Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
File:                     960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft (raw, json)
Hash identifier:          Edeo3maKz/f4R/yawU9UmyrTEP5QEdBfGea9hidr2Rk=
Subject key identifier:   8D:C2:99:CB:7B:B3:13:2D:A6:0D:59:E8:F9:A6:D0:97:1D:97:AB:1D
Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
Certificate issuer:       /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Certificate serial:       17A9A6B5B479D7469BB13D89CD2735E2EF3D8218
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
Manifest number:          21
Signing time:             Sun 27 Apr 2025 09:04:50 +0000
Manifest this update:     Sun 27 Apr 2025 08:59:50 +0000
Manifest next update:     Mon 28 Apr 2025 09:09:50 +0000
Files and hashes:         1: 323830343a363064343a3a2f33322d313238203d3e20323639313934.roa (hash: LePTxjJBOrm9QYmecp3eRBR2rsruAfQsZj8f0K3tFDA=)
                          2: 960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl (hash: X4pCIPXE/dclarZRxmBz2sidH8RY0RJQuWB+kXnONoQ=)
                          3: 34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa (hash: wvgfoY9AETz9twOBRuB94S/gLya+Kwk8MDPlUDwjElA=)
                          4: 34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa (hash: JH6ju057H4XS8C46Y60zPc+z91M0/zaBhBfHy+PXe+s=)
                          5: 3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa (hash: 0WANYNk1dYKiKVdK1NzxfG8v8vYE638Zi/TP6vzNNcg=)
                          6: 3136382e3138312e3235322e302f32322d3332203d3e20323639313934.roa (hash: DIsKuSZQPMKwxu8dcHmFONbGN9uTCivJuBHuLNM2g3M=)
                          7: 34352e3137392e3233362e302f32322d3332203d3e20323639313934.roa (hash: 9Iv0LYK3E8ZPMXk9urzFO8MeiGgrmSbqgdqZMnosYv8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl
                          rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:a6:b5:b4:79:d7:46:9b:b1:3d:89:cd:27:35:e2:ef:3d:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
        Validity
            Not Before: Apr 27 08:59:50 2025 GMT
            Not After : Apr 28 09:09:50 2025 GMT
        Subject: CN=8DC299CB7BB3132DA60D59E8F9A6D0971D97AB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:3c:39:78:39:7e:b9:8d:69:3d:55:05:88:
                    a1:a6:ce:c1:b5:23:ac:fd:40:34:f3:33:32:23:6d:
                    ac:08:e0:39:24:b7:76:5f:98:ac:e8:43:0a:76:d9:
                    af:bf:20:d5:3b:74:97:b0:eb:29:cc:8e:4e:1a:02:
                    79:b5:a0:ec:e4:94:71:02:4f:1a:14:fc:fd:33:79:
                    ba:d1:62:78:a2:ef:8b:21:c8:bb:51:7a:54:1a:6e:
                    04:44:a7:15:f7:76:73:14:5d:e8:c5:af:2d:73:56:
                    db:6d:60:d7:f8:d0:88:1e:42:1d:e8:74:de:7b:60:
                    21:dd:73:29:a2:58:25:1c:4d:0c:d5:bd:10:9b:86:
                    cf:d9:81:17:36:00:5f:09:82:22:86:59:75:9c:15:
                    98:63:fe:34:db:eb:da:8c:8e:69:0f:b2:f0:d3:f3:
                    e0:11:ff:d7:41:e6:03:29:24:c8:e7:6d:44:fe:0b:
