Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
File:                     D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft (raw, json)
Hash identifier:          2mP2oS8ay2Kgnoxcc2bA57DZ/apHjeJXSj1lwl4BkgQ=
Subject key identifier:   04:BF:54:FB:D4:F4:FC:35:4B:10:F3:EF:15:91:8E:75:D6:66:20:16
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       6E1E163F5DAC8D35B97F683AAEBE0B51A4F656B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
Manifest number:          01DF
Signing time:             Wed 04 Jun 2025 09:03:17 +0000
Manifest this update:     Wed 04 Jun 2025 08:58:17 +0000
Manifest next update:     Thu 05 Jun 2025 10:24:17 +0000
Files and hashes:         1: 3137372e38362e37322e302f32322d3234203d3e203532353733.roa (hash: PjZzRg0lavxRk29Uhak1W3mpMWB6MMFhAqqLRHk4ZP8=)
                          2: 3136382e3139372e3131322e302f32322d3234203d3e203532353733.roa (hash: 6R8lbmXUYzk9rHzGECDSJqor1vHGJp+xnDA8Vs5gV+c=)
                          3: 3137372e3132352e3130382e302f32322d3234203d3e203532353733.roa (hash: C1ZtIlQuPzNoWMWLN+5MOrSrWzh3syOVKn9+1rE9TnU=)
                          4: 3133312e302e31322e302f32322d3234203d3e203532353733.roa (hash: 5LMuAkk6D+PUO6XbN53kPdyewNJaB00dv3DAAKR7Gd8=)
                          5: 323830343a6365343a3a2f33322d3438203d3e203532353733.roa (hash: MkmnWh7HLmV8XKeblvGNQ084tQDE0n4cIYzP1XgdXRk=)
                          6: 32342e3135322e39362e302f32322d3234203d3e203532353733.roa (hash: GQsbesMdL03x6pgSvWicLwXQeoL5cvtFjvGZCljtPFM=)
                          7: 3137372e38362e3136382e302f32312d3234203d3e203532353733.roa (hash: YKUfq9pAjM0PRNguBgjWYP/T7fDhqUQqY+f0wl2g0AY=)
                          8: 3137302e3235342e382e302f32322d3234203d3e203532353733.roa (hash: bXgZVf4Cm4+3inOBUU8FHt8TflklWn+ZzQRP90/+/hg=)
                          9: 3137372e38372e34302e302f32322d3234203d3e203532353733.roa (hash: awu2EtLy9IEVo+JJzaXMHTAWpwoYimiF445Xf2GoVC4=)
                          10: 34352e362e3232382e302f32322d3234203d3e203532353733.roa (hash: YktmRFcB5C2biaUtODwDu8ddmCoLhRUEiAZoBNt9xsM=)
                          11: 3137392e34322e39362e302f32322d3234203d3e203532353733.roa (hash: fTUkZLp/3shvmLynyAI23ui0P6HH7ZMZ+5u1Z68UvDQ=)
                          12: 34352e36352e3136382e302f32322d3234203d3e203532353733.roa (hash: LCQeRDRh52xH7/V97y5VZbLRdFooBrSCSR7PxbZdSs0=)
                          13: 3230312e3138322e32382e302f32322d3234203d3e203532353733.roa (hash: fDjnVRN500fF5Ix86G0nfXwLn0TdehDHcyZhASW4tk4=)
                          14: 34352e3232342e34382e302f32322d3234203d3e203532353733.roa (hash: mG56iWvCrHL+kk2Adir+F9RdvZJxoOgDK4Wu+hY7/l4=)
                          15: 34352e3232362e35362e302f32332d3234203d3e203532353733.roa (hash: Yt9/CyukffdPiKXWXqi3/SEVxNIriznp3DhzHQAdckw=)
                          16: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl (hash: zOax4Ow9zqnfpYjSYs4eM12YW4VXRBL2F+KBSmw9ocE=)
                          17: 3133382e3235352e37362e302f32322d3234203d3e203532353733.roa (hash: 0xbTYj43hKnwMNIaOl+emf+infscS5scI8ZcKfRdy0c=)
                          18: 3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa (hash: J1wB4pSWk/4qziPxHfT8TmF5tOHLvrBIZLsv/vUXWKg=)
                          19: 3137372e39312e34302e302f32322d3234203d3e203532353733.roa (hash: SEks1oTOHkzWT363eYx2gsupSYzQQHxod1lNUptgWyk=)
                          20: 3137372e39322e3137362e302f32312d3234203d3e203532353733.roa (hash: N8mbaVaEH0v0GlmByshSybLhMhV940/HDxwsWYQIGaE=)
                          21: 3137302e3234372e36382e302f32322d3234203d3e203532353733.roa (hash: GdoDbwz7Sj0bLBIa81MA5V4mVUA0EM39n264C13x4co=)
