Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          EyVeV5t+phQ5ytEkZfW+XBv1S4TJgOemsJq1mPLi6nk=
Subject key identifier:   D4:79:A0:4E:54:82:80:85:13:74:B2:BB:67:EA:31:AF:13:13:0A:1D
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       546388A77FED00B071089A4C8966CE00B88A1585
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0248
Signing time:             Mon 16 Jun 2025 19:31:16 +0000
Manifest this update:     Mon 16 Jun 2025 19:26:16 +0000
Manifest next update:     Tue 17 Jun 2025 19:32:16 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
                          2: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          3: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          4: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          5: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
                          6: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          7: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          8: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          9: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          10: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          11: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          12: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          13: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          14: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: bf4hh5og55SOcr4b0CfTY+gcH20fpcsFKDDv/Bt2heA=)
                          15: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          16: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          17: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 19:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:63:88:a7:7f:ed:00:b0:71:08:9a:4c:89:66:ce:00:b8:8a:15:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Jun 16 19:26:16 2025 GMT
            Not After : Jun 17 19:32:16 2025 GMT
        Subject: CN=D479A04E548280851374B2BB67EA31AF13130A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:a3:34:48:67:96:40:a1:02:b0:bb:ca:7a:
                    ed:3e:86:de:ed:17:9c:6e:f4:91:82:15:a0:b3:7b:
                    16:f2:d9:d9:6b:13:01:8b:ab:a6:95:5c:3c:21:9d:
                    ef:dd:b0:2c:b2:f3:94:da:e7:9d:d4:16:71:09:28:
                    21:91:64:25:0c:88:a6:2b:d4:35:8b:91:77:af:77:
                    fa:61:db:b0:34:f6:8a:69:1f:59:77:82:89:5d:d4:
                    dd:57:02:6c:f5:fb:8d:67:8c:2d:ca:ae:29:7a:41:
                    b6:0f:b7:cc:99:66:1c:02:82:36:52:89:a3:14:bc:
                    7c:fa:f4:d2:b5:66:8d:2e:f2:80:0f:60:75:cd:6b:
                    6f:e0:0b:dd:36:7a:eb:95:c7:94:c2:db:16:1f:d8:
                    92:f7:66:80:21:6c:57:2b:ab:ee:00:c8:b6:13:df:
                    bc:35:0d:76:f6:22:63:65:66:bf:2a:a2:70:a5:68:
                    66:43:0b:e3:69:5d:c3:f6:54:2b:f4:99:b3:77:87:
                    4c:cf:4b:5e:01:c1:88:5c:6b:7f:55:0e:66:3a:77:
                    0c:5e:4b:87:65:cf:63:29:0e:35:c6:58:2c:79:94:
                    9f:45:b3:e1:c0:fd:f3:d1:65:bc:ed:ae:66:83:25:
                    af:f3:1a:86:cb:08:d0:31:bc:69:94:4e:1d:ad:d0:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:A0:4E:54:82:80:85:13:74:B2:BB:67:EA:31:AF:13:13:0A:1D
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:71:5b:fb:13:23:96:eb:da:67:7d:7d:9c:b0:52:e8:90:
         d7:5d:2c:a3:3e:a6:d1:6c:4b:d1:ef:3d:43:5b:1e:ce:d6:f6:
         82:51:61:6d:c5:05:53:b6:a8:64:63:14:46:72:08:f5:75:66:
         d7:af:e0:36:d7:41:b6:f2:35:1b:61:66:67:d4:08:3c:90:33:
         1b:ab:37:bb:f8:15:3e:ab:6d:75:c9:e2:65:74:6a:a2:f3:15:
         73:f4:ef:91:08:31:a8:ca:96:9f:80:3d:b1:cd:4d:1d:9c:22:
         4f:ac:14:b9:e8:58:c7:15:77:57:b9:20:15:25:75:36:83:eb:
         8b:6b:70:a7:fb:93:99:e5:fb:0a:bc:2e:30:33:35:fc:4d:5d:
         05:7b:18:41:b8:c3:fc:c9:be:39:8f:b7:ff:97:37:a9:ee:80:
         a3:de:ef:b4:af:a3:12:45:9c:48:00:44:9e:03:45:b4:bd:1d:
         1a:fd:7a:58:03:39:f3:fa:71:29:a1:f9:7e:88:01:b5:4b:cc:
         81:5d:5c:32:28:ff:aa:b3:dd:ae:5e:5f:67:68:cf:77:70:02:
         d4:44:62:98:04:7d:e7:20:ed:c6:dc:4c:5d:e2:a2:e9:c1:f8:
         25:b2:9f:5f:59:12:9f:46:23:12:fb:b7:ad:5c:b1:fb:8b:e1:
         73:e3:46:2b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUVGOIp3/tALBxCJpMiWbOALiKFYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNTA2MTYxOTI2MTZaFw0yNTA2MTcxOTMyMTZaMDMxMTAvBgNV
BAMTKEQ0NzlBMDRFNTQ4MjgwODUxMzc0QjJCQjY3RUEzMUFGMTMxMzBBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsQqM0SGeWQKECsLvKeu0+ht7t
F5xu9JGCFaCzexby2dlrEwGLq6aVXDwhne/dsCyy85Ta553UFnEJKCGRZCUMiKYr
1DWLkXevd/ph27A09oppH1l3gold1N1XAmz1+41njC3Kril6QbYPt8yZZhwCgjZS
iaMUvHz69NK1Zo0u8oAPYHXNa2/gC902euuVx5TC2xYf2JL3ZoAhbFcrq+4AyLYT
37w1DXb2ImNlZr8qonClaGZDC+NpXcP2VCv0mbN3h0zPS14BwYhca39VDmY6dwxe
S4dlz2MpDjXGWCx5lJ9Fs+HA/fPRZbztrmaDJa/zGobLCNAxvGmUTh2t0JtdAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU1HmgTlSCgIUTdLK7Z+oxrxMTCh0wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2hY
cDMxNEFWb241VlVCODUzb01WRDY5YVprcktzdUdmSkR6b3lHeGdBczIvMS80QjEz
REI2NEJDQzI1QzlGQTk5RkEyQjlERkFDNDk2MUQzREMwOUUwLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
LBBxW/sTI5br2md9fZywUuiQ110soz6m0WxL0e89Q1seztb2glFhbcUFU7aoZGMU
RnII9XVm16/gNtdBtvI1G2FmZ9QIPJAzG6s3u/gVPqttdcniZXRqovMVc/TvkQgx
qMqWn4A9sc1NHZwiT6wUuehYxxV3V7kgFSV1NoPri2twp/uTmeX7CrwuMDM1/E1d
BXsYQbjD/Mm+OY+3/5c3qe6Ao97vtK+jEkWcSABEngNFtL0dGv16WAM58/pxKaH5
fogBtUvMgV1cMij/qrPdrl5fZ2jPd3AC1ERimAR95yDtxtxMXeKi6cH4JbKfX1kS
n0YjEvu3rVyx+4vhc+NGKw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:56:50 2025 by rpki-client