Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
File:                     EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft (raw, json)
Hash identifier:          s9O1PsJaUDYu0NnkG2kMnzcI1DuhA+vJMFbYI1gFQ6I=
Subject key identifier:   A3:64:EA:2C:38:C4:F1:88:DD:BE:39:E6:1F:B4:F5:67:D9:E0:67:FE
Authority key identifier: EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62
Certificate issuer:       /CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
Certificate serial:       204F4498A341D4A1737CDC8BCBC2B33262136F2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
Manifest number:          0217
Signing time:             Wed 11 Jun 2025 12:27:04 +0000
Manifest this update:     Wed 11 Jun 2025 12:22:04 +0000
Manifest next update:     Thu 12 Jun 2025 12:54:04 +0000
Files and hashes:         1: 323830343a383930343a3a2f33322d3334203d3e20323733353735.roa (hash: k4mWOgAFsSsoF1vKada05Avpweirk/g6fYdmIjOvCdQ=)
                          2: EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl (hash: gmMdpHCass8gDjpkbItCfK2nM2SYZ9O69gaXjmrduHs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl
                          rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 12:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:44:98:a3:41:d4:a1:73:7c:dc:8b:cb:c2:b3:32:62:13:6f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
        Validity
            Not Before: Jun 11 12:22:04 2025 GMT
            Not After : Jun 12 12:54:04 2025 GMT
        Subject: CN=A364EA2C38C4F188DDBE39E61FB4F567D9E067FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:0f:7b:b7:04:e5:63:88:2a:9b:fc:08:a7:
                    8a:2e:bd:1e:03:00:c1:f4:dd:8f:2f:43:7f:50:00:
                    20:9e:d1:63:90:06:42:95:2f:76:0b:d3:ff:b1:fe:
                    a6:c0:64:13:7f:16:61:3d:66:89:f1:fc:ce:4b:b7:
                    b1:54:d4:68:51:99:6d:34:a0:52:3c:c2:14:e0:50:
                    cf:33:d2:82:07:23:7c:69:3f:59:d1:ef:7e:41:3f:
                    e4:38:0e:38:3c:61:1b:07:05:42:b5:20:51:a6:2b:
                    e7:04:5b:53:d8:f0:a6:c4:32:b2:ae:a8:e1:a5:5f:
                    35:4e:bd:fd:3c:09:46:a2:5f:fa:15:7d:e4:0d:2c:
                    90:c8:ff:e6:27:4d:90:4f:7b:2f:2c:79:f5:68:29:
                    52:e6:88:2c:5e:dc:ae:d5:6e:3e:16:2f:a3:b7:2d:
                    33:2a:1c:19:1b:45:e8:24:4a:33:6e:1e:d9:11:8f:
                    90:cc:75:1b:9f:ab:8b:7c:0d:f2:0a:d3:ce:4a:9c:
                    5f:8d:c9:37:d6:72:2b:ca:4b:01:20:e9:22:71:84:
                    3a:48:60:6b:9c:a6:00:29:06:25:46:40:d3:f8:66:
                    3d:5a:8f:63:92:73:10:70:6c:e8:49:81:0e:b4:04:
                    37:71:f7:87:c4:f2:1e:5d:c8:40:59:da:67:ab:57:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:64:EA:2C:38:C4:F1:88:DD:BE:39:E6:1F:B4:F5:67:D9:E0:67:FE
            X509v3 Authority Key Identifier:
                keyid:EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:c9:f4:ce:9e:d9:b4:76:57:be:e9:fb:3a:c5:d9:f4:5d:
         84:dc:28:2f:26:f9:f4:42:3d:a8:16:0c:84:11:e2:1c:07:79:
         f9:d3:49:f8:31:5a:2a:94:f2:15:03:77:7f:af:8a:83:a0:df:
         e2:3c:4a:18:cd:2f:d3:bb:59:4f:e2:5e:b9:7a:0c:d9:d5:67:
         04:b8:99:d6:d0:9c:73:77:ee:ec:e5:09:76:d4:fd:01:58:fa:
         6d:9a:73:8f:7c:be:c3:e8:6a:87:b1:4c:8f:40:13:44:3a:95:
         1f:5a:cb:d6:2f:44:5b:f6:ed:48:4d:90:30:97:5f:60:91:e0:
         d4:6d:c9:a9:ca:98:00:08:64:97:fa:00:0b:f0:c4:8d:97:4b:
         bf:c0:3a:94:6e:dc:60:20:b9:6d:2b:26:e3:b3:f6:ff:f8:0e:
         7f:f4:e4:85:02:c4:4d:11:fe:70:72:ea:a5:92:d0:90:be:a5:
         e1:c3:64:c8:c3:5e:e8:3a:cb:82:dd:c3:7f:5c:5b:53:31:12:
         29:21:ad:bd:df:e3:77:73:ee:e8:bd:d1:e6:51:2d:fb:87:b8:
         7d:9f:7e:11:af:2c:09:ae:d6:44:12:78:56:3e:ab:6c:52:37:
         0b:f3:6c:fa:9b:06:6d:73:5d:e0:22:fe:5a:2d:47:76:df:96:
         3f:9e:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:45:01 2025 by rpki-client