Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          1Ak0jqG5F3+/t68Us1ZxrG7MF0xA9vUeWcTE+KNeKE8=
Subject key identifier:   09:C4:09:3F:F8:CE:E6:CD:FB:CB:74:D8:89:7E:5E:5B:9E:2F:DC:A0
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       7FA1CC78F31EAD97466E95DC930F82873D0EB3A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          0212
Signing time:             Mon 05 May 2025 04:31:50 +0000
Manifest this update:     Mon 05 May 2025 04:26:50 +0000
Manifest next update:     Tue 06 May 2025 07:35:50 +0000
Files and hashes:         1: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          2: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
                          3: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          4: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          5: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          6: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          7: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          8: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          9: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: I3B45gX17gxiCearNwgmE/vo6lFhqY5aAaU3WinRdAY=)
                          10: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          11: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          12: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          13: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          14: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 07:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:cc:78:f3:1e:ad:97:46:6e:95:dc:93:0f:82:87:3d:0e:b3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: May  5 04:26:50 2025 GMT
            Not After : May  6 07:35:50 2025 GMT
        Subject: CN=09C4093FF8CEE6CDFBCB74D8897E5E5B9E2FDCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:c1:e2:f8:aa:d0:b3:e1:67:b7:41:57:66:
                    73:2d:01:66:64:fa:ed:95:a5:0e:0d:4a:cc:87:50:
                    92:7f:40:3e:0b:3c:50:10:7e:b1:91:81:64:e4:03:
                    eb:62:43:cb:2f:c2:44:ab:a3:20:60:a4:4a:be:f9:
                    69:65:08:92:d8:b2:0d:2b:2f:77:51:b8:b4:3e:17:
                    e5:53:33:2a:ee:03:5c:0f:42:14:ba:0c:8b:d3:1b:
                    fe:36:d1:bd:10:a4:b8:47:9e:d7:ec:19:25:df:1f:
                    4b:c3:65:a1:eb:99:88:b7:6b:06:b6:4a:6b:39:2d:
                    5e:36:ef:06:19:44:0c:74:ff:38:e1:a8:d5:9b:80:
                    e0:ba:27:d5:87:64:f5:37:d3:c0:f0:88:16:62:5f:
                    8c:f5:4e:a8:46:66:83:2d:6c:f0:cc:7f:52:4a:6d:
                    4c:0f:83:16:c4:3e:be:46:a4:3d:74:57:82:cc:1d:
                    cc:26:a5:0b:d2:38:49:6e:80:5e:65:18:1a:db:d4:
                    e0:0d:1d:aa:63:f4:93:2d:cd:a8:92:bc:f1:5c:db:
                    21:a4:e4:a7:c3:6f:1f:23:20:0f:d8:e6:56:2e:14:
                    4d:19:37:01:93:63:66:01:42:5c:e1:5c:26:d7:a2:
                    5f:df:d9:81:43:8f:bd:31:05:ca:df:d1:78:7d:25:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:09:3F:F8:CE:E6:CD:FB:CB:74:D8:89:7E:5E:5B:9E:2F:DC:A0
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a1:49:e7:63:1d:31:38:5c:d9:87:0a:57:b5:10:01:e1:1e:
         3c:76:e1:6e:af:7e:24:4f:cc:3b:f6:53:ed:21:76:40:dd:7a:
         87:a2:43:7a:dd:81:71:89:1f:ba:1a:da:45:c8:b7:69:7d:c2:
         5f:f9:61:16:f6:a9:6f:ce:4c:9f:4b:e9:3b:11:4b:91:22:e3:
         0d:91:23:93:83:01:5c:44:f7:4f:cc:d7:f8:e9:72:d8:a8:10:
         a5:f6:ff:fc:92:cb:61:09:f3:a1:46:d1:56:25:2a:bc:3f:61:
         ce:5a:93:7b:f3:0f:05:c6:8d:4f:b4:04:b8:73:06:64:68:e6:
         ef:1e:08:77:3d:42:95:2c:74:ba:fc:fb:f2:46:3a:c6:64:85:
         d9:42:74:11:78:d7:7f:0c:a6:5b:c9:de:d4:dc:33:bf:12:f1:
         01:62:95:c6:47:3e:f0:27:d9:10:b9:58:d2:c9:27:fc:d2:0b:
         a2:69:40:2e:cc:c0:9b:0a:95:63:b2:cb:80:99:73:1b:74:27:
         dd:3d:e9:8a:c0:29:2b:df:47:cc:8c:09:65:64:c8:87:6e:e5:
         ab:f3:e7:c6:17:c2:9f:c8:7a:6e:73:27:7e:84:cd:ed:fc:f7:
         53:46:01:15:77:0c:53:3d:bb:65:a5:6a:ad:29:f2:bc:0a:a8:
         4a:43:fd:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf6HMePMerZdGbpXckw+Chz0Os6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBMzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEz
MTE5QThBRjAeFw0yNTA1MDUwNDI2NTBaFw0yNTA1MDYwNzM1NTBaMDMxMTAvBgNV
BAMTKDA5QzQwOTNGRjhDRUU2Q0RGQkNCNzREODg5N0U1RTVCOUUyRkRDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5acHi+KrQs+Fnt0FXZnMtAWZk
+u2VpQ4NSsyHUJJ/QD4LPFAQfrGRgWTkA+tiQ8svwkSroyBgpEq++WllCJLYsg0r
L3dRuLQ+F+VTMyruA1wPQhS6DIvTG/420b0QpLhHntfsGSXfH0vDZaHrmYi3awa2
Sms5LV427wYZRAx0/zjhqNWbgOC6J9WHZPU308DwiBZiX4z1TqhGZoMtbPDMf1JK
bUwPgxbEPr5GpD10V4LMHcwmpQvSOElugF5lGBrb1OANHapj9JMtzaiSvPFc2yGk
5KfDbx8jIA/Y5lYuFE0ZNwGTY2YBQlzhXCbXol/f2YFDj70xBcrf0Xh9Jf5hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCcQJP/jO5s37y3TYiX5eW54v3KAwHwYDVR0j
BBgwFoAUcaNOjfAJZcohwapOPDesKjEZqK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29i
Y2MvMS83MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQTM0RThERjAwOTY1Q0Ey
MUMxQUE0RTNDMzdBQzJBMzExOUE4QUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0hMQ1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS83
MUEzNEU4REYwMDk2NUNBMjFDMUFBNEUzQzM3QUMyQTMxMTlBOEFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwKFJ52MdMThc2YcKV7UQAeEePHbhbq9+JE/MO/ZT7SF2QN16h6JDet2BcYkf
uhraRci3aX3CX/lhFvapb85Mn0vpOxFLkSLjDZEjk4MBXET3T8zX+Oly2KgQpfb/
/JLLYQnzoUbRViUqvD9hzlqTe/MPBcaNT7QEuHMGZGjm7x4Idz1ClSx0uvz78kY6
xmSF2UJ0EXjXfwymW8ne1NwzvxLxAWKVxkc+8CfZELlY0skn/NILomlALszAmwqV
Y7LLgJlzG3Qn3T3pisApK99HzIwJZWTIh27lq/PnxhfCn8h6bnMnfoTN7fz3U0YB
FXcMUz27ZaVqrSnyvAqoSkP95A==
-----END CERTIFICATE-----
Generated at Mon May 5 08:04:47 2025 by rpki-client