Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          b7JuSN6PaKf+9sgFSDp09+7OCK0fF0vH6kqY9nL7HCc=
Subject key identifier:   BB:5F:85:CB:27:32:34:A9:B7:AC:A5:EB:51:38:4F:5E:70:4E:2F:3A
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       0AFA6D33BA31D9ABB4E7DC4862ECB52DF93AAADE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          28
Signing time:             Mon 28 Apr 2025 14:53:47 +0000
Manifest this update:     Mon 28 Apr 2025 14:48:47 +0000
Manifest next update:     Tue 29 Apr 2025 15:57:47 +0000
Files and hashes:         1: 3138392e38342e34352e302f32342d3234203d3e20323633343832.roa (hash: LdD1tbfkMusLTq81tRbCXz6gWsdL6uUDAZEGYVsWEVE=)
                          2: 323830343a313238383a663939393a3a2f34382d3438203d3e20323633343832.roa (hash: MseLEAHHPka7+xT1yUjOlQVjDF3DUmPkisA8FaEHhN0=)
                          3: 3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa (hash: +luCSAlVJGhVRJtBed5VeRZK2e0ip0cv6IuRajfKwmQ=)
                          4: 323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa (hash: b3Mxa09biE7viYKOLJ+XxJBPY/7XrSSeXbF/D18MFX4=)
                          5: 3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa (hash: 2980Xmok0r0pN8hwzqkXHEMD9+tYXIOlakQ8Smz6n7w=)
                          6: 3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (hash: Lq33j0nwbCzizkfK4ucoMHpApBuyKxtyssZQZqdA8SQ=)
                          7: 3137302e38332e3231332e302f32342d3234203d3e20323633343832.roa (hash: cs42jbFKSklrrj2z03hqjiLdZs2USw12CGQK3Z9IXyM=)
                          8: 3138392e38342e34362e302f32342d3234203d3e20323633343832.roa (hash: wGqj+3xCHvy8WhrNXFK+/XHS3wwi7lO3SQxzNgG1tBc=)
                          9: 3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa (hash: SSkj68DGnAE2TCIVeNkVSjm2b44cCTMCHHhSeQT4tRg=)
                          10: 3138392e38342e34362e302f32332d3233203d3e20323633343832.roa (hash: OPFQfHaJR5iJGCv7gvvYujGnJZJzuejiuRK+IW+vLRc=)
                          11: 3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa (hash: q1viAa39vaxFSE1yqtK6yk224kBDBQ411MhycjLIs5o=)
                          12: 3137302e38332e3231322e302f32342d3234203d3e20323633343832.roa (hash: iG9Rg3UY2i/r+RVJjn0ANVw8hutVJGMCaNw+bOsL5q4=)
                          13: 323830343a313238383a6630303a3a2f34382d3438203d3e20323633343832.roa (hash: NyLzw0cZ45JXuLEqwM1+JdGWMulIUQKbyFDa/epOTZo=)
                          14: 3137302e38332e3231342e302f32342d3234203d3e20323633343832.roa (hash: FU2pH0rE6XhWlgz8ddlIMwPu2p0o1BuPuTQRZvwYFMQ=)
                          15: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: GVXt1ZJLx66pomDvLbWr8wQT93VljlDNt1VX3s0krnY=)
                          16: 3137302e38332e3231352e302f32342d3234203d3e20323633343832.roa (hash: 47fng3SFFp6wieCIbdzggNPehghgS7Iiba59mro4aM8=)
                          17: 3138392e38342e34342e302f32322d3232203d3e20323633343832.roa (hash: hfAF8OuOIjtoMWCcwLMeTctDGGfqWtSFJ1UBwgoEYw0=)
                          18: 323830343a313238383a3a2f33322d3332203d3e20323633343832.roa (hash: wEIrfXJkDUZrXej6iAG83659FwtHU8JdUB6JGl65GkQ=)
                          19: 3137302e38332e3231322e302f32332d3233203d3e20323633343832.roa (hash: Li9yad9pRIt8j8e7uhRxuOJ6b+GkhPrhw4x8Fx81KIQ=)
                          20: 3139312e3234322e3231372e302f32342d3234203d3e20323633343832.roa (hash: IRIPnJ75guY+TWPkIi9uLutj2BEVaRmSsjfuqxV31oQ=)
