Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
File:                     2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json)
Hash identifier:          RXMqvUUOJnJcUaH4YRKTteTrjPJVcTFyfMHAEA5fuY8=
Subject key identifier:   E0:45:AF:E2:48:3D:EE:2D:D6:24:21:43:26:4E:2C:AF:A4:75:AC:0C
Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A
Certificate issuer:       /CN=2431B5DDF8166029A0033562C55895BEC665B28A
Certificate serial:       211C750479AB4682842E2DB1959413A5758F2EDD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
Manifest number:          010F
Signing time:             Mon 23 Jun 2025 00:24:40 +0000
Manifest this update:     Mon 23 Jun 2025 00:19:40 +0000
Manifest next update:     Tue 24 Jun 2025 04:04:40 +0000
Files and hashes:         1: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: mFUm1wFbrB7vKcngHZCRhhCN5g1DTPFQpJqftmtVKgM=)
                          2: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: 3isAY/ZJxs877M+iSwVrOpBEf2HxetxnSmkzcj4Qt+8=)
                          3: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: 6z3Jvn11u7WpggXzPyX3eztV00Cy6MKkHbiddjUnBHg=)
                          4: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: 2UBG7d+bHwFW2FQvesDKoYV9SA5Z+hJVwX3I2WUsCkE=)
                          5: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 3StsKczt/UfxOpNfPOOnS9kOYhYaRu0pzgmOVeKkvAk=)
                          6: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: 799mqDcBHmOpNJcFzHH4u8XHP1EAJbMtaVWcjtNUFMk=)
                          7: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: 2kz4LIFLN85yZUgis3ptm+jWa2pLEzTOV44AlKX2mWM=)
                          8: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: nhvgT2W2XZeOE4hWrQx6ZuaEM7BevykoJaZ3mrzlafM=)
                          9: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: jp7m+hi+KoBsfG3clAu9CPNSCYaNR5ai9lgzM1Y89VY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1c:75:04:79:ab:46:82:84:2e:2d:b1:95:94:13:a5:75:8f:2e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A
        Validity
            Not Before: Jun 23 00:19:40 2025 GMT
            Not After : Jun 24 04:04:40 2025 GMT
        Subject: CN=E045AFE2483DEE2DD6242143264E2CAFA475AC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:ab:84:3b:c0:5b:f3:d7:81:d9:2f:8f:6a:
                    a2:7d:9f:9d:6e:72:2c:b8:50:78:84:9b:ae:1d:d7:
                    9a:e5:b3:3f:f7:69:d6:95:52:4d:c7:84:9c:61:42:
                    5a:f6:5b:c3:8f:52:48:cc:6b:0f:53:41:d4:ed:11:
                    68:f5:cb:e0:80:fb:91:71:3c:d9:17:be:ad:c2:ce:
                    b9:44:24:3f:44:84:1f:1f:0c:69:5f:fa:9d:22:f1:
                    74:61:65:63:df:b7:e6:7c:0d:44:83:31:6e:45:b1:
                    74:c2:9b:c1:47:bd:46:3d:38:41:02:44:40:d1:d4:
                    22:42:fe:d1:a1:04:51:fb:de:f7:4b:cd:0d:10:9f:
                    ad:8c:f4:c4:a8:dc:07:41:26:c2:4d:78:17:f0:55:
                    9a:48:5a:a6:e2:8b:07:b1:db:ca:7b:cd:27:c0:43:
                    33:e2:81:07:f2:73:b9:a6:8a:c5:a8:56:09:4d:c4:
                    ea:4d:0b:90:a2:55:92:d3:38:09:7b:9e:1a:3f:e3:
                    e4:ed:8e:c9:ff:cc:09:95:2f:18:a1:e6:83:42:13:
                    2c:fa:11:52:c4:55:63:04:ae:5f:e3:a8:df:3f:a6:
                    c9:f9:1f:a0:6f:87:6f:72:30:94:b2:61:d3:0f:5f:
                    3f:b3:37:21:bf:35:db:77:4f:0f:af:a5:18:f4:7a:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:45:AF:E2:48:3D:EE:2D:D6:24:21:43:26:4E:2C:AF:A4:75:AC:0C
            X509v3 Authority Key Identifier:
                keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:40:d4:f5:c1:04:a9:a6:bb:c2:a5:93:b3:67:df:36:6b:03:
         21:28:73:fb:81:f7:0a:3e:1e:5b:07:e3:ae:6b:c8:19:9d:a5:
         c9:0f:c7:e5:5b:b5:2a:48:e4:46:81:ad:27:de:a6:58:2f:33:
         d8:78:0b:9d:ab:f7:c5:62:7f:f2:ac:8e:ec:7c:d8:2a:95:4b:
         80:84:79:63:59:36:5d:9d:e3:10:10:e5:05:81:ca:7b:e3:c5:
         11:39:de:4c:a1:f9:2b:0c:5a:7d:37:2e:62:e5:52:0b:b5:50:
         87:6d:8f:29:5f:96:bf:21:d3:a8:dd:23:a8:0c:28:dd:71:52:
         ee:a8:90:d8:c4:73:13:cc:a9:26:9a:c1:63:90:dd:cf:57:6f:
         6f:08:20:75:58:74:eb:1d:51:e2:9b:85:d0:00:fa:33:7c:1f:
         e9:1d:02:dd:b7:a6:c8:bf:15:e5:32:8b:0c:47:7d:6b:9d:7b:
         7a:9d:bd:33:a9:11:0d:61:b5:f0:89:a5:a4:9c:91:c3:85:7b:
         c8:11:f9:a7:33:aa:3e:17:35:dd:09:6c:43:54:9e:7f:b2:fb:
         e1:cb:5a:59:a2:3e:0b:eb:bd:d2:75:28:f3:d9:a2:21:4f:a7:
         01:26:96:17:e4:25:c2:57:a9:e3:59:6f:e7:84:92:74:0c:20:
         ae:6e:00:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIRx1BHmrRoKELi2xlZQTpXWPLt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQzMUI1RERGODE2NjAyOUEwMDMzNTYyQzU1ODk1QkVD
NjY1QjI4QTAeFw0yNTA2MjMwMDE5NDBaFw0yNTA2MjQwNDA0NDBaMDMxMTAvBgNV
BAMTKEUwNDVBRkUyNDgzREVFMkRENjI0MjE0MzI2NEUyQ0FGQTQ3NUFDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3KuEO8Bb89eB2S+PaqJ9n51u
ciy4UHiEm64d15rlsz/3adaVUk3HhJxhQlr2W8OPUkjMaw9TQdTtEWj1y+CA+5Fx
PNkXvq3CzrlEJD9EhB8fDGlf+p0i8XRhZWPft+Z8DUSDMW5FsXTCm8FHvUY9OEEC
REDR1CJC/tGhBFH73vdLzQ0Qn62M9MSo3AdBJsJNeBfwVZpIWqbiiwex28p7zSfA
QzPigQfyc7mmisWoVglNxOpNC5CiVZLTOAl7nho/4+Ttjsn/zAmVLxih5oNCEyz6
EVLEVWMErl/jqN8/psn5H6Bvh29yMJSyYdMPXz+zNyG/Ndt3Tw+vpRj0eujJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4EWv4kg97i3WJCFDJk4sr6R1rAwwHwYDVR0j
BBgwFoAUJDG13fgWYCmgAzVixViVvsZlsoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtw
UlUvMC8yNDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCNURERjgxNjYwMjlB
MDAzMzU2MkM1NTg5NUJFQzY2NUIyOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtwUlUvMC8y
NDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVUDU9cEEqaa7wqWTs2ffNmsDIShz+4H3Cj4eWwfjrmvIGZ2lyQ/H5Vu1Kkjk
RoGtJ96mWC8z2HgLnav3xWJ/8qyO7HzYKpVLgIR5Y1k2XZ3jEBDlBYHKe+PFETne
TKH5KwxafTcuYuVSC7VQh22PKV+WvyHTqN0jqAwo3XFS7qiQ2MRzE8ypJprBY5Dd
z1dvbwggdVh06x1R4puF0AD6M3wf6R0C3bemyL8V5TKLDEd9a517ep29M6kRDWG1
8ImlpJyRw4V7yBH5pzOqPhc13QlsQ1Sef7L74ctaWaI+C+u90nUo89miIU+nASaW
F+Qlwlep41lv54SSdAwgrm4AMA==
-----END CERTIFICATE-----
Generated at Mon Jun 23 04:34:35 2025 by rpki-client