Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          9SpHf6y/mWKessJGPnfYAC9L8ySoVl7eyUY3wv91lnI=
Subject key identifier:   01:D4:F1:C0:37:22:A9:D0:39:22:0D:61:05:99:3F:7C:BC:19:01:B0
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       0887BD9A2E3E40FE96419D0003860E8BFCE9FB43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          020A
Signing time:             Fri 02 May 2025 16:21:49 +0000
Manifest this update:     Fri 02 May 2025 16:16:49 +0000
Manifest next update:     Sat 03 May 2025 17:48:49 +0000
Files and hashes:         1: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          2: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          3: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          4: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          5: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          6: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: noY53ukYBIOSL5qrleAnYVjKVginB2IaxRJMw22UIww=)
                          7: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          8: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 17:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:87:bd:9a:2e:3e:40:fe:96:41:9d:00:03:86:0e:8b:fc:e9:fb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: May  2 16:16:49 2025 GMT
            Not After : May  3 17:48:49 2025 GMT
        Subject: CN=01D4F1C03722A9D039220D6105993F7CBC1901B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:97:84:73:42:24:bd:e6:f2:c5:bb:47:10:
                    1a:50:d9:61:0d:b7:50:7b:79:20:9f:aa:77:97:d9:
                    88:46:0f:f3:14:a0:30:5f:ea:51:39:94:20:8e:41:
                    0a:62:6d:8b:a4:c1:f5:16:06:d5:51:ab:ba:18:11:
                    7b:c0:04:74:42:8f:34:1f:09:bc:e7:7b:4d:ef:33:
                    52:a6:59:5f:d8:55:2c:98:5a:4d:9b:f0:05:31:3a:
                    95:98:f0:ca:2a:44:32:96:29:38:ea:c1:7b:80:6c:
                    44:d4:a6:c0:8d:0f:94:63:bd:a5:df:39:b4:f1:f8:
                    81:ac:0f:dd:82:1d:59:d5:c3:8c:22:48:03:b6:a8:
                    9a:a2:ee:b4:04:fb:f2:53:c2:bd:f7:f9:53:6b:a4:
                    54:58:3c:51:62:83:54:1c:3c:94:63:76:2d:54:d6:
                    31:43:55:ac:e3:cb:27:50:01:41:1a:04:67:eb:4d:
                    d6:ae:69:b1:91:01:8e:62:49:98:05:d4:24:06:e1:
                    2a:7a:36:1d:9b:b8:eb:21:7c:26:42:c8:41:03:9f:
                    cd:e0:bb:fb:35:b3:f5:05:ae:93:78:85:42:21:7f:
                    7f:89:f5:58:27:7a:d0:12:bd:59:50:25:d5:08:20:
                    70:ff:10:5b:b4:b5:4e:91:7b:44:54:a9:ae:4a:d2:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D4:F1:C0:37:22:A9:D0:39:22:0D:61:05:99:3F:7C:BC:19:01:B0
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:4f:42:b7:51:ea:c6:6a:8d:bc:03:fd:c5:ca:16:b9:ba:
         98:1f:dd:40:ae:54:07:7a:41:28:c7:aa:dc:02:3f:33:5c:22:
         d6:d3:cf:4b:d2:dc:10:a7:ce:b0:28:9f:ba:e8:0d:85:88:60:
         ea:9f:b3:4b:87:7f:13:2d:9e:38:c7:e6:41:de:64:8a:7c:34:
         ab:c1:13:f6:d2:9d:e7:47:fa:c8:54:2e:db:6f:dd:e3:f4:1f:
         c5:05:91:60:43:75:6a:6f:6e:74:e6:5e:f6:88:7d:66:81:ca:
         ef:09:02:f6:41:d6:04:fd:3f:a8:7d:bb:9b:25:d1:44:c3:56:
         9d:fd:f4:fd:2c:7a:84:c0:80:64:0f:b6:33:d3:fd:cc:ee:f7:
         6b:73:d7:f4:87:22:03:5a:6f:5f:30:db:3c:ac:3f:22:79:7f:
         3d:91:5e:84:46:df:d2:a1:d1:23:0b:2c:20:be:d2:f8:3a:05:
         40:d2:a4:c1:e2:48:d8:12:17:bd:9d:fd:66:9e:13:b3:05:f5:
         14:10:6a:62:0c:d6:ef:1f:bc:cb:04:f0:b2:78:41:25:8b:c8:
         08:3a:8e:43:00:4d:82:f3:29:15:62:26:71:b5:e4:b9:a3:bd:
         94:dc:82:bd:b4:4c:ae:87:f2:e6:1d:ea:12:e9:18:6e:61:69:
         dc:83:90:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCIe9mi4+QP6WQZ0AA4YOi/zp+0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgzQkQ4MUJEQzBBMDFEMUFFRjFBRkQ0MEJDNkE0RTcy
Qzk0MTFGNzAeFw0yNTA1MDIxNjE2NDlaFw0yNTA1MDMxNzQ4NDlaMDMxMTAvBgNV
BAMTKDAxRDRGMUMwMzcyMkE5RDAzOTIyMEQ2MTA1OTkzRjdDQkMxOTAxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB05eEc0IkvebyxbtHEBpQ2WEN
t1B7eSCfqneX2YhGD/MUoDBf6lE5lCCOQQpibYukwfUWBtVRq7oYEXvABHRCjzQf
Cbzne03vM1KmWV/YVSyYWk2b8AUxOpWY8MoqRDKWKTjqwXuAbETUpsCND5RjvaXf
ObTx+IGsD92CHVnVw4wiSAO2qJqi7rQE+/JTwr33+VNrpFRYPFFig1QcPJRjdi1U
1jFDVazjyydQAUEaBGfrTdauabGRAY5iSZgF1CQG4Sp6Nh2buOshfCZCyEEDn83g
u/s1s/UFrpN4hUIhf3+J9VgnetASvVlQJdUIIHD/EFu0tU6Re0RUqa5K0ucLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAdTxwDciqdA5Ig1hBZk/fLwZAbAwHwYDVR0j
BBgwFoAU2DvYG9wKAdGu8a/UC8ak5yyUEfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO
VlovMS9EODNCRDgxQkRDMEEwMUQxQUVGMUFGRDQwQkM2QTRFNzJDOTQxMUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4M0JEODFCREMwQTAxRDFB
RUYxQUZENDBCQzZBNEU3MkM5NDExRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVROVlovMS9E
ODNCRDgxQkRDMEEwMUQxQUVGMUFGRDQwQkM2QTRFNzJDOTQxMUY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+BPQrdR6sZqjbwD/cXKFrm6mB/dQK5UB3pBKMeq3AI/M1wi1tPPS9LcEKfO
sCifuugNhYhg6p+zS4d/Ey2eOMfmQd5kinw0q8ET9tKd50f6yFQu22/d4/QfxQWR
YEN1am9udOZe9oh9ZoHK7wkC9kHWBP0/qH27myXRRMNWnf30/Sx6hMCAZA+2M9P9
zO73a3PX9IciA1pvXzDbPKw/Inl/PZFehEbf0qHRIwssIL7S+DoFQNKkweJI2BIX
vZ39Zp4TswX1FBBqYgzW7x+8ywTwsnhBJYvICDqOQwBNgvMpFWImcbXkuaO9lNyC
vbRMrofy5h3qEukYbmFp3IOQlw==
-----END CERTIFICATE-----
Generated at Fri May 2 22:09:48 2025 by rpki-client