Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
File:                     A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft (raw, json)
Hash identifier:          var5yiHpjVbtyExQm+p2qxX78tboahf9clei+191ki0=
Subject key identifier:   70:D4:D8:1F:0B:E5:C2:82:C6:A6:D7:A0:31:30:50:DA:6A:AA:5A:91
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       5001AF3FBBE359F8B6F2D762581041EF01592BE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
Manifest number:          017A
Signing time:             Wed 30 Apr 2025 09:24:41 +0000
Manifest this update:     Wed 30 Apr 2025 09:19:41 +0000
Manifest next update:     Thu 01 May 2025 11:41:41 +0000
Files and hashes:         1: 3138362e3235302e3131342e302f32342d3234203d3e20323632383132.roa (hash: mjg8aeKxapd2kRibpc9+aiJoiXt0wCpUtRHIYMk4Mrk=)
                          2: 3138362e3235302e3131332e302f32342d3234203d3e20323632383132.roa (hash: 7WoSZxG4MPA63KruO97vmGe+bWjoLppvme2fIwQB0ME=)
                          3: A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl (hash: hPf6Cb/tfRGujY1HWgiCDH38em1bnpZ9IEURelQ5JoY=)
                          4: 323830343a3236383a3a2f33322d3332203d3e20323632383132.roa (hash: oipIHNlHupV8jXS71A/Met/N0Xn/PDvfSqZiqSX+fFo=)
                          5: 3230302e36362e3131342e302f32332d3233203d3e20323632383132.roa (hash: JDfKlby86M85hNp9d7mqHIemI93LvnvDVGWE88Vk+9w=)
                          6: 3230302e36362e3131362e302f32332d3233203d3e20323632383132.roa (hash: wX/h5chwdtoL9RNdoYLMZ7jTQAQiBRe+PxC3eKx2klI=)
                          7: 3230302e36362e3131322e302f32302d3230203d3e20323632383132.roa (hash: Id9frWELUDdekVeTAI5GSK59SSbSZeYjbYJMI9wHf7g=)
                          8: 3138362e3235302e3131342e302f32332d3233203d3e20323632383132.roa (hash: QoBS7SEmKN/ZG6APWipmp6e3Jx+QMJ7Mues+Rb/bOZc=)
                          9: 3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa (hash: FON6k5t60/c78bSEu3aLXlJ/zPyRt6Frbp6oMAB6pcU=)
                          10: 3138362e3235302e3131352e302f32342d3234203d3e20323632383132.roa (hash: penOrSGBj8kH2CjKDMZeSgBpEcQT66H60JAVF+Cor0A=)
                          11: 3230302e36362e3132362e302f32332d3233203d3e20323632383132.roa (hash: HEk9YpPuZSt1b70DVsfMQI8xJrytC+Gv91YDuqjoawI=)
                          12: 3230302e36362e3132342e302f32322d3232203d3e20323632383132.roa (hash: K5YFoEAKcC4qjHdSDriLH2qwhjc5f21koqyrl68NDUQ=)
                          13: 3230302e36362e3131362e302f32322d3232203d3e20323632383132.roa (hash: 8yNprzwk8p6PpYJquF/pEsKNERzf+HMk017h0LZ4jFE=)
                          14: 3138362e3235302e3131322e302f32322d3232203d3e20323632383132.roa (hash: uWair4h6jgkUdEbupbhl/5xzvgfg5OGwuVZph4iXQzk=)
                          15: 323830343a3236383a3a2f33332d3333203d3e20323632383132.roa (hash: BEKNs2zp6R7pBIJ3h/gMbgQ+kMnGSHspbHDUaX0KITo=)
                          16: 3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa (hash: Y16gXltex7bAp6LECpxZSKkI4g0BcLt/sSf6bDyhb9U=)
