Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
File:                     D4206C10F587084E3266C97EDA0F65643299E1B8.mft (raw, json)
Hash identifier:          zVOIeV3tFz+bbS31XnJuEZAloJqXLw8OTeMsdVoCHps=
Subject key identifier:   F0:F2:5D:74:11:8C:67:C3:95:D0:EF:FB:F2:68:7D:86:8B:8E:1E:C4
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       6D5D82BE7C48047F1CD13E7CBF71C205993600B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
Manifest number:          BC
Signing time:             Mon 14 Apr 2025 06:18:41 +0000
Manifest this update:     Mon 14 Apr 2025 06:13:41 +0000
Manifest next update:     Tue 15 Apr 2025 08:09:41 +0000
Files and hashes:         1: AS266949.roa (hash: egaTZzreVW6x1uo0PRWd9DF4rP2JG2YajPARjW/mKQc=)
                          2: AS262794.roa (hash: i+v7lTyGLjfWU1kV/+Rb0JDm6OT0zpvMBUzQ4+kORtU=)
                          3: AS262481.roa (hash: zjD+qXaqpjLjXm76FSh8/0nVYzjkenvNmfktA+1Y6js=)
                          4: AS263032.roa (hash: bWdR9Dc1ebR0Ac+A/FaB5xQt/jAY5oq6fEquIOEyJEY=)
                          5: AS28258.roa (hash: i09LmHA7ACt80rgzHNZLDwRB+fNivgDFYYQEeTNB9gw=)
                          6: AS262671.roa (hash: 8WLI1Lsxq0LSRwyQy7PPmkRJN6rGW6gNOEO2lIzP9vU=)
                          7: AS263864.roa (hash: TfabEZTuInf5u1tM/1kWTEEVb5l34tA2K8AF02xtGRI=)
                          8: AS262673.roa (hash: fT5qaeZBSzgd135I2Appjxpx0/dIBMlOYrmUUADcQxg=)
                          9: AS263297.roa (hash: ln1e7ehtaBpKX/X5uzYwDbJupTpQZAGuJCzbg7EK+yg=)
                          10: AS28211.roa (hash: dnB/NoKw2cP6tlQBXlUFT2J60TY8vx4oI0nuVaEWyF4=)
                          11: AS267085.roa (hash: 9/zatEcjIfEO/h+0BaUJSbsC1zigcQXoJhHsf8cxaaA=)
                          12: AS28241.roa (hash: XijaTcK8J0r4lGsbvN4F/hsPte/WKuAfLqJzPC5RkY4=)
                          13: AS266201.roa (hash: lgSAm6asPzLSY+CH2qXZsBgaz133ZeZ3Ss9Fgy+i3Uo=)
                          14: AS53191.roa (hash: YRj5jFdYku7hBACKoPIF6cTj6CYqCKeoK+TmUR6pUAY=)
                          15: AS263072.roa (hash: GYAK+er0rtqbIu/jE81n4mHkt2QU6JiittxT2OyIi2E=)
                          16: AS53184.roa (hash: 3ndF/OYmdxRxaH+cg7Ag0NYnKLtMOy4X1TMQOa2fmIE=)
                          17: AS268613.roa (hash: 5m5eWeFA/Qc1LYY6WfHheq9zxj+sosoOZkqSxW1FOb0=)
                          18: AS262700.roa (hash: x/DyK4hdzbGUG34Soo41dlscvljBXwmDu3HY4u/85hM=)
                          19: AS267404.roa (hash: P6IZ5U4g7IN2FkKVppnQ3PQ+1oFLMtJTdZAkRZvPrK4=)
                          20: AS53190.roa (hash: rC42xoWKEPTtCrrL78hU3jR6SgdCLYcK4eAt/vScWTE=)
                          21: AS53085.roa (hash: j2IKVr02f5IcRD4VIfva+feAVvAso98m1m6mxrBjrQ8=)
