Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
File:                     431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft (raw, json)
Hash identifier:          xLZCwfIH6kGGjkGI7nBO4IIzAyqZhQBvWRU+7AkNeBk=
Subject key identifier:   0E:DE:4D:34:4B:D3:85:70:12:65:D5:7E:01:D5:0D:5A:72:B6:63:B5
Authority key identifier: 43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD
Certificate issuer:       /CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
Certificate serial:       43C4CBF6B57AC160BFA9C2A9AA7278BF404A52B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
Manifest number:          67
Signing time:             Wed 26 Jun 2024 07:20:00 +0000
Manifest this update:     Wed 26 Jun 2024 07:15:00 +0000
Manifest next update:     Thu 27 Jun 2024 07:20:00 +0000
Files and hashes:         1: 323830343a366330343a653030303a3a2f33352d3335203d3e20323730343430.roa (hash: E148W7DQGkSrMLZJ9KMxWg+0KoMIS3EaKuwjw51bevI=)
                          2: 323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (hash: FpmMa37pjvip0lFXef1TzxuGxAF8pz8dzctFzSQlVo0=)
                          3: 3230302e31332e38362e302f32342d3234203d3e20323730343430.roa (hash: fQoDPSWXJxspYDGoeaO3zCB7zWGDof6ei/37kNO96o8=)
                          4: 3230302e31332e38342e302f32342d3234203d3e20323730343430.roa (hash: BQiO16oNvISNzOzbcT1KfXo556k4EaQTOO3VgDpRhzY=)
                          5: 323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (hash: YaNaqmJ2HwEmYEp2bzUiajx7S6ql220JLNhsqnc2A+4=)
                          6: 323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (hash: vVNFy85+tIRxQnBeVA+kVdqtkexD1D1JnjfK8+9AhOY=)
                          7: 3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (hash: qIYK3WP2K7d28eG8Cf8Ekad3X/XTAnvzcqWuIQchiiE=)
                          8: 323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (hash: h53kqsbfPuVgfgY51vJrYz+CJ4o8B3Pt0YPS77uc1vY=)
                          9: 431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl (hash: 5d1A4BHMEs06ot6qIGWXkfxCh979W5+8x0j0bTNjw4g=)
                          10: 323830343a366330343a3a2f33342d3334203d3e20323730343430.roa (hash: 8iTXOnAXdaevz3LV6FXwpa+XFpDNZoupNqatzbApxJo=)
                          11: 323830343a366330343a643830303a3a2f33372d3337203d3e20323730343430.roa (hash: HNyhU93NkBY44ZiXDTVCjLg/szhmGm6bd5zMTDrlaE0=)
                          12: 323830343a366330343a343030303a3a2f33342d3334203d3e20323730343430.roa (hash: qo905NA4xiCoXoFHp9GZUA5r8l7tv0d9Nn9ewNKoxwE=)
                          13: 323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa (hash: r8Rw7R9b+jxklB/G3jCLpCGDw2FCl72QTn/b7YcbPlM=)
