Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
File:                     06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft (raw, json)
Hash identifier:          B2gP3KUDhqlxvAvuwoJd6ZvA5VfQqeK2zpXdI7U0pJg=
Subject key identifier:   43:BE:5E:84:CB:FD:4E:6A:E3:F0:55:29:B9:D2:E4:2E:76:A9:B9:33
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       4203582A675AC11790ADBE0E7F7D33FE00613804
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 02:50:00 +0000
Manifest this update:     Mon 28 Apr 2025 02:45:00 +0000
Manifest next update:     Tue 29 Apr 2025 04:25:00 +0000
Files and hashes:         1: 3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (hash: VJikl/3nm/8I6Y6J82gL5vQrKAHsyoQCf/eCIkwxPJ0=)
                          2: 06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl (hash: o57h49xR6kLYT0jgHKaEpK2xTjtc6B4e6e0/oPvAyOg=)
                          3: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: bdoIk1Ag9RA6dAVTEOU+HWP/8MI8aK3J9BHrjAzueqg=)
                          4: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: 8lAxpoHN0cPLmBISxaokeboqnT1u07//nilPkj7iMjg=)
                          5: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: b6iIVydTh43XokrS/1WVUXDbFQjVZ4DainVRRNA3Ucs=)
                          6: 3137372e38342e34322e302f32332d3233203d3e203532373038.roa (hash: YvwgD6fKowYuzWRPQe0uYtKEhEj2PboBzIToCJOMGKo=)
                          7: 3137372e38342e34302e302f32332d3233203d3e203532373038.roa (hash: txbtQ4+KsBmDnzeVugvTddlXwMd2CaM4d5jfa1CwLzo=)
                          8: 3133382e3131382e3130322e302f32332d3233203d3e203532373038.roa (hash: 6SMyLXYm7o+6nD4HiC1sx57AD5tgiDGsqISt31nmv/M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:58:2a:67:5a:c1:17:90:ad:be:0e:7f:7d:33:fe:00:61:38:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Apr 28 02:45:00 2025 GMT
            Not After : Apr 29 04:25:00 2025 GMT
        Subject: CN=43BE5E84CBFD4E6AE3F05529B9D2E42E76A9B933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:d1:ed:ee:16:19:6b:08:a5:59:04:ec:64:
                    03:03:80:2e:b0:52:a7:58:14:dd:47:76:e7:2b:d2:
                    3e:15:da:96:d9:15:fc:e3:7b:01:a2:5d:eb:7f:35:
                    c2:44:e4:80:9b:16:d6:48:82:e9:ac:01:ca:46:09:
                    a0:80:79:ca:af:01:e2:00:3e:82:ea:79:83:df:a9:
                    4a:d8:8d:78:d4:12:0e:e7:a6:3d:53:58:70:50:4c:
                    d5:f9:78:94:2a:a7:78:c0:68:44:a6:0e:bc:b8:6c:
                    f9:a3:7a:78:72:3e:e8:07:65:54:72:9f:c4:5a:9c:
                    6e:b9:42:f8:92:38:d8:13:dc:f6:72:fe:66:2a:e0:
                    ce:46:27:14:93:4d:31:36:73:52:e0:50:77:0e:d0:
                    9a:53:e8:33:03:36:36:9c:e8:6d:4f:62:ec:33:23:
                    28:91:f3:69:9a:bb:44:fe:fc:86:d3:c9:9f:11:0b:
                    d8:1c:bd:f1:74:f6:d1:73:de:9b:fa:26:ad:e3:79:
                    5c:a6:cd:62:26:a0:e0:0b:b6:69:fe:8d:cd:61:63:
                    16:2b:8c:0c:c1:6c:03:30:c5:27:cd:90:80:05:c1:
                    e1:34:e2:bb:b5:8b:4a:04:ff:e3:27:18:d0:f7:e3:
                    05:ed:c4:12:c3:cf:97:8e:77:1d:07:4e:47:a4:d5:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:5E:84:CB:FD:4E:6A:E3:F0:55:29:B9:D2:E4:2E:76:A9:B9:33
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:22:0d:61:85:b2:b4:7a:ed:00:70:4d:d1:8b:35:31:9a:
         aa:3d:84:fd:4c:49:c4:2a:73:b1:bb:fa:bf:9a:91:d5:69:f1:
         68:dd:42:65:f2:86:9b:ff:ce:05:c6:9e:11:80:12:d8:4c:e6:
         6b:11:cd:7f:62:26:f8:e6:7d:71:82:77:af:91:1a:f9:97:b3:
         cb:dc:1f:b9:b7:6b:6a:ea:1c:85:b6:33:ce:06:15:d5:81:11:
         9f:b8:5b:cc:97:7b:40:0a:75:af:ce:c8:bc:74:ce:8b:97:36:
         3f:96:4d:9f:02:43:ed:39:77:ca:1c:9f:2a:49:e0:2b:ce:54:
         7c:34:e7:25:72:b0:e5:5f:75:50:2a:09:41:5b:6e:3c:8c:d1:
         81:a0:37:dc:cf:14:71:7a:12:0b:d9:b2:18:3f:25:fc:14:c0:
         2d:27:d0:ba:a5:1f:84:6b:5c:ef:14:ae:1f:94:46:b8:dc:01:
         9a:08:ff:31:cd:c5:9e:d9:62:cf:af:32:c1:fd:f1:7b:b0:1a:
         46:27:ff:80:c0:e9:50:c2:0b:35:eb:05:8e:ae:01:51:88:c3:
         e8:6c:5b:4f:7c:0d:6b:67:16:bf:17:5b:ea:2d:2c:ac:36:6e:
         fc:65:a1:a5:2b:81:dc:9f:c2:87:a0:51:37:a8:f8:2f:36:be:
         13:72:94:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQgNYKmdawReQrb4Of30z/gBhOAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNTA0MjgwMjQ1MDBaFw0yNTA0MjkwNDI1MDBaMDMxMTAvBgNV
BAMTKDQzQkU1RTg0Q0JGRDRFNkFFM0YwNTUyOUI5RDJFNDJFNzZBOUI5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKtHt7hYZawilWQTsZAMDgC6w
UqdYFN1Hducr0j4V2pbZFfzjewGiXet/NcJE5ICbFtZIgumsAcpGCaCAecqvAeIA
PoLqeYPfqUrYjXjUEg7npj1TWHBQTNX5eJQqp3jAaESmDry4bPmjenhyPugHZVRy
n8RanG65QviSONgT3PZy/mYq4M5GJxSTTTE2c1LgUHcO0JpT6DMDNjac6G1PYuwz
IyiR82mau0T+/IbTyZ8RC9gcvfF09tFz3pv6Jq3jeVymzWImoOALtmn+jc1hYxYr
jAzBbAMwxSfNkIAFweE04ru1i0oE/+MnGND34wXtxBLDz5eOdx0HTkek1eM7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQ75ehMv9Tmrj8FUpudLkLnapuTMwHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhVZ00vMS8w
NjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaSoiDWGFsrR67QBwTdGLNTGaqj2E/UxJxCpzsbv6v5qR1WnxaN1CZfKGm//O
BcaeEYAS2EzmaxHNf2Im+OZ9cYJ3r5Ea+Zezy9wfubdrauochbYzzgYV1YERn7hb
zJd7QAp1r87IvHTOi5c2P5ZNnwJD7Tl3yhyfKkngK85UfDTnJXKw5V91UCoJQVtu
PIzRgaA33M8UcXoSC9myGD8l/BTALSfQuqUfhGtc7xSuH5RGuNwBmgj/Mc3Fntli
z68ywf3xe7AaRif/gMDpUMILNesFjq4BUYjD6GxbT3wNa2cWvxdb6i0srDZu/GWh
pSuB3J/Ch6BRN6j4Lza+E3KURQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:17 2025 by rpki-client on console.sobornost.net