Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File:                     9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier:          QQbS4LOQxQdiwwARDWTinVGrVQLrYNpYu0eOxut0iL8=
Subject key identifier:   3F:BD:74:AE:59:5E:27:6A:71:36:32:D3:A3:82:CD:59:24:20:27:DB
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       443FCF8C8F5B01FB38DE61D4876D5B575F5EAD4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number:          A0
Signing time:             Wed 16 Apr 2025 13:08:26 +0000
Manifest this update:     Wed 16 Apr 2025 13:03:26 +0000
Manifest next update:     Thu 17 Apr 2025 14:53:26 +0000
Files and hashes:         1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: v+mxDuIaAa07W9gU3KuYTKy0O5KHR7aENYQOGorbUVw=)
                          2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=)
                          3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
                          rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 14:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:cf:8c:8f:5b:01:fb:38:de:61:d4:87:6d:5b:57:5f:5e:ad:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Apr 16 13:03:26 2025 GMT
            Not After : Apr 17 14:53:26 2025 GMT
        Subject: CN=3FBD74AE595E276A713632D3A382CD59242027DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:60:e2:28:79:7e:6c:c6:a0:98:98:fe:6c:
                    cd:5d:70:ac:eb:bb:70:e4:26:04:22:0e:ca:ec:2e:
                    a4:c4:b9:8b:59:4c:a3:87:48:f7:17:b4:3e:5b:79:
                    10:8a:77:f7:ee:42:b6:cd:7f:42:95:a0:d4:2f:04:
                    7d:43:9a:b7:7b:2f:50:48:18:dd:a2:7e:c5:98:02:
                    54:c9:52:c5:92:37:9a:cb:aa:e1:23:fb:a6:32:58:
                    fb:21:4f:c7:c6:a3:a5:3e:98:db:4e:4f:d8:bb:ea:
                    0e:5e:5a:8e:5b:6f:73:d4:3c:de:59:1c:aa:80:c8:
                    f1:60:72:f6:06:09:6a:3e:69:d2:61:39:5c:12:4c:
                    00:1f:93:40:68:8a:85:b1:36:1d:98:21:64:28:f0:
                    e8:3d:7e:7a:6b:12:16:d4:b7:3d:4e:a1:d8:ef:09:
                    c3:86:98:5d:b8:7a:ac:93:7a:e5:b5:18:97:47:8c:
                    e7:6a:46:b3:90:08:bc:47:4a:5c:8b:b7:bd:e4:71:
                    72:48:5e:a1:06:9c:9a:0e:31:07:67:89:88:cb:20:
                    83:ea:26:cc:35:f2:f1:a1:42:56:1a:62:8e:ff:60:
                    4f:3f:25:8b:6c:0b:91:af:10:61:a2:f2:4c:1c:1c:
                    19:4c:89:10:80:38:3d:d8:17:40:39:67:d1:15:bd:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BD:74:AE:59:5E:27:6A:71:36:32:D3:A3:82:CD:59:24:20:27:DB
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:db:38:8a:22:76:7b:86:6c:e5:d4:e6:28:5f:6f:c2:1c:
         86:5a:fa:1a:e9:da:5c:8d:e5:8e:8b:45:08:00:47:aa:be:66:
         68:72:52:96:3f:01:af:70:e7:b0:ae:29:26:cf:b6:e3:70:6d:
         53:3e:8e:b2:cf:bc:0f:b9:e1:79:7c:38:4e:31:07:04:cf:db:
         d5:ed:3a:4a:7e:a6:14:df:c8:21:27:da:d8:a6:18:72:c7:be:
         3e:02:2e:eb:40:d5:5b:54:7f:e5:be:00:9b:ea:4a:db:c2:37:
         dd:a0:ac:40:25:8d:83:b1:8c:a3:35:8a:65:a2:0b:60:d8:5d:
         a2:69:1b:91:1c:32:cc:cf:3f:13:d9:78:14:7c:b8:07:46:d6:
         8b:3e:a5:52:aa:be:c3:c6:cc:b1:c8:2d:bd:98:f1:d5:d3:67:
         93:f7:0c:7d:e5:4b:c4:a0:ff:0a:bb:82:2a:08:ee:0b:a5:71:
         e5:a0:f4:0b:e1:2e:f4:84:57:68:bc:97:f7:15:65:b9:46:ef:
         de:5d:4b:70:fe:a2:4b:21:71:53:e2:96:e2:9c:8a:04:56:f0:
         29:6f:d7:6f:fa:a6:42:c4:e8:6b:f5:14:2b:1b:5a:a6:75:7f:
         3a:10:23:23:42:25:7f:04:46:17:2b:4e:b8:28:3b:4c:2f:d0:
         56:6f:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:31:12 2025 by rpki-client