Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          GbGQlC0A4ISg08xQLbNV32moYBEn91ISzikq6uI786o=
Subject key identifier:   2F:1F:33:51:DF:EF:51:95:44:A5:30:7A:0E:81:3F:CC:C1:77:BC:4A
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       6C70E6BA40505579284123008DBF45E7C5A0B545
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          1B
Signing time:             Wed 20 Aug 2025 04:32:17 +0000
Manifest this update:     Wed 20 Aug 2025 04:27:17 +0000
Manifest next update:     Thu 21 Aug 2025 05:39:17 +0000
Files and hashes:         1: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: jrLtuRDUfebp+da8gdNc/X5sTzU1URd3o0fTxtDn0u0=)
                          2: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: qZKUtAG+JVR2dVS4JiNI+Kw6jfhzxGMb3WwVCawye94=)
                          3: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: 9m7yPscc1aQcelxqXKrPeemhvynpRkgj0fMDx9qc3dU=)
                          4: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: OLbc1TLVVA2OTpclfERRSJr3cNXPo1t5TO4AZY12WdM=)
                          5: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: YeQQQga2IPXcQPI4WZR6ySFBpq83/d3HIcA7pJ/zYnk=)
                          6: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: QCbZMrUKJgBUWwCX4f2grxkhDaOONDhgbpeLvId+Sr8=)
                          7: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: 46F+iFtlqPZHEQPpftGlAqQy1tP8qyypeGdjfvaYAfk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 05:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:70:e6:ba:40:50:55:79:28:41:23:00:8d:bf:45:e7:c5:a0:b5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Aug 20 04:27:17 2025 GMT
            Not After : Aug 21 05:39:17 2025 GMT
        Subject: CN=2F1F3351DFEF519544A5307A0E813FCCC177BC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:7a:22:b6:37:24:0e:8b:b6:b2:9d:a2:52:
                    24:b2:53:49:1b:f1:8c:4b:26:68:5d:f4:cb:bc:2e:
                    75:69:06:02:5c:65:1a:8a:ab:06:58:e5:9e:20:44:
                    22:bc:37:93:3a:77:2d:f2:69:7d:93:61:21:68:6f:
                    65:9f:f8:e6:dd:59:d4:af:bd:19:b5:f9:74:11:48:
                    af:31:e4:a6:4c:39:65:ab:e6:58:c5:ef:eb:c8:89:
                    d1:03:15:bc:46:ca:f5:4a:1c:a4:a1:61:e8:6e:f1:
                    4e:d2:ce:bf:8e:ef:ef:ad:c1:d4:65:ed:84:08:99:
                    cd:6b:09:ec:bd:fa:d5:8b:0a:c5:39:0c:0d:f7:01:
                    46:9e:58:eb:ec:77:3d:6c:8e:0d:b5:a0:6d:0e:f3:
                    b6:85:d1:f8:41:21:bc:52:6e:47:0a:e1:a9:66:45:
                    35:05:96:77:c3:36:f2:c8:3e:9d:59:c1:20:08:2e:
                    60:02:8e:c6:48:98:ea:61:85:cc:e2:4e:49:b5:8c:
                    8b:83:61:df:0d:e1:cd:09:eb:74:9a:71:5c:e5:a0:
                    6b:41:a3:11:18:3c:83:04:0c:f2:8b:c2:c4:84:9a:
                    6a:b7:ca:67:96:fa:a3:93:7a:62:03:c8:4a:25:66:
                    a1:d9:72:7f:52:7e:31:0a:c6:1f:e1:19:51:52:28:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:33:51:DF:EF:51:95:44:A5:30:7A:0E:81:3F:CC:C1:77:BC:4A
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:4e:e7:5c:5f:45:3b:40:73:12:50:8e:25:73:0e:c3:6d:
         c0:fd:0a:57:93:7b:75:5c:91:ef:ca:4e:3a:ec:3b:7e:68:10:
         fd:ea:b7:8f:5c:76:06:4f:7c:69:29:03:4c:21:dd:50:a8:00:
         ae:ee:e3:46:ec:7d:33:8f:7f:51:2b:ae:66:aa:a5:22:db:d3:
         ff:87:72:8b:a2:f2:6f:34:b3:a6:d0:46:02:71:bf:14:c1:94:
         76:15:12:12:97:2f:da:1a:c8:50:8b:42:db:6e:b6:64:96:c5:
         06:6a:b2:53:0c:d6:03:e0:b2:8d:92:58:73:e0:1a:be:4c:ff:
         ab:05:6b:60:9a:f6:45:41:22:5f:c1:0b:66:f3:4e:10:fe:79:
         cc:89:b1:c5:09:3a:43:5c:3a:f1:8a:8c:ad:9b:02:e4:07:d0:
         7a:87:92:bb:a2:9f:39:74:94:97:aa:69:f9:5e:58:86:f3:83:
         54:ce:1c:92:b9:13:2a:8f:44:1b:ee:9b:23:9e:b9:2f:d6:c4:
         8d:a6:7c:fe:81:cd:c0:02:33:f6:ec:3b:0f:ba:6c:12:1b:53:
         8f:fa:e2:18:fa:35:6e:97:6f:4c:b0:1d:dd:e4:f4:ad:1d:b6:
         0d:7a:ea:83:f4:71:48:c9:f3:73:d3:a0:aa:a4:03:91:a2:e6:
         8d:1a:0d:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbHDmukBQVXkoQSMAjb9F58WgtUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyMzU1MzUzOEUwMEU2MzY1N0JGRDhGMjdDQzM1MkVE
REY1MjJEOTAeFw0yNTA4MjAwNDI3MTdaFw0yNTA4MjEwNTM5MTdaMDMxMTAvBgNV
BAMTKDJGMUYzMzUxREZFRjUxOTU0NEE1MzA3QTBFODEzRkNDQzE3N0JDNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtHoitjckDou2sp2iUiSyU0kb
8YxLJmhd9Mu8LnVpBgJcZRqKqwZY5Z4gRCK8N5M6dy3yaX2TYSFob2Wf+ObdWdSv
vRm1+XQRSK8x5KZMOWWr5ljF7+vIidEDFbxGyvVKHKShYehu8U7Szr+O7++twdRl
7YQImc1rCey9+tWLCsU5DA33AUaeWOvsdz1sjg21oG0O87aF0fhBIbxSbkcK4alm
RTUFlnfDNvLIPp1ZwSAILmACjsZImOphhcziTkm1jIuDYd8N4c0J63SacVzloGtB
oxEYPIMEDPKLwsSEmmq3ymeW+qOTemIDyEolZqHZcn9SfjEKxh/hGVFSKDNvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULx8zUd/vUZVEpTB6DoE/zMF3vEowHwYDVR0j
BBgwFoAU5iNVNTjgDmNle/2PJ8w1Lt31ItkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdU
NEcvMC9FNjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MjM1NTM1MzhFMDBFNjM2
NTdCRkQ4RjI3Q0MzNTJFRERGNTIyRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SERKWlhMWVBkMURMekRwemU0ZmJTeUZWMlMxTGk5dDRWZXFhWWtKSjdUNEcvMC9F
NjIzNTUzNTM4RTAwRTYzNjU3QkZEOEYyN0NDMzUyRURERjUyMkQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwCJO51xfRTtAcxJQjiVzDsNtwP0KV5N7dVyR78pOOuw7fmgQ/eq3j1x2Bk98
aSkDTCHdUKgAru7jRux9M49/USuuZqqlItvT/4dyi6LybzSzptBGAnG/FMGUdhUS
Epcv2hrIUItC2262ZJbFBmqyUwzWA+CyjZJYc+Aavkz/qwVrYJr2RUEiX8ELZvNO
EP55zImxxQk6Q1w68YqMrZsC5AfQeoeSu6KfOXSUl6pp+V5YhvODVM4ckrkTKo9E
G+6bI565L9bEjaZ8/oHNwAIz9uw7D7psEhtTj/riGPo1bpdvTLAd3eT0rR22DXrq
g/RxSMnzc9OgqqQDkaLmjRoNBA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 19:32:47 2025 by rpki-client