                          22: 3136382e39302e32302e302f32322d3234203d3e203532353733.roa (hash: zFPxVEXlcoIKmTZJkD3G+PQtSlW1wmxQ2j951LxxjVk=)
                          23: 3139312e3234322e33322e302f32322d3234203d3e203532353733.roa (hash: xi/eldEMhYl2zmtxepgTj/65JDxadCGsJFj8HqVk1zI=)
                          24: 3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa (hash: VdILTEYZBKlH0wduljRWi72LfKcdBsNsUzdCKEtDzv0=)
                          25: 3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (hash: vlVpepGgU/ZYdQVXokmCFHMCVQymJJ1FWbyhXDIJTP4=)
                          26: 3133382e3230342e33322e302f32322d3234203d3e203532353733.roa (hash: Q5DEoPiAj1AWQgoJVEvAetLn4Rq9piVDJzp7J4e9v98=)
                          27: 3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (hash: N6cw3dMJ6ahj+NqG5jjBO6rlt7erbBTU1v707ED52WM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 10:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1e:16:3f:5d:ac:8d:35:b9:7f:68:3a:ae:be:0b:51:a4:f6:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Jun  4 08:58:17 2025 GMT
            Not After : Jun  5 10:24:17 2025 GMT
        Subject: CN=04BF54FBD4F4FC354B10F3EF15918E75D6662016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:fa:6c:55:27:e4:81:7f:6b:f7:17:f9:2a:
                    7b:02:56:b4:cc:6d:c3:77:12:04:c4:f1:93:09:6f:
                    81:09:a6:83:07:81:0b:93:aa:5a:b7:2c:d9:38:25:
                    76:7f:be:8d:cc:cd:45:46:4f:0b:8b:2e:0d:88:6b:
                    14:72:cd:2b:a3:30:68:bc:eb:1d:dd:17:e9:9f:72:
                    db:db:b9:78:0f:63:3f:45:02:8f:92:89:b8:34:9e:
                    90:d9:46:66:2e:6b:cf:c4:08:0a:0f:e5:3c:10:52:
                    48:13:5c:45:65:7a:5a:ca:87:5b:c2:ba:2a:f2:6a:
                    9d:96:1e:82:41:1c:9f:89:4e:57:98:4e:32:cc:46:
                    23:4e:6c:ea:d2:01:1a:9c:11:f2:56:1d:25:99:91:
                    df:b9:9d:23:25:c1:56:d3:99:c5:69:84:c1:9f:1b:
                    2a:04:52:14:31:80:8e:ea:53:fb:30:e8:a8:8b:bb:
                    ec:05:de:c5:83:61:6c:4b:ea:85:a2:2b:d2:73:55:
                    8d:a6:9d:6c:47:62:59:78:c2:d9:2a:fd:ee:49:b9:
                    6b:3b:35:9d:01:ac:78:e9:96:6a:28:ba:85:68:6d:
                    e6:15:8f:bf:ed:12:46:e0:3c:61:bf:30:93:4b:99:
                    b5:22:8e:8a:f7:27:94:3c:44:8d:70:dc:5f:79:7f:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:54:FB:D4:F4:FC:35:4B:10:F3:EF:15:91:8E:75:D6:66:20:16
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:e7:0f:bf:95:1b:bc:0a:7a:b8:03:15:e9:b9:30:ef:61:
         c3:72:a4:40:c9:c6:50:80:f2:1c:2b:d8:cd:20:f5:bf:ee:f4:
         43:d5:f1:0c:56:a6:4e:d5:a7:03:5c:0a:c7:45:9b:03:06:a5:
         59:d4:e8:da:6e:7b:40:33:74:23:3a:ee:8e:a8:9d:ee:b4:bc:
         18:53:96:a1:40:0e:d7:7b:77:67:1f:8b:a4:2b:d9:4c:1d:db:
         a4:f6:a2:e8:ad:26:b8:59:4a:b4:8e:80:dd:6a:30:65:bc:f5:
         0e:f1:84:a9:c4:f5:53:16:a8:d0:5d:b7:3d:5c:8a:cb:a2:f4:
         7c:b4:1c:7b:73:30:a0:2e:40:e3:78:0a:70:44:e0:0e:9e:4f:
         41:df:5d:ee:e6:99:1f:72:99:9b:34:f7:35:da:1c:87:bc:18:
         38:70:98:aa:c5:47:f5:16:9f:1c:f5:2b:aa:dc:2a:c6:c7:fa:
         09:38:62:a5:5a:ad:94:66:50:15:75:8f:aa:e8:12:07:53:6c:
         1e:0e:15:cb:24:3f:cc:f8:4d:ad:98:56:d4:11:66:24:ab:3c:
         52:88:30:fd:e0:2c:9e:b9:be:a7:fa:57:c7:2b:c5:33:ed:f3:
         fd:62:36:02:1d:b6:20:a2:c7:f1:87:af:8a:68:dd:54:76:b8:
         91:57:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:26:59 2025 by rpki-client