Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft
File:                     D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft (raw, json)
Hash identifier:          3udUqLQWJSO0dzHOEjHxZfF8abziPWyjlVi4C8kdtzU=
Subject key identifier:   9F:74:A8:10:20:61:CF:A8:EA:CF:02:A7:C3:C7:A3:4B:71:08:2D:2E
Authority key identifier: D6:1B:49:63:14:B4:3E:1C:99:76:EB:9E:63:C1:AA:21:31:0D:A4:B4
Certificate issuer:       /CN=D61B496314B43E1C9976EB9E63C1AA21310DA4B4
Certificate serial:       3DFFA553C812BEA0410208ACB4C5EFE1B63B1434
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft
Manifest number:          016B
Signing time:             Mon 28 Apr 2025 15:19:26 +0000
Manifest this update:     Mon 28 Apr 2025 15:14:26 +0000
Manifest next update:     Tue 29 Apr 2025 18:45:26 +0000
Files and hashes:         1: 323830343a383638343a3a2f33322d313238203d3e20323732363439.roa (hash: C2VCGcqBy693zcPbfofRzwVALBvPwy+GAbLcNnYKTwc=)
                          2: 323830343a383638343a3a2f33322d3332203d3e20323732363439.roa (hash: Hv3/Fj7xme+hEmBXeHybSysLbtHdvN36tGsLnHD1Bmg=)
                          3: 323830343a383638343a663030303a3a2f33362d3336203d3e20323732363439.roa (hash: hduHvz21kQwyd21lUl3u7yZhvUTaCE5BJD+v9f8xuNA=)
                          4: D61B496314B43E1C9976EB9E63C1AA21310DA4B4.crl (hash: yCY1hOSrf1FUp4X7stNkfgAPcNZphlH5E9i2hv/eZV0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.crl
                          rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ff:a5:53:c8:12:be:a0:41:02:08:ac:b4:c5:ef:e1:b6:3b:14:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61B496314B43E1C9976EB9E63C1AA21310DA4B4
        Validity
            Not Before: Apr 28 15:14:26 2025 GMT
            Not After : Apr 29 18:45:26 2025 GMT
        Subject: CN=9F74A8102061CFA8EACF02A7C3C7A34B71082D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:e2:e3:92:4e:57:c4:ee:02:7c:45:39:68:
                    86:c3:24:11:f3:75:14:d9:98:98:eb:1a:9c:bd:f0:
                    dc:42:c9:00:51:fa:c1:a2:c3:c7:79:b7:23:ef:ee:
                    40:7e:1a:4d:32:7a:57:30:6f:87:74:e8:f4:ca:1c:
                    6e:1c:61:87:46:b7:a6:2f:00:d9:ad:2c:0f:91:cd:
                    e7:70:4d:f5:9a:f1:72:ab:35:ab:c2:be:af:79:6f:
                    0c:42:e3:12:2e:b3:da:ca:6e:6c:f7:b5:fd:75:0e:
                    c4:bf:cd:ac:20:b1:32:ef:37:78:33:da:f3:cc:dc:
                    05:ac:74:ab:d7:55:92:dc:79:58:46:4e:3f:f5:0d:
                    86:56:88:8d:60:cd:1d:04:e8:cf:f6:35:2a:d0:ee:
                    f7:ba:e3:13:06:fe:04:9b:ed:a8:48:8a:3b:51:3a:
                    02:88:9a:7f:03:cd:06:db:74:25:f1:c3:47:95:d4:
                    3a:cc:c2:ac:71:50:ed:a0:8a:c6:95:ca:4f:83:d3:
                    ba:fa:64:a3:1c:0a:27:a2:f5:a8:bc:41:95:08:33:
                    75:f7:cb:7e:67:6c:77:a4:a1:d2:b7:19:5d:94:27:
                    c6:2b:24:d1:75:c1:bc:35:26:da:76:1b:66:e6:3b:
                    ac:fc:40:66:d7:59:38:96:24:0f:d9:b1:a5:38:35:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:A8:10:20:61:CF:A8:EA:CF:02:A7:C3:C7:A3:4B:71:08:2D:2E
