Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
File:                     A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft (raw, json)
Hash identifier:          iuLcRQ02ZfQ+VTH4Zs56BuuHadpfnvEI57gNRyvcGRQ=
Subject key identifier:   2C:EE:C1:1D:A7:AB:B3:36:2C:74:BF:58:8F:E6:A0:9C:22:46:CE:46
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       777967D76517E7425CE2F83231C50DDF4B6B7212
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
Manifest number:          0D
Signing time:             Thu 12 Jun 2025 01:21:08 +0000
Manifest this update:     Thu 12 Jun 2025 01:16:08 +0000
Manifest next update:     Fri 13 Jun 2025 05:17:08 +0000
Files and hashes:         1: 323830343a353837383a3a2f33342d3334203d3e20323638313331.roa (hash: pD7uON0MR1cx9vrRl3bnWsw8Pci3XbwtAVzSZrjF0nU=)
                          2: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (hash: 76v3PwoFqjIvYhNGggm0A6GKqZidjpsE3qEBiwvNcVI=)
                          3: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (hash: gNfhoQu/TfDOi2RqItKVnvpLsxNGPBsfnb6MxhNe3qk=)
                          4: 323830343a353837383a343030303a3a2f34382d3438203d3e20323638313331.roa (hash: ouhAyOcH2VayZfDA15PmGMIddBURZIqd8LmFxV/D8kg=)
                          5: 323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (hash: p7Oa9YECuMMpX3lKf1BIHAgMsEdZxp1BAHLE2bpiWLI=)
                          6: 323830343a353837383a323030303a3a2f33362d3336203d3e20323638313331.roa (hash: YLRZFFurNnhOHIp+/ksNrdmT9wg1MccOCRFRPdpkpZE=)
                          7: A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl (hash: 9yLfZe3MsEnGpXTGyNf36QX4+zy5i2M9288szwd/r8w=)
                          8: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (hash: lQE0H5i+BmmRfKCVNDuwT4u8OEjW/9FHvTmmfwT2Nnk=)
                          9: 323830343a353837383a633030303a3a2f33342d3334203d3e20323638313331.roa (hash: 1JBlkGMIGxMWY7LQTFqU4rMW/3V4sS50t4cD7k2sodI=)
                          10: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (hash: 4ezrZSIPRM2pWqs0nvSc684pzx0RAIeuMtmRPXlLzec=)
                          11: 323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (hash: o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=)
                          12: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (hash: VMtWnY/47+9VSdifVKXNAHzknKkgZcf9Z5+e1w7prrA=)
                          13: 323830343a353837383a383030303a3a2f33342d3334203d3e20323638313331.roa (hash: m6476XY9hw1HT0KFo3xqMgTPgV2DyCBCaY7VP3otwhE=)
                          14: 34352e3136392e3139302e302f32342d3234203d3e20323638313331.roa (hash: 1arKiTMmd2wiJhxrLN/csmN5OxeZEvisOYN30+Mb+zM=)
                          15: 323830343a353837383a343030303a3a2f33342d3334203d3e20323638313331.roa (hash: bec0x/Cqckg2a+aVdlOWK1zgbnr5jAeqZG2vSjYskV8=)
                          16: 323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (hash: vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=)
                          17: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (hash: YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:79:67:d7:65:17:e7:42:5c:e2:f8:32:31:c5:0d:df:4b:6b:72:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun 12 01:16:08 2025 GMT
            Not After : Jun 13 05:17:08 2025 GMT
        Subject: CN=2CEEC11DA7ABB3362C74BF588FE6A09C2246CE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:7f:43:86:a4:24:11:f3:85:ac:d0:1b:40:
                    8a:cc:74:f3:a6:5a:6f:23:6f:4f:53:3d:39:c4:63:
                    f1:22:81:4d:26:8c:cd:09:7d:20:73:e6:e2:b2:09:
                    33:df:d7:2e:0b:60:9d:00:3d:bf:71:54:fa:d9:ad:
                    67:88:33:97:c9:85:59:0c:d5:9a:fa:7f:b4:87:d3:
                    79:de:52:20:35:0e:1c:96:3a:4d:da:9a:62:e0:e4:
                    3f:78:b3:a2:b2:c1:0a:2f:ba:92:7f:6e:5f:71:18:
                    9a:42:af:92:77:5c:15:48:7f:6b:17:90:23:22:b6:
                    1b:7b:38:ff:4f:e5:97:ef:e1:d6:1d:d1:24:c6:67:
                    1e:71:cf:83:5f:59:52:16:b1:8a:68:13:94:c7:1b:
                    48:58:79:1e:db:6f:c8:af:c0:20:bc:4f:bd:1e:3b:
                    3e:e2:78:d5:8c:7f:fd:4d:74:ab:d1:24:b7:b4:e4:
                    1e:3a:da:e9:90:fb:5b:05:95:1c:c9:36:c9:7f:00:
                    c2:b4:e5:50:f8:c3:81:7b:61:14:1c:c9:ae:a9:ae:
                    ec:4e:fd:53:22:6f:87:31:36:c2:3a:66:73:7c:d2:
                    f9:5d:61:a1:d3:86:2d:96:1c:81:47:dd:88:a5:37:
                    dd:d8:73:5a:b9:e6:29:ad:8d:93:1a:0b:66:ac:1a:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:C1:1D:A7:AB:B3:36:2C:74:BF:58:8F:E6:A0:9C:22:46:CE:46
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:27:fb:0d:98:f1:71:a0:1c:87:97:23:94:49:83:59:47:27:
         bc:02:09:13:b9:28:7f:a8:58:85:53:fd:ab:7d:bd:06:5d:db:
         5e:02:2d:ba:46:a7:3e:33:c5:aa:57:e3:27:41:4e:b4:d4:52:
         2b:08:1b:2d:ee:a3:ec:f2:95:68:0b:8b:38:cb:a7:95:b9:7e:
         50:ef:fc:67:60:c7:93:03:75:90:97:94:33:04:7e:67:d4:cf:
         6e:30:92:58:86:aa:0b:61:03:68:6e:0c:29:c9:b7:8a:8a:90:
         36:7e:92:54:8a:4c:44:05:df:8b:bd:01:20:ae:3e:0b:b2:53:
         a8:00:2a:17:0b:aa:95:65:c1:61:9c:83:d6:83:4f:6c:96:0f:
         89:43:bd:0d:b5:21:84:f9:6a:24:e4:06:46:65:7f:88:e4:b2:
         a9:28:aa:b1:e3:c4:fc:c6:5e:de:e6:42:cc:d5:cf:6e:a1:30:
         23:18:f5:e7:be:05:c9:69:33:82:37:10:18:1f:ea:8f:45:18:
         98:30:de:71:fb:cd:c9:ac:ff:c1:39:2b:62:b1:c3:da:4a:4d:
         a0:c8:cd:d4:59:37:5c:e5:37:53:88:e7:b4:4d:11:7c:10:9c:
         88:48:2c:ed:7d:e9:43:77:76:73:f1:79:a6:97:72:a5:61:04:
         25:4b:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:46:19 2025 by rpki-client