Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
File:                     C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft (raw, json)
Hash identifier:          7e7UBI35hExe4WaUVDuY+A95S3Q62DMcIKUtvH86sSE=
Subject key identifier:   31:EA:0C:E7:DB:A5:30:49:61:A4:DA:B8:52:02:3A:4C:34:71:C2:18
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       2F33F5C37B176A6E89B4E02610F36DAC22A81EA1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
Manifest number:          35
Signing time:             Tue 10 Jun 2025 16:00:28 +0000
Manifest this update:     Tue 10 Jun 2025 15:55:28 +0000
Manifest next update:     Wed 11 Jun 2025 18:08:28 +0000
Files and hashes:         1: 323830343a343964343a3a2f33322d3332203d3e203532363331.roa (hash: 8c092Q5aeyfds/dLqY8TQN/KrCChYqkwvf1SjnsTXWQ=)
                          2: 3137372e3132382e32372e302f32342d3234203d3e203532363331.roa (hash: bcL7lM4nYiwNktjE6R5MJa2e0rxh8B7bbr/WstWuUwg=)
                          3: 3137372e3132382e33302e302f32342d3234203d3e203532363331.roa (hash: lMmXJwKFS9qENB8w76PvrHnB+7n3tlkqBWXPpMGF2rU=)
                          4: 3137372e3132382e33302e302f32332d3233203d3e203532363331.roa (hash: gp2hyIh0pBNrvMp2yEDfe7LBcvGicCM2WQF3zzImLe8=)
                          5: 3137372e3132382e32362e302f32342d3234203d3e203532363331.roa (hash: IbBXjtorDdQZvdCSOx3OiVigwYt0Sanog/LCpF5blNI=)
                          6: 3230302e3232392e3234352e302f32342d3234203d3e20323730383135.roa (hash: tZ4zLEO5ntuC4by9ch3fsQ0sdLbRRjAXZCsj41jKwbg=)
                          7: 3137372e3132382e32382e302f32342d3234203d3e203532363331.roa (hash: x+4QWZTgvk7AdRbmmc9KLwoaljZNlWMP/E0MEWNii20=)
                          8: 3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa (hash: i+cm2ibBLMxT0KFWP6JBh9hoASdogEOQRRrnyiXbGOE=)
                          9: C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl (hash: DNO6fFumPkhExUBDAUJcZs0EQ/+Wgovd93IBE13Anqk=)
                          10: 3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (hash: ULIGhmA6lGWQjEeLTMKcyK2UuFJvaEa7X3+uJlfSvoE=)
                          11: 3137372e3132382e32362e302f32332d3233203d3e203532363331.roa (hash: AMRQ70Oq8ZcT8MCTbEUOTFdP6vPt/4YzBzUdRt4NksA=)
                          12: 3137372e3132382e32352e302f32342d3234203d3e203532363331.roa (hash: 4GbnGDxwuJ7ErBP5Vc5DCOpr9rPkLgkGjnUNYaP+6+s=)
                          13: 3137372e3132382e33312e302f32342d3234203d3e203532363331.roa (hash: 7CWq+gqVKwCLsuJ/ru6EI7tqUIjz5YbJe2c/N2g9yYo=)
                          14: 3230302e3232392e3234342e302f32332d3233203d3e20323730383135.roa (hash: f/USPy4G7rNa+rdKz7l8sj3RowyEcRNxz2OdRIzRMmw=)
                          15: 3137372e3132382e32382e302f32332d3233203d3e203532363331.roa (hash: LtXm42Pwj43mzgr5CxYcC+pProYvRFO2GCLVS7kqwXs=)
                          16: 3137372e3132382e32342e302f32312d3231203d3e203532363331.roa (hash: L7FrrqDs15f7XgA+xYjYHDOl8Aw16pkPrabpm3TDfVw=)
                          17: 3137372e3132382e32342e302f32322d3232203d3e203532363331.roa (hash: B8pB7haOaqjfYxtVKqzUDYj4O1pfy7IAXIgJn/rS5bY=)
                          18: 3137372e3132382e32382e302f32322d3232203d3e203532363331.roa (hash: cS/8fPyoR69Zr37HYTTAzetrx1axtnEFj4yeOJpHVXc=)
                          19: 3137372e3132382e32392e302f32342d3234203d3e203532363331.roa (hash: 1dCO21laCgOSMSiWlqdYzwT7/aODiYogJRwhEsEBXMg=)