            X509v3 Authority Key Identifier:
                keyid:D6:1B:49:63:14:B4:3E:1C:99:76:EB:9E:63:C1:AA:21:31:0D:A4:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UjU3K8aKYd4HCoELAQW43GTwEaCcanUhrU3XuGoGfNB/0/D61B496314B43E1C9976EB9E63C1AA21310DA4B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:34:cb:fd:fb:bc:57:b4:63:62:57:4b:df:dc:99:80:c4:
         f1:0a:cf:67:cc:f9:7b:3c:9d:56:0d:71:4b:fd:f7:75:4b:7c:
         81:1a:d3:a8:57:53:5d:42:a4:b3:aa:b9:22:d5:60:39:45:a5:
         57:b0:20:ec:07:02:83:de:08:71:98:63:17:44:42:68:8d:e3:
         3a:86:3c:fe:73:cb:98:0f:88:8e:ed:1e:2f:fd:c7:f1:35:5c:
         2f:89:bd:16:64:4b:59:26:97:f6:09:3b:69:0e:65:37:83:58:
         20:fb:23:54:ca:37:15:d5:8d:25:0b:19:51:b3:49:e8:7f:f1:
         ba:6f:09:93:ab:96:ef:73:0c:70:b0:2b:25:09:32:f7:dc:87:
         b5:15:70:02:d9:59:0e:99:76:52:56:29:6e:e0:27:82:71:07:
         ea:53:83:ad:a9:c4:3b:ab:c6:87:09:a7:90:99:03:bd:67:2d:
         1d:e6:fc:eb:3c:8c:9d:6b:8a:f8:2e:67:e4:32:c9:51:ab:6c:
         be:46:56:e6:ac:d8:b1:33:ae:81:bb:b9:67:2e:e9:8d:be:96:
         36:36:cf:eb:36:91:1f:1f:34:09:17:19:cb:a9:70:7c:14:3f:
         cb:25:ee:c3:2f:5a:89:8c:e3:41:7c:73:e7:05:51:8a:32:91:
         fe:a8:2a:0d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUPf+lU8gSvqBBAgistMXv4bY7FDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYxQjQ5NjMxNEI0M0UxQzk5NzZFQjlFNjNDMUFBMjEz
MTBEQTRCNDAeFw0yNTA0MjgxNTE0MjZaFw0yNTA0MjkxODQ1MjZaMDMxMTAvBgNV
BAMTKDlGNzRBODEwMjA2MUNGQThFQUNGMDJBN0MzQzdBMzRCNzEwODJEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTe+Ljkk5XxO4CfEU5aIbDJBHz
dRTZmJjrGpy98NxCyQBR+sGiw8d5tyPv7kB+Gk0yelcwb4d06PTKHG4cYYdGt6Yv
ANmtLA+RzedwTfWa8XKrNavCvq95bwxC4xIus9rKbmz3tf11DsS/zawgsTLvN3gz
2vPM3AWsdKvXVZLceVhGTj/1DYZWiI1gzR0E6M/2NSrQ7ve64xMG/gSb7ahIijtR
OgKImn8DzQbbdCXxw0eV1DrMwqxxUO2gisaVyk+D07r6ZKMcCiei9ai8QZUIM3X3
y35nbHekodK3GV2UJ8YrJNF1wbw1Jtp2G2bmO6z8QGbXWTiWJA/ZsaU4NWVvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUn3SoECBhz6jqzwKnw8ejS3EILS4wHwYDVR0j
BBgwFoAU1htJYxS0PhyZduueY8GqITENpLQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ValUzSzhhS1lkNEhDb0VMQVFXNDNHVHdFYUNjYW5VaHJVM1h1R29HZk5C
LzAvRDYxQjQ5NjMxNEI0M0UxQzk5NzZFQjlFNjNDMUFBMjEzMTBEQTRCNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENjFCNDk2MzE0QjQzRTFDOTk3
NkVCOUU2M0MxQUEyMTMxMERBNEI0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Vq
VTNLOGFLWWQ0SENvRUxBUVc0M0dUd0VhQ2NhblVoclUzWHVHb0dmTkIvMC9ENjFC
NDk2MzE0QjQzRTFDOTk3NkVCOUU2M0MxQUEyMTMxMERBNEI0Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
p/I0y/37vFe0Y2JXS9/cmYDE8QrPZ8z5ezydVg1xS/33dUt8gRrTqFdTXUKks6q5
ItVgOUWlV7Ag7AcCg94IcZhjF0RCaI3jOoY8/nPLmA+Iju0eL/3H8TVcL4m9FmRL
WSaX9gk7aQ5lN4NYIPsjVMo3FdWNJQsZUbNJ6H/xum8Jk6uW73MMcLArJQky99yH
tRVwAtlZDpl2UlYpbuAngnEH6lODranEO6vGhwmnkJkDvWctHeb86zyMnWuK+C5n
5DLJUatsvkZW5qzYsTOugbu5Zy7pjb6WNjbP6zaRHx80CRcZy6lwfBQ/yyXuwy9a
iYzjQXxz5wVRijKR/qgqDQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:07 2025 by rpki-client on console.sobornost.net