Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
File:                     A15F127A9B708BCCD34894F30740028808430DF2.mft (raw, json)
Hash identifier:          PiltLpP1eZ2yZgzZDvleSFFNe9zKzzV5Jhn15ZWJJfs=
Subject key identifier:   CF:50:2F:77:5C:4A:E4:13:2C:14:D7:82:C4:4B:68:A7:BA:AF:4A:F1
Authority key identifier: A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2
Certificate issuer:       /CN=A15F127A9B708BCCD34894F30740028808430DF2
Certificate serial:       5C3FDF3E8FFC6B8C4D61D41789376E2513134987
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
Manifest number:          BA
Signing time:             Mon 16 Jun 2025 04:52:26 +0000
Manifest this update:     Mon 16 Jun 2025 04:47:26 +0000
Manifest next update:     Tue 17 Jun 2025 06:01:26 +0000
Files and hashes:         1: 323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa (hash: GbfpVSHG7qJaZrmm2/wZnTNQX71D4egOcCt8qvSYogY=)
                          2: 34352e3232382e38372e302f32342d3234203d3e20323637303637.roa (hash: /kEJK+zTkbGbTivrezGI3dHYb9IXh8rbACw4MSUe8pQ=)
                          3: 34352e3232382e38362e302f32342d3234203d3e20323637303637.roa (hash: 6G/P1Spz8+0/JI/bz2xT0Ejs/z+q5PShmVgotGkhs/0=)
                          4: A15F127A9B708BCCD34894F30740028808430DF2.crl (hash: L05LB4h0lqY9eZrio252YxaheoR0zNqBOy+8byeF6/4=)
                          5: 323830343a343761343a3a2f33322d3332203d3e20323637303637.roa (hash: W0euN5pqMhuwrhdpqYNT8MxRIS8nNCSbncc/aKdUfYE=)
                          6: 34352e3232382e38362e302f32332d3233203d3e20323637303637.roa (hash: FowyewoG7JH4RHXFX/gz6IRGAjRGjMn/Xfy2TEbDATY=)
                          7: 34352e3232382e38342e302f32342d3234203d3e20323637303637.roa (hash: hc8xzSJQG1iFCSykx6HzJLdwDgVTK4Eabl2TA3m0OyA=)
                          8: 34352e3232382e38352e302f32342d3234203d3e20323637303637.roa (hash: +Y6jMHc9c5kd0DIGH0qLOKFdRpekHAVd9uKxhqnezb0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3f:df:3e:8f:fc:6b:8c:4d:61:d4:17:89:37:6e:25:13:13:49:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15F127A9B708BCCD34894F30740028808430DF2
        Validity
            Not Before: Jun 16 04:47:26 2025 GMT
            Not After : Jun 17 06:01:26 2025 GMT
        Subject: CN=CF502F775C4AE4132C14D782C44B68A7BAAF4AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:dd:72:73:1a:e3:3a:3a:6f:8f:54:f0:28:
                    91:09:3e:c7:6d:ab:64:a1:05:98:1f:13:64:4d:93:
                    51:a5:d7:de:40:24:5e:82:46:a7:49:93:4f:77:a8:
                    6e:e4:b1:de:77:cf:98:96:44:e1:26:68:7d:92:44:
                    a6:02:f5:0f:c0:f0:41:a4:c9:7e:a2:42:96:52:d6:
                    0c:56:d7:d5:29:83:c4:15:cb:4f:d5:4f:91:c7:fd:
                    cd:34:14:0a:23:ee:3e:2b:0e:df:f5:80:ec:f9:c1:
                    87:e5:a1:ce:5c:ed:d5:cd:f4:b3:a0:1d:d6:ee:1a:
                    3b:60:4e:3c:70:9a:51:2b:69:f0:35:e9:f1:e0:d2:
                    4c:91:d0:b3:a9:20:8e:80:11:b3:c3:7e:39:36:5b:
                    98:8e:1f:50:35:57:16:4a:e2:6d:ed:59:43:32:e4:
                    f1:0b:3f:45:c3:79:68:8a:ad:6b:00:d9:e5:c4:72:
                    d0:53:52:1e:f5:b3:4d:7f:17:22:e7:c0:81:bf:ed:
                    ee:24:70:61:f6:f8:ef:4a:61:06:d1:92:d4:60:5e:
                    e3:e1:e1:d6:61:62:93:34:e3:c9:af:11:ea:45:a2:
                    2e:96:74:fc:db:67:eb:9c:be:3b:90:21:f0:82:51:
                    04:93:aa:ab:73:e5:fa:be:b6:23:85:36:ec:25:9a:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:2F:77:5C:4A:E4:13:2C:14:D7:82:C4:4B:68:A7:BA:AF:4A:F1
            X509v3 Authority Key Identifier:
                keyid:A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:7d:2d:f6:52:5d:cf:a2:0e:f3:f7:83:4d:96:72:4b:b1:
         fe:a6:ca:bd:fb:fb:f1:3d:ed:69:04:89:8b:67:b8:48:c5:11:
         8a:bb:50:87:ef:1a:03:f9:16:d4:f3:7c:dd:a0:37:5e:f5:df:
         df:be:e7:59:8e:8f:43:5c:8b:51:97:35:55:39:44:ef:b1:ca:
         13:5f:01:b4:81:15:34:d7:b3:56:4a:46:7d:6c:7b:c5:13:02:
         4c:33:cf:35:19:b2:06:25:87:ca:27:94:19:35:c0:95:9e:23:
         9e:a3:b4:b5:d5:09:89:74:3f:a9:dc:35:c9:c1:90:11:3c:59:
         08:76:b2:10:3f:0d:59:59:7f:fc:20:23:d0:f0:f3:01:50:67:
         9e:91:11:0e:5d:6e:55:1d:d4:39:ac:6a:8b:90:5d:fa:ed:7e:
         73:c5:f7:aa:63:ea:1a:96:6c:78:a2:f0:a4:e2:b4:ba:1f:d3:
         db:2c:62:97:d0:eb:8f:84:01:74:66:aa:1e:45:02:72:09:42:
         9d:eb:dd:2e:b1:d7:ce:3b:8b:d6:37:67:2c:fe:83:77:ca:92:
         36:fe:50:c2:27:d0:53:6c:3d:40:cd:8f:ac:f0:34:e5:61:6e:
         60:b0:80:4f:98:dc:b2:e3:b5:09:42:f4:67:2a:6a:5b:00:62:
         a6:8b:a2:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXD/fPo/8a4xNYdQXiTduJRMTSYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE1RjEyN0E5QjcwOEJDQ0QzNDg5NEYzMDc0MDAyODgw
ODQzMERGMjAeFw0yNTA2MTYwNDQ3MjZaFw0yNTA2MTcwNjAxMjZaMDMxMTAvBgNV
BAMTKENGNTAyRjc3NUM0QUU0MTMyQzE0RDc4MkM0NEI2OEE3QkFBRjRBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJd1ycxrjOjpvj1TwKJEJPsdt
q2ShBZgfE2RNk1Gl195AJF6CRqdJk093qG7ksd53z5iWROEmaH2SRKYC9Q/A8EGk
yX6iQpZS1gxW19Upg8QVy0/VT5HH/c00FAoj7j4rDt/1gOz5wYfloc5c7dXN9LOg
HdbuGjtgTjxwmlErafA16fHg0kyR0LOpII6AEbPDfjk2W5iOH1A1VxZK4m3tWUMy
5PELP0XDeWiKrWsA2eXEctBTUh71s01/FyLnwIG/7e4kcGH2+O9KYQbRktRgXuPh
4dZhYpM048mvEepFoi6WdPzbZ+ucvjuQIfCCUQSTqqtz5fq+tiOFNuwlmpJNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUz1Avd1xK5BMsFNeCxEtop7qvSvEwHwYDVR0j
BBgwFoAUoV8Septwi8zTSJTzB0ACiAhDDfIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFhdEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJk
enUvMC9BMTVGMTI3QTlCNzA4QkNDRDM0ODk0RjMwNzQwMDI4ODA4NDMwREYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExNUYxMjdBOUI3MDhCQ0NE
MzQ4OTRGMzA3NDAwMjg4MDg0MzBERjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHFhdEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJkenUvMC9B
MTVGMTI3QTlCNzA4QkNDRDM0ODk0RjMwNzQwMDI4ODA4NDMwREYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjsp9LfZSXc+iDvP3g02Wckux/qbKvfv78T3taQSJi2e4SMURirtQh+8aA/kW
1PN83aA3XvXf377nWY6PQ1yLUZc1VTlE77HKE18BtIEVNNezVkpGfWx7xRMCTDPP
NRmyBiWHyieUGTXAlZ4jnqO0tdUJiXQ/qdw1ycGQETxZCHayED8NWVl//CAj0PDz
AVBnnpERDl1uVR3UOaxqi5Bd+u1+c8X3qmPqGpZseKLwpOK0uh/T2yxil9Drj4QB
dGaqHkUCcglCnevdLrHXzjuL1jdnLP6Dd8qSNv5QwifQU2w9QM2PrPA05WFuYLCA
T5jcsuO1CUL0ZypqWwBipoui9g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:12:36 2025 by rpki-client