Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
File:                     633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft (raw, json)
Hash identifier:          6dzTDvoxm/A3Wfy3zYdhtgp5T/nUcbObNIykqgQYTEA=
Subject key identifier:   5F:F7:44:71:AF:80:58:9E:BF:F2:D0:22:96:F1:90:9C:33:72:F6:12
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       34DBA16C4A8A6C85F65E948D67030062020C537A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
Manifest number:          0170
Signing time:             Wed 16 Apr 2025 15:24:27 +0000
Manifest this update:     Wed 16 Apr 2025 15:19:27 +0000
Manifest next update:     Thu 17 Apr 2025 19:13:27 +0000
Files and hashes:         1: 323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (hash: NyhFyeCKsyzw9N/AuH1BDhS76oUWXd9+od5LyOG1qmk=)
                          2: 323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (hash: ikb/eeov6bRBVVWN56xhzBR63CMjpkK522BDfSEzQU4=)
                          3: 633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl (hash: IL1Lzop1Pe0j91teUndINZcDsLQgpwQ3IOa0o5FtBkU=)
                          4: 34352e3137392e35322e302f32332d3233203d3e20323639303533.roa (hash: 4ExtZvI8MqUvFVTsDf2h2l9l2Z/3J8appcSPENQekV4=)
                          5: 34352e3137392e35322e302f32342d3234203d3e20323639303533.roa (hash: znoCnr6e93GYcQiATLXvvDwtHsiWt69jotK53/EWZEc=)
                          6: 323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (hash: bBA4YJnUAawjGiuamZaJBjW4CIb/F/ARVaXg+y15IiE=)
                          7: 34352e3137392e35332e302f32342d3234203d3e20323639303533.roa (hash: ESPKyBn9k2Tj8mx8/vctfD0aZVU4OT6BupSSD8qOqhg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 19:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:db:a1:6c:4a:8a:6c:85:f6:5e:94:8d:67:03:00:62:02:0c:53:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Apr 16 15:19:27 2025 GMT
            Not After : Apr 17 19:13:27 2025 GMT
        Subject: CN=5FF74471AF80589EBFF2D02296F1909C3372F612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:86:de:16:bd:67:09:33:93:74:54:c5:c3:
                    ba:d5:b4:1c:ee:f7:7a:b2:91:41:b5:17:f5:21:de:
                    c0:16:8d:55:c0:50:be:79:ba:09:10:a3:83:54:a0:
                    91:be:af:ca:6b:71:30:8f:bf:08:62:45:10:bc:12:
                    20:1f:80:ca:fb:5d:fa:55:50:ea:b7:31:86:ce:b7:
                    ee:c9:c3:83:ae:d2:2d:ff:75:62:73:10:6b:00:f4:
                    bf:6e:09:c2:31:d3:e4:11:a1:6a:71:2c:6a:fb:3c:
                    d4:45:bd:1b:b2:df:0e:45:0a:3a:cc:d6:49:01:82:
                    81:3b:a1:f7:11:9d:86:fb:bd:db:1e:83:6a:ef:39:
                    33:88:a9:bb:4c:9b:6d:85:d4:a7:30:92:22:51:30:
                    16:56:99:b1:c7:f2:0c:d1:c2:92:af:9e:5b:c6:ed:
                    5f:c9:ac:cd:44:5e:8b:a0:cb:f2:a5:b8:38:70:13:
                    4f:b7:bb:73:6e:93:00:83:16:0c:5a:70:04:93:fa:
                    8b:98:dc:07:b0:1f:fa:ab:f9:99:44:6a:7d:ed:c8:
                    ee:bc:ee:63:f9:a8:4f:45:49:7c:78:87:52:d7:b9:
                    ed:b7:b4:c5:5a:58:c3:df:1b:fa:81:37:20:92:10:
                    98:e9:12:25:d8:a9:3a:aa:ae:62:01:83:2d:7c:d2:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:44:71:AF:80:58:9E:BF:F2:D0:22:96:F1:90:9C:33:72:F6:12
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:27:0c:52:cd:33:aa:eb:b9:65:8a:e0:74:e2:4d:00:e0:5b:
         a1:ca:b4:9c:d2:c8:94:05:8c:25:15:c4:5b:92:e3:8d:64:b5:
         f9:81:e9:cc:ec:7c:21:a3:83:a6:85:3c:19:dd:70:b1:76:57:
         e1:83:43:c8:ac:ad:3a:f2:e7:9e:41:00:2d:11:d6:5f:6b:76:
         b6:7f:e9:ed:fb:e0:7f:8c:7b:2c:a6:67:0c:17:78:f7:46:54:
         e8:84:74:dc:ee:42:d2:e4:eb:1b:4c:3e:df:ec:05:ab:ec:cc:
         fc:d0:6e:4c:93:2f:1f:b8:86:66:5e:f9:7c:55:99:c0:f2:f9:
         b4:c7:c8:a6:12:bf:b7:ae:49:42:06:13:8d:df:b6:5b:72:1b:
         3d:9c:07:fe:cf:64:60:2c:8b:a9:25:0f:7d:f7:6f:77:20:28:
         35:e3:76:d2:7d:1c:08:d3:3c:63:78:c0:0b:2a:1a:4a:dc:1c:
         5e:45:ea:88:7e:c3:93:7d:f8:5e:9e:54:09:bf:64:c5:9d:71:
         5f:52:47:0a:8c:3c:b9:71:99:bf:b4:5f:2a:87:80:b6:51:cc:
         b2:ca:59:5d:9e:b9:0b:3a:55:eb:13:dc:35:60:36:9c:c2:b3:
         4a:c2:ac:30:26:15:08:2f:7b:24:11:0c:d6:e4:a3:8a:6a:55:
         8b:01:bd:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNNuhbEqKbIX2XpSNZwMAYgIMU3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMzQkREMzQ3NTQ3NUQ5QzhENjIzMkNCMUZEOTBGRDUy
Q0Q4Q0ZEMDAeFw0yNTA0MTYxNTE5MjdaFw0yNTA0MTcxOTEzMjdaMDMxMTAvBgNV
BAMTKDVGRjc0NDcxQUY4MDU4OUVCRkYyRDAyMjk2RjE5MDlDMzM3MkY2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhK4beFr1nCTOTdFTFw7rVtBzu
93qykUG1F/Uh3sAWjVXAUL55ugkQo4NUoJG+r8prcTCPvwhiRRC8EiAfgMr7XfpV
UOq3MYbOt+7Jw4Ou0i3/dWJzEGsA9L9uCcIx0+QRoWpxLGr7PNRFvRuy3w5FCjrM
1kkBgoE7ofcRnYb7vdseg2rvOTOIqbtMm22F1KcwkiJRMBZWmbHH8gzRwpKvnlvG
7V/JrM1EXougy/KluDhwE0+3u3NukwCDFgxacAST+ouY3AewH/qr+ZlEan3tyO68
7mP5qE9FSXx4h1LXue23tMVaWMPfG/qBNyCSEJjpEiXYqTqqrmIBgy180r0lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUX/dEca+AWJ6/8tAilvGQnDNy9hIwHwYDVR0j
BBgwFoAUYzvdNHVHXZyNYjLLH9kP1SzYz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4
Mk4vMC82MzNCREQzNDc1NDc1RDlDOEQ2MjMyQ0IxRkQ5MEZENTJDRDhDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzM0JERDM0NzU0NzVEOUM4
RDYyMzJDQjFGRDkwRkQ1MkNEOENGRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SGR3aFZRZ2NEUDZ5TDZMdnF0V0oxdmExczlSS1JLMllYTU14Z1RVRnp4Mk4vMC82
MzNCREQzNDc1NDc1RDlDOEQ2MjMyQ0IxRkQ5MEZENTJDRDhDRkQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkCcMUs0zquu5ZYrgdOJNAOBbocq0nNLIlAWMJRXEW5LjjWS1+YHpzOx8IaOD
poU8Gd1wsXZX4YNDyKytOvLnnkEALRHWX2t2tn/p7fvgf4x7LKZnDBd490ZU6IR0
3O5C0uTrG0w+3+wFq+zM/NBuTJMvH7iGZl75fFWZwPL5tMfIphK/t65JQgYTjd+2
W3IbPZwH/s9kYCyLqSUPffdvdyAoNeN20n0cCNM8Y3jACyoaStwcXkXqiH7Dk334
Xp5UCb9kxZ1xX1JHCow8uXGZv7RfKoeAtlHMsspZXZ65CzpV6xPcNWA2nMKzSsKs
MCYVCC97JBEM1uSjimpViwG9kA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:33 2025 by rpki-client