Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
File:                     A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft (raw, json)
Hash identifier:          n12Q+PQUyUjcQ+Ce76rIzXrs4LzqkyHOjHOo4cs8fD8=
Subject key identifier:   6E:E4:24:4B:0B:2C:8F:6C:F4:24:F5:40:79:D5:CA:D0:F9:7C:03:53
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       04C01B17F75C88D9F357AC1C3CAFE32E9CA173E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
Manifest number:          3A
Signing time:             Wed 30 Apr 2025 07:23:45 +0000
Manifest this update:     Wed 30 Apr 2025 07:18:45 +0000
Manifest next update:     Thu 01 May 2025 10:30:45 +0000
Files and hashes:         1: 3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa (hash: +lxjnFCXMSWF9vPAaK5dgdxtbhD3l/h6X61omhb5gFM=)
                          2: 323830343a336461633a3a2f33322d3332203d3e20323636353436.roa (hash: 54yPWVcEd/+IMGDk0DqDvTN0qM4YMhlF9zE08MS4RT4=)
                          3: 3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa (hash: qZViEkemsxhB5be8H5ZKDrRpUYgNuKP91UeZOvXYiGM=)
                          4: 323830343a336461633a3a2f34302d3430203d3e20323636353436.roa (hash: WZ+a2zrF8pWa6gpGZk7pXVOqwA2xYwdeadzMPtmSiV8=)
                          5: 3136302e3233382e3139382e302f32342d3234203d3e20323636353436.roa (hash: k8Ke8tFoRZm5hHkiOLF0NnXIx+QxK2c67zHjocogpbU=)
                          6: 3136302e3233382e3139362e302f32332d3233203d3e20323636353436.roa (hash: jDQr7Vy/GC/i1bUzerF31aTsDjwOvpDaAzddq4GQG0I=)
                          7: 3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa (hash: joM+u7PORJdGnFjZhmPBlsrsIlNkPKAPY/Z0Gbc8cy0=)
                          8: 3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa (hash: 2DoOY9mYVywZ99aIk/oCE51nzYi51wxX5o7bh+7UF2w=)
                          9: 323830343a336461633a3130303a3a2f34302d3430203d3e20323636353436.roa (hash: gWndqDf/KjLw2qVw3t8sxy0AXuV/rGY0gtWagTvEZGg=)
                          10: 3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa (hash: 5pvfWBzN2ChCEaHMyEP6wKg93FsVgWUXZdBfuF0of0Q=)
                          11: A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl (hash: HjNHNQAXKmp+bXgRWZkiX39FEOMfDivdN/TDd6Ou8QU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 10:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c0:1b:17:f7:5c:88:d9:f3:57:ac:1c:3c:af:e3:2e:9c:a1:73:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Apr 30 07:18:45 2025 GMT
            Not After : May  1 10:30:45 2025 GMT
        Subject: CN=6EE4244B0B2C8F6CF424F54079D5CAD0F97C0353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:e8:0d:0d:88:9a:bf:fb:d7:e9:a5:5e:4c:
                    32:2f:42:4c:fc:64:15:0b:9d:00:b9:35:fe:52:93:
                    9d:6f:50:d4:c9:b8:53:29:49:44:10:64:a2:c9:69:
                    77:a6:bf:d1:4c:99:1f:37:2c:86:99:b6:f3:9f:20:
                    8f:3d:84:91:b9:de:f8:ee:48:10:02:bd:0e:07:93:
                    97:36:be:b5:2e:43:7d:bc:a7:8e:27:44:08:c1:bf:
                    d0:9a:9c:bd:7c:d4:60:3c:94:bb:e9:1f:66:00:a8:
                    ca:ca:d6:b2:a0:10:01:c0:be:ec:dc:df:1b:46:ec:
                    b7:b8:31:7b:cb:01:c9:a3:3e:20:82:16:2f:f1:b6:
                    70:bb:2a:04:39:e5:14:5c:36:51:a2:8a:40:7d:6d:
                    38:50:c5:ce:3a:c5:69:c1:95:e8:93:32:e0:84:f6:
                    1d:b3:2e:c3:8e:76:9b:bc:5e:5e:13:7e:32:3a:9a:
                    60:8e:70:f8:e8:a9:df:d3:77:90:56:dd:79:f1:6f:
                    29:54:fe:2d:ea:23:fe:b7:bf:10:54:12:8a:e1:32:
                    6b:ad:a7:a0:19:d1:8e:e0:8b:6a:42:24:60:3e:ba:
                    c6:43:51:73:45:e7:a9:3b:d9:6a:0d:9b:8f:ab:b1:
                    ce:eb:b6:d6:98:62:72:fe:d9:81:e4:54:c1:23:90:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:24:4B:0B:2C:8F:6C:F4:24:F5:40:79:D5:CA:D0:F9:7C:03:53
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:65:57:0e:4f:04:5d:bc:2d:4f:78:4f:c7:57:27:9b:5c:83:
         a2:ad:12:53:18:a9:24:e2:be:7f:57:d2:df:44:e7:5f:03:96:
         bc:67:aa:a0:2c:72:3b:8b:fe:97:92:fa:80:02:34:e7:04:3e:
         59:55:ad:e6:c5:fe:51:51:f1:16:eb:0b:d1:93:3e:91:03:37:
         ac:0f:7f:68:33:8c:66:6d:cf:25:5a:64:a5:93:a0:19:93:d7:
         49:51:46:a6:0b:ba:48:34:db:aa:cb:c6:35:77:a6:23:5d:f3:
         77:ad:b1:20:3f:7a:58:21:74:49:da:73:4c:fb:a5:bb:94:88:
         03:ac:98:f7:9c:58:2f:48:0d:ef:8b:3b:31:d2:48:aa:d4:e3:
         f8:b6:88:6b:8b:f1:76:d7:0e:da:97:64:37:ea:be:d4:b5:8c:
         ee:2b:e1:57:9a:88:43:d3:f5:91:33:94:c4:83:69:68:20:d1:
         5d:9e:da:8b:f3:64:67:55:1f:2c:02:8f:d8:bf:f3:67:c7:c8:
         13:81:9f:84:47:b8:18:29:95:98:86:91:cf:79:40:45:97:97:
         30:3e:ef:4a:14:57:58:5d:b4:8d:79:5d:f3:02:1f:96:d1:06:
         9f:d6:e4:0d:32:0c:f6:ea:80:5d:8e:33:4e:f5:df:01:d7:db:
         d4:76:c3:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBMAbF/dciNnzV6wcPK/jLpyhc+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4MEExQUQ2RUJCQjZENzhCMkZGNURBREQ5QTMxNzA3
QTRCRUU4QTAeFw0yNTA0MzAwNzE4NDVaFw0yNTA1MDExMDMwNDVaMDMxMTAvBgNV
BAMTKDZFRTQyNDRCMEIyQzhGNkNGNDI0RjU0MDc5RDVDQUQwRjk3QzAzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyugNDYiav/vX6aVeTDIvQkz8
ZBULnQC5Nf5Sk51vUNTJuFMpSUQQZKLJaXemv9FMmR83LIaZtvOfII89hJG53vju
SBACvQ4Hk5c2vrUuQ328p44nRAjBv9CanL181GA8lLvpH2YAqMrK1rKgEAHAvuzc
3xtG7Le4MXvLAcmjPiCCFi/xtnC7KgQ55RRcNlGiikB9bThQxc46xWnBleiTMuCE
9h2zLsOOdpu8Xl4TfjI6mmCOcPjoqd/Td5BW3XnxbylU/i3qI/63vxBUEorhMmut
p6AZ0Y7gi2pCJGA+usZDUXNF56k72WoNm4+rsc7rttaYYnL+2YHkVMEjkG5NAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbuQkSwssj2z0JPVAedXK0Pl8A1MwHwYDVR0j
BBgwFoAUp4ChrW67tteLL/Xa3ZoxcHpL7oowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhX
RXovMC9BNzgwQTFBRDZFQkJCNkQ3OEIyRkY1REFERDlBMzE3MDdBNEJFRThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3ODBBMUFENkVCQkI2RDc4
QjJGRjVEQUREOUEzMTcwN0E0QkVFOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhXRXovMC9B
NzgwQTFBRDZFQkJCNkQ3OEIyRkY1REFERDlBMzE3MDdBNEJFRThBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc2VXDk8EXbwtT3hPx1cnm1yDoq0SUxipJOK+f1fS30TnXwOWvGeqoCxyO4v+
l5L6gAI05wQ+WVWt5sX+UVHxFusL0ZM+kQM3rA9/aDOMZm3PJVpkpZOgGZPXSVFG
pgu6SDTbqsvGNXemI13zd62xID96WCF0SdpzTPulu5SIA6yY95xYL0gN74s7MdJI
qtTj+LaIa4vxdtcO2pdkN+q+1LWM7ivhV5qIQ9P1kTOUxINpaCDRXZ7ai/NkZ1Uf
LAKP2L/zZ8fIE4GfhEe4GCmVmIaRz3lARZeXMD7vShRXWF20jXld8wIfltEGn9bk
DTIM9uqAXY4zTvXfAdfb1HbDGg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:55:11 2025 by rpki-client