Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
File:                     D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft (raw, json)
Hash identifier:          BK9M4wD9ZyUibgfbu5VwWOQ4b+4uTHnoZZ1pVAEzozU=
Subject key identifier:   27:44:05:19:2A:E5:73:91:5F:41:A5:31:BF:49:AD:5B:3C:BA:87:A0
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       132AF57A149435753D8F26FAD05C21C8E53686AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
Manifest number:          AA
Signing time:             Fri 04 Apr 2025 18:32:52 +0000
Manifest this update:     Fri 04 Apr 2025 18:27:52 +0000
Manifest next update:     Sat 05 Apr 2025 20:47:52 +0000
Files and hashes:         1: 3137392e34382e3130302e302f32322d3232203d3e20323731303732.roa (hash: 9oTuIb/H6MITwhQvesDoaO/22T2cMrUGhl4WMdowddg=)
                          2: 3137392e34382e3130302e302f32332d3233203d3e20323731303732.roa (hash: DQRCNeq2qrni6VNoXnoYnhsIBZ1X7ca8d6gUp0dzvDA=)
                          3: 323830343a373564343a3a2f33322d3438203d3e20323731303732.roa (hash: gZABhcIIj3zj1i0lRsb/GXhkfmwPqSUrhvrZ7Xg8I/w=)
                          4: 3137392e34382e3130332e302f32342d3234203d3e20323731303732.roa (hash: 3+arhAjaUxOVjMsphoEQe/21QInQxRLhJ4MA/z/zbo0=)
                          5: 3137392e34382e3130312e302f32342d3234203d3e20323731303732.roa (hash: NWGaby+sw9nLGadITkx3AnbOb1cKq6lFk7uCvR6GtPs=)
                          6: 3137392e34382e3130322e302f32342d3234203d3e20323731303732.roa (hash: h/oHBtUjGQpdxg/mRFO2THjSruVmF6xQtH3NO4gCBCI=)
                          7: 3137392e34382e3130302e302f32342d3234203d3e20323731303732.roa (hash: FGgrdPf+SQBQSWJDbC+N3GBKjLWnUhu45Bei0Gek56g=)
                          8: 3137392e34382e3130322e302f32332d3233203d3e20323731303732.roa (hash: 7MasVKEFLVqzrDSLBSn/VMDsqgpmW530i/xVnkAdVnA=)
                          9: D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl (hash: zqFDo0yA3HaBpHOBkEnPYjOB6LUcepajJTGe6zzACvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:f5:7a:14:94:35:75:3d:8f:26:fa:d0:5c:21:c8:e5:36:86:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Apr  4 18:27:52 2025 GMT
            Not After : Apr  5 20:47:52 2025 GMT
        Subject: CN=274405192AE573915F41A531BF49AD5B3CBA87A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:b2:d6:f9:25:33:18:d3:ac:dd:57:be:eb:
                    9a:aa:9d:34:51:6a:bb:92:82:41:e8:e2:2c:77:8d:
                    6e:b7:70:db:64:bf:9e:3f:6a:c4:0d:9f:d8:6b:e7:
                    39:5e:ad:51:7d:0d:72:38:2b:03:1d:22:6a:4c:13:
                    ae:bf:6a:a5:bf:d0:48:2f:db:1b:3c:bf:0f:da:5a:
                    f4:14:14:c7:c4:1d:74:a7:28:63:33:fe:04:63:26:
                    eb:de:03:f1:71:05:5d:c5:8b:70:27:a3:c5:c2:f8:
                    38:35:67:c0:eb:46:8a:78:65:2f:a6:4e:dc:5f:f8:
                    ce:87:00:eb:6c:5e:56:23:f2:9a:28:03:e9:11:92:
                    4c:13:e5:ea:b1:90:53:85:6b:38:c6:af:f2:b0:7f:
                    de:d8:fa:09:8a:d8:4c:f0:35:6f:be:78:44:9c:02:
                    74:fc:09:86:f2:e5:61:d3:c1:1f:63:7e:eb:5e:6d:
                    e5:df:6a:cb:22:17:8c:a6:da:ad:f7:72:05:52:3b:
                    92:8a:02:3d:7a:80:5c:8b:22:55:75:4d:d0:59:54:
                    d9:1f:be:33:a6:64:17:29:bb:66:3f:62:e4:28:1e:
                    a7:4a:ed:57:03:ea:db:0e:ee:18:25:26:71:5a:a7:
                    50:50:d8:7e:c7:81:26:a6:a6:14:e2:63:4b:23:54:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:05:19:2A:E5:73:91:5F:41:A5:31:BF:49:AD:5B:3C:BA:87:A0
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:db:22:c4:22:b2:ae:e7:7b:42:16:1b:34:bc:92:88:f2:4b:
         bb:b4:37:c7:71:9d:fd:19:6c:58:37:96:60:14:c6:8c:5a:b4:
         6f:9b:b7:6b:16:32:11:86:b0:e5:72:c9:58:f4:91:6a:4b:d3:
         f6:16:ba:7b:f1:6b:b9:8b:60:9d:6d:12:ed:70:bb:06:98:2e:
         7e:97:a8:e6:c0:ef:15:b8:a3:4f:d3:c8:26:37:19:89:98:2a:
         8c:47:da:af:c7:79:78:35:2f:ae:eb:df:1a:56:62:d2:65:af:
         ad:1a:02:29:67:17:65:4d:bc:af:eb:41:b2:2f:7a:a0:e6:ee:
         d4:af:d3:c6:b1:dd:84:9c:44:6c:c9:ea:8f:22:1c:e0:f7:8b:
         2e:c6:9c:dc:fb:54:b3:54:30:96:37:8c:3b:40:03:10:fb:63:
         2e:ac:48:2c:f8:5f:b5:8e:89:04:c5:28:3d:06:22:68:82:e4:
         7f:30:c5:d8:57:c8:7c:d4:af:46:0d:af:0e:3f:e8:df:6a:af:
         95:82:95:f4:cc:c9:1a:84:6d:d3:fd:5e:6c:78:23:c3:e9:57:
         f0:a1:1f:70:18:ce:33:a1:95:19:fc:db:48:7e:49:09:2d:b3:
         cf:65:71:b4:98:bb:35:84:3c:18:5d:72:67:8f:ac:d2:d6:b6:
         48:75:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:55 2025 by rpki-client