Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          hbqdKXngRxpFToDAfailVmn7FlyTZBbBxZ2QAqdl2hM=
Subject key identifier:   37:8C:73:E0:28:2C:36:17:5C:71:0F:7C:E3:6D:64:5E:8B:A4:92:37
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       5A4258C9E19B223D7C9500E0819283EF978D5162
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          023E
Signing time:             Wed 04 Jun 2025 04:19:33 +0000
Manifest this update:     Wed 04 Jun 2025 04:14:33 +0000
Manifest next update:     Thu 05 Jun 2025 07:00:33 +0000
Files and hashes:         1: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)
                          2: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
                          3: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
                          4: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
                          5: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: L7BgI923FBR4T9gjsQYrplFA2jBPcnfklF5Ei1E4J3k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:42:58:c9:e1:9b:22:3d:7c:95:00:e0:81:92:83:ef:97:8d:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Jun  4 04:14:33 2025 GMT
            Not After : Jun  5 07:00:33 2025 GMT
        Subject: CN=378C73E0282C36175C710F7CE36D645E8BA49237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:6b:01:fd:00:5c:c2:8c:b8:8b:87:e8:fd:
                    17:50:88:9c:9b:62:2a:89:e7:90:0a:cd:0a:89:d2:
                    70:5f:e4:04:be:08:8a:f2:61:e3:d4:74:66:60:ca:
                    ae:47:f3:03:c3:20:ec:25:1b:15:77:6b:ad:e2:1c:
                    99:fd:52:b4:55:e3:70:c8:5b:55:01:19:98:88:97:
                    0a:5e:2e:af:f7:f6:06:e8:9e:52:43:fe:0d:2f:61:
                    85:d1:10:9f:7b:25:76:65:07:b5:43:0c:70:80:c5:
                    da:96:e7:af:3a:0b:2c:d0:a0:58:15:6d:a0:5d:da:
                    5e:af:ae:4f:fc:42:d1:2d:6c:f1:40:c3:46:1c:53:
                    04:7e:11:a1:42:85:80:16:57:8c:b3:2c:0e:7c:2a:
                    42:03:8f:ac:6d:16:4c:61:09:c4:be:7d:8d:fe:fc:
                    c1:e4:d5:e8:62:7f:6b:e1:6b:23:a0:7b:8a:ce:5f:
                    4c:02:79:ad:21:44:18:3c:d0:dc:35:c6:4b:79:51:
                    ae:38:e5:7d:11:64:a6:60:d3:0a:26:e0:64:2a:12:
                    e0:c7:a8:3f:82:5e:02:50:a2:69:52:0d:5e:77:10:
                    c6:5b:a2:6b:d0:83:2d:00:8b:31:7e:73:d6:94:41:
                    25:41:20:28:09:4b:09:17:1c:71:1e:db:9f:25:22:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:73:E0:28:2C:36:17:5C:71:0F:7C:E3:6D:64:5E:8B:A4:92:37
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:a0:32:34:b5:85:46:d5:cc:e1:54:36:03:27:a8:a2:7a:
         05:11:65:36:a8:86:15:25:ff:46:fd:4b:c4:3f:ab:50:11:89:
         43:9e:6c:3d:61:fa:a8:73:1b:56:a5:cb:cc:91:0d:20:cf:48:
         fe:95:2c:b0:cb:16:80:76:06:8c:ae:26:93:e6:3d:dd:c3:b8:
         e1:f9:7d:b2:03:33:bb:ca:f6:8b:f6:ba:c5:a5:ee:5e:ec:10:
         27:df:4f:c7:1d:90:41:ee:75:54:9d:ea:3d:6c:3f:ab:4b:7a:
         7b:33:b8:c4:e5:cc:d5:97:63:fb:fb:e8:63:2a:ef:e3:af:f2:
         61:94:5b:56:cf:a8:2c:b0:68:42:71:79:7c:98:a5:eb:d8:4b:
         58:8f:43:81:52:73:5c:b3:a5:2d:d3:7b:e2:09:de:29:52:4f:
         a2:9f:a6:ee:5f:f7:31:1e:04:57:dc:c6:48:30:dc:5b:53:e7:
         2f:64:92:5c:14:1b:66:9a:a7:6b:f5:0a:57:b8:58:db:a5:1f:
         65:d5:af:c9:1f:f4:d6:21:06:67:ce:73:5b:12:08:2d:d6:c5:
         63:77:86:d2:87:7b:e7:f9:c4:f6:aa:9a:68:eb:26:13:f8:f5:
         d5:64:53:10:c1:36:f6:3a:d2:26:bf:4e:1d:ff:aa:9a:e1:f3:
         fd:01:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:32:13 2025 by rpki-client