Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
File:                     ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft (raw, json)
Hash identifier:          A46tFZt41kFr/vzIY85awBtpV7w2/Ojkx/vHAGY4em8=
Subject key identifier:   CD:16:1E:B1:BF:33:B1:15:5F:78:20:EE:50:6A:DD:D2:C9:45:07:81
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       31B7904A2CB2C614FD22D5D7422993DDFFC4C383
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
Manifest number:          01EB
Signing time:             Fri 04 Apr 2025 13:12:23 +0000
Manifest this update:     Fri 04 Apr 2025 13:07:23 +0000
Manifest next update:     Sat 05 Apr 2025 14:20:23 +0000
Files and hashes:         1: 34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (hash: j5xWu/EVFW9ukhAiwi1QRme12gZvEGiS4HhsB66VLnM=)
                          2: 323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (hash: x6VNtV4ozQq6MxJ5N63q7B16Gfy4nJWVWTksz+Uj+30=)
                          3: 34352e36352e3232302e302f32322d3234203d3e20323032.roa (hash: EUR7GzFQIh4+jSMjrVmtA4e+ZAoGf+CFRWmkwFMVmWU=)
                          4: 323830343a336439303a3a2f33322d3438203d3e20323032.roa (hash: WpFnDTmY8zk59PrfyxW6Djzy0QYg50QAK1Hv57G5E+A=)
                          5: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl (hash: UFILiiyqK4DYbSNymc5gxD7t3D3d/MBEUQjORSqoGAw=)
                          6: 3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (hash: qlAb68WVBXQ8h/OfETAMcW9D7dD+56kHUGaMSe+bcvI=)
                          7: 34352e36352e3232302e302f32322d3234203d3e2033333536.roa (hash: dvS242K1P5rfv1OZRochVJr2gdCVE0YeATLaOsdgA6k=)
                          8: 34352e36352e3232302e302f32322d3234203d3e20323033.roa (hash: cxO6IIL9FYl/S1JcP9ekX/bKJPpyhULDj81eVK4QpIQ=)
                          9: 323830343a336439303a3a2f33322d3438203d3e2033333536.roa (hash: 0px9Lv1h7cxoSy8j5wudsGRlY6Kz+2CKHSBfVhfTFkw=)
                          10: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (hash: AQPHdJljAdhG/wYm9Kot+1Yr85ejt19heQzyn2Qy5Ok=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 14:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b7:90:4a:2c:b2:c6:14:fd:22:d5:d7:42:29:93:dd:ff:c4:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Apr  4 13:07:23 2025 GMT
            Not After : Apr  5 14:20:23 2025 GMT
        Subject: CN=CD161EB1BF33B1155F7820EE506ADDD2C9450781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:3b:fa:a9:0f:91:64:f7:a6:c7:d8:ae:3b:
                    7f:6d:fd:56:b2:59:ce:71:37:5e:9c:d8:02:8e:c7:
                    44:2d:bf:55:4b:03:5a:ef:00:57:fd:62:10:88:0e:
                    49:21:36:f7:78:e6:73:c5:90:ad:4b:c2:f6:6f:c7:
                    2c:c7:62:37:de:93:d0:70:2f:77:f3:97:30:e8:65:
                    73:bf:d2:9c:e8:4c:16:8a:b0:a8:27:6c:a1:c2:f4:
                    3c:2e:19:30:1b:f6:33:e6:96:bd:63:dd:54:f9:0c:
                    65:80:2f:70:16:47:74:13:82:fc:46:a0:be:c8:a8:
                    f4:2d:99:bc:f5:20:83:9e:15:90:e1:70:56:74:8b:
                    44:d5:25:66:fe:bd:26:81:18:53:5a:23:ab:b9:d1:
                    ab:31:f2:2a:22:d4:7e:30:46:d2:15:49:34:0d:2f:
                    98:28:06:22:38:b7:fd:7b:fe:a5:af:91:52:81:00:
                    fa:da:93:96:a5:b0:ed:ca:cd:0d:07:69:a5:92:5f:
                    c7:27:a7:9a:59:a5:90:14:c2:aa:b8:c0:3a:d0:70:
                    33:0b:ec:51:3e:2a:c6:e4:07:82:9b:fa:2d:2e:86:
                    2e:cb:0c:a6:e9:5c:e8:94:c8:35:a4:92:2b:d3:57:
                    76:4c:58:05:4c:fa:31:b5:a3:d0:50:c5:f0:58:1c:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:16:1E:B1:BF:33:B1:15:5F:78:20:EE:50:6A:DD:D2:C9:45:07:81
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:02:93:e2:41:1c:8a:35:e9:52:3a:2a:5b:56:ed:b6:fc:99:
         ef:6f:a9:4b:a5:13:a4:16:0b:aa:d5:35:c4:12:9e:74:51:ca:
         9e:87:e7:c3:f6:6b:45:a6:4e:35:a9:83:63:52:99:0a:c2:7b:
         fb:eb:fb:f3:b8:b9:3f:cc:e3:a3:a0:71:32:33:af:23:e1:0c:
         be:eb:8e:d5:db:5d:c0:3b:c1:88:e9:07:84:fd:6c:0d:16:9d:
         80:0f:70:ac:e2:28:70:a3:d8:57:8c:e0:8c:70:4c:84:fd:cf:
         de:66:3d:53:d7:19:87:ba:41:cd:c0:60:0f:23:28:c4:65:24:
         6f:80:16:18:d8:87:1a:aa:b6:f2:e1:98:cb:99:58:f3:8e:e6:
         f2:8d:0a:ec:4d:a8:de:2a:f6:be:15:15:90:4e:31:ea:35:c2:
         c3:6f:f2:af:2f:19:d9:55:98:5f:18:16:2d:81:08:0e:9a:19:
         51:29:af:b7:b3:26:e4:66:75:58:84:99:3b:df:1a:44:85:8b:
         b5:f6:82:f1:b8:20:e6:9d:10:82:bb:32:ff:6a:93:af:f5:47:
         61:81:2c:b1:31:df:e0:fe:ca:03:76:cb:35:ee:17:56:db:63:
         af:78:e4:9d:97:01:03:30:43:65:d8:20:bf:49:c5:db:a2:d1:
         d6:ff:7f:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMbeQSiyyxhT9ItXXQimT3f/Ew4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF
N0IzQTEwRDAeFw0yNTA0MDQxMzA3MjNaFw0yNTA0MDUxNDIwMjNaMDMxMTAvBgNV
BAMTKENEMTYxRUIxQkYzM0IxMTU1Rjc4MjBFRTUwNkFEREQyQzk0NTA3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcTv6qQ+RZPemx9iuO39t/Vay
Wc5xN16c2AKOx0Qtv1VLA1rvAFf9YhCIDkkhNvd45nPFkK1LwvZvxyzHYjfek9Bw
L3fzlzDoZXO/0pzoTBaKsKgnbKHC9DwuGTAb9jPmlr1j3VT5DGWAL3AWR3QTgvxG
oL7IqPQtmbz1IIOeFZDhcFZ0i0TVJWb+vSaBGFNaI6u50asx8ioi1H4wRtIVSTQN
L5goBiI4t/17/qWvkVKBAPrak5alsO3KzQ0HaaWSX8cnp5pZpZAUwqq4wDrQcDML
7FE+KsbkB4Kb+i0uhi7LDKbpXOiUyDWkkivTV3ZMWAVM+jG1o9BQxfBYHKb7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzRYesb8zsRVfeCDuUGrd0slFB4EwHwYDVR0j
BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2
RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYyblovMi9B
Q0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGAKT4kEcijXpUjoqW1bttvyZ72+pS6UTpBYLqtU1xBKedFHKnofnw/ZrRaZO
NamDY1KZCsJ7++v787i5P8zjo6BxMjOvI+EMvuuO1dtdwDvBiOkHhP1sDRadgA9w
rOIocKPYV4zgjHBMhP3P3mY9U9cZh7pBzcBgDyMoxGUkb4AWGNiHGqq28uGYy5lY
847m8o0K7E2o3ir2vhUVkE4x6jXCw2/yry8Z2VWYXxgWLYEIDpoZUSmvt7Mm5GZ1
WISZO98aRIWLtfaC8bgg5p0Qgrsy/2qTr/VHYYEssTHf4P7KA3bLNe4XVttjr3jk
nZcBAzBDZdggv0nF26LR1v9/XQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:02:41 2025 by rpki-client