                          14: 3230302e31332e38352e302f32342d3234203d3e20323730343430.roa (hash: OGtjxw3Y+YOwo1MJ+f9NC9KwQShlQwONWHI6VPtZaJs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c4:cb:f6:b5:7a:c1:60:bf:a9:c2:a9:aa:72:78:bf:40:4a:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431709AD8ECE3D05E720A9D6B6A05996B26D73BD
        Validity
            Not Before: Jun 26 07:15:00 2024 GMT
            Not After : Jul  3 07:20:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:cc:a4:5f:26:a6:c0:7a:e1:d4:d9:62:83:
                    66:2a:55:bd:93:b1:99:e5:d8:e9:39:4a:fd:8c:0b:
                    1d:1c:35:2b:ce:ed:89:ee:48:54:c8:df:b7:9b:4c:
                    9c:99:24:ee:69:b4:a1:5c:b7:c6:e0:99:86:dd:3a:
                    b7:3a:37:ac:da:e8:57:dd:b3:47:48:86:c2:41:45:
                    c1:74:a0:3b:84:b5:9e:bd:1f:ee:d2:17:70:e5:6f:
                    fb:b0:0e:7a:9a:59:0b:1d:f0:17:52:31:e7:ec:9f:
                    ab:a6:92:a9:33:65:08:ad:38:bd:f4:46:94:46:b8:
                    5c:93:6b:d9:ab:2a:62:ce:5b:56:31:ba:09:8b:16:
                    0a:72:bb:07:da:8a:3f:c2:cd:31:ff:7e:1a:31:cf:
                    9e:08:14:d7:f4:ad:e1:14:28:4d:56:9e:1c:54:f6:
                    a1:4f:87:7c:ac:06:a7:2d:af:06:6a:02:98:c4:51:
                    44:d7:03:71:1f:93:13:ab:01:7f:63:d3:91:0a:b0:
                    df:08:07:c3:63:98:cc:c3:d8:b1:0f:a2:71:27:7d:
                    39:8d:84:de:ef:f3:f5:5e:d8:0c:97:14:55:6e:79:
                    9a:ca:58:f6:32:d5:13:2c:00:ba:5f:c5:bb:df:53:
                    03:38:db:8f:b3:3b:b8:84:c1:59:f2:99:cc:00:66:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:4D:34:4B:D3:85:70:12:65:D5:7E:01:D5:0D:5A:72:B6:63:B5
            X509v3 Authority Key Identifier:
                keyid:43:17:09:AD:8E:CE:3D:05:E7:20:A9:D6:B6:A0:59:96:B2:6D:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/431709AD8ECE3D05E720A9D6B6A05996B26D73BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:09:43:9d:b8:f4:ed:1b:b2:0a:16:fb:25:66:b1:e9:de:
         e4:e9:21:a6:b8:4d:bf:76:2c:5a:ea:9b:4b:f9:7b:2e:a7:5e:
         cb:a2:f8:de:b8:93:07:ad:30:d8:aa:5c:49:6c:13:04:b2:12:
         3a:33:41:e9:80:83:4b:a1:c4:05:97:26:96:71:f1:20:cf:ec:
         26:c9:a4:1d:82:87:5c:37:73:fe:6c:66:47:49:4c:b9:f4:43:
         58:17:d0:6e:04:c6:51:e3:2f:81:37:99:92:64:3e:49:30:c0:
         da:61:c0:b3:3a:e1:c5:89:9b:1b:0b:f7:e7:a3:41:d6:c0:73:
         af:08:54:9b:ae:0a:e1:93:e3:cd:86:c3:34:df:d3:c2:9c:2b:
         62:2e:f2:16:59:b4:48:79:51:2f:ec:52:7f:3b:98:df:6f:4e:
         42:1f:c6:12:f5:30:fe:9d:82:4d:e0:be:59:a5:84:e8:0f:2e:
         94:34:61:31:d0:81:5c:7e:6d:96:36:5b:7a:bc:a5:13:2d:7a:
         95:1b:e3:cc:90:fc:0d:d9:02:bd:d1:6a:65:a4:30:7f:e0:8d:
         0d:b7:3f:79:5b:d4:55:c7:d1:98:8f:0f:17:53:a5:f2:35:3f:
         13:33:bf:2b:76:0e:64:ed:04:be:9f:75:4c:72:6f:72:28:57:
         5b:b0:5d:b4
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUQ8TL9rV6wWC/qcKpqnJ4v0BKUrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxNzA5QUQ4RUNFM0QwNUU3MjBBOUQ2QjZBMDU5OTZC
MjZENzNCRDAeFw0yNDA2MjYwNzE1MDBaFw0yNDA3MDMwNzIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdCNENDQTQ1RjI2QTZDMDdB
RTFENEQ5NjI4MzY2MkE1NUJEOTNCMTk5RTVEOEU5Mzk0QUZEOEMwQjFEMUMzNTJC
Q0VFRDg5RUU0ODU0QzhERkI3OUI0QzlDOTkyNEVFNjlCNEExNUNCN0M2RTA5OTg2
REQzQUI3M0EzN0FDREFFODU3RERCMzQ3NDg4NkMyNDE0NUMxNzRBMDNCODRCNTlF
QkQxRkVFRDIxNzcwRTU2RkZCQjAwRTdBOUE1OTBCMURGMDE3NTIzMUU3RUM5RkFC
QTY5MkE5MzM2NTA4QUQzOEJERjQ0Njk0NDZCODVDOTM2QkQ5QUIyQTYyQ0U1QjU2
MzFCQTA5OEIxNjBBNzJCQjA3REE4QTNGQzJDRDMxRkY3RTFBMzFDRjlFMDgxNEQ3
RjRBREUxMTQyODRENTY5RTFDNTRGNkExNEY4NzdDQUMwNkE3MkRBRjA2NkEwMjk4
QzQ1MTQ0RDcwMzcxMUY5MzEzQUIwMTdGNjNEMzkxMEFCMERGMDgwN0MzNjM5OEND
QzNEOEIxMEZBMjcxMjc3RDM5OEQ4NERFRUZGM0Y1NUVEODBDOTcxNDU1NkU3OTlB
Q0E1OEY2MzJENTEzMkMwMEJBNUZDNUJCREY1MzAzMzhEQjhGQjMzQkI4ODRDMTU5
RjI5OUNDMDA2NjlCNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx7TMpF8mpsB64dTZYoNmKlW9k7GZ5djpOUr9jAsdHDUrzu2J7khU
yN+3m0ycmSTuabShXLfG4JmG3Tq3Ojes2uhX3bNHSIbCQUXBdKA7hLWevR/u0hdw
5W/7sA56mlkLHfAXUjHn7J+rppKpM2UIrTi99EaURrhck2vZqypizltWMboJixYK
crsH2oo/ws0x/34aMc+eCBTX9K3hFChNVp4cVPahT4d8rAanLa8GagKYxFFE1wNx
H5MTqwF/Y9ORCrDfCAfDY5jMw9ixD6JxJ305jYTe7/P1XtgMlxRVbnmaylj2MtUT
LAC6X8W731MDONuPszu4hMFZ8pnMAGabVwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FA7eTTRL04VwEmXVfgHVDVpytmO1MB8GA1UdIwQYMBaAFEMXCa2Ozj0F5yCp1rag
WZaybXO9MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWlt
Y0xXVkxScXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzAvNDMxNzA5QUQ4RUNFM0Qw
NUU3MjBBOUQ2QjZBMDU5OTZCMjZENzNCRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80MzE3MDlBRDhFQ0UzRDA1RTcyMEE5RDZCNkEwNTk5NkIyNkQ3
M0JELmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnRTRmV29qTkJYYWltY0xXVkxS
cXY0ajU5aHZnYzk4NjZQdG9UUHRHa0oyLzAvNDMxNzA5QUQ4RUNFM0QwNUU3MjBB
OUQ2QjZBMDU5OTZCMjZENzNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKRxCUOduPTtG7IKFvslZrHp
3uTpIaa4Tb92LFrqm0v5ey6nXsui+N64kwetMNiqXElsEwSyEjozQemAg0uhxAWX
JpZx8SDP7CbJpB2Ch1w3c/5sZkdJTLn0Q1gX0G4ExlHjL4E3mZJkPkkwwNphwLM6
4cWJmxsL9+ejQdbAc68IVJuuCuGT482GwzTf08KcK2Iu8hZZtEh5US/sUn87mN9v
TkIfxhL1MP6dgk3gvlmlhOgPLpQ0YTHQgVx+bZY2W3q8pRMtepUb48yQ/A3ZAr3R
amWkMH/gjQ23P3lb1FXH0ZiPDxdTpfI1PxMzvyt2DmTtBL6fdUxyb3IoV1uwXbQ=
-----END CERTIFICATE-----