                    4a:91:97:90:06:a5:60:43:60:f0:d1:d6:0f:aa:29:
                    ab:3a:d5:aa:83:a0:b0:e2:d5:82:e0:9f:6f:0c:3d:
                    bd:30:93:ed:69:cb:d4:e7:12:65:4d:9c:02:db:9c:
                    cc:82:9a:8f:02:62:9f:d9:cf:7e:0c:f8:72:ca:04:
                    d0:31:4a:78:93:98:80:3d:15:36:2c:12:ba:e7:69:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:99:CB:7B:B3:13:2D:A6:0D:59:E8:F9:A6:D0:97:1D:97:AB:1D
            X509v3 Authority Key Identifier:
                keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:57:61:ea:c9:5b:1c:08:4e:ab:e1:95:3e:bb:4a:80:8f:
         a3:44:61:86:db:91:c3:7f:8d:b8:85:6c:13:c6:07:d0:e6:f9:
         4f:b3:8a:12:f9:5a:df:10:49:d6:b1:3d:c2:d4:65:4b:7b:58:
         65:d1:c5:80:ad:99:b1:da:c5:7a:58:a7:fb:a5:15:c5:e7:ee:
         b6:e2:d8:15:74:fd:46:ec:38:58:d4:9d:97:39:c0:9f:eb:27:
         15:10:d8:04:da:a2:71:86:e3:71:59:3e:be:28:cd:8f:af:23:
         21:f1:46:9f:c2:9a:61:cb:28:0c:40:66:a4:74:89:77:5d:f4:
         86:ab:25:21:59:1a:f1:ee:86:e3:59:88:e5:a3:98:4f:c3:67:
         47:c1:14:05:ca:78:3c:9e:10:6b:79:45:69:79:04:ad:62:eb:
         02:bb:3d:8a:fe:a0:cc:2b:f7:92:16:86:1f:ae:41:28:d7:9e:
         d3:91:eb:54:b4:8c:ec:a7:fb:20:e5:68:22:88:c3:e6:b6:df:
         6e:56:31:56:24:20:64:12:e8:a9:15:4a:4c:46:2f:c8:33:92:
         43:ab:7c:eb:5d:92:d1:b4:0e:a6:f9:48:c9:df:5a:c7:b5:4e:
         1e:a4:43:a3:73:1f:74:05:2b:b2:cb:88:e0:94:2b:1a:5c:73:
         1f:c2:a8:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF6mmtbR510absT2JzSc14u89ghgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwQ0NBMkI0MkY4OUEyQTlBQkRDQzU0NkRFMjJFQkI5
QkRCNDExMjAeFw0yNTA0MjcwODU5NTBaFw0yNTA0MjgwOTA5NTBaMDMxMTAvBgNV
BAMTKDhEQzI5OUNCN0JCMzEzMkRBNjBENTlFOEY5QTZEMDk3MUQ5N0FCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MDw5eDl+uY1pPVUFiKGmzsG1
I6z9QDTzMzIjbawI4Dkkt3ZfmKzoQwp22a+/INU7dJew6ynMjk4aAnm1oOzklHEC
TxoU/P0zebrRYnii74shyLtRelQabgREpxX3dnMUXejFry1zVtttYNf40IgeQh3o
dN57YCHdcymiWCUcTQzVvRCbhs/ZgRc2AF8JgiKGWXWcFZhj/jTb69qMjmkPsvDT
8+AR/9dB5gMpJMjnbUT+C0qRl5AGpWBDYPDR1g+qKas61aqDoLDi1YLgn28MPb0w
k+1py9TnEmVNnALbnMyCmo8CYp/Zz34M+HLKBNAxSniTmIA9FTYsErrnaRlpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjcKZy3uzEy2mDVno+abQlx2Xqx0wHwYDVR0j
BBgwFoAUlgzKK0L4miqavcxUbeIuu5vbQRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC85NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MENDQTJCNDJGODlBMkE5
QUJEQ0M1NDZERTIyRUJCOUJEQjQxMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1ZlTDQvMC85
NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX45XYerJWxwITqvhlT67SoCPo0RhhtuRw3+NuIVsE8YH0Ob5T7OKEvla3xBJ
1rE9wtRlS3tYZdHFgK2ZsdrFelin+6UVxefutuLYFXT9Ruw4WNSdlznAn+snFRDY
BNqicYbjcVk+vijNj68jIfFGn8KaYcsoDEBmpHSJd130hqslIVka8e6G41mI5aOY
T8NnR8EUBcp4PJ4Qa3lFaXkErWLrArs9iv6gzCv3khaGH65BKNee05HrVLSM7Kf7
IOVoIojD5rbfblYxViQgZBLoqRVKTEYvyDOSQ6t8612S0bQOpvlIyd9ax7VOHqRD
o3MfdAUrssuI4JQrGlxzH8Kobw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:55 2025 by rpki-client on console.sobornost.net