Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
File:                     0E88601104C6C43AC785175C29585EFD06974620.mft (raw, json)
Hash identifier:          vxC/sGuGUhN3MHPAKIYPWvbTuhw655q9QKRlXOai6Ro=
Subject key identifier:   6A:F4:C2:ED:D0:1D:87:17:86:9E:0A:E1:2A:4D:E9:39:15:BF:2E:A7
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       5BF5EA0B6537440AE6B045DCE83BA075A77CE3FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 04:19:26 +0000
Manifest this update:     Mon 28 Apr 2025 04:14:26 +0000
Manifest next update:     Tue 29 Apr 2025 06:01:26 +0000
Files and hashes:         1: 3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (hash: jF7P3JPghc/AEXiuXRrOdlHXfUjf3+C7Tg5FIpeRjPI=)
                          2: 323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (hash: PX+wwIOc1ieID9iSMRg+d7nEgrl4+4INLeP2emGG/78=)
                          3: 323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (hash: z0PK89XPf7iScPDW5/s/N6ven+AoHLN0gyU8EK0vNeo=)
                          4: 0E88601104C6C43AC785175C29585EFD06974620.crl (hash: wR2s1t/9U/seiO/xazhkRw2mVcmZCZx7srM+hz3gP50=)
                          5: 3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (hash: K84lfU1RhnRjpWwWFsC7fGV98rOEFsh1J68jGmxtvhs=)
                          6: 3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (hash: +3XDDjbpUjZYS64iae7bMObO4htNGF2MzhF9x1grRfk=)
                          7: 3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (hash: 0zrk0rMnYzWSYDq46FuTI0iv0jDwmBnxoaItP+eRn6M=)
                          8: 323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (hash: BuY3JAd+I4GQ4Isw/fBgvSFhIYsLCQ++juQp2KHBFd8=)
                          9: 323830343a323231303a3a2f33322d3332203d3e20323634353839.roa (hash: 5dX02pKTmcG5vMsy47XWvGYRUU8FZoy/F9zypLxTMYI=)
                          10: 3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (hash: DZqiSTx+V0teLhKuCpOTCGoIK1Uvk9SRjn8+zZJSwZY=)
                          11: 3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (hash: CTrQciMDxx8vgbFdw9ZhtXbFV9uTg7+xiXebGL4IcBw=)
                          12: 3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (hash: ZGO5v9LUDQZRjXsn+ndJFWRwUxJYLrzNBAFMDafI0gA=)
                          13: 323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (hash: aB1z7sY/Fwrtj5JKVGNz/9ciptRcynh6JYuqsnxTzUk=)
                          14: 3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (hash: hv9ftqmNpaONsGT5S5w3yZVByFa4B+kPyKFdUqLXgGQ=)
                          15: 323830343a323231303a633030303a3a2f33342d3334203d3e20323634353839.roa (hash: 7DSHhb4g6HFGRhAKFHMHVvfJLvJKpVU7GdrA+yuW66M=)
                          16: 323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (hash: RUPXGYFc3N0ZWFTODpHDk21IQfK7JmFqCdhx/1Ka6tk=)
                          17: 3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (hash: +9KcEL6OAPO2Fq7ZbMshlfBSAjbcWsvCmPPRoUp5LKE=)
                          18: 3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (hash: y048Dkkeefar+0HYkpGi1CGqcQN+18HgNGctlkgGRm4=)
                          19: 3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (hash: zBeuDG3RpGHHGbRjcO/FJ0TSzmfYg8s/84qoaut7x10=)
                          20: 323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (hash: JVP81+cv0YHuMm/kO22QIUMeE8hiF/fIBv9LFC46orI=)
                          21: 3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (hash: 8pt7YXEiXIfFxJCTJdqDqmkT8OgmhItP2tM+ZcM2c14=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f5:ea:0b:65:37:44:0a:e6:b0:45:dc:e8:3b:a0:75:a7:7c:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr 28 04:14:26 2025 GMT
            Not After : Apr 29 06:01:26 2025 GMT
        Subject: CN=6AF4C2EDD01D8717869E0AE12A4DE93915BF2EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:d3:ab:58:c7:4c:13:4e:ed:78:c2:6f:6e:
