Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
File:                     BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft (raw, json)
Hash identifier:          VpWVaWk7G88BLiKbe1rDSp3QZ3f7F9pELlbFQJUKgz4=
Subject key identifier:   01:4E:F6:11:DF:36:80:A7:45:86:CE:C1:BC:C6:9A:CB:F6:3A:BC:F1
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       018B0F4C7689C15EDA345463C0900F7275C3B76D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
Manifest number:          A3
Signing time:             Thu 05 Jun 2025 22:59:56 +0000
Manifest this update:     Thu 05 Jun 2025 22:54:56 +0000
Manifest next update:     Sat 07 Jun 2025 02:44:56 +0000
Files and hashes:         1: 3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (hash: r6JBM7x8VeFYsNL+K9eMLIOZ1A/+o4DbcyXwQFI3/Vk=)
                          2: 3136342e3136332e32362e302f32342d3234203d3e20323635393336.roa (hash: 9VCo8Busvs3z54sg3xeDOElkhFOzgKUzb+IQfoHDdfE=)
                          3: 3136342e3136332e32342e302f32332d3233203d3e20323635393336.roa (hash: E2kD5ndeCb+AJx0JsKV9vIHYAy3iBmKSDLI9spobaHg=)
                          4: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (hash: yAN0Dp/64styq6QgUCeeRqlR5o/ij2Y4tQEnBq3xS8s=)
                          5: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (hash: 12J4phbtZEL3YlAS9Z+maO2ga6SeQcGvMj52u1Jj7po=)
                          6: BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl (hash: ThEa9efxqjS/tgHGcszpiJoVqvCQq6yejf7CkMFp39Q=)
                          7: 3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (hash: 9bhRN6eQPRJdciyPOtaJk7PxsQnCXFQk2BkXYEWE/lU=)
                          8: 3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (hash: p96a8jT5gRa7BxWGBSXFmAj2ekcB2UyxUJjSX2kouTo=)
                          9: 3136342e3136332e32342e302f32322d3232203d3e20323635393336.roa (hash: bzNadBAc3o5LEA54rKmqdde/ZhhWrL2FrZ6AK2dFDRE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 02:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:0f:4c:76:89:c1:5e:da:34:54:63:c0:90:0f:72:75:c3:b7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Jun  5 22:54:56 2025 GMT
            Not After : Jun  7 02:44:56 2025 GMT
        Subject: CN=014EF611DF3680A74586CEC1BCC69ACBF63ABCF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:17:63:4e:b1:a2:b5:0d:57:fa:66:61:7a:
                    dd:7d:95:68:28:4d:88:f7:c7:81:52:86:12:89:f9:
                    54:e7:2a:ac:e9:73:3e:64:fd:0b:2a:7e:6c:6a:77:
                    d1:61:92:13:e4:e7:7c:31:1c:a8:8d:e4:ee:07:3e:
                    6e:67:77:a4:26:3a:81:52:9c:8e:7d:43:bf:c1:66:
                    41:7b:00:83:ae:c5:78:01:6d:00:9f:0e:55:67:d5:
                    ab:7f:8f:1e:35:2b:25:04:79:65:db:57:3e:33:7b:
                    b5:b8:1e:61:1d:a5:d1:b0:4e:41:77:22:27:18:43:
                    92:da:34:39:0e:59:1f:82:44:ba:f0:89:f6:0f:c4:
                    73:23:b9:0d:d6:a4:17:37:ea:6d:48:44:f6:b6:0c:
                    71:91:99:fd:8d:5e:76:b5:b7:6c:ff:15:6e:57:2a:
                    55:ad:74:c0:73:d9:f3:ae:c8:5e:f6:4f:15:dc:22:
                    55:73:2f:b2:14:ea:8c:fa:ed:10:3b:1c:e5:77:1b:
                    a5:4f:90:55:67:08:36:41:7e:eb:9f:9d:50:65:e2:
                    77:65:e4:1f:34:3f:fa:8a:d1:8d:6e:e1:d3:74:27:
                    08:35:b6:11:c5:8b:0c:ed:ea:7e:81:e3:6e:4a:65:
                    c5:f4:b3:29:fb:00:e4:f0:5d:11:c9:0c:d8:2e:43:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4E:F6:11:DF:36:80:A7:45:86:CE:C1:BC:C6:9A:CB:F6:3A:BC:F1
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:33:ce:7a:1d:36:58:9c:06:1f:c4:8a:49:40:8b:69:c6:67:
         cc:d5:8b:3e:91:87:f8:b0:1d:a1:f3:f8:f6:3a:e2:26:80:64:
         a3:b7:b0:e7:0e:0e:91:d7:18:18:3a:1e:1d:8e:ff:2c:32:7a:
         c5:bb:2c:29:c9:2a:93:a4:84:2b:2c:04:d1:1a:94:f7:8a:1c:
         e5:18:43:1d:d4:07:c3:7d:49:06:82:4c:5d:6b:13:60:bc:f9:
         41:f8:e9:fb:3c:1a:7b:d8:fe:66:af:ff:7e:28:d2:c1:02:e5:
         08:d7:34:f7:0f:8e:d4:8f:ad:7b:48:54:35:bd:b0:42:f2:76:
         b5:8e:3a:5c:1b:82:3b:7b:16:c3:12:48:a6:0f:2e:80:b2:35:
         46:3d:1f:31:8f:6f:c2:f3:d5:02:2b:56:79:21:9f:fd:69:a9:
         d4:ee:28:06:63:de:10:4c:cc:ed:75:07:ec:c6:9e:a9:51:25:
         72:d1:9d:0c:63:63:bc:33:18:f3:84:e3:4f:24:eb:d4:c6:0f:
         ec:13:4b:b9:e3:9c:ce:b8:8b:1c:08:e8:28:05:c0:83:c9:b0:
         d4:4d:ee:1d:ef:1d:8c:19:fe:ea:cf:91:f8:72:f9:a8:7a:e6:
         5b:0f:6a:16:2e:d9:5c:c8:01:09:da:d5:95:b1:e1:c9:1f:3d:
         d6:b7:2d:e9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUAYsPTHaJwV7aNFRjwJAPcnXDt20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFB
ODQ5Q0NFODAeFw0yNTA2MDUyMjU0NTZaFw0yNTA2MDcwMjQ0NTZaMDMxMTAvBgNV
BAMTKDAxNEVGNjExREYzNjgwQTc0NTg2Q0VDMUJDQzY5QUNCRjYzQUJDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HxdjTrGitQ1X+mZhet19lWgo
TYj3x4FShhKJ+VTnKqzpcz5k/Qsqfmxqd9FhkhPk53wxHKiN5O4HPm5nd6QmOoFS
nI59Q7/BZkF7AIOuxXgBbQCfDlVn1at/jx41KyUEeWXbVz4ze7W4HmEdpdGwTkF3
IicYQ5LaNDkOWR+CRLrwifYPxHMjuQ3WpBc36m1IRPa2DHGRmf2NXna1t2z/FW5X
KlWtdMBz2fOuyF72TxXcIlVzL7IU6oz67RA7HOV3G6VPkFVnCDZBfuufnVBl4ndl
5B80P/qK0Y1u4dN0Jwg1thHFiwzt6n6B425KZcX0syn7AOTwXRHJDNguQ4ujAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUAU72Ed82gKdFhs7BvMaay/Y6vPEwHwYDVR0j
BBgwFoAUur4hejUqnBkOXA2mVBEZ+qhJzOgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3
LzAvQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFBODQ5Q0NFOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQUJFMjE3QTM1MkE5QzE5MEU1
QzBEQTY1NDExMTlGQUE4NDlDQ0U4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Vr
WkhaZTJWQ2FQa29lQ1E5QXd4MnA4ZFk0THBadmpNUmlQRHFRQ3hjd3cvMC9CQUJF
MjE3QTM1MkE5QzE5MEU1QzBEQTY1NDExMTlGQUE4NDlDQ0U4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
jjPOeh02WJwGH8SKSUCLacZnzNWLPpGH+LAdofP49jriJoBko7ew5w4OkdcYGDoe
HY7/LDJ6xbssKckqk6SEKywE0RqU94oc5RhDHdQHw31JBoJMXWsTYLz5Qfjp+zwa
e9j+Zq//fijSwQLlCNc09w+O1I+te0hUNb2wQvJ2tY46XBuCO3sWwxJIpg8ugLI1
Rj0fMY9vwvPVAitWeSGf/Wmp1O4oBmPeEEzM7XUH7MaeqVElctGdDGNjvDMY84Tj
TyTr1MYP7BNLueOczriLHAjoKAXAg8mw1E3uHe8djBn+6s+R+HL5qHrmWw9qFi7Z
XMgBCdrVlbHhyR891rct6Q==
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:30:18 2025 by rpki-client