Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
File:                     6295613937297D5F10674AC45D3ACAB7545474C7.mft (raw, json)
Hash identifier:          fUz8pwLQQDfjyuGDRTbi48Vx/rYVcZfBOykJUdQ3qpg=
Subject key identifier:   DF:89:70:70:C5:8D:04:D4:C5:4A:F8:D7:45:CF:B3:92:B2:1C:51:E9
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       69CD3B75A122D3BF413A8C1796A55005423896C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
Manifest number:          0138
Signing time:             Thu 24 Apr 2025 15:18:23 +0000
Manifest this update:     Thu 24 Apr 2025 15:13:23 +0000
Manifest next update:     Fri 25 Apr 2025 16:07:23 +0000
Files and hashes:         1: 3136382e3232372e3131332e302f32342d3234203d3e20323634383931.roa (hash: bVcZnhJAs08Wv/0GZJbhp4LiF1l7CNxHWScODoha+nw=)
                          2: 323830343a326637303a343030303a3a2f34302d3430203d3e20323634383931.roa (hash: wpDbmIvjZJ2PZwjWg1k9Y8oX/tSXxeeWyZoARsy7THI=)
                          3: 323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (hash: Tm2koR64FsYL8GGKZoHhAfQNSVSaZz2YxLNj7wJsYBI=)
                          4: 6295613937297D5F10674AC45D3ACAB7545474C7.crl (hash: q4p3BGsQ+ZCtyPoK4EFbJL21yw+AkbcwS+PV4Jbn1tg=)
                          5: 3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (hash: Flouo9avWP0adTMf3UuRg8qCiHH7s3KJOUJOl0Wmqe8=)
                          6: 323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (hash: OfniejyYHml8c4va5ROHpRfubb8Q7PfxH7OJpQK74zA=)
                          7: 3136382e3232372e3131322e302f32322d3232203d3e20323634383931.roa (hash: 1wHAn5amk0Cs6+yxtaz5f3DX5n62GnBuf8Lsme4tuTI=)
                          8: 3136382e3232372e3131342e302f32342d3234203d3e20323634383931.roa (hash: GyjwkmfjuD9s9aCO/bdU+9ka4CB3vdTbsosTvGYVRTY=)
                          9: 323830343a326637303a363030303a3a2f34302d3430203d3e20323634383931.roa (hash: 9QIYFSLMeQNgz4stgJwWugpFuWjWbWssf4CiiGcAe3M=)
                          10: 323830343a326637303a373030303a3a2f34382d3438203d3e20323634383931.roa (hash: P4pQRDBln5kc3Q4dT/X36In4oVbVmaL/ihLBrRFOPSo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cd:3b:75:a1:22:d3:bf:41:3a:8c:17:96:a5:50:05:42:38:96:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Apr 24 15:13:23 2025 GMT
            Not After : Apr 25 16:07:23 2025 GMT
        Subject: CN=DF897070C58D04D4C54AF8D745CFB392B21C51E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:82:30:83:b1:29:d0:52:c2:be:bf:a9:80:
                    a7:a9:97:e5:6b:51:31:51:db:78:95:64:2a:af:a7:
                    cf:c5:e2:59:54:45:b3:e9:61:f2:f6:ef:79:d6:05:
                    fa:25:be:92:bf:a3:9c:40:d1:57:74:80:21:be:08:
                    05:4a:22:ed:a1:a7:29:14:c6:45:2a:9c:69:38:e9:
                    aa:39:c2:55:64:70:04:41:2c:3b:16:d3:f7:29:6a:
                    48:2a:b7:60:83:f5:6d:8c:f9:3a:ac:78:9b:31:1e:
                    a9:92:b8:6d:24:b4:cd:fc:7d:b2:33:72:6a:ba:a5:
                    85:6e:4e:79:7f:6f:70:69:e4:ab:6f:97:5f:0a:07:
                    50:76:8c:ea:8f:46:74:b4:63:86:a5:c7:96:ab:15:
                    e1:74:67:10:b3:70:6e:09:7b:b4:a5:f4:4e:3d:9f:
                    89:88:67:1b:44:c9:39:c8:57:43:7e:9e:e9:bb:fb:
                    08:ef:9b:00:38:3e:b8:a1:37:00:e2:9f:44:50:6b:
                    af:80:3a:34:9f:c5:80:25:a4:f8:52:50:5b:78:ce:
                    b8:37:90:47:b1:63:9f:36:3f:ac:91:0e:4e:ed:07:
                    44:78:5d:10:e2:5b:aa:f2:0e:eb:ad:22:a5:a4:3a:
                    78:c9:5c:da:70:48:a3:3c:a6:fc:62:f7:6f:a6:f1:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:70:70:C5:8D:04:D4:C5:4A:F8:D7:45:CF:B3:92:B2:1C:51:E9
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ae:47:91:3d:ee:e9:dd:29:74:11:0a:f5:a4:d9:0b:6c:f8:
         ae:db:4b:c4:09:4f:c9:11:a2:96:32:b5:13:96:6e:da:3e:2f:
         eb:26:03:d7:c6:48:8e:71:2b:59:3e:18:dd:35:f8:53:0f:aa:
         dc:81:e0:e3:54:19:31:12:0b:51:c6:0b:ba:37:83:a5:56:cd:
         f1:dd:7b:d5:62:6e:0e:ea:7a:4e:30:b2:fe:b3:41:bc:d6:1b:
         4c:47:a7:c8:ff:43:f2:e0:b9:64:b4:4c:58:a0:4e:09:b2:5c:
         04:28:50:3c:22:47:a2:b0:2e:55:b0:e8:7b:9d:9f:e5:74:a5:
         9f:c1:ef:b8:a1:c8:30:0e:c7:6f:2d:ea:ad:b9:8f:56:5a:8c:
         ab:ab:8c:9e:53:29:31:e2:0d:c6:79:fe:b1:e4:80:a9:f7:ce:
         8d:ba:8c:db:54:f9:63:6c:2f:ae:df:11:9f:f2:0f:c7:07:9b:
         97:b3:0f:fb:63:78:84:e5:dd:a3:f9:31:08:9d:16:c0:6a:f1:
         22:26:e8:63:8c:d5:38:87:f9:a2:35:ec:94:79:4e:7d:93:11:
         c0:c1:5e:2a:1b:0f:43:c6:8d:99:b2:56:21:42:c8:fb:94:29:
         81:fe:a4:90:77:79:d4:67:9d:19:a3:b0:06:3b:42:e1:bf:31:
         14:4d:70:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUac07daEi079BOowXlqVQBUI4lsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNTA0MjQxNTEzMjNaFw0yNTA0MjUxNjA3MjNaMDMxMTAvBgNV
BAMTKERGODk3MDcwQzU4RDA0RDRDNTRBRjhENzQ1Q0ZCMzkyQjIxQzUxRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQIIwg7Ep0FLCvr+pgKepl+Vr
UTFR23iVZCqvp8/F4llURbPpYfL273nWBfolvpK/o5xA0Vd0gCG+CAVKIu2hpykU
xkUqnGk46ao5wlVkcARBLDsW0/cpakgqt2CD9W2M+TqseJsxHqmSuG0ktM38fbIz
cmq6pYVuTnl/b3Bp5Ktvl18KB1B2jOqPRnS0Y4alx5arFeF0ZxCzcG4Je7Sl9E49
n4mIZxtEyTnIV0N+num7+wjvmwA4PrihNwDin0RQa6+AOjSfxYAlpPhSUFt4zrg3
kEexY582P6yRDk7tB0R4XRDiW6ryDuutIqWkOnjJXNpwSKM8pvxi92+m8Tg7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU34lwcMWNBNTFSvjXRc+zkrIcUekwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUxTTEvMC82
Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu65HkT3u6d0pdBEK9aTZC2z4rttLxAlPyRGiljK1E5Zu2j4v6yYD18ZIjnEr
WT4Y3TX4Uw+q3IHg41QZMRILUcYLujeDpVbN8d171WJuDup6TjCy/rNBvNYbTEen
yP9D8uC5ZLRMWKBOCbJcBChQPCJHorAuVbDoe52f5XSln8HvuKHIMA7Hby3qrbmP
VlqMq6uMnlMpMeINxnn+seSAqffOjbqM21T5Y2wvrt8Rn/IPxwebl7MP+2N4hOXd
o/kxCJ0WwGrxIiboY4zVOIf5ojXslHlOfZMRwMFeKhsPQ8aNmbJWIULI+5Qpgf6k
kHd51GedGaOwBjtC4b8xFE1wIg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:53 2025 by rpki-client on console.sobornost.net