Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
File:                     3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft (raw, json)
Hash identifier:          kf8O3xrSBtwatQHnCU2ZKGOJH2f8QgMytz8U9jOwFO8=
Subject key identifier:   2C:A9:C7:A0:1C:F2:E8:D5:C6:F5:92:6D:1B:39:59:65:B3:BE:4B:B1
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       1CC946ED70E142DF27C0B3E825637775BABAFAB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
Manifest number:          0200
Signing time:             Sun 27 Apr 2025 04:35:10 +0000
Manifest this update:     Sun 27 Apr 2025 04:30:10 +0000
Manifest next update:     Mon 28 Apr 2025 07:13:10 +0000
Files and hashes:         1: 323830343a6531633a3a2f34382d3438203d3e203532353435.roa (hash: tMslQHnLGJAB5UxjTGpb/vZP2ppEaTiJwBDm93IvmOI=)
                          2: 323830343a6531633a3a2f33342d3334203d3e203532353435.roa (hash: pa0Kt0eN8QWWUfpLfVEt3/Y+xEBjLjbkoQ8E632mdcY=)
                          3: 3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl (hash: PSx5jf27f3i/8aVanC+cYAuIOx1hmyR7igbIXzYT5pI=)
                          4: 323830343a6531633a3a2f33322d3332203d3e203532353435.roa (hash: vOLxKqo8F9EpgsedM/6oFYx7S+R9yaoNTLTAAj9Y5Vs=)
                          5: 323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa (hash: 3V4hBCDsE/bitDOXjjDYbWyQnOEIpROY76BHiPiNnus=)
                          6: 323830343a6531633a343030303a3a2f33342d3334203d3e203532353435.roa (hash: rlBA7aN3WQ1PU+B7xcrKo67ouqdmIijM4NP4J05Ko5A=)
                          7: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (hash: Sf78mjIIFNHEX+KrjMMiN8rVlDC9zv9Le/KET2sIJfM=)
                          8: 3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (hash: lUbXQpRHgGjtKeiTZmMb2PKbYixz7UfahyPa9iA2MXg=)
                          9: 323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (hash: zvXxE9oGjVi2hFTZ+IDtCkmEHLzuXowuRdpVmSUL7+w=)
                          10: 323830343a6531633a3a2f33332d3333203d3e203532353435.roa (hash: /Fz05QFoyX0GAuZF9nSOmeWm2MKOS6kWqdUTKUrHzB0=)
                          11: 323830343a6531633a3a2f33322d3438203d3e203532353435.roa (hash: 1VqC7tOwiCjsSS1K4bUpPIhl+XZkmIm9aQWRvFzeBG0=)
                          12: 3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (hash: Zpoahw33yIRexCmsC45OkyouIr46O1hQ6tPW8EIoi6w=)
                          13: 323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa (hash: g5WB0/bz8+x0QWPhnQ0HSTSOq2QsI8CfxoD7a5W+RRc=)
                          14: 323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa (hash: PAo8VJISdIFLGYU0PmqG/Svmzfl8qLo5aP17f3uaH7A=)
                          15: 3133312e37322e34382e302f32322d3234203d3e203532353435.roa (hash: kG6nUEotpXMy4cecsagMIIJheZ/obHoILOyX/coKc38=)
                          16: 323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa (hash: 1cppSIhZ4oBFfaBlGaVkf9ClaBoD1ZvH2ww6ZQkhu3I=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c9:46:ed:70:e1:42:df:27:c0:b3:e8:25:63:77:75:ba:ba:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Apr 27 04:30:10 2025 GMT
            Not After : Apr 28 07:13:10 2025 GMT
        Subject: CN=2CA9C7A01CF2E8D5C6F5926D1B395965B3BE4BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:12:8f:4f:b1:08:8d:af:3e:04:e5:59:83:
                    5b:da:08:49:fa:43:2c:08:f5:14:d3:92:fc:a9:75:
                    a5:82:cf:d2:5c:11:8b:d3:6d:21:df:e3:bc:c3:97:
                    26:8a:02:66:91:58:a4:43:6c:d5:d8:0a:88:71:1a:
                    3f:6f:5a:7a:c0:09:0d:17:ba:ff:db:54:cf:03:e8:
                    b8:49:5a:48:ae:e7:25:f7:52:53:92:77:6d:03:91:
                    2f:25:77:33:df:7f:fd:3c:7a:0a:28:f5:05:f5:9f:
                    44:84:60:41:63:21:09:0f:f1:70:1f:bf:c6:75:3e:
                    6a:09:6e:eb:1b:b0:fd:aa:16:d9:ef:2e:16:ee:d5:
                    2b:f3:42:89:ca:75:cb:e2:ef:fd:a8:35:5e:f1:b0:
                    f4:2d:cc:aa:29:8a:b3:87:4b:01:27:39:5a:55:4a:
                    a0:37:fa:52:32:b0:77:e8:0e:04:d5:2a:72:86:90:
                    29:65:75:f4:4d:7d:f7:7f:2e:0b:25:1a:e3:5d:6b:
                    ff:74:8f:4a:05:9f:ad:2d:fd:f6:c5:41:9f:6c:8d:
                    df:52:ac:b8:84:b1:80:62:14:21:e2:14:30:76:f8:
                    71:a9:46:7e:ac:68:92:fe:d6:7a:4f:39:06:50:e8:
                    3b:ac:9e:94:d2:35:74:a9:74:65:63:a0:72:38:ea:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A9:C7:A0:1C:F2:E8:D5:C6:F5:92:6D:1B:39:59:65:B3:BE:4B:B1
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:75:08:06:84:bc:03:11:93:1c:f0:7d:37:8e:78:a0:88:
         b7:52:ca:59:4f:0a:e2:c5:98:6f:6c:2c:92:73:0b:fd:5b:1c:
         92:a2:0c:2c:11:8e:18:b3:c2:97:1c:1c:bf:70:bd:e7:bd:34:
         86:ef:bb:97:02:04:2e:dd:61:9c:ca:8b:cb:3e:7c:1e:8e:fc:
         aa:e2:59:8a:ae:fe:6b:db:8d:76:ab:da:43:5d:f9:56:27:ef:
         27:8b:ec:a7:ed:09:fb:5f:cd:fc:ee:a0:0a:76:0f:d1:37:5d:
         c2:3a:5b:12:e5:45:fe:d3:7c:b5:24:d5:51:d1:87:2b:64:a6:
         c1:c0:47:6d:99:b5:1d:94:b7:4f:93:36:d8:73:4b:05:23:c1:
         78:69:cc:1c:83:c1:34:54:9e:f4:fe:65:9d:45:fe:2d:16:ba:
         bb:74:5a:05:e9:c9:bf:fd:16:c4:cc:88:04:da:e2:ed:7b:3c:
         dc:c7:c1:8e:35:51:72:72:8e:c8:40:54:ca:99:3e:ff:1f:c7:
         4c:8c:1c:f3:4e:f0:93:16:3b:9b:c7:d5:6e:7a:83:bf:22:92:
         89:55:94:2f:45:4d:47:5a:90:77:98:72:07:98:ca:ba:c4:fe:
         37:55:14:01:d3:19:72:d6:a8:fc:89:1a:38:26:91:b9:f0:1e:
         f4:60:34:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHMlG7XDhQt8nwLPoJWN3dbq6+rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz
OUZENjNENzAeFw0yNTA0MjcwNDMwMTBaFw0yNTA0MjgwNzEzMTBaMDMxMTAvBgNV
BAMTKDJDQTlDN0EwMUNGMkU4RDVDNkY1OTI2RDFCMzk1OTY1QjNCRTRCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XBKPT7EIja8+BOVZg1vaCEn6
QywI9RTTkvypdaWCz9JcEYvTbSHf47zDlyaKAmaRWKRDbNXYCohxGj9vWnrACQ0X
uv/bVM8D6LhJWkiu5yX3UlOSd20DkS8ldzPff/08egoo9QX1n0SEYEFjIQkP8XAf
v8Z1PmoJbusbsP2qFtnvLhbu1SvzQonKdcvi7/2oNV7xsPQtzKopirOHSwEnOVpV
SqA3+lIysHfoDgTVKnKGkClldfRNffd/LgslGuNda/90j0oFn60t/fbFQZ9sjd9S
rLiEsYBiFCHiFDB2+HGpRn6saJL+1npPOQZQ6DusnpTSNXSpdGVjoHI46tfDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULKnHoBzy6NXG9ZJtGzlZZbO+S7EwHwYDVR0j
BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw
QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMy8z
NTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATWd1CAaEvAMRkxzwfTeOeKCIt1LKWU8K4sWYb2wsknML/VsckqIMLBGOGLPC
lxwcv3C95700hu+7lwIELt1hnMqLyz58Ho78quJZiq7+a9uNdqvaQ135VifvJ4vs
p+0J+1/N/O6gCnYP0TddwjpbEuVF/tN8tSTVUdGHK2SmwcBHbZm1HZS3T5M22HNL
BSPBeGnMHIPBNFSe9P5lnUX+LRa6u3RaBenJv/0WxMyIBNri7Xs83MfBjjVRcnKO
yEBUypk+/x/HTIwc807wkxY7m8fVbnqDvyKSiVWUL0VNR1qQd5hyB5jKusT+N1UU
AdMZctao/IkaOCaRufAe9GA0Og==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:14 2025 by rpki-client on console.sobornost.net