Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
File:                     BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft (raw, json)
Hash identifier:          qcWLpPwAdwB7LW8aMBTkqXqFaBkO4SqZHXfQPy0L+c4=
Subject key identifier:   D2:09:7C:EC:AD:DC:4A:13:97:06:89:A7:F2:1B:88:4D:45:C7:75:12
Authority key identifier: BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8
Certificate issuer:       /CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
Certificate serial:       60BE18ECAF733EF63312E358D64AE6D4F1F881EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
Manifest number:          6B
Signing time:             Thu 24 Apr 2025 12:28:54 +0000
Manifest this update:     Thu 24 Apr 2025 12:23:54 +0000
Manifest next update:     Fri 25 Apr 2025 16:15:54 +0000
Files and hashes:         1: BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl (hash: JduAuhKHHvia8KKeKculuWcZSZ/8p/Kx9b73W2cMSLY=)
                          2: 323830343a343032303a3a2f33322d3332203d3e20323635393336.roa (hash: yAN0Dp/64styq6QgUCeeRqlR5o/ij2Y4tQEnBq3xS8s=)
                          3: 3136342e3136332e32362e302f32342d3234203d3e20323635393336.roa (hash: 9VCo8Busvs3z54sg3xeDOElkhFOzgKUzb+IQfoHDdfE=)
                          4: 3136342e3136332e32352e302f32342d3234203d3e20323635393336.roa (hash: 12J4phbtZEL3YlAS9Z+maO2ga6SeQcGvMj52u1Jj7po=)
                          5: 3136342e3136332e32342e302f32322d3232203d3e20323635393336.roa (hash: bzNadBAc3o5LEA54rKmqdde/ZhhWrL2FrZ6AK2dFDRE=)
                          6: 3136342e3136332e32362e302f32332d3233203d3e20323635393336.roa (hash: 9bhRN6eQPRJdciyPOtaJk7PxsQnCXFQk2BkXYEWE/lU=)
                          7: 3136342e3136332e32342e302f32342d3234203d3e20323635393336.roa (hash: r6JBM7x8VeFYsNL+K9eMLIOZ1A/+o4DbcyXwQFI3/Vk=)
                          8: 3136342e3136332e32342e302f32332d3233203d3e20323635393336.roa (hash: E2kD5ndeCb+AJx0JsKV9vIHYAy3iBmKSDLI9spobaHg=)
                          9: 3136342e3136332e32372e302f32342d3234203d3e20323635393336.roa (hash: p96a8jT5gRa7BxWGBSXFmAj2ekcB2UyxUJjSX2kouTo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl
                          rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:18:ec:af:73:3e:f6:33:12:e3:58:d6:4a:e6:d4:f1:f8:81:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABE217A352A9C190E5C0DA6541119FAA849CCE8
        Validity
            Not Before: Apr 24 12:23:54 2025 GMT
            Not After : Apr 25 16:15:54 2025 GMT
        Subject: CN=D2097CECADDC4A13970689A7F21B884D45C77512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:87:ff:f2:92:0c:b9:4f:79:07:7e:e2:c8:
                    7d:43:95:c3:28:59:6e:a0:8a:06:89:c6:e1:ac:3c:
                    a2:a5:07:15:54:6d:2d:d9:80:be:22:19:00:9c:06:
                    cc:12:28:59:46:04:e1:47:d3:74:0c:cf:51:85:0a:
                    d9:74:9e:f8:32:0b:7d:8c:52:6c:eb:3f:90:2c:76:
                    d5:b8:21:11:f9:60:4b:27:01:a0:ef:92:b9:b3:22:
                    11:55:9f:90:3f:9f:8c:79:27:7c:55:d8:3e:e4:7c:
                    ff:1b:d8:b4:5a:48:b2:6f:46:6c:99:07:a3:d4:33:
                    60:51:dc:4f:e4:d4:d6:02:9a:8b:22:cf:e2:52:9f:
                    3c:2a:2a:52:8b:04:08:a1:87:09:c8:cf:3a:3c:06:
                    34:72:49:96:7f:b4:0f:4e:c0:73:44:07:3f:2a:ca:
                    80:7c:74:8e:66:00:1e:eb:ae:d0:2c:70:74:c0:21:
                    23:62:65:21:7a:88:22:16:33:f0:7d:cf:6d:5a:62:
                    9a:71:ec:f5:15:1c:02:ea:0b:3e:b7:69:21:bb:4a:
                    eb:d0:d6:65:4c:d5:57:b0:68:65:17:1e:21:b2:1a:
                    f6:71:f7:7e:97:ff:87:36:8b:36:4c:c7:10:62:c9:
                    0d:4f:1a:72:79:d6:6e:58:2c:03:9a:51:e3:ba:eb:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:09:7C:EC:AD:DC:4A:13:97:06:89:A7:F2:1B:88:4D:45:C7:75:12
            X509v3 Authority Key Identifier:
                keyid:BA:BE:21:7A:35:2A:9C:19:0E:5C:0D:A6:54:11:19:FA:A8:49:CC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BABE217A352A9C190E5C0DA6541119FAA849CCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ukZHZe2VCaPkoeCQ9Awx2p8dY4LpZvjMRiPDqQCxcww/0/BABE217A352A9C190E5C0DA6541119FAA849CCE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:8e:42:ab:25:d7:97:53:d9:58:36:b6:6c:64:92:f6:7c:
         dd:e0:3d:28:ee:95:29:b4:06:68:40:f1:78:56:fc:3f:85:c8:
         9f:f1:34:3a:9c:9f:c8:d3:f8:6a:23:b3:4c:39:62:44:fa:6e:
         e4:fc:81:4a:36:18:44:7e:28:b9:97:bf:7a:e5:ee:0c:99:e2:
         c1:b7:8b:b9:86:46:88:e9:c5:dc:85:bf:f3:14:da:3f:3f:46:
         a1:ff:30:e6:8b:a7:62:7d:e7:9b:53:fd:fc:c1:5b:2f:9e:00:
         70:3e:c2:8f:96:c3:8b:b2:ed:85:86:bc:10:f2:dd:be:b0:cd:
         42:f3:ea:a9:b3:fd:4c:fc:1f:77:56:4b:3b:a8:7f:4e:d0:75:
         9f:09:aa:8d:48:51:d1:51:96:28:7d:10:ca:55:f8:24:2c:b0:
         da:24:84:d4:09:09:01:37:7f:f6:dc:d4:5a:7d:30:1f:58:02:
         76:6e:d8:b8:03:1f:47:26:28:f9:ce:12:ed:5d:a4:e2:dc:b3:
         d0:6b:9b:c7:77:c3:c2:9a:d0:b6:88:86:1f:50:a5:fb:fc:b7:
         1b:aa:a9:9c:e7:00:17:ae:56:d0:e3:e2:f6:34:92:d5:f5:36:
         96:d5:52:ff:7c:1c:36:2e:99:80:98:12:35:f7:bf:fb:5e:45:
         fd:b5:0e:52
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUYL4Y7K9zPvYzEuNY1krm1PH4geowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFB
ODQ5Q0NFODAeFw0yNTA0MjQxMjIzNTRaFw0yNTA0MjUxNjE1NTRaMDMxMTAvBgNV
BAMTKEQyMDk3Q0VDQUREQzRBMTM5NzA2ODlBN0YyMUI4ODRENDVDNzc1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuof/8pIMuU95B37iyH1DlcMo
WW6gigaJxuGsPKKlBxVUbS3ZgL4iGQCcBswSKFlGBOFH03QMz1GFCtl0nvgyC32M
UmzrP5AsdtW4IRH5YEsnAaDvkrmzIhFVn5A/n4x5J3xV2D7kfP8b2LRaSLJvRmyZ
B6PUM2BR3E/k1NYCmosiz+JSnzwqKlKLBAihhwnIzzo8BjRySZZ/tA9OwHNEBz8q
yoB8dI5mAB7rrtAscHTAISNiZSF6iCIWM/B9z21aYppx7PUVHALqCz63aSG7SuvQ
1mVM1VewaGUXHiGyGvZx936X/4c2izZMxxBiyQ1PGnJ51m5YLAOaUeO66yBHAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU0gl87K3cShOXBomn8huITUXHdRIwHwYDVR0j
BBgwFoAUur4hejUqnBkOXA2mVBEZ+qhJzOgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91a1pIWmUyVkNhUGtvZUNROUF3eDJwOGRZNExwWnZqTVJpUERxUUN4Y3d3
LzAvQkFCRTIxN0EzNTJBOUMxOTBFNUMwREE2NTQxMTE5RkFBODQ5Q0NFOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQUJFMjE3QTM1MkE5QzE5MEU1
QzBEQTY1NDExMTlGQUE4NDlDQ0U4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Vr
WkhaZTJWQ2FQa29lQ1E5QXd4MnA4ZFk0THBadmpNUmlQRHFRQ3hjd3cvMC9CQUJF
MjE3QTM1MkE5QzE5MEU1QzBEQTY1NDExMTlGQUE4NDlDQ0U4Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
GPCOQqsl15dT2Vg2tmxkkvZ83eA9KO6VKbQGaEDxeFb8P4XIn/E0OpyfyNP4aiOz
TDliRPpu5PyBSjYYRH4ouZe/euXuDJniwbeLuYZGiOnF3IW/8xTaPz9Gof8w5oun
Yn3nm1P9/MFbL54AcD7Cj5bDi7LthYa8EPLdvrDNQvPqqbP9TPwfd1ZLO6h/TtB1
nwmqjUhR0VGWKH0QylX4JCyw2iSE1AkJATd/9tzUWn0wH1gCdm7YuAMfRyYo+c4S
7V2k4tyz0Gubx3fDwprQtoiGH1Cl+/y3G6qpnOcAF65W0OPi9jSS1fU2ltVS/3wc
Ni6ZgJgSNfe/+15F/bUOUg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:51:50 2025 by rpki-client on console.sobornost.net