                          20: 3137372e3132382e32342e302f32342d3234203d3e203532363331.roa (hash: PfNN87dkMPhpXXcnAx5B3Syr5h+tj6w8hgmhEISXNbY=)
                          21: 3137372e3132382e32342e302f32332d3233203d3e203532363331.roa (hash: 8E01LtSLyt/w7H0kkMFiDeqMAnEX0hRd3wzKVgisZgc=)
                          22: 3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa (hash: 9GlBEANYKmJ+wQC7V/Cldr49jDtxwe05/o2G3/T/Jx0=)
                          23: 3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa (hash: fqbI4oGsZWYKHmnW4T+3zjcUgy00qSaq/agKvC0p8HI=)
                          24: 3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (hash: hzA08YdCBww7hoVsi9vz1nY8h47YH8i5E1BnFtdfb4M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 18:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:33:f5:c3:7b:17:6a:6e:89:b4:e0:26:10:f3:6d:ac:22:a8:1e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Jun 10 15:55:28 2025 GMT
            Not After : Jun 11 18:08:28 2025 GMT
        Subject: CN=31EA0CE7DBA5304961A4DAB852023A4C3471C218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:65:91:83:98:fb:e6:9e:60:e0:c9:68:d1:
                    a5:11:04:8b:72:92:e7:25:69:2b:1c:1d:73:fb:e7:
                    fc:61:dc:89:7f:c1:11:0b:06:69:92:e2:27:a0:49:
                    ce:07:60:c9:c7:56:e1:d8:24:a7:11:d6:38:1e:95:
                    25:b3:0d:e9:0f:4e:2f:f6:13:f1:eb:8f:85:ee:aa:
                    e7:50:5e:c8:e2:ca:75:b8:a7:ad:03:97:0d:a1:81:
                    27:17:43:2d:d4:7d:07:13:71:66:54:a2:e0:36:2e:
                    26:37:36:30:25:97:47:09:b5:ee:2f:42:68:8e:fc:
                    84:d1:ec:40:e9:0f:e3:1b:67:e8:1f:83:9f:05:89:
                    04:83:de:97:57:12:41:7d:c3:ca:d8:61:13:06:ed:
                    16:c0:34:77:63:74:fc:d1:c3:d4:f0:5c:f5:af:cc:
                    ab:88:37:02:2e:cd:52:fd:9b:5c:7a:49:3e:63:01:
                    88:0a:fc:33:bd:0f:5c:bd:41:e6:2c:23:49:5b:a4:
                    cf:c2:04:22:e4:ab:3b:01:1e:5a:06:fc:02:3a:a4:
                    56:53:73:b8:7e:cc:5c:ba:1d:5d:3a:92:fb:dd:c4:
                    9f:89:c1:29:0e:4f:03:f3:e2:cd:08:5e:18:b7:ca:
                    b7:c0:fc:fb:0d:a4:b0:db:da:b5:0e:8f:e7:e5:b2:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EA:0C:E7:DB:A5:30:49:61:A4:DA:B8:52:02:3A:4C:34:71:C2:18
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:bf:c7:f9:51:2f:19:80:b8:f5:f8:f4:1a:4d:66:c4:82:
         e7:46:5d:51:8b:86:64:df:5e:cc:a4:3e:19:fc:b4:4a:f9:e5:
         cf:00:c0:67:d0:94:a2:18:16:fa:26:da:b5:06:1c:b1:4b:ed:
         60:ac:93:d7:10:ae:60:de:66:9f:d4:a2:b4:9b:9a:0c:54:ed:
         26:25:28:5e:2e:12:2c:fa:c0:ad:91:a1:20:31:5b:26:01:f5:
         af:94:09:fd:21:38:8e:4d:77:05:63:7d:38:4e:d1:be:c1:5a:
         bb:1b:03:eb:a9:41:45:a2:b5:ac:33:d2:b2:7d:fc:e0:a9:49:
         26:53:c4:e6:74:1c:23:48:e9:a6:d1:91:17:9a:cc:92:57:f5:
         48:4a:61:f5:1a:54:3f:93:fa:f2:f3:59:c0:0f:f4:9e:1a:c9:
         f1:c9:a5:f9:64:5b:bb:66:09:bb:26:29:0c:1b:d9:66:96:b7:
         4e:b9:19:c8:c4:63:05:71:50:db:8a:1e:a4:95:5b:20:fe:fd:
         f6:44:a2:34:0b:21:dc:96:53:8d:46:d5:2a:97:60:91:6a:e8:
         bf:4e:ca:b1:ab:97:2b:ba:6e:2e:58:dc:ad:f8:64:d8:80:a5:
         d9:3d:bc:96:29:85:64:6a:8c:ee:5a:78:cb:cc:31:89:58:38:
         0f:f9:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:06:19 2025 by rpki-client