                          17: 3230302e36362e3131382e302f32332d3233203d3e20323632383132.roa (hash: dI/x5wvd4oRAFQusM28yqHnKsIAbU5FauLDXKwOsigU=)
                          18: 3230302e36362e3132342e302f32332d3233203d3e20323632383132.roa (hash: 0j1Dj6EB6g/fR702BdWZANpgQxVk/tGs4VJ91h7T7xU=)
                          19: 3138362e3235302e3131322e302f32332d3233203d3e20323632383132.roa (hash: 5x1ko2FhCUtSf/NqjQ8BgxmxObd/Rh+1t1H7MFE57EA=)
                          20: 3138362e3235302e3131322e302f32342d3234203d3e20323632383132.roa (hash: KUu7/cnxpSF/WrP4WzUDLWimvRh1BtyKvGmKgQaRJM8=)
                          21: 323830343a3236383a353030303a3a2f33362d3336203d3e20323632383132.roa (hash: jYoo8YMyVK12cIuUG5J+0QYgcFK6D7jtHn/0fn1xRoI=)
                          22: 3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa (hash: nHlYb+FA2bRjsSrRhg6HfvtBRpFjkxtE9aQ3tBgzu+I=)
                          23: 3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa (hash: EoB+O2ZHHNMceEz44iwlhbMtCEd9AzUcM6H2F9Zn3So=)
                          24: 3230302e36362e3131322e302f32322d3232203d3e20323632383132.roa (hash: deG2O5DFHHfohJfh8YrHL2o4ryzww50A7u2W9tJon34=)
                          25: 3230302e36362e3132342e302f32342d3234203d3e20323632383132.roa (hash: EBxxyDNZTAx4S6hXLnYloT3sWAd/Mz+0p+xsT8PtW9c=)
                          26: 3230302e36362e3132372e302f32342d3234203d3e20323632383132.roa (hash: XT4LEFtPKz3fkN5sWSY3rkTK8/dZ3U868pyJu46P9yI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 11:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:af:3f:bb:e3:59:f8:b6:f2:d7:62:58:10:41:ef:01:59:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Apr 30 09:19:41 2025 GMT
            Not After : May  1 11:41:41 2025 GMT
        Subject: CN=70D4D81F0BE5C282C6A6D7A0313050DA6AAA5A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:4e:ff:10:2b:5a:a6:0a:8a:0d:e2:37:fe:
                    6d:15:5b:39:68:b7:21:96:70:a1:cd:8e:1a:76:d3:
                    b3:83:63:34:88:2d:67:35:a0:fb:ee:6c:d2:b5:bd:
                    e9:3d:81:ca:77:58:46:d4:7d:79:13:34:fb:c9:ff:
                    ce:10:d7:13:09:ef:07:18:35:b4:11:2b:0a:59:f9:
                    97:43:8c:7d:c2:22:da:dd:b2:d6:31:a1:b0:32:bb:
                    a9:47:01:4a:ce:b5:2b:fc:c1:1b:3d:d7:00:9d:08:
                    1f:f0:33:53:25:70:97:b3:96:4a:3c:04:99:24:1d:
                    df:3f:95:3d:65:5a:8c:c8:16:06:28:b8:bb:65:42:
                    86:01:3b:f6:84:2b:53:c4:e9:a9:aa:7b:7d:02:8d:
                    30:28:7d:cd:61:db:ba:9b:ec:5f:f7:d9:b4:67:81:
                    12:ff:f0:f1:93:08:4a:30:88:af:25:e9:b9:4c:9c:
                    b4:73:cf:24:f9:fa:dc:96:0b:c6:59:02:3f:e4:80:
                    28:35:a6:ae:67:d1:c2:33:28:f4:60:d6:1d:05:2d:
                    aa:4b:32:b2:53:ca:7a:55:84:2d:f9:f0:88:2a:f6:
                    b8:6c:f1:88:39:a4:56:52:5a:62:27:d5:46:6c:cf:
                    0d:10:88:35:79:8d:8a:bf:bb:ee:aa:63:1a:eb:5c:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:D8:1F:0B:E5:C2:82:C6:A6:D7:A0:31:30:50:DA:6A:AA:5A:91
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:40:6b:df:bd:38:44:3c:ce:e5:ca:ae:98:37:4a:d4:62:
         37:24:d5:34:23:f8:f6:1b:c3:c9:84:19:af:a7:83:1d:01:ab:
         77:a4:7c:bc:94:db:b9:4c:7f:b2:fa:7c:33:4c:cb:db:1f:84:
         4a:c8:ec:aa:fc:1a:7a:ae:f8:6a:df:b0:9f:67:24:b2:8d:b2:
         7e:fc:03:83:b6:07:7e:0f:4e:99:13:f8:22:b5:49:f0:0b:27:
         65:2e:59:94:8a:b8:f8:f2:8d:18:a4:70:f6:15:7d:5c:a9:96:
         3b:73:6e:07:a1:f8:00:3e:84:fd:5a:bc:65:f7:5a:59:d0:3b:
         74:ab:e6:1f:15:48:9b:e1:5d:c5:81:94:d4:cc:44:67:02:d9:
         31:26:97:c5:df:02:da:d3:b1:0b:90:76:b1:38:1e:35:ea:87:
         bf:a7:04:c3:3f:26:3d:e9:f7:8e:71:2a:14:ec:20:20:ab:e4:
         0e:e6:09:ab:97:64:c2:70:17:03:32:9a:e9:27:ea:c9:fd:68:
         7c:59:27:0b:99:ca:91:c0:90:6a:30:76:a6:d3:b6:b4:c2:cb:
         43:d8:56:53:c7:9b:d6:15:7c:b5:11:3b:66:53:38:80:e7:e4:
         ae:67:58:0d:75:dd:5e:13:f1:44:08:e2:f7:96:ee:73:db:7e:
         45:36:24:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUAGvP7vjWfi28tdiWBBB7wFZK+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDNDBEODUxRUUwNkY3NDU0REU5NTg3QkQ4NzEwQ0Ez
RUFCODUzNjAeFw0yNTA0MzAwOTE5NDFaFw0yNTA1MDExMTQxNDFaMDMxMTAvBgNV
BAMTKDcwRDREODFGMEJFNUMyODJDNkE2RDdBMDMxMzA1MERBNkFBQTVBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIk7/ECtapgqKDeI3/m0VWzlo
tyGWcKHNjhp207ODYzSILWc1oPvubNK1vek9gcp3WEbUfXkTNPvJ/84Q1xMJ7wcY
NbQRKwpZ+ZdDjH3CItrdstYxobAyu6lHAUrOtSv8wRs91wCdCB/wM1MlcJezlko8
BJkkHd8/lT1lWozIFgYouLtlQoYBO/aEK1PE6amqe30CjTAofc1h27qb7F/32bRn
gRL/8PGTCEowiK8l6blMnLRzzyT5+tyWC8ZZAj/kgCg1pq5n0cIzKPRg1h0FLapL
MrJTynpVhC358Igq9rhs8Yg5pFZSWmIn1UZszw0QiDV5jYq/u+6qYxrrXNopAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcNTYHwvlwoLGptegMTBQ2mqqWpEwHwYDVR0j
BBgwFoAUqMQNhR7gb3RU3pWHvYcQyj6rhTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JwZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3
ZncvMC9BOEM0MEQ4NTFFRTA2Rjc0NTRERTk1ODdCRDg3MTBDQTNFQUI4NTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QzQwRDg1MUVFMDZGNzQ1
NERFOTU4N0JEODcxMENBM0VBQjg1MzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3JwZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3ZncvMC9B
OEM0MEQ4NTFFRTA2Rjc0NTRERTk1ODdCRDg3MTBDQTNFQUI4NTM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm+xAa9+9OEQ8zuXKrpg3StRiNyTVNCP49hvDyYQZr6eDHQGrd6R8vJTbuUx/
svp8M0zL2x+ESsjsqvwaeq74at+wn2ckso2yfvwDg7YHfg9OmRP4IrVJ8AsnZS5Z
lIq4+PKNGKRw9hV9XKmWO3NuB6H4AD6E/Vq8ZfdaWdA7dKvmHxVIm+FdxYGU1MxE
ZwLZMSaXxd8C2tOxC5B2sTgeNeqHv6cEwz8mPen3jnEqFOwgIKvkDuYJq5dkwnAX
AzKa6Sfqyf1ofFknC5nKkcCQajB2ptO2tMLLQ9hWU8eb1hV8tRE7ZlM4gOfkrmdY
DXXdXhPxRAji95buc9t+RTYk3Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 16:00:55 2025 by rpki-client