                    92:31:62:6c:d8:b7:13:e9:f1:0f:7b:71:a8:83:ac:
                    27:db:6c:bc:8e:cb:e7:28:70:4c:af:7a:b1:bf:4b:
                    50:95:dc:9f:e3:38:43:d2:da:b1:2e:86:5d:76:74:
                    bd:67:c8:d4:e7:a9:e7:db:e1:6b:3c:a6:24:b6:b9:
                    26:12:db:39:b8:6e:46:de:5c:b5:6a:cd:fe:01:13:
                    63:fb:5e:8b:b5:55:ac:fe:df:8c:dd:4b:34:71:31:
                    10:2b:6e:2c:42:c2:01:64:f2:1e:46:67:9d:bb:b7:
                    92:a0:4c:29:20:e9:ad:ef:6d:fb:10:ca:1a:32:57:
                    d8:3d:3d:a1:b0:05:9a:5b:fa:67:94:2d:7c:75:32:
                    b7:03:e6:b2:54:97:22:87:cf:c2:f9:2e:f6:aa:a1:
                    da:af:dc:ff:be:b1:f5:1b:8f:b8:e4:e6:21:95:cf:
                    b8:0e:1e:58:f9:ca:e0:34:6c:41:75:45:cf:71:f1:
                    be:11:e6:5a:26:b2:af:b8:14:81:b2:ed:08:d7:e5:
                    8f:b7:ac:ba:db:18:67:c4:48:5d:13:45:ea:eb:6c:
                    5d:1e:d9:a8:63:a1:9c:b4:13:6d:20:1d:ed:82:9b:
                    14:0e:22:a6:45:28:37:f8:25:71:a8:01:b4:04:0e:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:C2:ED:D0:1D:87:17:86:9E:0A:E1:2A:4D:E9:39:15:BF:2E:A7
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:8a:79:cf:5f:85:31:8d:20:15:c8:9e:b3:cc:89:41:4d:
         9e:b9:ab:08:ac:09:5c:5f:70:64:4e:02:8a:10:1b:2c:72:35:
         1a:33:87:cd:32:34:3c:9c:0a:79:ba:3d:96:d0:08:62:3d:ff:
         df:94:d1:39:f0:c9:46:66:1c:e0:f7:55:ca:ca:72:b1:25:c3:
         6d:4c:95:b9:7e:4f:f6:c4:d9:a4:c9:b0:7b:07:19:37:13:5a:
         c9:30:94:7a:97:b9:89:3f:57:f9:1a:5c:04:27:8f:40:d4:18:
         5d:d2:9e:d0:f3:36:74:a7:95:ef:dc:0c:2d:67:38:4f:25:3c:
         c2:7d:6c:a0:e7:a2:d3:cd:ca:82:20:ca:61:02:12:dc:0b:a4:
         b0:38:02:1d:97:e3:0f:52:47:2f:8e:53:ba:a3:d3:20:e3:35:
         6f:8b:9a:47:0c:79:05:bf:33:7c:12:88:60:68:e5:8e:70:dd:
         89:ca:0f:d9:cc:a3:96:b4:1f:64:28:ee:44:a2:2f:e4:9d:13:
         9d:32:5e:46:ce:f3:ed:e3:08:10:39:31:49:25:94:f3:8b:d7:
         cd:f8:1a:70:b2:59:28:58:9d:ee:f8:40:22:4f:8f:3d:60:e6:
         79:15:d8:02:95:ab:41:fd:fb:fa:39:2a:ff:05:cc:9d:4c:bb:
         4c:4b:eb:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW/XqC2U3RArmsEXc6Dugdad84/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4ODYwMTEwNEM2QzQzQUM3ODUxNzVDMjk1ODVFRkQw
Njk3NDYyMDAeFw0yNTA0MjgwNDE0MjZaFw0yNTA0MjkwNjAxMjZaMDMxMTAvBgNV
BAMTKDZBRjRDMkVERDAxRDg3MTc4NjlFMEFFMTJBNERFOTM5MTVCRjJFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4dOrWMdME07teMJvbpIxYmzY
txPp8Q97caiDrCfbbLyOy+cocEyverG/S1CV3J/jOEPS2rEuhl12dL1nyNTnqefb
4Ws8piS2uSYS2zm4bkbeXLVqzf4BE2P7Xou1Vaz+34zdSzRxMRArbixCwgFk8h5G
Z527t5KgTCkg6a3vbfsQyhoyV9g9PaGwBZpb+meULXx1MrcD5rJUlyKHz8L5Lvaq
odqv3P++sfUbj7jk5iGVz7gOHlj5yuA0bEF1Rc9x8b4R5lomsq+4FIGy7QjX5Y+3
rLrbGGfESF0TRerrbF0e2ahjoZy0E20gHe2CmxQOIqZFKDf4JXGoAbQEDjK1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUavTC7dAdhxeGngrhKk3pORW/LqcwHwYDVR0j
BBgwFoAUDohgEQTGxDrHhRdcKVhe/QaXRiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGo5UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1a
ZHQvMS8wRTg4NjAxMTA0QzZDNDNBQzc4NTE3NUMyOTU4NUVGRDA2OTc0NjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFODg2MDExMDRDNkM0M0FD
Nzg1MTc1QzI5NTg1RUZEMDY5NzQ2MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGo5UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1aZHQvMS8w
RTg4NjAxMTA0QzZDNDNBQzc4NTE3NUMyOTU4NUVGRDA2OTc0NjIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcouKec9fhTGNIBXInrPMiUFNnrmrCKwJXF9wZE4CihAbLHI1GjOHzTI0PJwK
ebo9ltAIYj3/35TROfDJRmYc4PdVyspysSXDbUyVuX5P9sTZpMmwewcZNxNayTCU
epe5iT9X+RpcBCePQNQYXdKe0PM2dKeV79wMLWc4TyU8wn1soOei083KgiDKYQIS
3AuksDgCHZfjD1JHL45TuqPTIOM1b4uaRwx5Bb8zfBKIYGjljnDdicoP2cyjlrQf
ZCjuRKIv5J0TnTJeRs7z7eMIEDkxSSWU84vXzfgacLJZKFid7vhAIk+PPWDmeRXY
ApWrQf37+jkq/wXMnUy7TEvrGA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:01 2025 by rpki-client on console.sobornost.net