Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
File:                     BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft (raw, json)
Hash identifier:          Hk1+ALKHUc3H412DjipcKAEEwmhAXYZhN9pnH5nP8FA=
Subject key identifier:   2B:DC:06:80:E2:55:2B:A2:99:A4:35:27:D4:3F:01:9A:9C:27:DB:AB
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       7DE11F8689F9B0A743B0D9DAAC9BD2149A38BA12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
Manifest number:          024C
Signing time:             Mon 28 Apr 2025 19:10:00 +0000
Manifest this update:     Mon 28 Apr 2025 19:05:00 +0000
Manifest next update:     Tue 29 Apr 2025 19:10:00 +0000
Files and hashes:         1: 323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (hash: O7OKqbtQ0TyZq5COvHRvntx3Ce6+68TCpDpbUQYWbLY=)
                          2: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (hash: LSPvF/yPwqYM389vmOVbK55ZQ+kVjTiieioX5ncwkIE=)
                          3: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl (hash: VKXHcob92RNqeicxP7tarRwFSqL3kzEPn+sFvFkhQhk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:1f:86:89:f9:b0:a7:43:b0:d9:da:ac:9b:d2:14:9a:38:ba:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Apr 28 19:05:00 2025 GMT
            Not After : Apr 29 19:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:d2:19:5b:b8:4d:fb:e4:b9:89:6f:0d:7b:
                    fe:3e:e2:12:03:bc:d5:18:31:2e:e6:f9:2d:ce:ef:
                    b6:04:b0:3c:e8:26:b1:9d:d9:63:09:3f:dd:40:4a:
                    d0:52:e7:48:cf:3e:be:53:34:e5:8e:70:83:52:cb:
                    3a:7c:03:a1:3b:11:a1:22:d3:6d:c0:99:11:16:44:
                    b3:3f:d3:79:7d:1e:d7:ef:b6:ae:6b:6f:77:c1:b4:
                    59:95:52:3c:ee:f2:b1:31:c1:1c:47:34:ef:fa:b1:
                    b6:66:d6:24:ec:f2:83:41:a1:6c:c8:fa:1d:2c:e7:
                    d4:31:d9:63:4f:3e:bc:66:17:57:c9:60:09:4a:e1:
                    c2:95:4a:b7:cc:38:ee:23:ca:2c:fb:4e:e5:dd:10:
                    95:05:64:d9:e4:cb:e6:72:60:0e:2f:1d:3e:6d:91:
                    45:ea:ec:20:7c:1e:a8:bb:8e:74:7c:6c:cc:81:3a:
                    f7:6d:74:50:36:a1:58:14:47:64:8f:ea:26:50:a0:
                    2c:02:d8:d4:63:27:ca:89:aa:5b:21:e8:50:89:b7:
                    60:46:62:ab:6d:ff:9b:69:23:be:a9:6f:8e:f2:a4:
                    19:73:81:25:7e:9c:bd:61:39:0e:e4:16:46:fb:bd:
                    36:9a:73:60:d2:b3:52:99:a3:ab:de:ea:29:7f:4f:
                    ad:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:06:80:E2:55:2B:A2:99:A4:35:27:D4:3F:01:9A:9C:27:DB:AB
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:09:89:04:77:09:38:45:41:35:08:06:87:fa:3b:5a:b5:
         a7:21:9f:36:31:03:ac:e6:f6:fe:4e:80:87:0d:26:bd:6c:63:
         67:0b:54:3f:d1:55:b3:9a:e4:1b:e8:db:a6:f1:98:a8:66:17:
         f0:bd:cb:8a:96:51:a0:c1:c2:40:f9:91:b5:d7:46:ac:75:56:
         ed:e7:ca:bc:5f:29:39:b3:9a:79:d7:e5:89:35:88:49:16:e3:
         ae:80:10:71:54:39:e3:ef:1d:34:bb:6f:d7:2a:98:da:c1:4e:
         fa:d5:3a:63:6c:d7:f2:b3:33:10:0b:a7:fe:1d:f5:44:ac:80:
         83:1a:25:0f:9e:92:72:f6:7c:03:dd:51:47:77:c6:56:43:56:
         1a:06:46:c4:cf:8b:09:c1:5b:a3:5f:aa:72:5f:0b:75:a4:11:
         38:99:8a:fa:f0:2e:f4:81:f0:c0:fb:d0:01:54:da:10:8d:4b:
         5b:d6:59:40:40:42:1b:03:9d:06:a6:91:18:6d:a9:46:a8:1c:
         6a:fe:97:88:82:ff:0b:1b:61:06:60:4c:d8:ef:87:56:dc:ea:
         4a:76:ee:40:c3:ad:9f:9f:8d:da:b2:6e:2e:87:8e:9e:01:db:
         57:73:18:9c:60:20:47:29:8e:d3:6e:80:4f:22:3d:62:57:3e:
         90:31:32:d3
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUfeEfhon5sKdDsNnarJvSFJo4uhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwQTFFRUZENjdGMzZCN0Q3RjYwQTY0MzFDNzJDODEz
ODAyMDY2MTAeFw0yNTA0MjgxOTA1MDBaFw0yNTA0MjkxOTEwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTQ4NEQyMTk1QkI4NERGQkU0
Qjk4OTZGMEQ3QkZFM0VFMjEyMDNCQ0Q1MTgzMTJFRTZGOTJEQ0VFRkI2MDRCMDND
RTgyNkIxOUREOTYzMDkzRkRENDA0QUQwNTJFNzQ4Q0YzRUJFNTMzNEU1OEU3MDgz
NTJDQjNBN0MwM0ExM0IxMUExMjJEMzZEQzA5OTExMTY0NEIzM0ZEMzc5N0QxRUQ3
RUZCNkFFNkI2Rjc3QzFCNDU5OTU1MjNDRUVGMkIxMzFDMTFDNDczNEVGRkFCMUI2
NjZENjI0RUNGMjgzNDFBMTZDQzhGQTFEMkNFN0Q0MzFEOTYzNEYzRUJDNjYxNzU3
Qzk2MDA5NEFFMUMyOTU0QUI3Q0MzOEVFMjNDQTJDRkI0RUU1REQxMDk1MDU2NEQ5
RTRDQkU2NzI2MDBFMkYxRDNFNkQ5MTQ1RUFFQzIwN0MxRUE4QkI4RTc0N0M2Q0ND
ODEzQUY3NkQ3NDUwMzZBMTU4MTQ0NzY0OEZFQTI2NTBBMDJDMDJEOEQ0NjMyN0NB
ODlBQTVCMjFFODUwODlCNzYwNDY2MkFCNkRGRjlCNjkyM0JFQTk2RjhFRjJBNDE5
NzM4MTI1N0U5Q0JENjEzOTBFRTQxNjQ2RkJCRDM2OUE3MzYwRDJCMzUyOTlBM0FC
REVFQTI5N0Y0RkFEQUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApITSGVu4TfvkuYlvDXv+PuISA7zVGDEu5vktzu+2BLA86Caxndlj
CT/dQErQUudIzz6+UzTljnCDUss6fAOhOxGhItNtwJkRFkSzP9N5fR7X77aua293
wbRZlVI87vKxMcEcRzTv+rG2ZtYk7PKDQaFsyPodLOfUMdljTz68ZhdXyWAJSuHC
lUq3zDjuI8os+07l3RCVBWTZ5MvmcmAOLx0+bZFF6uwgfB6ou450fGzMgTr3bXRQ
NqFYFEdkj+omUKAsAtjUYyfKiapbIehQibdgRmKrbf+baSO+qW+O8qQZc4Elfpy9
YTkO5BZG+702mnNg0rNSmaOr3uopf0+tqwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FCvcBoDiVSuimaQ1J9Q/AZqcJ9urMB8GA1UdIwQYMBaAFLsKHu/Wfza31/YKZDHH
LIE4AgZhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJGd0dwS2VoSmpRcHhM
cXJNZFN1a2c2czV2YkhndW5IbnRTbVVGZWthblZLLzEvQkIwQTFFRUZENjdGMzZC
N0Q3RjYwQTY0MzFDNzJDODEzODAyMDY2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjBBMUVFRkQ2N0YzNkI3RDdGNjBBNjQzMUM3MkM4MTM4MDIw
NjYxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJGd0dwS2VoSmpRcHhMcXJNZFN1
a2c2czV2YkhndW5IbnRTbVVGZWthblZLLzEvQkIwQTFFRUZENjdGMzZCN0Q3RjYw
QTY0MzFDNzJDODEzODAyMDY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEHECYkEdwk4RUE1CAaH+jta
tachnzYxA6zm9v5OgIcNJr1sY2cLVD/RVbOa5Bvo26bxmKhmF/C9y4qWUaDBwkD5
kbXXRqx1Vu3nyrxfKTmzmnnX5Yk1iEkW466AEHFUOePvHTS7b9cqmNrBTvrVOmNs
1/KzMxALp/4d9USsgIMaJQ+eknL2fAPdUUd3xlZDVhoGRsTPiwnBW6NfqnJfC3Wk
ETiZivrwLvSB8MD70AFU2hCNS1vWWUBAQhsDnQamkRhtqUaoHGr+l4iC/wsbYQZg
TNjvh1bc6kp27kDDrZ+fjdqybi6Hjp4B21dzGJxgIEcpjtNugE8iPWJXPpAxMtM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:42 2025 by rpki-client on console.sobornost.net