Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          BJfDVU1iBt9HomypchB2KOktjK0YeoTshGilCd+mgkA=
Subject key identifier:   CB:86:63:DC:15:1B:49:5C:2A:CD:AB:F6:0E:01:05:3D:25:12:CB:2F
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       17F28254A217E5B6C9D66396754F7BB938491819
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          0249
Signing time:             Sun 08 Jun 2025 17:40:40 +0000
Manifest this update:     Sun 08 Jun 2025 17:35:40 +0000
Manifest next update:     Mon 09 Jun 2025 20:49:40 +0000
Files and hashes:         1: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: E9plHt7RLLvmbvHaG4OTDwGPfwEIE4mC0sfU15Aoajs=)
                          2: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: rKajM27ZVTOOLFez2fJk9xsp88osN8hfCA+YRiNcfNk=)
                          3: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: DoIheMfS2BngMQ+JdTJaqcKZM72QCyWpqlcxhcNcg/8=)
                          4: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: cq+TY6RGuTPnXqe6GmwhfS349yibSTDnBR9W+e3J9uo=)
                          5: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: pO92ZTA6JgI7SZJqWBqtXgNp8h8anIZBL3tkPi+xJ8U=)
                          6: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: LU8Mv1K4W9NjY1Ph3Xc32UCFbzgnlyOyJCLoDeuE47s=)
                          7: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=)
                          8: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: X5MXmZvX84QOjHDMm5hGtXTanpvg6jMd48H1sof9q60=)
                          9: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: 1tj7f6UEdSuSX+xzAfE3glMzsuwy0R2doswMaI5qeZM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f2:82:54:a2:17:e5:b6:c9:d6:63:96:75:4f:7b:b9:38:49:18:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Jun  8 17:35:40 2025 GMT
            Not After : Jun  9 20:49:40 2025 GMT
        Subject: CN=CB8663DC151B495C2ACDABF60E01053D2512CB2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:7a:dd:a6:c8:16:7e:e9:bc:cc:c1:1d:c2:
                    54:60:b8:4b:c0:28:fb:b8:43:be:68:3b:17:29:8a:
                    e6:ac:6d:26:5e:db:1f:ab:43:46:da:6d:97:a4:27:
                    d0:76:c0:68:b2:cf:94:70:e3:d6:b5:f1:1b:0e:17:
                    c6:89:c9:f5:0c:b3:40:40:4b:52:5b:e7:22:f1:95:
                    bf:dc:ce:57:3b:48:e5:d8:84:1e:ac:e2:34:9f:cc:
                    a4:22:9b:4b:ee:a5:ee:25:7f:27:f2:42:ad:a0:10:
                    bf:87:1e:80:be:b4:84:2b:e3:92:5c:0c:d9:5a:b3:
                    50:60:a6:9a:6d:32:d2:3b:f9:14:b1:5d:77:05:8c:
                    96:0a:75:dc:3a:e1:41:7b:20:21:aa:81:10:28:c3:
                    a3:33:b9:44:fb:fe:df:f2:70:ea:e0:d0:48:5a:d3:
                    29:4f:b6:39:0d:47:83:f3:4b:1d:a8:ea:7f:1b:a3:
                    1f:2e:2e:a3:7f:67:93:84:17:a7:a7:06:fd:ba:fc:
                    44:ea:25:f0:44:9d:9f:99:c2:05:6d:b5:fc:3f:de:
                    78:fb:fe:1b:28:41:c7:b4:c0:22:53:e0:98:a4:83:
                    a8:8e:0c:d5:a1:d5:d1:46:94:d6:d7:ec:04:7e:8c:
                    7c:d8:74:2c:84:69:bd:a3:55:d9:4e:2c:3b:f0:ff:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:86:63:DC:15:1B:49:5C:2A:CD:AB:F6:0E:01:05:3D:25:12:CB:2F
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:59:cd:ca:39:f7:d8:1a:fd:29:a6:fb:d9:7d:f4:1f:f7:ce:
         34:56:82:42:98:fe:cb:45:7a:87:48:d5:1e:b3:08:1a:aa:e0:
         c9:36:e2:43:66:26:b1:0d:f5:69:3a:29:be:77:70:31:e0:33:
         bc:b3:21:40:0a:64:c7:71:39:0a:3c:26:db:63:96:a6:97:3b:
         ce:e0:5a:1b:f9:cb:28:c8:f8:31:49:7b:91:b7:22:e0:a5:ea:
         9b:d2:33:cb:34:98:f8:0b:df:9f:8f:0e:65:59:72:73:ee:ef:
         00:55:a4:2b:d4:e5:89:d6:6f:bf:19:d2:45:db:69:0e:88:bd:
         b1:ca:df:33:ee:26:98:68:2f:0a:3e:af:2c:2e:a1:1d:5e:57:
         70:ab:11:6a:c8:2c:8c:05:2d:86:5f:4b:5d:18:df:ab:f7:20:
         ac:bb:57:2d:ae:08:cc:a2:1d:50:41:ab:5c:fb:ef:51:c5:cc:
         1e:27:2c:ce:52:aa:71:51:d1:41:33:26:0a:1c:79:75:c7:5d:
         c9:c6:bc:9f:1e:32:c7:54:1a:02:53:d6:cd:41:89:dd:70:22:
         6f:0c:2c:62:d6:52:e4:ca:d3:d9:5a:61:f1:d6:f4:2f:39:8a:
         03:76:3b:94:f3:94:2c:05:80:42:b7:8f:15:0f:ba:59:5a:be:
         99:60:4d:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF/KCVKIX5bbJ1mOWdU97uThJGBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBOTFCODcyOTkyNEI0RTgxNTVCODE5NTI2ODhCRUMw
MDRERDBCNzAeFw0yNTA2MDgxNzM1NDBaFw0yNTA2MDkyMDQ5NDBaMDMxMTAvBgNV
BAMTKENCODY2M0RDMTUxQjQ5NUMyQUNEQUJGNjBFMDEwNTNEMjUxMkNCMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjnrdpsgWfum8zMEdwlRguEvA
KPu4Q75oOxcpiuasbSZe2x+rQ0babZekJ9B2wGiyz5Rw49a18RsOF8aJyfUMs0BA
S1Jb5yLxlb/czlc7SOXYhB6s4jSfzKQim0vupe4lfyfyQq2gEL+HHoC+tIQr45Jc
DNlas1BgppptMtI7+RSxXXcFjJYKddw64UF7ICGqgRAow6MzuUT7/t/ycOrg0Eha
0ylPtjkNR4PzSx2o6n8box8uLqN/Z5OEF6enBv26/ETqJfBEnZ+ZwgVttfw/3nj7
/hsoQce0wCJT4Jikg6iODNWh1dFGlNbX7AR+jHzYdCyEab2jVdlOLDvw/3t7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUy4Zj3BUbSVwqzav2DgEFPSUSyy8wHwYDVR0j
BBgwFoAUuqkbhymSS06BVbgZUmiL7ABN0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY
RjkvMS9CQUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTkxQjg3Mjk5MjRCNEU4
MTU1QjgxOTUyNjg4QkVDMDA0REQwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VYRjkvMS9C
QUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANVnNyjn32Br9Kab72X30H/fONFaCQpj+y0V6h0jVHrMIGqrgyTbiQ2YmsQ31
aTopvndwMeAzvLMhQApkx3E5Cjwm22OWppc7zuBaG/nLKMj4MUl7kbci4KXqm9Iz
yzSY+Avfn48OZVlyc+7vAFWkK9TlidZvvxnSRdtpDoi9scrfM+4mmGgvCj6vLC6h
HV5XcKsRasgsjAUthl9LXRjfq/cgrLtXLa4IzKIdUEGrXPvvUcXMHicszlKqcVHR
QTMmChx5dcddyca8nx4yx1QaAlPWzUGJ3XAibwwsYtZS5MrT2Vph8db0LzmKA3Y7
lPOULAWAQrePFQ+6WVq+mWBNjA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:14:24 2025 by rpki-client