Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
File:                     31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft (raw, json)
Hash identifier:          bKbdh1aNLENwvCCEs1OGAjpiYagsylOJrSGj/wq9nkU=
Subject key identifier:   D2:74:0F:C4:74:A0:0B:97:5D:FF:9A:BA:93:85:16:14:E6:C4:D1:52
Authority key identifier: 31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A
Certificate issuer:       /CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
Certificate serial:       7088F09DFA4A050E00E5272D2790BF260165C511
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
Manifest number:          35
Signing time:             Sun 27 Apr 2025 19:22:23 +0000
Manifest this update:     Sun 27 Apr 2025 19:17:23 +0000
Manifest next update:     Mon 28 Apr 2025 21:56:23 +0000
Files and hashes:         1: 3139302e3131352e38382e302f32322d3332203d3e20323730343437.roa (hash: YDJJYAlcpeXdKh3/U6MEx2jUv/4DwQcLdf0Z+WaQyNA=)
                          2: 31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl (hash: DhRELcYtADzggsgl3bPSuDLDLOI63Vs4Qqk1eg0CgpY=)
                          3: 323830343a366332303a3a2f33322d313238203d3e20323730343437.roa (hash: DorTwbUOLwkTWSbCegTSzzNUUDo09uyffkNjsAxZEm0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl
                          rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:88:f0:9d:fa:4a:05:0e:00:e5:27:2d:27:90:bf:26:01:65:c5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31B5F96F3B9191256E666BEB1B1FAD77B363E20A
        Validity
            Not Before: Apr 27 19:17:23 2025 GMT
            Not After : Apr 28 21:56:23 2025 GMT
        Subject: CN=D2740FC474A00B975DFF9ABA93851614E6C4D152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:fb:fe:b9:58:1d:61:14:3e:73:51:a7:ab:
                    fc:31:0c:b8:fb:8e:e4:2a:1f:52:1b:3e:2d:aa:9b:
                    ec:36:2d:ac:35:4f:20:7c:f2:fe:94:43:f9:82:7d:
                    25:22:0f:ba:75:3b:88:d3:0a:58:3b:0f:c7:3a:2b:
                    0f:0b:c5:42:23:09:84:24:72:43:09:c4:9c:a5:d2:
                    1f:cd:2d:c8:9b:ad:d8:cf:53:0f:63:0f:43:a3:70:
                    db:71:20:fa:cd:3c:7f:b7:d9:ad:85:4e:53:43:f0:
                    47:a9:5b:f5:42:5d:6a:cb:ec:47:a1:d4:c3:9a:e7:
                    b2:e7:f1:66:c7:28:31:75:8d:1a:29:20:1a:16:c7:
                    94:15:c6:2d:8e:b6:fd:16:64:cf:e2:23:0f:e7:50:
                    80:a2:db:08:1f:da:5a:ed:86:3d:36:9c:f6:3a:0c:
                    a4:8a:96:0d:a3:7e:a1:79:9b:3a:3b:61:ae:eb:52:
                    0b:75:34:0a:c9:5f:1d:ce:ed:b2:dc:a4:0e:44:02:
                    66:6b:09:ea:5e:93:17:29:79:4f:ca:94:c5:0f:39:
                    01:d0:a2:0f:58:74:74:43:45:f7:c4:d7:c6:ae:db:
                    6e:49:8a:55:ab:1d:97:b1:09:f6:61:6b:f6:2c:00:
                    f7:14:11:b7:fb:98:ef:e7:ce:6b:4d:6d:fd:bf:2f:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:74:0F:C4:74:A0:0B:97:5D:FF:9A:BA:93:85:16:14:E6:C4:D1:52
            X509v3 Authority Key Identifier:
                keyid:31:B5:F9:6F:3B:91:91:25:6E:66:6B:EB:1B:1F:AD:77:B3:63:E2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8ywv9AkLNUzN1wQTUK5cNHBTrK5YfhXsukmCxnJtbQm/0/31B5F96F3B9191256E666BEB1B1FAD77B363E20A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:70:28:d9:7e:2b:b1:03:6f:ce:fa:78:c7:38:02:c0:cc:
         c8:14:e3:fc:77:1a:05:21:98:f2:b1:7a:a5:3f:d2:aa:ab:67:
         e4:e0:61:ed:cb:11:62:32:b3:bd:8d:72:71:09:2c:30:56:14:
         8a:48:7c:c6:fb:ce:6d:9e:74:33:85:c9:cc:c7:78:9b:40:8f:
         13:07:a8:5d:65:0e:15:98:74:4e:dd:db:e6:88:ff:2a:d3:01:
         ee:24:3e:10:b7:25:44:21:60:2c:1f:c2:52:73:77:48:7e:a3:
         da:c4:1a:0a:84:70:cf:e3:16:7c:88:0d:b4:63:10:ef:c3:e1:
         4c:bd:29:28:49:e1:13:b1:ab:e1:f8:f7:90:c8:e5:29:d0:cb:
         58:71:54:b9:40:d2:b6:2a:ad:ec:11:04:12:25:21:69:92:89:
         18:a0:28:fa:e4:01:3d:37:34:f5:02:75:e3:dd:dc:85:4d:c1:
         46:97:af:eb:b7:78:17:cb:de:10:9c:79:30:1b:7f:41:82:3c:
         fc:cd:28:44:0a:00:59:84:a0:1a:1a:a8:1d:47:28:5b:be:db:
         c2:4f:20:0b:46:ff:98:11:51:b8:49:90:45:12:48:c8:0f:25:
         e2:84:cc:db:cf:7a:62:1b:70:24:4c:20:1f:d2:c4:e5:a1:d6:
         1a:3e:8f:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcIjwnfpKBQ4A5SctJ5C/JgFlxREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCNUY5NkYzQjkxOTEyNTZFNjY2QkVCMUIxRkFENzdC
MzYzRTIwQTAeFw0yNTA0MjcxOTE3MjNaFw0yNTA0MjgyMTU2MjNaMDMxMTAvBgNV
BAMTKEQyNzQwRkM0NzRBMDBCOTc1REZGOUFCQTkzODUxNjE0RTZDNEQxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5x/v+uVgdYRQ+c1Gnq/wxDLj7
juQqH1IbPi2qm+w2Law1TyB88v6UQ/mCfSUiD7p1O4jTClg7D8c6Kw8LxUIjCYQk
ckMJxJyl0h/NLcibrdjPUw9jD0OjcNtxIPrNPH+32a2FTlND8EepW/VCXWrL7Eeh
1MOa57Ln8WbHKDF1jRopIBoWx5QVxi2Otv0WZM/iIw/nUICi2wgf2lrthj02nPY6
DKSKlg2jfqF5mzo7Ya7rUgt1NArJXx3O7bLcpA5EAmZrCepekxcpeU/KlMUPOQHQ
og9YdHRDRffE18au225JilWrHZexCfZha/YsAPcUEbf7mO/nzmtNbf2/L2+XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0nQPxHSgC5dd/5q6k4UWFObE0VIwHwYDVR0j
BBgwFoAUMbX5bzuRkSVuZmvrGx+td7Nj4gowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzh5d3Y5QWtMTlV6TjF3UVRVSzVjTkhCVHJLNVlmaFhzdWttQ3huSnRi
UW0vMC8zMUI1Rjk2RjNCOTE5MTI1NkU2NjZCRUIxQjFGQUQ3N0IzNjNFMjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQjVGOTZGM0I5MTkxMjU2
RTY2NkJFQjFCMUZBRDc3QjM2M0UyMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qzh5d3Y5QWtMTlV6TjF3UVRVSzVjTkhCVHJLNVlmaFhzdWttQ3huSnRiUW0vMC8z
MUI1Rjk2RjNCOTE5MTI1NkU2NjZCRUIxQjFGQUQ3N0IzNjNFMjBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlsdwKNl+K7EDb876eMc4AsDMyBTj/HcaBSGY8rF6pT/Sqqtn5OBh7csRYjKz
vY1ycQksMFYUikh8xvvObZ50M4XJzMd4m0CPEweoXWUOFZh0Tt3b5oj/KtMB7iQ+
ELclRCFgLB/CUnN3SH6j2sQaCoRwz+MWfIgNtGMQ78PhTL0pKEnhE7Gr4fj3kMjl
KdDLWHFUuUDStiqt7BEEEiUhaZKJGKAo+uQBPTc09QJ1493chU3BRpev67d4F8ve
EJx5MBt/QYI8/M0oRAoAWYSgGhqoHUcoW77bwk8gC0b/mBFRuEmQRRJIyA8l4oTM
2896YhtwJEwgH9LE5aHWGj6P4g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:12 2025 by rpki-client on console.sobornost.net