                          21: 3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa (hash: 5tNSiR8k3s9093GFxG18z8liYT/hqige88NCC2sf5j8=)
                          22: 3139312e3234322e3231382e302f32332d3233203d3e20323633343832.roa (hash: gvPuHFNaGITtGK811VaWVMUCtpG96zT9I/mRt+eQIHM=)
                          23: 3137302e38332e3231322e302f32322d3232203d3e20323633343832.roa (hash: ccPowp4ffMl00+nXkJxBPpe+iQV0cRpO7aaaEzTk6BA=)
                          24: 3138392e38342e34372e302f32342d3234203d3e20323633343832.roa (hash: 4HBENazQyKoMxQEzGwB5TwktAojynsYBBuawqlF4XwA=)
                          25: 3138392e38342e34342e302f32342d3234203d3e20323633343832.roa (hash: 9DUeWnQRu8cqgvvbhSvo7DwMbOLuyeQjgv00VJvTBvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fa:6d:33:ba:31:d9:ab:b4:e7:dc:48:62:ec:b5:2d:f9:3a:aa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Apr 28 14:48:47 2025 GMT
            Not After : Apr 29 15:57:47 2025 GMT
        Subject: CN=BB5F85CB273234A9B7ACA5EB51384F5E704E2F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:8a:df:d0:bb:dd:d3:b0:1f:7c:3a:d3:2b:
                    dd:1c:14:65:cf:99:c4:c3:b1:d3:b7:2e:84:5b:21:
                    8c:63:a8:4f:23:66:d4:74:67:e9:af:4c:80:92:e8:
                    94:e7:04:87:83:32:54:db:73:6d:ad:1c:26:ff:d1:
                    5f:a5:15:4c:e2:ff:8a:63:f8:01:e9:19:99:71:59:
                    b6:b5:a4:22:73:31:85:8d:45:86:b8:d7:5a:e8:f3:
                    c4:6b:33:3c:a1:9d:35:b1:5c:52:bb:3b:bb:74:3f:
                    f3:f5:8e:26:59:03:fa:c3:4d:31:5c:60:31:ed:16:
                    38:b9:87:08:f6:58:47:51:bd:36:3d:c1:ab:cf:ba:
                    4b:a6:20:06:eb:e4:18:58:96:4f:38:cc:ca:48:5c:
                    17:4c:9a:e4:ad:0a:1b:40:1c:97:8b:02:51:3f:fb:
                    e1:2b:93:e1:fc:9c:da:f7:55:d9:17:4d:22:2f:1b:
                    19:bf:89:4a:23:9b:a7:62:51:0b:a3:47:0c:0f:53:
                    1f:1c:7a:f7:8c:41:68:c9:51:96:cf:31:23:55:a5:
                    a0:21:92:70:c9:8f:a5:bb:04:4d:c5:9b:9e:ec:7a:
                    d2:6f:12:6c:e3:0a:df:7f:7d:fe:a6:cc:c8:90:cf:
                    79:14:32:a2:25:54:23:56:f0:ea:06:ae:c7:a1:18:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:85:CB:27:32:34:A9:B7:AC:A5:EB:51:38:4F:5E:70:4E:2F:3A
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:4f:b4:01:9f:ad:b0:22:c7:fd:88:a9:46:c3:ce:62:e3:
         6c:59:9c:00:d3:f3:8d:44:5e:b5:3c:8c:a6:88:b1:1a:6d:86:
         1b:cd:6e:e6:0b:ff:37:d3:dc:aa:3d:c8:06:b1:cd:9d:42:6e:
         2a:d9:9d:55:65:78:7d:86:b8:9a:10:58:e0:5b:b8:cb:7a:70:
         42:bf:cd:8b:11:a3:85:e4:b1:5b:8c:3b:40:ae:a8:b5:6e:a1:
         a2:d6:15:05:eb:32:f0:36:68:4f:db:83:f0:d5:55:ca:32:d1:
         8c:d2:94:7a:d3:e4:67:d3:b8:be:1e:98:89:b2:ba:7e:a6:44:
         59:4c:75:c9:2d:5a:99:bd:14:af:5d:6f:bc:1b:32:2b:e2:55:
         44:62:f3:32:04:c2:45:a2:79:1d:0a:4d:c4:76:cb:65:59:5c:
         9d:82:3b:07:b2:7a:53:08:54:ae:8c:8c:15:af:e2:95:4d:b8:
         7f:bb:6e:ea:8e:12:03:06:69:29:63:5e:7f:8c:7d:40:d7:5c:
         ee:b8:81:27:55:ef:6c:83:15:9a:86:41:8e:e6:1e:00:18:4e:
         06:4a:9a:bd:36:2f:36:7d:b8:1d:a3:58:aa:ec:1d:dc:67:0c:
         5b:ca:1e:79:90:55:8f:1f:ce:1a:c1:e6:cf:9f:fb:4c:eb:23:
         cf:e3:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:25:57 2025 by rpki-client