Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
File:                     8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft (raw, json)
Hash identifier:          EZOx9JDFKNI+oEhnyo3VI9ZqdduO4WVbouxzMQzM6mI=
Subject key identifier:   E9:41:7B:D2:5C:21:4E:C7:37:C9:0D:2E:23:18:23:C9:D5:D0:FF:9B
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       6F8C95A7229298447B80EF235C327F34C66CD0D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
Manifest number:          5A
Signing time:             Sat 26 Apr 2025 23:25:47 +0000
Manifest this update:     Sat 26 Apr 2025 23:20:47 +0000
Manifest next update:     Mon 28 Apr 2025 02:28:47 +0000
Files and hashes:         1: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: iS/ogTqX5OTJACfmEC4NjOzeja29UG96aatA0hmvJSY=)
                          2: 8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl (hash: a7rlgQ3fbZXTFDEQxDs78pU05wuyrYZ/4HGMTtA3ukc=)
                          3: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: T6fUIJEUFs+djCyIj60kGutcwlqduxsCNq9XE897EL4=)
                          4: 34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (hash: CG2l1j6d177DyU9Hd/oFyM+BKsJFCer8pflIo2sCkL4=)
                          5: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: JABEgsKFctWvQAHlkek04CeyXB9iBebAfk2kUyF1a28=)
                          6: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: 3czZE1a9teLRwGWObSlD9/1IkMx8vF304zvTmw+dwTI=)
                          7: 323830343a343536383a3a2f33322d3333203d3e20323636393234.roa (hash: oHzhtrrBpZtFBRqK+gE6zvHm7vswq0S/bokgiom8oNM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8c:95:a7:22:92:98:44:7b:80:ef:23:5c:32:7f:34:c6:6c:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Apr 26 23:20:47 2025 GMT
            Not After : Apr 28 02:28:47 2025 GMT
        Subject: CN=E9417BD25C214EC737C90D2E231823C9D5D0FF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:7b:20:8d:99:8d:de:6a:f3:2c:aa:bf:40:
                    67:c5:a0:21:56:d6:6f:fc:8d:06:5b:81:41:11:eb:
                    94:6f:38:b7:7a:ec:2a:dc:3c:53:e8:5e:d3:03:3c:
                    13:a2:75:86:5c:a7:79:e2:6a:23:a9:b6:43:79:77:
                    75:e5:12:f5:d3:73:1e:79:97:9d:f3:f2:11:66:26:
                    22:0a:e7:3e:de:a6:8b:a7:d6:29:4d:55:3b:a0:4e:
                    bb:90:18:ae:e6:80:94:30:38:ee:10:ab:ea:ef:d7:
                    f3:ba:8c:7b:81:d3:ec:54:a0:cc:21:99:50:12:9e:
                    f1:d2:a8:52:d2:4a:0e:9f:af:e8:25:fc:5b:31:6b:
                    64:4c:6e:3d:ec:b7:df:8c:4c:8e:81:33:9e:d7:0b:
                    cc:2d:27:e4:7a:25:1a:77:f8:25:6e:8e:f7:25:74:
                    df:b4:f1:37:c1:2e:74:92:57:6f:8b:ec:07:b5:5a:
                    fd:ba:70:d1:a2:68:66:af:a8:f3:94:a3:fe:07:92:
                    eb:df:49:2d:3c:77:89:6c:5d:d5:73:d2:26:fa:99:
                    46:45:94:b4:84:99:8c:ec:20:c8:dc:73:ff:25:e7:
                    5f:ae:c9:b9:ff:89:bc:84:7c:d1:ef:00:7a:37:96:
                    58:24:12:ed:c9:4e:5c:3b:79:ca:aa:09:50:89:98:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:41:7B:D2:5C:21:4E:C7:37:C9:0D:2E:23:18:23:C9:D5:D0:FF:9B
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:88:e7:82:91:c0:7c:78:3c:a7:d2:fe:1e:1c:43:38:ef:
         f8:4c:db:51:90:37:b4:d3:8c:fb:39:73:04:41:df:c8:d4:ab:
         11:7e:4c:0a:12:d4:ee:17:db:b1:c7:2a:4f:2d:c5:6e:33:57:
         ed:4a:66:92:69:5f:74:cb:74:35:e6:f0:4d:6a:d9:69:c9:91:
         7b:bf:6e:52:ee:0f:f9:54:7b:3e:8e:fe:a3:56:c4:2f:72:5f:
         1a:47:a7:fe:92:2f:76:37:fe:54:96:88:b5:aa:b8:f5:87:50:
         3b:b0:38:ac:6e:b5:ca:29:e7:41:f7:39:71:27:9d:c8:a8:e6:
         f4:8e:0f:ea:09:84:cf:7e:cd:ab:6d:aa:a1:30:9a:75:6d:00:
         86:30:c5:e9:2f:12:5f:5b:29:48:8d:3c:3f:c2:c3:6e:06:70:
         27:0e:94:a4:77:3b:b2:8f:67:7f:37:03:2f:a8:50:50:91:07:
         d1:0e:ce:fe:42:7c:ea:11:e0:9b:bd:33:77:f0:75:48:98:c5:
         be:25:bf:74:8e:99:96:6c:e0:44:27:7e:7c:28:74:70:df:2e:
         c2:b5:69:2e:40:c4:bc:64:b3:e1:f6:7d:9b:5a:ba:95:eb:06:
         1e:31:74:e6:50:7e:1d:86:55:91:40:76:16:e6:b7:bf:c1:b2:
         56:70:21:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUb4yVpyKSmER7gO8jXDJ/NMZs0NMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzMzUzMzdDQkVCNTRCQkRDMEM1MUJBNDM0RjQ0MzlF
NzAwQzA1QTAeFw0yNTA0MjYyMzIwNDdaFw0yNTA0MjgwMjI4NDdaMDMxMTAvBgNV
BAMTKEU5NDE3QkQyNUMyMTRFQzczN0M5MEQyRTIzMTgyM0M5RDVEMEZGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJHsgjZmN3mrzLKq/QGfFoCFW
1m/8jQZbgUER65RvOLd67CrcPFPoXtMDPBOidYZcp3niaiOptkN5d3XlEvXTcx55
l53z8hFmJiIK5z7epoun1ilNVTugTruQGK7mgJQwOO4Qq+rv1/O6jHuB0+xUoMwh
mVASnvHSqFLSSg6fr+gl/Fsxa2RMbj3st9+MTI6BM57XC8wtJ+R6JRp3+CVujvcl
dN+08TfBLnSSV2+L7Ae1Wv26cNGiaGavqPOUo/4HkuvfSS08d4lsXdVz0ib6mUZF
lLSEmYzsIMjcc/8l51+uybn/ibyEfNHvAHo3llgkEu3JTlw7ecqqCVCJmP+/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6UF70lwhTsc3yQ0uIxgjydXQ/5swHwYDVR0j
BBgwFoAUizNTN8vrVLvcDFG6Q09EOecAwFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC84QjMzNTMzN0NCRUI1NEJCREMwQzUxQkE0MzRGNDQzOUU3MDBDMDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCMzM1MzM3Q0JFQjU0QkJE
QzBDNTFCQTQzNEY0NDM5RTcwMEMwNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Mm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdTRWMvMC84
QjMzNTMzN0NCRUI1NEJCREMwQzUxQkE0MzRGNDQzOUU3MDBDMDVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV9aI54KRwHx4PKfS/h4cQzjv+EzbUZA3tNOM+zlzBEHfyNSrEX5MChLU7hfb
sccqTy3FbjNX7UpmkmlfdMt0NebwTWrZacmRe79uUu4P+VR7Po7+o1bEL3JfGken
/pIvdjf+VJaItaq49YdQO7A4rG61yinnQfc5cSedyKjm9I4P6gmEz37Nq22qoTCa
dW0AhjDF6S8SX1spSI08P8LDbgZwJw6UpHc7so9nfzcDL6hQUJEH0Q7O/kJ86hHg
m70zd/B1SJjFviW/dI6ZlmzgRCd+fCh0cN8uwrVpLkDEvGSz4fZ9m1q6lesGHjF0
5lB+HYZVkUB2Fua3v8GyVnAhkA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:37 2025 by rpki-client on console.sobornost.net