Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
File:                     F350A9A60C94593716E8BF7D10666C1777A7789E.mft (raw, json)
Hash identifier:          Nfkkr/0SMD2wU9ofqRQqDWk6n2idc2TBcGdEs1SinM8=
Subject key identifier:   F7:8E:91:C0:7C:54:8C:B0:B8:27:DF:25:5C:C0:3A:F1:19:3F:B1:17
Authority key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E
Certificate issuer:       /CN=F350A9A60C94593716E8BF7D10666C1777A7789E
Certificate serial:       4BA1EE91D1F76BBB7E01952CF25814AED246D23B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
Manifest number:          8D
Signing time:             Mon 28 Apr 2025 07:51:19 +0000
Manifest this update:     Mon 28 Apr 2025 07:46:19 +0000
Manifest next update:     Tue 29 Apr 2025 10:23:19 +0000
Files and hashes:         1: 3137372e32332e3235322e302f32322d3234203d3e203631363231.roa (hash: kxvZke4aP8NZ/UnrDJiQMB6TYBxNv0GwfQbncjZseIY=)
                          2: F350A9A60C94593716E8BF7D10666C1777A7789E.crl (hash: U8gD6tgN6tHfbvge6jaSVWHshDSEwpzL6Uyl3r7Cl9U=)
                          3: 323830343a346433633a623030303a3a2f33372d3337203d3e203631363231.roa (hash: T9wjBwMv8EXA5d0OyICaadjtVISdyluomvupovWVGm0=)
                          4: 3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa (hash: hh1J6VEO92Vp+qGD6A2zu9DI/7isOe1ZDko4ayUzEks=)
                          5: 323830343a346433633a393030373a3a2f34382d3438203d3e203631363231.roa (hash: OpXBEcOl/Qauz1DpNe83hNf1K8nIm89uE1W7xYtj8Ms=)
                          6: 3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa (hash: anyYuR+eC6FiD0eUpL9Sfp4ZobqyodWT8H6Avj3XeHU=)
                          7: 34352e3233352e3136302e302f32322d3234203d3e203631363231.roa (hash: ufJS0k8CWPke/UjRX+CqPmktYX+vJjEYVdvSx8+mNC0=)
                          8: 323830343a346433633a3a2f33322d3336203d3e203631363231.roa (hash: 5tml+v4PgJIODRmmZ6pc33okXgYDCFd0einKgMeyb6A=)
                          9: 3137302e3233312e3230382e302f32322d3234203d3e203631363231.roa (hash: k79So//zDTkWGYs9XQtRp0GENZ9hVW3gNYK2aNkhAKk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a1:ee:91:d1:f7:6b:bb:7e:01:95:2c:f2:58:14:ae:d2:46:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F350A9A60C94593716E8BF7D10666C1777A7789E
        Validity
            Not Before: Apr 28 07:46:19 2025 GMT
            Not After : Apr 29 10:23:19 2025 GMT
        Subject: CN=F78E91C07C548CB0B827DF255CC03AF1193FB117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:ec:f5:0d:68:43:0a:d6:90:7e:51:30:95:
                    71:2d:bd:c6:53:8a:15:95:f6:9e:7a:f9:c4:4c:b0:
                    95:df:6b:d3:25:40:c9:90:e9:6d:d2:b3:41:27:9f:
                    95:ea:a4:7b:63:3a:f3:e8:db:7a:ad:2a:e6:47:34:
                    a5:f6:12:34:eb:01:d9:15:89:5f:df:b7:08:96:ba:
                    a6:f1:11:c7:ad:ad:b1:25:2b:65:2e:a1:44:e9:e0:
                    ef:de:51:d4:cf:90:e2:be:1a:7b:fc:0c:ce:a2:97:
                    f1:74:fd:c7:d1:19:ae:ba:c0:57:8b:38:8d:1d:7f:
                    f1:7e:5a:b0:0f:7b:7b:7a:94:83:31:a0:a0:ac:81:
                    60:bf:c1:47:f7:3b:53:65:c2:5f:f5:40:48:d5:20:
                    6c:48:3d:b6:8b:b2:3e:d4:88:2f:b6:76:96:a7:7d:
                    cd:ec:cd:bb:74:e0:0c:b6:0f:fd:8c:9e:2d:ba:c9:
                    3c:d9:14:b7:d1:cb:22:6c:1a:8a:53:39:c3:d9:e8:
                    5d:36:64:61:b2:7b:ab:dd:f7:85:c6:39:84:c2:99:
                    c1:d2:2e:50:f1:af:9f:b0:a2:a8:5a:e3:01:14:56:
                    98:21:16:ff:ab:a5:f3:47:fe:79:e5:87:24:2e:56:
                    72:27:7e:51:5b:17:9e:b6:db:f9:f9:16:2a:b5:83:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:91:C0:7C:54:8C:B0:B8:27:DF:25:5C:C0:3A:F1:19:3F:B1:17
            X509v3 Authority Key Identifier:
                keyid:F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:aa:13:71:70:76:0d:57:d5:bf:87:f3:c5:71:be:62:0a:
         09:1a:46:0b:ec:94:82:92:3c:0e:5d:6c:e7:54:99:ce:cc:88:
         94:56:53:d0:69:0f:c8:4b:e6:89:c5:b0:fd:01:4f:45:63:34:
         d2:4f:95:33:1e:e5:48:37:f4:16:0c:24:d9:d2:c2:a1:71:ec:
         b0:63:04:75:83:c1:f5:f0:79:24:cb:96:7e:f2:89:d4:ff:2f:
         2e:58:1b:b2:9e:3d:69:fe:12:33:58:71:5d:6e:9c:b7:0d:ac:
         d4:aa:a1:02:51:cb:f3:a8:7e:05:03:54:48:19:1b:ee:bf:94:
         2e:cb:5f:37:c6:8e:a4:f4:d6:e5:3a:52:b2:27:12:00:c2:eb:
         7a:d2:48:cf:e9:45:1d:3d:8a:60:78:70:a1:a7:c1:be:12:e0:
         3f:51:3d:3c:02:cd:29:39:f8:b3:4e:0c:f6:96:86:3b:15:f6:
         e0:06:99:a5:37:65:01:76:eb:5e:cf:6f:b8:5a:f7:70:47:2d:
         82:7b:fd:87:44:af:fc:2e:e7:b3:fc:6b:28:99:3e:4e:1f:ff:
         0d:1c:bf:f2:a9:2e:34:03:d5:b8:90:b7:1e:93:ad:2e:c6:87:
         97:0b:85:24:bb:80:70:e5:3d:2e:17:4d:f6:91:bd:7f:07:f9:
         18:ca:c5:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS6HukdH3a7t+AZUs8lgUrtJG0jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1MEE5QTYwQzk0NTkzNzE2RThCRjdEMTA2NjZDMTc3
N0E3Nzg5RTAeFw0yNTA0MjgwNzQ2MTlaFw0yNTA0MjkxMDIzMTlaMDMxMTAvBgNV
BAMTKEY3OEU5MUMwN0M1NDhDQjBCODI3REYyNTVDQzAzQUYxMTkzRkIxMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHquz1DWhDCtaQflEwlXEtvcZT
ihWV9p56+cRMsJXfa9MlQMmQ6W3Ss0Enn5XqpHtjOvPo23qtKuZHNKX2EjTrAdkV
iV/ftwiWuqbxEcetrbElK2UuoUTp4O/eUdTPkOK+Gnv8DM6il/F0/cfRGa66wFeL
OI0df/F+WrAPe3t6lIMxoKCsgWC/wUf3O1Nlwl/1QEjVIGxIPbaLsj7UiC+2dpan
fc3szbt04Ay2D/2Mni26yTzZFLfRyyJsGopTOcPZ6F02ZGGye6vd94XGOYTCmcHS
LlDxr5+woqha4wEUVpghFv+rpfNH/nnlhyQuVnInflFbF5622/n5Fiq1gyb5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU946RwHxUjLC4J98lXMA68Rk/sRcwHwYDVR0j
BBgwFoAU81CppgyUWTcW6L99EGZsF3eneJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9GMzUwQTlBNjBDOTQ1OTM3MTZFOEJGN0QxMDY2NkMxNzc3QTc3ODlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNTBBOUE2MEM5NDU5Mzcx
NkU4QkY3RDEwNjY2QzE3NzdBNzc4OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5UGcvMC9G
MzUwQTlBNjBDOTQ1OTM3MTZFOEJGN0QxMDY2NkMxNzc3QTc3ODlFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA5uqE3Fwdg1X1b+H88VxvmIKCRpGC+yUgpI8Dl1s51SZzsyIlFZT0GkPyEvm
icWw/QFPRWM00k+VMx7lSDf0Fgwk2dLCoXHssGMEdYPB9fB5JMuWfvKJ1P8vLlgb
sp49af4SM1hxXW6ctw2s1KqhAlHL86h+BQNUSBkb7r+ULstfN8aOpPTW5TpSsicS
AMLretJIz+lFHT2KYHhwoafBvhLgP1E9PALNKTn4s04M9paGOxX24AaZpTdlAXbr
Xs9vuFr3cEctgnv9h0Sv/C7ns/xrKJk+Th//DRy/8qkuNAPVuJC3HpOtLsaHlwuF
JLuAcOU9LhdN9pG9fwf5GMrFfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net