Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
File:                     E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft (raw, json)
Hash identifier:          vVyZRFQ2HDpb4ntF4XmqW+8R7+4TlqxTgIulrntB4DU=
Subject key identifier:   BF:C5:22:5A:42:C7:71:F4:80:2E:31:7C:69:A8:4D:E7:35:10:01:8A
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       3F1700BE6C87328DE3A7C205C33BEC8DD8D3FB05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
Manifest number:          018B
Signing time:             Sun 27 Apr 2025 10:08:35 +0000
Manifest this update:     Sun 27 Apr 2025 10:03:35 +0000
Manifest next update:     Mon 28 Apr 2025 13:50:35 +0000
Files and hashes:         1: 3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (hash: QT/8840aCQzIBIgJq9wP0tXm3eZ2KPh0fyrbYBNhiwo=)
                          2: 3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (hash: JfwWtY+uPRVPfp59XudHg1Yrqq/To0s7IhsAmfYuoD4=)
                          3: 323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (hash: T0v9VCDeLdLJVwrgnn2LjVWM9w3e95fFBisjWyt0UDY=)
                          4: E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl (hash: ChWxCChyZqdXKqjDy+edBDF5sKxaNxv3A3ncE9Pa3Wg=)
                          5: 34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (hash: P0zH4PM0p4SuhxF2KnFq4rADXb7V40mRPDOeZ6lYLEw=)
                          6: 3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (hash: PmkLHk0HnQJR6r/7JHOZJ7IcO4BbKhZv2hdaZ80CSi0=)
                          7: 3137302e38322e342e302f32322d3234203d3e20323636343333.roa (hash: 9ixvRzTLNkYXMmDlhA3H9zE8lXddLYWteXNFhEvDFl8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:00:be:6c:87:32:8d:e3:a7:c2:05:c3:3b:ec:8d:d8:d3:fb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Apr 27 10:03:35 2025 GMT
            Not After : Apr 28 13:50:35 2025 GMT
        Subject: CN=BFC5225A42C771F4802E317C69A84DE73510018A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:eb:66:d6:b2:22:1f:6c:f9:75:13:9a:0c:
                    a6:c2:41:c4:5e:d0:98:2d:eb:44:35:fb:6b:43:48:
                    95:82:dd:a5:d8:51:32:6f:ed:6d:61:c6:66:fc:9d:
                    a8:0d:46:c3:8a:9c:c5:72:68:de:01:47:88:fe:2e:
                    5c:bb:1b:27:74:ea:85:d5:04:ef:0a:45:86:61:a9:
                    5e:d9:01:d4:2d:f4:31:49:d3:d2:7e:ff:68:0a:3a:
                    80:67:06:05:2f:ef:d8:d0:87:3c:c3:51:31:c0:20:
                    59:fa:8c:33:51:45:00:20:9d:2f:97:02:25:dc:37:
                    76:81:ac:52:b2:8d:52:d1:be:cb:d1:a7:fd:d8:4c:
                    4f:84:4a:b1:4b:17:55:20:80:0a:0e:cb:43:26:31:
                    b7:1d:9f:57:f8:ec:3a:0f:8e:f7:ce:28:bf:6a:35:
                    60:47:2b:69:f3:30:76:52:a3:a2:e0:43:bc:65:ba:
                    e3:88:04:a6:35:d7:15:b8:b2:df:f3:0d:a7:e4:61:
                    14:01:e7:66:f5:e3:a2:d8:41:10:23:a9:e5:43:b2:
                    c4:2a:87:96:d7:98:a3:04:02:8e:07:89:a1:47:3a:
                    ed:fd:84:40:bd:3b:9b:40:01:6e:14:64:5f:c0:a9:
                    4c:35:e2:d9:84:2c:8e:af:80:87:b0:2d:76:db:05:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:22:5A:42:C7:71:F4:80:2E:31:7C:69:A8:4D:E7:35:10:01:8A
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:ce:b0:1b:4f:63:91:92:50:a5:41:d5:ff:cc:1b:9c:91:
         49:ae:c4:be:0b:d7:c0:14:75:33:40:f7:ad:64:e2:24:6c:22:
         f2:90:11:d0:51:d7:ff:57:4c:ee:62:89:38:94:17:2d:f0:f4:
         d1:a1:c2:f1:ac:9a:65:38:1b:95:fa:d4:f9:b0:80:7c:7b:77:
         87:a4:d2:f9:8c:10:6c:59:83:10:7f:55:02:8f:3e:af:3c:d0:
         bc:11:ca:e8:53:45:3e:d7:89:b0:34:cf:f8:e8:44:aa:3c:6a:
         1d:3f:cc:0c:59:a9:b4:02:b2:11:7d:9e:2f:84:6f:70:a7:c3:
         cd:82:52:a5:03:08:01:6c:15:0b:2e:dc:83:7d:e5:02:60:9d:
         5d:44:db:4d:a2:d0:6b:38:0c:94:41:ec:58:0d:11:61:6a:06:
         c4:94:df:19:6b:36:2e:31:d0:7a:a4:2e:a3:4a:52:e1:2c:07:
         b4:b4:2b:1a:e3:6f:ad:f9:80:a9:27:f8:35:e1:d6:0c:54:29:
         0d:c4:80:2a:f7:3c:32:f8:0b:d0:0d:48:64:0d:aa:2b:bc:e0:
         90:53:d5:9e:4d:e5:f4:5a:f0:70:5b:59:6a:f0:d2:ad:1b:9b:
         e1:57:5b:da:7b:7a:c7:51:1a:1f:71:b7:87:d0:46:cf:e8:c0:
         7c:58:6f:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPxcAvmyHMo3jp8IFwzvsjdjT+wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNTA0MjcxMDAzMzVaFw0yNTA0MjgxMzUwMzVaMDMxMTAvBgNV
BAMTKEJGQzUyMjVBNDJDNzcxRjQ4MDJFMzE3QzY5QTg0REU3MzUxMDAxOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGetm1rIiH2z5dROaDKbCQcRe
0Jgt60Q1+2tDSJWC3aXYUTJv7W1hxmb8nagNRsOKnMVyaN4BR4j+Lly7Gyd06oXV
BO8KRYZhqV7ZAdQt9DFJ09J+/2gKOoBnBgUv79jQhzzDUTHAIFn6jDNRRQAgnS+X
AiXcN3aBrFKyjVLRvsvRp/3YTE+ESrFLF1UggAoOy0MmMbcdn1f47DoPjvfOKL9q
NWBHK2nzMHZSo6LgQ7xluuOIBKY11xW4st/zDafkYRQB52b146LYQRAjqeVDssQq
h5bXmKMEAo4HiaFHOu39hEC9O5tAAW4UZF/AqUw14tmELI6vgIewLXbbBbqTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUv8UiWkLHcfSALjF8aahN5zUQAYowHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5VWYvMC9F
NEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAin3OsBtPY5GSUKVB1f/MG5yRSa7EvgvXwBR1M0D3rWTiJGwi8pAR0FHX/1dM
7mKJOJQXLfD00aHC8ayaZTgblfrU+bCAfHt3h6TS+YwQbFmDEH9VAo8+rzzQvBHK
6FNFPteJsDTP+OhEqjxqHT/MDFmptAKyEX2eL4RvcKfDzYJSpQMIAWwVCy7cg33l
AmCdXUTbTaLQazgMlEHsWA0RYWoGxJTfGWs2LjHQeqQuo0pS4SwHtLQrGuNvrfmA
qSf4NeHWDFQpDcSAKvc8MvgL0A1IZA2qK7zgkFPVnk3l9FrwcFtZavDSrRub4Vdb
2nt6x1EaH3G3h9BGz+jAfFhvTA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:42 2025 by rpki-client on console.sobornost.net