Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
File:                     2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft (raw, json)
Hash identifier:          QDVO1RzblAt0BjgH9iUI7AO7R9V495G6cotav+6zuqE=
Subject key identifier:   D4:BA:30:80:4C:32:0B:DF:23:F6:BA:F2:DE:86:8A:04:68:96:D3:E0
Authority key identifier: 2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC
Certificate issuer:       /CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
Certificate serial:       4C80851FBEBCF2207A4451A85EE4C8379C41CFCA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
Manifest number:          0D
Signing time:             Sun 10 Aug 2025 12:42:52 +0000
Manifest this update:     Sun 10 Aug 2025 12:37:52 +0000
Manifest next update:     Mon 11 Aug 2025 13:50:52 +0000
Files and hashes:         1: 323830343a353361303a323030303a3a2f34382d3438203d3e20323638353936.roa (hash: 7i12mx6/N2coFADkmJLlg989Qb3rTE2wFBukYOIanyw=)
                          2: 323830343a353361303a3130303a3a2f34302d3430203d3e20323638353936.roa (hash: vhscWwnndPZ1Ru19ptnhey/xnyFYkWuqHsJq0xK3ka4=)
                          3: 2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl (hash: hsRWOhXwnVewj8pVu2IaPDl+dfyQ8HewpKwxKVLHrt8=)
                          4: 34352e3136342e34332e302f32342d3234203d3e20323638353936.roa (hash: gq7fg+wBaiVgmgfuf2Dg65NF7fc1bJNj5LIFoOOf4NE=)
                          5: 323830343a353361303a373030303a3a2f33362d3336203d3e20323638353936.roa (hash: DOtLrlSGEtofaMvg6f/zdBYXZlGo6XcD29xO7xyBCAw=)
                          6: 323830343a353361303a3a2f33362d3336203d3e20323638353936.roa (hash: 2An9Q4ta7h61fkdeDV3sf9CSi64j2uzNp+YmK0VqDBQ=)
                          7: 323830343a353361303a3a2f33332d3333203d3e20323638353936.roa (hash: K8iKTG2U8R5SYRlE2Di2/vXAZlczfGx0bjx4Q5xUxx0=)
                          8: 34352e3136342e34312e302f32342d3234203d3e20323638353936.roa (hash: 3djr4zaaOHBQVszvNS4ML3YDInpoO3/XomP175oDp3c=)
                          9: 34352e3136342e34322e302f32342d3234203d3e20323638353936.roa (hash: p/E0OvTKOQImYrbkiAqCQBiNaunJ3Eq1T7t6hAvC+MA=)
                          10: 323830343a353361303a3a2f33322d3332203d3e20323638353936.roa (hash: dzBtqfmKe4o7LAQTKYAad47sisc2jjp0Uzay+UlUeME=)
                          11: 323830343a353361303a313030303a3a2f33362d3336203d3e20323638353936.roa (hash: sl3cwGy0IuwQvH+kXQlq1pH3BmH2yD1EomOT+cSmPTY=)
                          12: 323830343a353361303a3230303a3a2f34302d3430203d3e20323638353936.roa (hash: pQ/6+QROnTD45yVH85SByk4DEU8dobh5Dw9HlvLQl4w=)
                          13: 34352e3136342e34322e302f32332d3233203d3e20323638353936.roa (hash: 6KlQD+pV8geK79mH9wLDg7MsB4W34HBF9ATCCOIaeos=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl
                          rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:85:1f:be:bc:f2:20:7a:44:51:a8:5e:e4:c8:37:9c:41:cf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3BAA1CD10D76A97433F376CD6B7474C51797CC
        Validity
            Not Before: Aug 10 12:37:52 2025 GMT
            Not After : Aug 11 13:50:52 2025 GMT
        Subject: CN=D4BA30804C320BDF23F6BAF2DE868A046896D3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:94:64:08:79:90:84:74:a2:6c:20:f2:36:
                    51:96:86:03:91:e0:6c:c5:8e:45:4e:53:d9:1d:17:
                    0b:12:8f:ee:fc:71:3d:b8:9c:69:da:ab:b8:c7:d6:
                    77:a0:ee:5b:f6:e3:40:d0:57:d3:30:6b:d0:7e:9a:
                    51:ad:43:a3:6b:8e:26:87:c3:02:4b:a1:8e:45:5b:
                    fe:d5:d3:6c:40:7e:d8:22:0a:c2:d7:bb:e2:fc:06:
                    b0:4d:d9:8f:54:6c:04:6a:58:56:fe:0b:c4:09:eb:
                    a2:54:67:b6:f4:1d:aa:4a:a1:55:81:bc:f6:a3:5f:
                    8f:a8:13:07:fa:9e:56:9a:56:80:65:8a:b6:ab:e8:
                    2b:17:c3:3e:cf:33:1b:78:ca:1f:0f:14:8a:6d:f4:
                    4e:09:80:18:41:2a:84:20:16:6b:02:5e:7e:36:89:
                    8b:b8:1a:2d:74:a2:82:44:0e:de:6b:c6:ce:dd:dd:
                    1e:30:47:52:e6:bb:f9:37:64:21:87:0e:a5:28:9b:
                    18:14:60:77:39:bb:18:b3:ff:e3:31:5e:61:5c:2c:
                    ac:29:4a:c7:11:b6:28:ce:39:4f:60:26:77:2e:07:
                    51:18:dc:45:13:66:27:bf:4f:0e:2f:dd:50:39:d1:
                    83:3c:5d:6b:19:be:52:4e:00:ce:8a:8e:97:25:27:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BA:30:80:4C:32:0B:DF:23:F6:BA:F2:DE:86:8A:04:68:96:D3:E0
            X509v3 Authority Key Identifier:
                keyid:2A:3B:AA:1C:D1:0D:76:A9:74:33:F3:76:CD:6B:74:74:C5:17:97:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/2A3BAA1CD10D76A97433F376CD6B7474C51797CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:ae:be:2f:d9:df:c4:77:96:9e:f9:17:91:20:66:5d:4a:
         21:9c:e4:d8:33:3a:5f:f2:38:33:54:f4:05:fa:92:1b:40:e6:
         04:a1:07:8e:55:33:2b:5f:2c:a1:c4:9d:50:1e:93:dd:94:d1:
         05:00:04:40:1c:c9:40:03:44:70:ea:75:7f:0f:a0:cd:3f:0c:
         44:18:62:d6:e2:62:07:f9:6e:cb:c5:61:86:64:07:e6:cd:49:
         0e:9d:7b:89:18:8a:67:a0:de:bc:9f:90:88:4c:99:32:23:0d:
         7d:13:c0:a6:02:00:36:36:3c:45:96:b2:16:c4:64:a7:50:d3:
         ee:19:2f:bb:f0:6f:d2:0e:e5:f2:cb:81:2a:8f:98:d5:92:4e:
         13:e4:b5:c2:87:5b:75:8c:d6:42:41:fe:03:84:53:7f:f2:ae:
         20:34:80:52:5f:76:15:f7:cb:a9:1d:ed:21:5a:a0:3b:90:1a:
         b8:f5:17:19:cf:3a:4c:36:0d:11:b5:5f:68:ad:f7:db:02:b7:
         95:f6:e8:9a:e5:0b:ec:07:f6:25:65:79:c8:b3:51:9e:75:6a:
         0f:11:42:4d:c4:91:e7:38:38:22:f2:f8:90:69:2b:bf:2a:e4:
         23:77:3f:e6:31:18:a5:14:a2:71:50:31:a5:7c:8c:63:44:40:
         fb:78:34:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTICFH7688iB6RFGoXuTIN5xBz8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzQkFBMUNEMTBENzZBOTc0MzNGMzc2Q0Q2Qjc0NzRD
NTE3OTdDQzAeFw0yNTA4MTAxMjM3NTJaFw0yNTA4MTExMzUwNTJaMDMxMTAvBgNV
BAMTKEQ0QkEzMDgwNEMzMjBCREYyM0Y2QkFGMkRFODY4QTA0Njg5NkQzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojpRkCHmQhHSibCDyNlGWhgOR
4GzFjkVOU9kdFwsSj+78cT24nGnaq7jH1neg7lv240DQV9Mwa9B+mlGtQ6NrjiaH
wwJLoY5FW/7V02xAftgiCsLXu+L8BrBN2Y9UbARqWFb+C8QJ66JUZ7b0HapKoVWB
vPajX4+oEwf6nlaaVoBlirar6CsXwz7PMxt4yh8PFIpt9E4JgBhBKoQgFmsCXn42
iYu4Gi10ooJEDt5rxs7d3R4wR1Lmu/k3ZCGHDqUomxgUYHc5uxiz/+MxXmFcLKwp
SscRtijOOU9gJncuB1EY3EUTZie/Tw4v3VA50YM8XWsZvlJOAM6KjpclJ6yNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1LowgEwyC98j9rry3oaKBGiW0+AwHwYDVR0j
BBgwFoAUKjuqHNENdql0M/N2zWt0dMUXl8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdl
eWsvMC8yQTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBM0JBQTFDRDEwRDc2QTk3
NDMzRjM3NkNENkI3NDc0QzUxNzk3Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGtzQ1N0b3phdFlURXNNNGEzQkNGRGZnWnJZQ3o3MjFyZUt2U29CSmdleWsvMC8y
QTNCQUExQ0QxMEQ3NkE5NzQzM0YzNzZDRDZCNzQ3NEM1MTc5N0NDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGsyuvi/Z38R3lp75F5EgZl1KIZzk2DM6X/I4M1T0BfqSG0DmBKEHjlUzK18s
ocSdUB6T3ZTRBQAEQBzJQANEcOp1fw+gzT8MRBhi1uJiB/luy8VhhmQH5s1JDp17
iRiKZ6DevJ+QiEyZMiMNfRPApgIANjY8RZayFsRkp1DT7hkvu/Bv0g7l8suBKo+Y
1ZJOE+S1wodbdYzWQkH+A4RTf/KuIDSAUl92FffLqR3tIVqgO5AauPUXGc86TDYN
EbVfaK332wK3lfbomuUL7Af2JWV5yLNRnnVqDxFCTcSR5zg4IvL4kGkrvyrkI3c/
5jEYpRSicVAxpXyMY0RA+3g0TQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:05:00 2025 by rpki-client