Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
File:                     99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft (raw, json)
Hash identifier:          bVd2gruCBwnKmQxic+tpQYHRWTp4VBg9g6bMZOo5Dpk=
Subject key identifier:   2B:78:B2:00:78:FD:42:42:10:5B:10:CB:21:C2:F6:EC:2D:A2:8A:23
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       70CE38027D28312EB6A4DEF1892C1A48D801D2F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
Manifest number:          0204
Signing time:             Thu 24 Apr 2025 13:56:20 +0000
Manifest this update:     Thu 24 Apr 2025 13:51:20 +0000
Manifest next update:     Fri 25 Apr 2025 14:20:20 +0000
Files and hashes:         1: 3133312e3235352e3230382e302f32322d3234203d3e20323632393739.roa (hash: TW3vn7hd3LmpZ9T7OuDdrXhHVpAyfOPXx4myq6oBieA=)
                          2: 3136382e3139372e36342e302f32322d3234203d3e20323632393739.roa (hash: o1APx19Z8jCLajTrTQsIgxmAK2MDleDG9QHV9i7M1Dg=)
                          3: 323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa (hash: UCN0tXU+v6JiP4i5sXaHg7zaxgJAkQYyWnktXNiM464=)
                          4: 99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl (hash: I7yIexNWao/P8rg/1eitigDaA4sPIR+jzfIIyJPuZQA=)
                          5: 323830343a3961383a3a2f33342d3334203d3e20323632393739.roa (hash: IMg0XSt5iJ4/NqU6rmly65bg7GDA8Kxw0OtIzlwm9Ag=)
                          6: 3133312e3235352e3230382e302f32342d3234203d3e20323632393739.roa (hash: WSW5Sva3lR+06+wf+vhpdkJvP1TttxYl2SAqIlj2W7c=)
                          7: 3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa (hash: kIETFEjytc64Ht6Qy7vYApVFlHaiEJUSa+u0ugnHpD8=)
                          8: 323830343a3961383a343030303a3a2f33342d3334203d3e20323632393739.roa (hash: Qm0tSgQTPEe7dsKHJf9XlxrruuB+P+nX8Pj/Bsc4CPw=)
                          9: 323830343a3961383a3a2f33342d3336203d3e20323632393739.roa (hash: WzCD2fYWaZ4v20H/XyeRnoqnKjV2+dLGiiw/jz/7L7Q=)
                          10: 323830343a3961383a633030303a3a2f33342d3336203d3e20323632393739.roa (hash: qRK5k4AB6fhTHx3sVqMlDB90OpQoVK83qqoJ3kHznkA=)
                          11: 3138362e3232362e34382e302f32312d3234203d3e20323632393739.roa (hash: n0pAKAPUbtKDUvKnOIysUQ100fhIIH7CfQ1k3+MJVJY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ce:38:02:7d:28:31:2e:b6:a4:de:f1:89:2c:1a:48:d8:01:d2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr 24 13:51:20 2025 GMT
            Not After : Apr 25 14:20:20 2025 GMT
        Subject: CN=2B78B20078FD4242105B10CB21C2F6EC2DA28A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:d5:44:29:c0:07:77:c6:8f:52:c9:d6:78:
                    80:bd:bb:9d:35:23:b6:a3:ca:05:b6:74:f7:11:f2:
                    9a:53:f0:5c:a4:4b:c8:9b:74:10:6a:31:8d:96:2f:
                    7e:67:c4:de:d6:cd:f4:26:6a:4a:c6:cd:f1:7f:29:
                    2d:59:c1:f9:7f:8d:4c:8d:85:07:b5:32:15:43:55:
                    7e:5d:c9:5d:cd:6a:b9:22:7a:d7:34:b6:06:b8:71:
                    4c:11:eb:fc:82:17:50:63:e4:a6:a0:91:b3:15:db:
                    75:17:9f:ca:72:96:b6:28:04:47:9e:8b:2b:bf:8c:
                    fa:24:ad:65:5d:27:dc:8b:93:8d:89:72:98:68:12:
                    01:be:ed:a0:c4:18:a4:6c:09:b6:11:4c:75:1f:e2:
                    6c:72:ed:bb:4d:9a:07:b4:53:46:77:57:7b:20:ce:
                    05:85:e2:1b:0f:83:07:27:d9:ce:ad:7e:0d:f1:9a:
                    7e:90:d0:e3:da:51:3d:7b:8d:b6:70:10:0c:89:64:
                    99:12:c8:9d:1a:4a:01:1c:1a:4d:61:9b:6f:1b:5f:
                    93:6c:ed:e1:a0:8a:b8:03:55:59:50:5f:a5:ef:99:
                    fe:88:b8:20:60:c6:ea:f0:e3:97:02:ed:2f:30:fe:
                    36:8e:6b:b6:38:bd:bd:0b:87:57:1d:79:a7:f7:3d:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:B2:00:78:FD:42:42:10:5B:10:CB:21:C2:F6:EC:2D:A2:8A:23
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:91:96:32:a3:f0:2e:bd:df:20:59:45:3b:85:f5:6e:14:b3:
         85:e3:29:5b:83:3a:c8:f5:a4:b4:5e:d5:9a:7f:92:9b:8f:88:
         77:3f:67:b2:28:7c:7a:ff:4e:0a:9f:6a:a1:e1:8f:9c:17:c7:
         44:09:22:f2:4f:3a:4f:59:40:3e:a3:0c:c0:43:e7:8b:0c:84:
         03:c9:e1:fc:ec:28:45:25:ab:3f:8d:d2:c3:5b:db:06:24:09:
         7c:7a:64:b9:20:c6:be:70:dc:c7:32:0e:03:80:4a:34:0c:05:
         de:79:20:b0:ad:07:6b:bf:bc:bc:27:b0:29:e1:0d:74:15:3d:
         e0:9c:dc:03:d1:3c:4e:ef:72:ef:b6:42:8f:90:5a:07:95:01:
         28:51:8d:db:1c:37:5a:83:b3:50:b0:e0:13:31:2e:ec:9d:72:
         53:01:01:a5:9b:fc:21:98:4a:a2:27:2a:0c:4b:0e:e2:53:cc:
         5f:ed:32:a3:32:ab:b3:48:18:88:14:94:3e:99:33:7d:ec:64:
         44:d3:d2:f8:23:33:bb:66:e3:d0:4e:1b:b2:b6:1d:fa:3c:10:
         c7:3c:79:0a:4c:a3:88:91:f1:d7:9d:0f:50:93:dd:0b:54:e7:
         22:b3:58:9a:e3:64:90:73:a4:9c:25:bb:29:96:e6:8f:73:96:
         2d:58:3f:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcM44An0oMS62pN7xiSwaSNgB0vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlFOURGNDgwQzVFN0ZBQ0VFQUQ3RTc3NTlFNUVFRjND
NDczMEUwRDAeFw0yNTA0MjQxMzUxMjBaFw0yNTA0MjUxNDIwMjBaMDMxMTAvBgNV
BAMTKDJCNzhCMjAwNzhGRDQyNDIxMDVCMTBDQjIxQzJGNkVDMkRBMjhBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u9VEKcAHd8aPUsnWeIC9u501
I7ajygW2dPcR8ppT8FykS8ibdBBqMY2WL35nxN7WzfQmakrGzfF/KS1Zwfl/jUyN
hQe1MhVDVX5dyV3Narkietc0tga4cUwR6/yCF1Bj5KagkbMV23UXn8pylrYoBEee
iyu/jPokrWVdJ9yLk42JcphoEgG+7aDEGKRsCbYRTHUf4mxy7btNmge0U0Z3V3sg
zgWF4hsPgwcn2c6tfg3xmn6Q0OPaUT17jbZwEAyJZJkSyJ0aSgEcGk1hm28bX5Ns
7eGgirgDVVlQX6Xvmf6IuCBgxurw45cC7S8w/jaOa7Y4vb0Lh1cdeaf3PVvzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUK3iyAHj9QkIQWxDLIcL27C2iiiMwHwYDVR0j
BBgwFoAUmenfSAxef6zurX53WeXu88RzDg0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMS85OUU5REY0ODBDNUU3RkFDRUVBRDdFNzc1OUU1RUVGM0M0NzMwRTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RTlERjQ4MEM1RTdGQUNF
RUFEN0U3NzU5RTVFRUYzQzQ3MzBFMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04SDgvMS85
OUU5REY0ODBDNUU3RkFDRUVBRDdFNzc1OUU1RUVGM0M0NzMwRTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI5GWMqPwLr3fIFlFO4X1bhSzheMpW4M6yPWktF7Vmn+Sm4+Idz9nsih8ev9O
Cp9qoeGPnBfHRAki8k86T1lAPqMMwEPniwyEA8nh/OwoRSWrP43Sw1vbBiQJfHpk
uSDGvnDcxzIOA4BKNAwF3nkgsK0Ha7+8vCewKeENdBU94JzcA9E8Tu9y77ZCj5Ba
B5UBKFGN2xw3WoOzULDgEzEu7J1yUwEBpZv8IZhKoicqDEsO4lPMX+0yozKrs0gY
iBSUPpkzfexkRNPS+CMzu2bj0E4bsrYd+jwQxzx5CkyjiJHx150PUJPdC1TnIrNY
muNkkHOknCW7KZbmj3OWLVg/RQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:49 2025 by rpki-client on console.sobornost.net