Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
File:                     250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft (raw, json)
Hash identifier:          L4X3FIrOVLyWuzN7R+NL8K2UolS6nDiQ7RIfIh/YVLM=
Subject key identifier:   2C:68:29:19:B7:93:46:B2:D6:B9:0C:89:D0:4A:D7:99:FC:AE:07:A5
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       0DEC4F9578E2BC903D5AB1B6813AC969813C52D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
Manifest number:          72
Signing time:             Tue 25 Jun 2024 20:18:01 +0000
Manifest this update:     Tue 25 Jun 2024 20:13:01 +0000
Manifest next update:     Wed 26 Jun 2024 23:36:01 +0000
Files and hashes:         1: 3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (hash: +pnoY2NjD/47wfbCWhznUaERDBSbjtnI2NstgYB/dSs=)
                          2: 3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (hash: jg3v88734LxtSvUfT6aR7ilwlGNvDFTifB684MGJV2Y=)
                          3: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: Ub9j7nMdEd5ZvlLSOzC9BoP+X/czyI5/ixTOtozu/YA=)
                          4: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: 129WhKGQJMnni4E+eHbQC/wQNZRPzAdMf9VsBmVGnBQ=)
                          5: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: /SW5NW+gU2SD35Rg04id30MDVcwK9Zu+R+VJnwFilrU=)
                          6: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: ATwvZ+8l2/RYVvy6rwJ9p49WkfhM7HXN9zHur5pazw0=)
                          7: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl (hash: vSrRvrKn34QTbsKsap9L0WQg6NB3qARYyEK2ZmPApO4=)
                          8: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: Lt8uGF3KmLXeuC3kswcMbBnmNqkYgm0aGgDnc/ogtSs=)
                          9: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: emS8/UEq1aJVYvuKWz5g6UsQGCohckklH/uoRRhcqyU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 23:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ec:4f:95:78:e2:bc:90:3d:5a:b1:b6:81:3a:c9:69:81:3c:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Jun 25 20:13:01 2024 GMT
            Not After : Jun 26 23:36:01 2024 GMT
        Subject: CN=2C682919B79346B2D6B90C89D04AD799FCAE07A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:e5:7e:37:d0:62:86:5f:f2:15:2e:92:5c:
                    05:39:5e:a9:09:b8:69:f5:95:ab:bf:74:85:dc:4e:
                    51:80:ec:79:57:e2:ca:0f:5d:af:80:8c:27:c2:42:
                    97:05:d0:68:cb:ba:1f:33:c5:ae:89:b2:2b:88:df:
                    19:41:ca:91:c3:73:49:90:b8:0f:83:16:18:75:0f:
                    71:ec:06:5f:17:62:5f:c9:c1:94:c4:ee:d2:bf:1b:
                    a3:8a:e2:a1:a3:dd:52:21:93:fc:ff:b8:c2:5d:a2:
                    51:8e:19:96:b9:59:7b:98:28:9c:40:cb:07:d9:48:
                    07:45:18:09:5c:06:17:59:ef:94:8a:0e:6a:fa:87:
                    6b:e2:43:b3:e6:f4:56:a6:76:53:f0:4d:68:93:18:
                    6f:4e:49:6a:b1:15:b4:26:e3:28:0b:ce:55:ec:22:
                    af:51:ca:36:76:86:7a:ed:56:db:25:f1:13:e0:7e:
                    11:8d:ea:f7:1f:e2:ec:dd:e1:c4:99:09:67:a1:8b:
                    e5:c5:a6:13:b1:33:00:51:17:1b:cd:e3:33:78:ee:
                    8d:8c:ca:42:17:af:0d:0d:0d:7a:31:7c:ec:77:51:
                    dd:51:40:bf:fa:d3:cc:b8:a7:6b:56:80:22:23:04:
                    cc:1a:e4:8f:8d:e2:52:1b:25:fa:69:66:26:72:7f:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:29:19:B7:93:46:B2:D6:B9:0C:89:D0:4A:D7:99:FC:AE:07:A5
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:32:83:8d:55:bf:71:ca:73:74:40:02:a8:e9:a0:2c:68:ce:
         72:30:4b:c8:a0:9c:9a:fa:8b:85:42:5e:8b:8d:d3:81:29:bc:
         dc:97:7d:e0:37:26:ed:4c:f6:55:bb:08:32:b2:d4:fe:5c:e2:
         d1:04:29:da:97:3b:c4:10:a4:71:ba:7d:ab:51:21:ef:02:99:
         87:92:3b:c2:5b:b2:86:aa:d2:ee:cc:17:d6:ee:72:82:bb:30:
         c9:48:6b:8c:92:c2:38:5f:83:6a:ed:33:b3:c5:10:f9:80:bc:
         e2:61:fd:75:5c:0c:ce:f5:f3:d6:1b:c8:ce:c2:04:f2:f1:df:
         a1:01:6d:ab:9f:23:90:65:0b:35:04:08:ba:86:17:b6:42:0f:
         94:4f:2c:63:00:34:ef:98:6e:63:14:1d:65:04:91:b8:87:5a:
         31:c3:de:e7:21:67:4a:5b:d6:4f:81:6c:b1:e4:df:ba:e9:a9:
         5c:36:7d:11:a6:9e:bf:86:8d:fa:1d:ca:d8:71:9c:33:65:32:
         50:1b:d0:0c:e3:2f:e8:27:ec:d2:cb:2e:2f:9f:54:98:c9:72:
         60:3b:ea:76:cd:2e:f6:3c:97:57:c0:f4:d1:e6:30:df:8c:88:
         f1:5c:2f:f7:50:8d:04:34:25:3e:d1:6f:29:b4:70:9a:d4:24:
         0d:4d:55:55
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDexPlXjivJA9WrG2gTrJaYE8UtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJC
MjdDRjg2RDAeFw0yNDA2MjUyMDEzMDFaFw0yNDA2MjYyMzM2MDFaMDMxMTAvBgNV
BAMTKDJDNjgyOTE5Qjc5MzQ2QjJENkI5MEM4OUQwNEFENzk5RkNBRTA3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlOV+N9Bihl/yFS6SXAU5XqkJ
uGn1lau/dIXcTlGA7HlX4soPXa+AjCfCQpcF0GjLuh8zxa6JsiuI3xlBypHDc0mQ
uA+DFhh1D3HsBl8XYl/JwZTE7tK/G6OK4qGj3VIhk/z/uMJdolGOGZa5WXuYKJxA
ywfZSAdFGAlcBhdZ75SKDmr6h2viQ7Pm9FamdlPwTWiTGG9OSWqxFbQm4ygLzlXs
Iq9RyjZ2hnrtVtsl8RPgfhGN6vcf4uzd4cSZCWehi+XFphOxMwBRFxvN4zN47o2M
ykIXrw0NDXoxfOx3Ud1RQL/608y4p2tWgCIjBMwa5I+N4lIbJfppZiZyf2q3AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQULGgpGbeTRrLWuQyJ0ErXmfyuB6UwHwYDVR0j
BBgwFoAUJQsK1lpLeMZN1NVool0sK7J8+G0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhBWUdVMmVyalJ3
LzEvMjUwQjBBRDY1QTRCNzhDNjRERDRENTY4QTI1RDJDMkJCMjdDRjg2RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNTBCMEFENjVBNEI3OEM2NERE
NEQ1NjhBMjVEMkMyQkIyN0NGODZELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hw
UXVnVTZZV1dYU3c3Ykg0NlFueG9xNUhpOVBIckgxaEFZR1UyZXJqUncvMS8yNTBC
MEFENjVBNEI3OEM2NERENEQ1NjhBMjVEMkMyQkIyN0NGODZELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
RDKDjVW/ccpzdEACqOmgLGjOcjBLyKCcmvqLhUJei43TgSm83Jd94Dcm7Uz2VbsI
MrLU/lzi0QQp2pc7xBCkcbp9q1Eh7wKZh5I7wluyhqrS7swX1u5ygrswyUhrjJLC
OF+Dau0zs8UQ+YC84mH9dVwMzvXz1hvIzsIE8vHfoQFtq58jkGULNQQIuoYXtkIP
lE8sYwA075huYxQdZQSRuIdaMcPe5yFnSlvWT4FsseTfuumpXDZ9Eaaev4aN+h3K
2HGcM2UyUBvQDOMv6Cfs0ssuL59UmMlyYDvqds0u9jyXV8D00eYw34yI8Vwv91CN
BDQlPtFvKbRwmtQkDU1VVQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:05:12 2024 by rpki-client on console-fra.rpki-client.org