Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
File:                     030432E293597EB9BE73A032AB1ED40C750C628E.mft (raw, json)
Hash identifier:          ka/hDQj6zUdA67gO/+kUNM0C7QAMXPs+B7Pr61ySCLo=
Subject key identifier:   FD:7F:44:DD:88:A1:C8:EF:75:DE:5D:87:35:5B:23:EF:72:BC:4E:63
Authority key identifier: 03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E
Certificate issuer:       /CN=030432E293597EB9BE73A032AB1ED40C750C628E
Certificate serial:       7C2838D75E3746D836179F13A14CC5C30A2DF3E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
Manifest number:          1A
Signing time:             Wed 06 Aug 2025 08:17:50 +0000
Manifest this update:     Wed 06 Aug 2025 08:12:50 +0000
Manifest next update:     Thu 07 Aug 2025 09:54:50 +0000
Files and hashes:         1: 34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (hash: oovJShiA0PPEEyQkqcCVjmdtXuQslWipECM9Gt11MFY=)
                          2: 030432E293597EB9BE73A032AB1ED40C750C628E.crl (hash: ShUGNUDE2lqE6ytr4fJS/ijQZ45MVCvyw1H6GSUJc4U=)
                          3: 323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (hash: FbCpjBvAojjt7w4fwyVC24k2dsz3UpEkag6gfu0cU0I=)
                          4: 34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (hash: oATncZHJJjMb5uwtPWp6oZ9LL0Rwq40HrfFA8hyB2Aw=)
                          5: 323830343a356131303a383030303a3a2f33332d3333203d3e20323638373436.roa (hash: GSMmUlWVpreyfonwJ8/P7AK+XRKxVDORgNWeekVLhTY=)
                          6: 323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa (hash: Kt1YUyu34dsoX+k0DGT4wLnxHyBVkml2NkEOnT4KPVk=)
                          7: 34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (hash: 7c9F9jb1ZgEcQvL6xR5708FiUXEwxPZUhaNh0Ct3q7k=)
                          8: 323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (hash: 9n9E2eeozM+G793kCRk08m1FUmsKuvELHeyy1T+2Q28=)
                          9: 323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (hash: 1tj4DHEG/cWMWKvW88bAjSvSv2HoGwpXgOI0ju1NEDU=)
                          10: 323830343a356131303a3a2f33322d3332203d3e20323638373436.roa (hash: 3ur/Tg2N0X+tDrpJTx7oeV4xxfe3HDxxgJfgJKXIZaQ=)
                          11: 323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa (hash: 3y0lOMjfA2N8mobv1qixryrYEE9ry56koxZh73DJfRI=)
                          12: 34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (hash: JH39lCrZxU6fzf1b4Tw+d7pgacK5Q6EkGFH7i4jf/q4=)
                          13: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (hash: KwyZRmPvucyqjOVzQNPr+DgQKb1D1K4KqrB0uT8mpGc=)
                          14: 323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (hash: 6eeuwU0WHgdTYTbBzaDABMDUisPvthJVCbEbd3COd5w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:28:38:d7:5e:37:46:d8:36:17:9f:13:a1:4c:c5:c3:0a:2d:f3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030432E293597EB9BE73A032AB1ED40C750C628E
        Validity
            Not Before: Aug  6 08:12:50 2025 GMT
            Not After : Aug  7 09:54:50 2025 GMT
        Subject: CN=FD7F44DD88A1C8EF75DE5D87355B23EF72BC4E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:b6:11:79:29:c9:d8:5c:64:99:7e:43:ad:
                    f9:ab:73:f7:75:4a:4b:af:47:f6:48:6f:31:78:3d:
                    69:ed:94:51:e6:7e:39:7c:64:87:f6:8c:da:f7:6e:
                    96:63:76:32:26:62:a1:8d:fe:2e:ad:f5:e3:cb:f3:
                    1d:d1:f5:e2:14:f6:ac:7f:24:52:df:6b:ca:0c:92:
                    ad:b1:a8:49:c4:a4:da:12:84:ad:92:4f:77:af:e1:
                    aa:69:b0:39:9a:ed:48:38:f3:cb:49:e2:ae:ec:4c:
                    d9:6e:a7:e7:fe:b2:e9:cd:79:08:d9:f0:b6:f7:e7:
                    3e:ae:de:9f:cb:b8:6b:4f:7a:e7:bd:86:fd:f1:09:
                    69:e5:c2:98:55:a1:bb:5d:c4:a2:19:ec:73:33:3e:
                    a9:0c:47:22:e6:74:4b:6d:7b:8f:50:2f:06:20:2d:
                    08:d8:e4:79:49:26:cc:dc:83:ab:e3:93:34:b5:e7:
                    59:5a:35:ca:1f:03:d2:34:d9:6e:ca:87:d8:2a:4c:
                    c1:6a:6c:a8:ef:d8:83:c1:67:47:4a:d8:5d:65:0b:
                    b0:4c:ea:5c:d4:4b:5e:4b:9e:bb:fd:93:cc:68:eb:
                    91:ae:ec:64:21:90:f6:79:21:26:a8:ce:fc:63:3f:
                    55:9a:a3:67:a2:64:32:ab:4e:5f:a8:f9:b0:f1:dd:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7F:44:DD:88:A1:C8:EF:75:DE:5D:87:35:5B:23:EF:72:BC:4E:63
            X509v3 Authority Key Identifier:
                keyid:03:04:32:E2:93:59:7E:B9:BE:73:A0:32:AB:1E:D4:0C:75:0C:62:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030432E293597EB9BE73A032AB1ED40C750C628E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/030432E293597EB9BE73A032AB1ED40C750C628E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:01:a5:22:b1:ba:9e:9f:43:59:4d:da:25:59:92:a7:9e:55:
         10:87:c2:a7:11:87:70:09:81:c8:53:89:0b:cd:87:cf:47:bd:
         f6:b0:f3:a6:0e:8b:86:94:20:39:60:a5:01:fc:b9:fa:6b:b8:
         4b:ad:0a:93:0a:df:54:69:3f:d5:b4:0b:0c:8c:89:0c:f7:d2:
         93:69:a3:d6:78:97:76:6b:28:20:47:0f:e3:f6:c3:9f:d2:27:
         86:c3:dd:52:ab:d7:6e:ae:6f:51:a5:f7:4f:ca:aa:08:d2:ba:
         d5:42:46:88:bb:be:2f:66:cd:3e:1c:1e:ae:a3:c0:fa:33:d8:
         37:bc:d9:88:7a:0b:b2:e9:06:d4:b1:ed:31:a9:3f:a9:7b:50:
         8c:81:5f:d5:28:3a:d7:f1:5d:b1:8f:13:3b:52:1c:82:a5:d6:
         68:fd:b6:71:e3:5b:0c:09:9e:ea:b8:18:dd:fd:61:b1:27:d9:
         ef:d1:96:5f:03:a2:85:0a:e5:cc:03:03:77:c7:0d:5a:5c:d0:
         bc:7e:b5:40:32:5c:c4:50:12:d1:af:71:07:cb:93:1a:49:03:
         0d:b2:28:a6:a4:2b:01:96:83:b1:8e:40:18:df:46:39:c2:73:
         b1:46:68:4c:a7:98:35:14:a9:2a:81:f3:76:44:59:a1:98:e3:
         18:50:c0:8b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUfCg41143Rtg2F58ToUzFwwot8+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwNDMyRTI5MzU5N0VCOUJFNzNBMDMyQUIxRUQ0MEM3
NTBDNjI4RTAeFw0yNTA4MDYwODEyNTBaFw0yNTA4MDcwOTU0NTBaMDMxMTAvBgNV
BAMTKEZEN0Y0NEREODhBMUM4RUY3NURFNUQ4NzM1NUIyM0VGNzJCQzRFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjbYReSnJ2FxkmX5Drfmrc/d1
SkuvR/ZIbzF4PWntlFHmfjl8ZIf2jNr3bpZjdjImYqGN/i6t9ePL8x3R9eIU9qx/
JFLfa8oMkq2xqEnEpNoShK2ST3ev4appsDma7Ug488tJ4q7sTNlup+f+sunNeQjZ
8Lb35z6u3p/LuGtPeue9hv3xCWnlwphVobtdxKIZ7HMzPqkMRyLmdEtte49QLwYg
LQjY5HlJJszcg6vjkzS151laNcofA9I02W7Kh9gqTMFqbKjv2IPBZ0dK2F1lC7BM
6lzUS15Lnrv9k8xo65Gu7GQhkPZ5ISaozvxjP1Wao2eiZDKrTl+o+bDx3eC/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU/X9E3YihyO913l2HNVsj73K8TmMwHwYDVR0j
BBgwFoAUAwQy4pNZfrm+c6Ayqx7UDHUMYo4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvMDMwNDMyRTI5MzU5N0VCOUJFNzNBMDMyQUIxRUQ0MEM3NTBDNjI4RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMzA0MzJFMjkzNTk3RUI5QkU3
M0EwMzJBQjFFRDQwQzc1MEM2MjhFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3NR
b1ZYRDN2d1BoSEVUZkRtM1I2WjNLcEVGZVZOOEZXcG53YXBpQUtDeXMvMC8wMzA0
MzJFMjkzNTk3RUI5QkU3M0EwMzJBQjFFRDQwQzc1MEM2MjhFLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
gwGlIrG6np9DWU3aJVmSp55VEIfCpxGHcAmByFOJC82Hz0e99rDzpg6LhpQgOWCl
Afy5+mu4S60KkwrfVGk/1bQLDIyJDPfSk2mj1niXdmsoIEcP4/bDn9InhsPdUqvX
bq5vUaX3T8qqCNK61UJGiLu+L2bNPhwerqPA+jPYN7zZiHoLsukG1LHtMak/qXtQ
jIFf1Sg61/FdsY8TO1IcgqXWaP22ceNbDAme6rgY3f1hsSfZ79GWXwOihQrlzAMD
d8cNWlzQvH61QDJcxFAS0a9xB8uTGkkDDbIopqQrAZaDsY5AGN9GOcJzsUZoTKeY
NRSpKoHzdkRZoZjjGFDAiw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:20:55 2025 by rpki-client