Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
File:                     A231E2070327B78340403E3C1D060C59505210CE.mft (raw, json)
Hash identifier:          YGkRzH0HK0T1dPadBmRXQZ0kI6DAY/JCPWrM+U9+H1U=
Subject key identifier:   35:FB:D1:37:A6:E5:88:46:E9:65:05:FF:38:F7:36:B3:6B:90:F3:E8
Authority key identifier: A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE
Certificate issuer:       /CN=A231E2070327B78340403E3C1D060C59505210CE
Certificate serial:       033C5B8AC44053780C19B4B52964BB1956946C8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
Manifest number:          70
Signing time:             Tue 25 Jun 2024 21:56:45 +0000
Manifest this update:     Tue 25 Jun 2024 21:51:45 +0000
Manifest next update:     Thu 27 Jun 2024 00:04:45 +0000
Files and hashes:         1: 3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa (hash: WrPGC5eOtPuA1JGinXeYQgmDO3qGMJRpS2GEgokPKx0=)
                          2: 323830343a323831383a3a2f33342d3334203d3e20323633393430.roa (hash: NVJFxpHvWBY8PB5Y9bD48oYKpNPXdbVETxPeBGtPevY=)
                          3: 3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa (hash: NPBYQtwtJ+YXVzgkNgovY6LIFOrqlq0M/qc9//IEeG4=)
                          4: 3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa (hash: KRsHjfNmg7VkyvZA/N+4bBsc1DWX1n0K+yiSZNgoXUQ=)
                          5: 323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa (hash: XtjqUf9cPnAmr2/B1aFGwIL11sWqUYRO1zVw8+Igqmc=)
                          6: 3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa (hash: GmNZ8XAJFzKuBg+G1o5hwqIeHMtj1FogFd4Lhp61Dx4=)
                          7: 323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa (hash: f8W8OASEAV4Iixznursghs+acJBj0jFwRmLEOSUX6yU=)
                          8: 323830343a323831383a633030303a3a2f33342d3334203d3e20323633393430.roa (hash: GiNTAdxIv0GzwCEM0mI2ezwoYPeHqIV5g+6Orv00TlY=)
                          9: 323830343a323831383a3a2f33332d3333203d3e20323633393430.roa (hash: M+DskqSbIFIUvK3MBxmIWfOLMwpbPyXywH2Q+FRxIlY=)
                          10: 3133382e3138352e3235322e302f32332d3233203d3e20323633393430.roa (hash: uNjaEEZATWYmcswZXfWOeGoNQQHPFMsbGGzbeIVqSZc=)
                          11: 3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa (hash: 7XLMC/aX45OWvN0ck7yGuyfK1OET8lkV1xlPCiilCtg=)
                          12: 3133382e3138352e3235332e302f32342d3234203d3e20323633393430.roa (hash: mOhvcwxnDZUBjZ9YhL/YIEpLL8Ab65eaT3oLFdBG/p4=)
                          13: A231E2070327B78340403E3C1D060C59505210CE.crl (hash: dMfk95eUpF5R6CO5Js+cK73WiORz1OeMsujOFtoH1po=)
                          14: 323830343a323831383a3a2f33322d3332203d3e20323633393430.roa (hash: 4ouD0JMM8M+xyJIao3tyyd0rYlJjKFxQjYOvUBDYGLk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:5b:8a:c4:40:53:78:0c:19:b4:b5:29:64:bb:19:56:94:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A231E2070327B78340403E3C1D060C59505210CE
        Validity
            Not Before: Jun 25 21:51:45 2024 GMT
            Not After : Jun 27 00:04:45 2024 GMT
        Subject: CN=35FBD137A6E58846E96505FF38F736B36B90F3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:90:90:b7:86:70:4f:a7:f8:33:9b:8a:b6:
                    c8:31:26:1b:22:6c:4b:5e:51:ac:ff:f6:01:c5:d8:
                    7e:5a:4d:73:3f:f1:e2:3f:b4:fd:15:62:1c:e3:76:
                    18:ad:4e:17:fb:b0:9d:7f:5e:35:8a:01:5f:ee:8c:
                    15:20:90:16:eb:a2:1a:8a:c9:a3:04:53:bd:63:6c:
                    eb:32:bb:55:b3:ce:f4:66:7f:1b:6e:82:0d:8b:8b:
                    f8:be:91:8f:37:d0:32:43:2e:e8:8e:a2:ff:5e:44:
                    12:ea:a5:74:20:4d:78:23:9d:7c:e0:0d:37:c3:a4:
                    b7:4d:04:2e:11:b9:40:6d:8b:ae:56:39:10:ff:95:
                    80:2b:5f:bb:22:a4:01:fe:e0:d5:5c:39:0d:0c:dc:
                    13:d3:0b:b0:68:c1:15:96:aa:2a:48:fd:d9:0e:ea:
                    98:e0:91:d2:ae:28:b2:71:34:53:8f:97:d5:c1:d5:
                    ff:53:f8:58:96:7e:f7:17:b0:42:86:50:45:b8:19:
                    c6:02:e9:e3:d9:28:3f:ad:47:9c:b8:4b:d1:ca:70:
                    19:85:b2:95:6e:67:6a:50:4d:a1:b8:06:c4:99:34:
                    e1:d0:f4:8b:cf:ec:78:5a:ca:6a:79:b0:00:37:a4:
                    69:83:d5:ad:a4:1a:ac:d9:4e:3a:1e:62:30:0e:75:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:D1:37:A6:E5:88:46:E9:65:05:FF:38:F7:36:B3:6B:90:F3:E8
            X509v3 Authority Key Identifier:
                keyid:A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b8:9d:06:2f:56:7c:73:b3:d2:9d:bb:ab:f7:46:2b:38:58:
         96:77:bb:96:bf:4a:f7:45:19:73:43:d5:75:e7:4e:5d:e0:47:
         3c:07:70:c4:37:a2:31:c1:11:84:c8:10:9f:00:3b:05:2a:84:
         dd:e2:cd:db:3b:c9:42:65:f2:37:43:bc:5d:ea:13:d3:71:72:
         18:7c:d9:5c:75:bb:64:42:69:2b:32:b6:48:da:07:c1:fa:41:
         b5:0e:75:50:da:f6:ac:50:e8:14:84:d6:c2:48:1e:6a:92:0b:
         1e:bf:2d:fa:4d:c1:8b:97:7d:5d:92:cd:c1:b7:2f:00:ff:e9:
         46:68:e5:20:65:7d:f9:96:a5:d4:99:93:1d:cd:58:5e:16:4a:
         63:b3:5d:3f:e1:1b:aa:39:47:8c:aa:7d:72:20:02:15:e8:89:
         c3:39:9f:55:1a:96:a8:e9:82:3a:ed:64:d8:24:47:26:a8:90:
         3e:6d:cd:03:89:ea:c5:5d:82:06:eb:38:41:bf:c9:cf:f3:c7:
         1f:9f:77:51:30:33:30:d5:a3:58:04:a4:b9:f6:fd:62:d1:03:
         a4:ea:b8:cf:43:05:69:cd:1e:23:11:75:57:2d:e0:ba:bb:c3:
         7c:b0:dd:d7:19:5f:4c:7e:0f:85:1a:10:52:bb:dd:8a:30:e8:
         1a:48:79:33
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUAzxbisRAU3gMGbS1KWS7GVaUbI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIzMUUyMDcwMzI3Qjc4MzQwNDAzRTNDMUQwNjBDNTk1
MDUyMTBDRTAeFw0yNDA2MjUyMTUxNDVaFw0yNDA2MjcwMDA0NDVaMDMxMTAvBgNV
BAMTKDM1RkJEMTM3QTZFNTg4NDZFOTY1MDVGRjM4RjczNkIzNkI5MEYzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukZCQt4ZwT6f4M5uKtsgxJhsi
bEteUaz/9gHF2H5aTXM/8eI/tP0VYhzjdhitThf7sJ1/XjWKAV/ujBUgkBbrohqK
yaMEU71jbOsyu1WzzvRmfxtugg2Li/i+kY830DJDLuiOov9eRBLqpXQgTXgjnXzg
DTfDpLdNBC4RuUBti65WORD/lYArX7sipAH+4NVcOQ0M3BPTC7BowRWWqipI/dkO
6pjgkdKuKLJxNFOPl9XB1f9T+FiWfvcXsEKGUEW4GcYC6ePZKD+tR5y4S9HKcBmF
spVuZ2pQTaG4BsSZNOHQ9IvP7Hhaymp5sAA3pGmD1a2kGqzZTjoeYjAOdRTvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUNfvRN6bliEbpZQX/OPc2s2uQ8+gwHwYDVR0j
BBgwFoAUojHiBwMnt4NAQD48HQYMWVBSEM4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzEvQTIzMUUyMDcwMzI3Qjc4MzQwNDAzRTNDMUQwNjBDNTk1MDUyMTBDRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMjMxRTIwNzAzMjdCNzgzNDA0
MDNFM0MxRDA2MEM1OTUwNTIxMENFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lv
OFFlVGJ1S1oyNTlpNXFTWWplZVU4b2tLQUtVNkw4WkZ1MUc1V0xUMUgvMS9BMjMx
RTIwNzAzMjdCNzgzNDA0MDNFM0MxRDA2MEM1OTUwNTIxMENFLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
GLidBi9WfHOz0p27q/dGKzhYlne7lr9K90UZc0PVdedOXeBHPAdwxDeiMcERhMgQ
nwA7BSqE3eLN2zvJQmXyN0O8XeoT03FyGHzZXHW7ZEJpKzK2SNoHwfpBtQ51UNr2
rFDoFITWwkgeapILHr8t+k3Bi5d9XZLNwbcvAP/pRmjlIGV9+Zal1JmTHc1YXhZK
Y7NdP+EbqjlHjKp9ciACFeiJwzmfVRqWqOmCOu1k2CRHJqiQPm3NA4nqxV2CBus4
Qb/Jz/PHH593UTAzMNWjWASkufb9YtEDpOq4z0MFac0eIxF1Vy3gurvDfLDd1xlf
TH4PhRoQUrvdijDoGkh5Mw==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:43 2024 by rpki-client on console-fra.rpki-client.org