Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          z8xoKHkQoTcMVB3rnN/MHxbe1VRNLOmCRkzcij90WAE=
Subject key identifier:   11:81:16:00:65:E5:D6:01:69:25:DB:F2:33:4D:8F:DC:E5:68:C0:C5
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       6852F2180AF1A93F30A333883B5EA501A8845F44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 14:20:00 +0000
Manifest this update:     Mon 28 Apr 2025 14:15:00 +0000
Manifest next update:     Tue 29 Apr 2025 16:37:00 +0000
Files and hashes:         1: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: h1+BPE8QKGkGQjlwrOwfbil3+GmL9t/TZ5FhPjfP0Ys=)
                          2: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: 4W24v124P+df/BncordCvQh1rQBygbC6i9dlpNrDj80=)
                          3: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: 8MSaZGp/oQ19MDpNrNYIwOMH8Rvub228ncf8cGi5UrA=)
                          4: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: OnKIYKJargD/FTIo6Z54sfeV3foda7Z1vivFEJao5xA=)
                          5: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: IlooSbQXnxtp9yE158oMr+kw+VRPcvYSK0oGbAfrITs=)
                          6: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: 1QaaHGZII86d9mGbjqzaZ+SrF2kGCAd2kLcMFDLAtT0=)
                          7: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: fyv559suoxOTWuZ+x7F4q8+xix1OaSFY/Rn/K8Tm6UI=)
                          8: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: A29uFPI1dE2pL7Ym7I1sLhIfm55LwVTB0Q1J4KIDhQY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:52:f2:18:0a:f1:a9:3f:30:a3:33:88:3b:5e:a5:01:a8:84:5f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Apr 28 14:15:00 2025 GMT
            Not After : Apr 29 16:37:00 2025 GMT
        Subject: CN=1181160065E5D6016925DBF2334D8FDCE568C0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:92:dd:00:9c:8e:42:f4:a1:76:ff:ba:c6:
                    27:9d:39:97:41:49:e5:09:56:e8:9d:df:a4:98:90:
                    c8:75:05:31:76:b4:c8:a3:1e:a3:02:c2:bd:0c:ef:
                    c4:9b:c4:4c:3b:5d:ca:a9:94:8a:41:db:a5:70:f4:
                    6f:85:df:96:46:c3:3d:fd:af:b4:65:2f:73:52:f4:
                    93:b7:d9:22:c0:30:43:5c:c5:75:c8:1b:f4:07:c9:
                    76:01:31:11:47:d6:3c:3e:32:96:04:6e:c5:92:f8:
                    93:fe:2f:7b:15:e3:08:ed:60:fa:67:da:4a:18:df:
                    1b:24:4d:0e:77:f4:9f:45:c2:97:b6:54:c6:b7:25:
                    02:3b:14:93:c4:67:86:de:39:9a:d6:9f:7b:f3:1a:
                    4d:c1:e9:06:b8:01:c4:66:2c:9f:fa:07:71:04:c7:
                    c0:a6:ee:1b:2b:e2:7a:05:8d:f7:b0:0a:ec:3e:4b:
                    06:f8:cc:ea:ea:b1:44:76:fa:82:f5:d7:8b:d2:74:
                    ed:47:71:8e:4f:31:67:1f:1c:c5:54:be:60:95:e2:
                    41:30:4a:f0:32:09:94:70:de:7c:49:50:ca:3e:69:
                    0b:79:a4:f2:a7:8b:3b:06:9e:16:f4:73:61:ac:76:
                    8e:4e:ba:c6:1e:7a:ff:f1:e8:a2:13:fe:46:25:af:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:16:00:65:E5:D6:01:69:25:DB:F2:33:4D:8F:DC:E5:68:C0:C5
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ee:72:dd:03:a8:ce:ce:2d:e6:db:44:15:99:d8:79:da:b3:
         52:b3:17:93:9e:77:10:5e:15:d7:05:63:69:af:06:43:ba:5a:
         3a:7d:ce:49:3d:f2:7a:b7:ae:ce:41:44:35:b5:9c:fb:f6:4b:
         35:7e:b0:72:26:23:f8:0c:59:64:27:d0:11:da:24:c1:8d:3b:
         60:29:cb:66:cc:57:11:25:e8:03:ea:ee:58:1b:c8:ad:30:59:
         6c:c6:2d:d2:6d:9f:19:dc:ec:c3:b6:17:50:4f:45:08:85:f1:
         6f:8b:dd:04:9c:28:74:79:0c:72:34:55:c1:21:e9:4d:08:45:
         3e:35:8a:d6:ca:30:59:21:45:92:3c:af:7b:84:31:d1:d9:6c:
         65:ed:7c:2a:f9:d4:5f:cc:d2:96:d7:74:62:fc:bc:be:25:ee:
         af:cd:65:25:be:a7:fc:f7:6c:74:16:01:74:be:ea:46:13:9f:
         7b:aa:b3:60:31:d9:11:54:2a:c4:98:70:eb:12:62:92:e5:a8:
         89:48:3a:91:82:27:ea:81:58:aa:27:9a:d2:c3:4a:43:d0:87:
         d5:a3:14:14:e5:c6:f0:c0:39:b9:44:67:b5:8e:f0:4e:63:e5:
         be:77:7d:fe:f5:2f:8e:b5:40:b5:c8:1b:e7:53:24:f5:f9:fc:
         3a:09:40:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaFLyGArxqT8wozOIO16lAaiEX0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGM0Y2N0VBODAwNTA0RjIzNzk1RTIyOTkxODE1RjlF
Njg2QzgxMTAeFw0yNTA0MjgxNDE1MDBaFw0yNTA0MjkxNjM3MDBaMDMxMTAvBgNV
BAMTKDExODExNjAwNjVFNUQ2MDE2OTI1REJGMjMzNEQ4RkRDRTU2OEMwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7apLdAJyOQvShdv+6xiedOZdB
SeUJVuid36SYkMh1BTF2tMijHqMCwr0M78SbxEw7XcqplIpB26Vw9G+F35ZGwz39
r7RlL3NS9JO32SLAMENcxXXIG/QHyXYBMRFH1jw+MpYEbsWS+JP+L3sV4wjtYPpn
2koY3xskTQ539J9Fwpe2VMa3JQI7FJPEZ4beOZrWn3vzGk3B6Qa4AcRmLJ/6B3EE
x8Cm7hsr4noFjfewCuw+Swb4zOrqsUR2+oL114vSdO1HcY5PMWcfHMVUvmCV4kEw
SvAyCZRw3nxJUMo+aQt5pPKnizsGnhb0c2Gsdo5OusYeev/x6KIT/kYlrzKXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEYEWAGXl1gFpJdvyM02P3OVowMUwHwYDVR0j
BBgwFoAU1/P2fqgAUE8jeV4imRgV+eaGyBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdx
dWUvMS9EN0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RjNGNjdFQTgwMDUwNEYy
Mzc5NUUyMjk5MTgxNUY5RTY4NkM4MTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk1mUG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMS9E
N0YzRjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY+5y3QOozs4t5ttEFZnYedqzUrMXk553EF4V1wVjaa8GQ7paOn3OST3yereu
zkFENbWc+/ZLNX6wciYj+AxZZCfQEdokwY07YCnLZsxXESXoA+ruWBvIrTBZbMYt
0m2fGdzsw7YXUE9FCIXxb4vdBJwodHkMcjRVwSHpTQhFPjWK1sowWSFFkjyve4Qx
0dlsZe18KvnUX8zSltd0Yvy8viXur81lJb6n/PdsdBYBdL7qRhOfe6qzYDHZEVQq
xJhw6xJikuWoiUg6kYIn6oFYqiea0sNKQ9CH1aMUFOXG8MA5uURntY7wTmPlvnd9
/vUvjrVAtcgb51Mk9fn8OglA8g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:02 2025 by rpki-client on console.sobornost.net