Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
File:                     1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft (raw, json)
Hash identifier:          2+cj6DeCawu/QBzY9qmmk1AMHf+BiImWNyqbTqPw93I=
Subject key identifier:   30:BA:4A:41:C6:BB:81:ED:20:E7:29:28:F5:15:3B:0C:83:B6:65:E5
Authority key identifier: 1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97
Certificate issuer:       /CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
Certificate serial:       4FE3281FBCBC45C626FAFD9EF0317112811BCDA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
Manifest number:          8D
Signing time:             Sat 21 Jun 2025 14:33:07 +0000
Manifest this update:     Sat 21 Jun 2025 14:28:07 +0000
Manifest next update:     Sun 22 Jun 2025 16:32:07 +0000
Files and hashes:         1: 3138362e3232372e33322e302f32302d3234203d3e20323632373434.roa (hash: hee5nuq+7DKXRVu991zKyZnmjYT92nnVTtlRY5qJhCs=)
                          2: 1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl (hash: lVRXoU21ShbKMr351lAtXCtFEggWNhowkCB24B8+WJc=)
                          3: 3136372e3235302e3137322e302f32322d3234203d3e20323632373434.roa (hash: wMZE2zCm0VFvukdn9rFtC45LUHD9epdaLgtFiXQK6z8=)
                          4: 3133312e302e3132302e302f32322d3234203d3e20323632373434.roa (hash: lRaxssTjwsADx0tTLomOkPqh36dZ9G3pNVR/TiTkChM=)
                          5: 323830343a3163343a3a2f33322d3438203d3e20323632373434.roa (hash: THw0LmFZApB4LrQffeFvGzSoGlQq6wsYFkIXs0L4Rpk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl
                          rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e3:28:1f:bc:bc:45:c6:26:fa:fd:9e:f0:31:71:12:81:1b:cd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
        Validity
            Not Before: Jun 21 14:28:07 2025 GMT
            Not After : Jun 22 16:32:07 2025 GMT
        Subject: CN=30BA4A41C6BB81ED20E72928F5153B0C83B665E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:fa:08:62:9d:62:8f:e7:da:20:7f:e8:01:
                    6e:c2:c7:6f:98:8d:cd:db:60:dd:fe:31:91:bc:52:
                    9d:2f:6e:87:7c:74:fd:04:ec:0a:27:ed:2e:68:f2:
                    11:b8:5e:5e:20:78:93:46:4a:dc:55:7d:16:db:9f:
                    40:b1:5c:82:b5:56:7c:02:45:88:db:0b:b7:d8:d4:
                    3e:00:18:ca:61:97:36:9e:8a:2a:7d:de:a1:e7:a9:
                    7e:5c:b6:d2:5b:13:74:ef:f6:e8:a7:70:5b:ad:78:
                    27:c5:96:e6:b1:8c:fd:80:1b:ee:05:e0:d4:48:fe:
                    40:45:cb:25:12:5b:d2:59:61:b8:a0:47:0e:fb:8b:
                    28:3b:85:d3:9b:45:29:de:2a:ec:c0:ca:32:90:b1:
                    5a:e4:cf:7d:c0:e7:67:2b:40:31:58:20:28:87:a3:
                    ba:b7:97:9a:df:26:27:05:7d:b4:16:90:be:7b:65:
                    8c:8b:a2:7c:b9:95:01:06:db:7a:59:2e:5a:ba:ee:
                    bf:5e:a3:a5:0c:40:1d:a1:d4:e3:a0:b5:90:1d:14:
                    62:f3:d9:7c:c2:2d:90:5f:ab:68:91:bd:1b:da:ab:
                    cf:5a:74:b1:47:1c:39:f7:39:09:bf:0c:d0:e3:39:
                    99:62:89:29:72:75:1c:05:dd:c1:af:62:93:67:d1:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BA:4A:41:C6:BB:81:ED:20:E7:29:28:F5:15:3B:0C:83:B6:65:E5
            X509v3 Authority Key Identifier:
                keyid:1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:74:3c:f0:ca:4d:ea:81:8a:ce:9b:2a:55:5a:15:a1:27:
         c7:94:7c:fb:4a:69:13:d2:58:ee:cc:2e:44:02:99:2c:10:29:
         a4:67:1e:39:1c:ce:d5:3a:f6:6a:7d:bb:da:0b:e4:24:d5:5d:
         64:a5:09:f7:7c:cb:94:0a:12:22:2c:f9:85:4b:1e:60:af:03:
         c1:10:86:33:4b:87:30:70:5b:c1:3b:a2:eb:c5:59:fe:fe:57:
         4b:bb:9f:22:99:ef:f1:e7:6a:46:98:81:a4:18:30:d2:b7:36:
         a0:fd:d4:64:c6:83:f4:48:2c:50:12:93:7e:e1:5f:1c:8e:d8:
         10:c7:3d:80:67:28:7f:8c:b6:05:1a:06:2b:b2:e0:d1:a9:29:
         8b:83:50:4a:8a:10:d6:59:ee:15:56:1d:c1:ba:c3:04:ae:1c:
         bd:72:f5:98:fd:86:71:d3:0d:28:2b:0d:f9:88:f9:11:74:1a:
         15:6b:78:94:7f:83:2f:05:c6:ea:7a:2e:1d:f6:7b:e7:7c:4c:
         4b:8b:54:f9:57:77:a8:bc:c8:c1:d6:98:13:43:10:1e:5a:96:
         0f:49:5a:39:8a:28:f5:d1:7f:56:66:93:01:74:93:6e:62:93:
         72:32:db:b4:34:cf:ea:ec:0c:d2:3c:99:a4:93:3c:f6:0d:58:
         14:52:a7:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT+MoH7y8RcYm+v2e8DFxEoEbzaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGNDUxM0UwNDk2Q0JBOUZEQURBMkQ1MzcwMkI2MUJC
OTg5RTI5NzAeFw0yNTA2MjExNDI4MDdaFw0yNTA2MjIxNjMyMDdaMDMxMTAvBgNV
BAMTKDMwQkE0QTQxQzZCQjgxRUQyMEU3MjkyOEY1MTUzQjBDODNCNjY1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCux/oIYp1ij+faIH/oAW7Cx2+Y
jc3bYN3+MZG8Up0vbod8dP0E7Aon7S5o8hG4Xl4geJNGStxVfRbbn0CxXIK1VnwC
RYjbC7fY1D4AGMphlzaeiip93qHnqX5cttJbE3Tv9uincFuteCfFluaxjP2AG+4F
4NRI/kBFyyUSW9JZYbigRw77iyg7hdObRSneKuzAyjKQsVrkz33A52crQDFYICiH
o7q3l5rfJicFfbQWkL57ZYyLony5lQEG23pZLlq67r9eo6UMQB2h1OOgtZAdFGLz
2XzCLZBfq2iRvRvaq89adLFHHDn3OQm/DNDjOZliiSlydRwF3cGvYpNn0eX3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMLpKQca7ge0g5yko9RU7DIO2ZeUwHwYDVR0j
BBgwFoAUHfRRPgSWy6n9raLVNwK2G7mJ4pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlvZzZZZWRSVzFxMTFxdk1KM0hudEwzUzE0cFRwVzl3aFQ3VHM0Z3dT
TWMvMC8xREY0NTEzRTA0OTZDQkE5RkRBREEyRDUzNzAyQjYxQkI5ODlFMjk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFERjQ1MTNFMDQ5NkNCQTlG
REFEQTJENTM3MDJCNjFCQjk4OUUyOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RFlvZzZZZWRSVzFxMTFxdk1KM0hudEwzUzE0cFRwVzl3aFQ3VHM0Z3dTTWMvMC8x
REY0NTEzRTA0OTZDQkE5RkRBREEyRDUzNzAyQjYxQkI5ODlFMjk3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeil0PPDKTeqBis6bKlVaFaEnx5R8+0ppE9JY7swuRAKZLBAppGceORzO1Tr2
an272gvkJNVdZKUJ93zLlAoSIiz5hUseYK8DwRCGM0uHMHBbwTui68VZ/v5XS7uf
Ipnv8edqRpiBpBgw0rc2oP3UZMaD9EgsUBKTfuFfHI7YEMc9gGcof4y2BRoGK7Lg
0akpi4NQSooQ1lnuFVYdwbrDBK4cvXL1mP2GcdMNKCsN+Yj5EXQaFWt4lH+DLwXG
6nouHfZ753xMS4tU+Vd3qLzIwdaYE0MQHlqWD0laOYoo9dF/VmaTAXSTbmKTcjLb
tDTP6uwM0jyZpJM89g1YFFKnMg==
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:02:59 2025 by rpki-client