Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
File:                     EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft (raw, json)
Hash identifier:          Wv7p9uRdJHIuvSjSKqRIVV9karxtW72qLDuqOVSfpok=
Subject key identifier:   A2:3A:85:BC:6D:E2:B1:63:54:34:40:B3:A6:86:FA:7B:FA:11:80:03
Authority key identifier: ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35
Certificate issuer:       /CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
Certificate serial:       2A921D23A3F87A37706D189D0DA74A886FC2502B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
Manifest number:          0147
Signing time:             Tue 08 Apr 2025 23:04:22 +0000
Manifest this update:     Tue 08 Apr 2025 22:59:22 +0000
Manifest next update:     Thu 10 Apr 2025 01:57:22 +0000
Files and hashes:         1: 3230302e342e3130392e302f32342d3234203d3e20323731343739.roa (hash: JRC29XmZhJw5Sj3XM2SMhvZCs8on7Czit9h1lfH7MsU=)
                          2: 3230302e342e3131302e302f32342d3234203d3e20323731343739.roa (hash: xeUi93CejAZl/YqeOKdDaeuM1pj8saTcDIkZJp73n7w=)
                          3: 323830343a376332383a3a2f33322d3332203d3e20323731343739.roa (hash: Zn+vkkMe+1eORsrUA31KUKAxmSKx5be/g/Jz2ZmW3Gs=)
                          4: 323830343a376332383a3a2f33332d3333203d3e20323731343739.roa (hash: IRP54jjh0r3MPE8GuJloy66gRffca21UMZbibC+Ziv8=)
                          5: 3230302e342e3131302e302f32332d3233203d3e20323731343739.roa (hash: XlpZM2eOVBFq9Yi+erYBAWuSdL+Du4tmA+VBiBc8vXY=)
                          6: 3230302e342e3130382e302f32342d3234203d3e20323731343739.roa (hash: ZXJlRvznrNdln1j2F9za8oc4FJ6BrbHF1plDgPHdOh0=)
                          7: 3230302e342e3131312e302f32342d3234203d3e20323731343739.roa (hash: jo4z83wZeFyeOdStcB0aPOrcT1ZaLLwgD0zKxBQbXWU=)
                          8: 3230302e342e3130382e302f32332d3233203d3e20323731343739.roa (hash: Uuykxkt30iSUGWdY5C2771hsppJFPKd71Z0M9NHrr94=)
                          9: 3230302e342e3130382e302f32322d3232203d3e20323731343739.roa (hash: gNCAgFi9DRr2eonOnBHw7KMsXoOPvC49ee3nvdYmBSA=)
                          10: 323830343a376332383a383030303a3a2f33332d3333203d3e20323731343739.roa (hash: bamMf7udO0F5ifjMB0DrQwZQQJFlCeVIprbA3JUttvE=)
                          11: EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl (hash: CYuvBjtEAWR0SB+tKZtoWaV8ljAWNcTH8gCyof0U9T0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:1d:23:a3:f8:7a:37:70:6d:18:9d:0d:a7:4a:88:6f:c2:50:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
        Validity
            Not Before: Apr  8 22:59:22 2025 GMT
            Not After : Apr 10 01:57:22 2025 GMT
        Subject: CN=A23A85BC6DE2B163543440B3A686FA7BFA118003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:32:f7:dc:e7:a5:5f:46:db:14:72:0c:d5:
                    91:1f:bc:89:7f:ef:bd:b5:e7:b9:8c:11:93:56:d2:
                    5c:22:6d:bf:9d:af:6b:b5:7f:49:0b:a3:fc:21:68:
                    a6:7d:9d:2e:3c:36:10:0d:4e:ae:9b:a4:ad:5d:68:
                    a3:69:c8:04:a7:96:0e:c7:e0:46:bc:41:ef:3f:16:
                    7f:8e:68:f5:7b:43:ae:74:a4:77:42:cb:e1:48:ef:
                    0a:cc:b9:e7:3a:05:2f:b3:f3:63:29:f5:70:3c:38:
                    97:aa:1e:43:a4:c6:a0:17:4f:a3:57:38:d9:24:96:
                    1b:ce:fa:8d:f4:5c:6f:0b:af:b3:f5:20:c0:e1:1c:
                    7a:62:30:02:bf:35:db:94:49:95:b1:42:28:38:4f:
                    8e:be:b4:95:5e:96:ba:c7:26:5b:7f:96:5e:e6:27:
                    a3:7e:4d:ae:d7:bc:27:b6:bb:31:76:37:b2:8d:c4:
                    52:b3:48:81:fc:16:28:7d:a3:af:fc:6f:9f:87:9e:
                    ad:65:af:37:a9:98:c4:44:ff:80:e5:5e:8b:44:ef:
                    52:31:7c:70:22:49:09:14:30:5b:d6:eb:88:8e:aa:
                    a7:8a:b2:e0:35:b5:95:b6:1c:57:1b:cc:88:02:f3:
                    33:cd:da:70:09:80:6e:62:50:d2:bb:e8:d6:44:67:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:85:BC:6D:E2:B1:63:54:34:40:B3:A6:86:FA:7B:FA:11:80:03
            X509v3 Authority Key Identifier:
                keyid:ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:5f:5a:16:06:bd:4f:2a:4e:27:3f:5c:71:0d:7c:bf:cf:
         c3:e9:7b:9e:89:ac:49:88:9d:e1:29:87:58:24:95:f0:9e:4a:
         92:63:84:e3:4a:e3:cf:5d:d1:7a:e4:55:68:91:54:ac:b3:de:
         1c:3b:aa:06:db:bf:f9:16:85:32:80:8a:45:40:c4:d0:7b:dc:
         89:2e:7a:d9:48:f7:42:91:e9:be:9a:37:bf:b5:18:3f:e6:f8:
         39:f3:8e:94:1e:0b:48:e7:b9:2b:34:5c:c5:95:0d:90:20:8e:
         61:e5:7f:b9:1d:4b:ac:a2:64:94:eb:e3:d9:96:8a:1a:04:d6:
         b8:a5:5f:1d:ab:53:f7:66:c3:97:84:fb:db:0b:c8:9b:3e:8b:
         e8:f7:59:d9:41:86:5b:8a:87:cf:c1:23:e2:4b:57:cd:9c:0b:
         52:f0:5f:87:50:73:a1:9d:5c:68:de:97:8a:58:2f:c9:c7:12:
         7f:f4:b8:ac:e6:24:6d:63:01:ad:9f:b4:a3:44:86:98:49:f4:
         39:f7:f2:47:19:9b:d1:22:91:ce:c0:29:f4:b7:ed:96:2a:b8:
         6c:7a:f6:46:de:14:d0:7a:39:c7:91:85:28:27:52:b4:70:47:
         62:19:1d:1d:22:ae:ab:ac:75:42:6c:79:f6:bb:06:46:ce:7e:
         d6:83:99:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKpIdI6P4ejdwbRidDadKiG/CUCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODg3MEJCOTRFMjREMjUyMDc5NUE0N0JGREY3QjVF
MEJERDkzNTAeFw0yNTA0MDgyMjU5MjJaFw0yNTA0MTAwMTU3MjJaMDMxMTAvBgNV
BAMTKEEyM0E4NUJDNkRFMkIxNjM1NDM0NDBCM0E2ODZGQTdCRkExMTgwMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCDL33OelX0bbFHIM1ZEfvIl/
772157mMEZNW0lwibb+dr2u1f0kLo/whaKZ9nS48NhANTq6bpK1daKNpyASnlg7H
4Ea8Qe8/Fn+OaPV7Q650pHdCy+FI7wrMuec6BS+z82Mp9XA8OJeqHkOkxqAXT6NX
ONkklhvO+o30XG8Lr7P1IMDhHHpiMAK/NduUSZWxQig4T46+tJVelrrHJlt/ll7m
J6N+Ta7XvCe2uzF2N7KNxFKzSIH8Fih9o6/8b5+Hnq1lrzepmMRE/4DlXotE71Ix
fHAiSQkUMFvW64iOqqeKsuA1tZW2HFcbzIgC8zPN2nAJgG5iUNK76NZEZ8O3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUojqFvG3isWNUNECzpob6e/oRgAMwHwYDVR0j
BBgwFoAU7aiHC7lOJNJSB5Wke/33teC92TUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZ
bW8vMC9FREE4ODcwQkI5NEUyNEQyNTIwNzk1QTQ3QkZERjdCNUUwQkREOTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTg4NzBCQjk0RTI0RDI1
MjA3OTVBNDdCRkRGN0I1RTBCREQ5MzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZbW8vMC9F
REE4ODcwQkI5NEUyNEQyNTIwNzk1QTQ3QkZERjdCNUUwQkREOTM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjcRfWhYGvU8qTic/XHENfL/Pw+l7nomsSYid4SmHWCSV8J5KkmOE40rjz13R
euRVaJFUrLPeHDuqBtu/+RaFMoCKRUDE0HvciS562Uj3QpHpvpo3v7UYP+b4OfOO
lB4LSOe5KzRcxZUNkCCOYeV/uR1LrKJklOvj2ZaKGgTWuKVfHatT92bDl4T72wvI
mz6L6PdZ2UGGW4qHz8Ej4ktXzZwLUvBfh1BzoZ1caN6XilgvyccSf/S4rOYkbWMB
rZ+0o0SGmEn0OffyRxmb0SKRzsAp9Lftliq4bHr2Rt4U0Ho5x5GFKCdStHBHYhkd
HSKuq6x1Qmx59rsGRs5+1oOZbQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:22:16 2025 by rpki-client