Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          dzzpNV9YZEaPXEuHAQoCnbyuZvoouvDroggFADhug7o=
Subject key identifier:   70:E9:11:8C:1A:0A:C5:36:2F:3F:E3:A0:69:04:60:76:21:0F:ED:21
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       16E15C8BD9B1744DE5B546FD0E4817B45CCB5C15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          01F0
Signing time:             Sun 04 May 2025 21:38:01 +0000
Manifest this update:     Sun 04 May 2025 21:33:01 +0000
Manifest next update:     Mon 05 May 2025 23:45:01 +0000
Files and hashes:         1: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: bmC09WGeYdDECssoZBHMb30dnaKneoeEZK+KTVFyCK0=)
                          2: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: hRxGZ4Jal3c/Na8Cz3p5NhOihShNL3T7sJasYUPCz5w=)
                          3: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: GzWBleu/jrr5IL2xursHYYmEfJKsKCq7m6YNM3RbKgo=)
                          4: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: DOeYQ0dwoH/3lYRpTBMHS7pBOmoWUaYPPxSXnT1ujb8=)
                          5: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: loRifbaEiE0t81ck7mBypgpiHRitrR/IadRIzPn7m+Q=)
                          6: 323830343a6131383a383030303a3a2f33332d3334203d3e20323633303232.roa (hash: g2G67ufeop6TzLj8bz5NkpBU2ApyMKCoqz/NfsR154w=)
                          7: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: hHzj/1U34Hb14mhLSmOaJOe36Adh6w5jMwEAPr+/2MQ=)
                          8: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 23O6JYPEmUAOy+JqpCN+UO5DD1jtlLi18ehB1exk55g=)
                          9: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (hash: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 23:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e1:5c:8b:d9:b1:74:4d:e5:b5:46:fd:0e:48:17:b4:5c:cb:5c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  4 21:33:01 2025 GMT
            Not After : May  5 23:45:01 2025 GMT
        Subject: CN=70E9118C1A0AC5362F3FE3A069046076210FED21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:6f:5c:dc:02:f7:23:88:10:61:55:ca:0a:
                    20:2a:3c:ff:1f:65:86:8c:77:1c:c0:54:c5:dd:9e:
                    99:19:16:8f:75:b7:62:b7:24:b2:85:6b:14:16:a1:
                    49:b4:f2:c8:d1:a1:27:28:df:fe:af:2c:7f:98:a8:
                    2d:c4:4d:8e:72:89:bf:dc:da:72:e1:31:94:3f:b3:
                    80:44:56:e9:63:2f:e5:04:72:b3:15:5e:50:96:94:
                    e0:75:f6:b5:5b:a2:08:b7:a0:1e:8e:ae:44:72:ea:
                    f6:72:59:62:ea:f8:7e:a1:31:da:8f:a0:52:10:86:
                    d7:34:62:c6:09:88:89:3a:23:7d:1d:1f:69:32:46:
                    75:c1:c7:5b:9b:e2:cb:40:64:3d:de:2e:cf:ca:2c:
                    17:d4:6c:44:fc:8f:a9:0a:ac:63:12:0d:11:a8:b5:
                    13:41:25:a3:36:7e:2e:bd:98:d6:9e:fd:73:0d:c0:
                    52:f5:05:7b:d5:69:dd:41:67:7e:87:72:31:b1:f3:
                    75:c8:0c:d9:9c:df:62:a3:7d:11:a0:af:e0:48:04:
                    25:c2:ab:4e:d6:86:73:63:ef:0e:a8:7f:38:46:e0:
                    85:47:e2:9f:4a:55:49:4b:6d:75:ae:d6:21:d8:5f:
                    0e:c4:ce:65:58:70:f8:93:f9:58:f7:ab:54:a2:f4:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:11:8C:1A:0A:C5:36:2F:3F:E3:A0:69:04:60:76:21:0F:ED:21
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:9e:ee:95:97:a0:2e:d9:0c:5c:fe:63:98:91:e4:1a:16:
         1e:2e:c5:e7:d5:53:c1:9d:77:43:af:cf:fc:2b:1a:92:8d:b9:
         64:ee:de:17:0a:6d:53:f9:9b:66:97:70:e5:dc:d0:0f:a7:75:
         28:81:9c:c9:e9:ee:3a:6b:3e:63:ac:71:f2:04:7f:04:01:40:
         9f:bc:c4:84:7f:04:2e:f6:41:e1:f7:70:72:d7:1d:fb:06:50:
         73:74:5b:62:a4:35:5f:8b:c5:b7:0d:37:88:0e:72:d7:83:d7:
         05:ed:30:6a:9f:6a:04:2d:c5:eb:7e:1c:e7:e6:e2:16:1c:75:
         8e:ee:32:04:3c:ce:3d:d2:cc:db:4f:61:34:33:57:64:11:07:
         e5:3b:1b:4f:30:5e:5c:a9:fd:ae:0d:bb:f1:5a:52:56:c9:b3:
         f7:2b:a3:c8:a2:cc:bb:57:d1:cf:ae:4a:77:84:9a:53:3b:1e:
         2f:c7:b0:4d:93:35:06:14:24:bb:e2:8f:c1:3f:07:96:4a:c1:
         e3:30:b7:1d:a7:0d:a5:88:92:36:51:0e:b6:e6:ce:1f:2f:08:
         85:2e:54:16:01:11:53:2e:db:4a:a1:6b:e1:f4:9e:95:f3:23:
         14:9d:df:48:21:59:37:d4:bd:3f:0e:48:71:be:d8:87:58:7b:
         5f:cf:2f:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFuFci9mxdE3ltUb9DkgXtFzLXBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNTA1MDQyMTMzMDFaFw0yNTA1MDUyMzQ1MDFaMDMxMTAvBgNV
BAMTKDcwRTkxMThDMUEwQUM1MzYyRjNGRTNBMDY5MDQ2MDc2MjEwRkVEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pW9c3AL3I4gQYVXKCiAqPP8f
ZYaMdxzAVMXdnpkZFo91t2K3JLKFaxQWoUm08sjRoSco3/6vLH+YqC3ETY5yib/c
2nLhMZQ/s4BEVuljL+UEcrMVXlCWlOB19rVbogi3oB6OrkRy6vZyWWLq+H6hMdqP
oFIQhtc0YsYJiIk6I30dH2kyRnXBx1ub4stAZD3eLs/KLBfUbET8j6kKrGMSDRGo
tRNBJaM2fi69mNae/XMNwFL1BXvVad1BZ36HcjGx83XIDNmc32KjfRGgr+BIBCXC
q07WhnNj7w6ofzhG4IVH4p9KVUlLbXWu1iHYXw7EzmVYcPiT+Vj3q1Si9Dd9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcOkRjBoKxTYvP+OgaQRgdiEP7SEwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJxQkMvMC9C
RDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABb+e7pWXoC7ZDFz+Y5iR5BoWHi7F59VTwZ13Q6/P/Csako25ZO7eFwptU/mb
Zpdw5dzQD6d1KIGcyenuOms+Y6xx8gR/BAFAn7zEhH8ELvZB4fdwctcd+wZQc3Rb
YqQ1X4vFtw03iA5y14PXBe0wap9qBC3F634c5+biFhx1ju4yBDzOPdLM209hNDNX
ZBEH5TsbTzBeXKn9rg278VpSVsmz9yujyKLMu1fRz65Kd4SaUzseL8ewTZM1BhQk
u+KPwT8HlkrB4zC3HacNpYiSNlEOtubOHy8IhS5UFgERUy7bSqFr4fSelfMjFJ3f
SCFZN9S9Pw5Icb7Yh1h7X88vOg==
-----END CERTIFICATE-----
Generated at Mon May 5 08:42:06 2025 by rpki-client