:4b:9b:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug 20 02:22:57 2025 GMT
            Not After : Aug 21 02:42:57 2025 GMT
        Subject: CN=3EDA6868E35BF8F45E93F52AB09740A8DF1A8598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:99:ec:f6:4a:ef:35:dd:37:d7:90:df:8c:
                    a2:3e:2c:80:e7:b6:d4:63:3e:ea:c5:1c:25:61:37:
                    0d:b7:41:36:a4:35:8d:17:49:c4:08:ae:22:59:91:
                    61:e3:3b:76:49:e3:1b:1c:7b:94:f2:d3:d9:28:05:
                    38:45:9c:b6:01:55:32:e7:ed:65:c1:60:d3:6e:c0:
                    94:f5:d2:f3:bf:43:7e:f3:cc:b0:3e:87:ff:ef:8c:
                    91:ca:b6:d6:c9:d4:75:df:9b:6e:e2:c7:43:dd:0f:
                    bd:94:c0:59:3e:0f:72:bd:e0:eb:4b:01:aa:5c:01:
                    cd:6f:b4:02:28:09:23:87:3f:5c:70:e6:6b:84:cd:
                    30:94:98:79:77:df:20:22:24:e9:87:4a:de:ea:59:
                    83:ee:9b:64:e9:29:e0:7b:73:92:98:bc:31:9d:a8:
                    d2:92:88:ac:fe:58:06:04:88:5e:a0:6e:a8:7e:6f:
                    6e:f4:92:0b:c2:cd:4e:ae:8f:fb:07:02:20:68:c7:
                    74:91:f7:86:03:ba:0f:76:5b:ce:3f:8e:95:41:af:
                    08:37:40:d0:fe:03:ac:5e:5a:34:a5:78:d4:92:f4:
                    c1:9e:c5:ac:21:c1:be:e4:4f:3a:fd:ac:01:4d:15:
                    e0:08:59:7b:da:b5:c8:2f:ac:9f:d4:ee:3f:63:f7:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:68:68:E3:5B:F8:F4:5E:93:F5:2A:B0:97:40:A8:DF:1A:85:98
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:99:2f:cc:8f:79:10:6a:71:ac:fa:72:17:7e:23:c3:5f:eb:
         c2:a3:fa:8d:8c:47:c1:6f:ac:f9:67:bd:a0:94:8f:0b:5f:9a:
         81:32:ee:91:9f:df:10:ed:f8:97:77:28:df:16:1f:08:a0:81:
         42:e1:10:63:24:42:af:0a:c3:00:79:fa:5c:97:7f:40:ff:94:
         8d:f5:a2:50:ea:80:ba:92:03:ad:b2:5f:73:0e:3e:9f:9b:b9:
         6f:e2:69:41:39:e2:ae:80:1a:e6:3e:fa:93:02:03:a7:1b:27:
         b5:f7:ec:50:f3:6f:32:49:6d:23:86:8a:7f:d3:08:61:e4:80:
         73:c1:c8:d5:cb:7d:1a:df:b3:41:08:ca:09:cb:5e:57:21:20:
         f8:17:90:5d:d2:95:7b:a7:2a:0f:ca:2f:42:2a:12:02:21:57:
         a6:8f:28:bd:b6:2f:02:5c:7b:ce:5e:e8:f7:b6:25:d2:62:10:
         23:c4:4e:95:4a:6e:b9:51:33:00:84:2a:8a:be:6d:e4:a5:fb:
         78:d0:4e:59:a5:5a:58:9c:3f:27:05:c3:91:5c:3f:11:6e:e1:
         d9:03:ca:9a:01:1a:30:2e:4f:a3:28:33:8a:10:f4:6e:fb:b6:
         9d:f3:4f:e8:3c:75:7f:ed:5b:c7:85:72:8c:d4:6e:8b:9a:f8:
         aa:0c:6f:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULHN9BJ2W4dzMgRft109ohkub4DAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzQkFBMUNEMTBENzZBOTc0MzNGMzc2Q0Q2Qjc0NzRD
NTE3OTdDQzAeFw0yNTA4MjAwMjIyNTdaFw0yNTA4MjEwMjQyNTdaMDMxMTAvBgNV
BAMTKDNFREE2ODY4RTM1QkY4RjQ1RTkzRjUyQUIwOTc0MEE4REYxQTg1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPA5ns9krvNd0315DfjKI+LIDn
ttRjPurFHCVhNw23QTakNY0XScQIriJZkWHjO3ZJ4xsce5Ty09koBThFnLYBVTLn
7WXBYNNuwJT10vO/Q37zzLA+h//vjJHKttbJ1HXfm27ix0PdD72UwFk+D3K94OtL
AapcAc1vtAIoCSOHP1xw5muEzTCUmHl33yAiJOmHSt7qWYPum2TpKeB7c5KYvDGd
qNKSiKz+WAYEiF6gbqh+b270kgvCzU6uj/sHAiBox3SR94YDug92W84/jpVBrwg3
QND+A6xeWjSleNSS9MGexawhwb7kTzr9rAFNFeAIWXvatcgvrJ/U7j9j9zGXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPtpoaONb+PRek/UqsJdAqN8ahZgwHwYDVR0j
BBgwFoAUKjuqHNENdql0M/N2zWt0dMUXl8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl
eWsvMC8yQTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBM0JBQTFDRDEwRDc2QTk3
NDMzRjM3NkNENkI3NDc0QzUxNzk3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdleWsvMC8y
QTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE5kvzI95EGpxrPpyF34jw1/rwqP6jYxHwW+s+We9oJSPC1+agTLukZ/fEO34
l3co3xYfCKCBQuEQYyRCrwrDAHn6XJd/QP+UjfWiUOqAupIDrbJfcw4+n5u5b+Jp
QTniroAa5j76kwIDpxsntffsUPNvMkltI4aKf9MIYeSAc8HI1ct9Gt+zQQjKCcte
VyEg+BeQXdKVe6cqD8ovQioSAiFXpo8ovbYvAlx7zl7o97Yl0mIQI8ROlUpuuVEz
AIQqir5t5KX7eNBOWaVaWJw/JwXDkVw/EW7h2QPKmgEaMC5PoygzihD0bvu2nfNP
6Dx1f+1bx4VyjNRui5r4qgxvcw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:37:20 2025 by rpki-client