                          22: AS263405.roa (hash: 3DStYwK3QmjyH7+pf3S5+yU8m24Z5bu0nc1yXCvPl/s=)
                          23: D4206C10F587084E3266C97EDA0F65643299E1B8.crl (hash: cpOMJKiLowYt7aW1Gfb/ggSkbSsBEj7CDKymvkNqhnk=)
                          24: AS263645.roa (hash: p5GgvaLj0zmkXzV5AJyY44lMxFFzVbvUYUQ/diWLcgI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 08:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5d:82:be:7c:48:04:7f:1c:d1:3e:7c:bf:71:c2:05:99:36:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Apr 14 06:13:41 2025 GMT
            Not After : Apr 15 08:09:41 2025 GMT
        Subject: CN=F0F25D74118C67C395D0EFFBF2687D868B8E1EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:54:b7:1a:86:68:ee:b6:ff:4e:98:a7:49:
                    2b:ea:8d:b6:a7:0c:4f:b9:19:75:01:44:ca:6e:e7:
                    20:71:4e:06:e7:ec:13:ca:97:3a:76:2d:97:96:f1:
                    e2:39:84:a2:1d:39:79:ca:10:bf:70:b8:7f:f1:93:
                    16:c7:9f:65:48:d1:20:52:8b:b5:71:e9:c4:5c:57:
                    18:75:ce:2c:ef:80:31:ae:72:c5:b8:05:db:e4:8f:
                    2d:11:89:da:ec:bb:c7:9a:49:a4:44:b7:d1:2f:95:
                    73:d1:0a:ce:20:c4:75:b0:da:05:14:a4:02:49:04:
                    75:1f:4a:46:ab:40:95:eb:b2:4f:cd:9e:3b:d3:5f:
                    06:76:fe:e9:27:31:b8:95:5f:5a:20:34:99:39:b3:
                    1a:25:e0:d6:e7:b1:d8:a6:88:f6:6b:94:f3:6f:26:
                    d5:69:38:7f:d5:1f:c4:4d:52:83:d5:81:b3:d8:bd:
                    eb:b6:5c:30:b2:84:e4:f8:3f:66:ad:2a:40:b9:14:
                    43:9f:9d:08:06:8e:0a:1b:2d:ec:87:c6:6e:f2:ba:
                    d7:c9:07:1c:5e:49:0a:71:92:27:bd:d0:1d:f2:0f:
                    e9:41:13:85:cb:f6:64:6d:7d:2c:03:43:2e:15:a6:
                    59:b8:0f:eb:c6:c1:7d:9e:0c:64:c3:1d:0e:4a:f7:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F2:5D:74:11:8C:67:C3:95:D0:EF:FB:F2:68:7D:86:8B:8E:1E:C4
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:36:6c:65:2a:99:e3:18:bc:13:38:19:38:97:bb:1a:f5:
         5c:a1:d1:2e:48:7a:c1:d2:95:ca:23:78:c0:09:be:b5:4b:b7:
         5a:7a:8f:a3:fd:0e:76:de:31:82:e6:3d:a9:e5:3e:48:f2:f4:
         5f:af:71:a9:df:96:d7:c5:70:c4:9f:74:a7:13:9b:3a:81:6d:
         43:7d:bc:ad:1f:bf:9c:58:bd:7c:0e:7a:64:f2:07:a8:62:de:
         31:42:4e:ab:3a:57:5d:34:e1:ac:98:7b:dd:e2:05:50:a0:e6:
         f5:a5:3d:70:43:fb:b1:40:e0:d0:11:76:99:e9:e1:f2:85:d0:
         89:c0:c3:92:35:a8:48:87:7e:19:68:f4:bc:10:da:a9:72:35:
         2b:ca:77:f1:b4:f6:d1:54:9b:03:31:a4:5b:aa:0e:4f:f3:c1:
         90:18:cf:d7:0a:89:65:be:75:d7:64:f7:bb:95:8b:34:d1:ce:
         92:74:3b:30:01:86:ee:0e:41:4a:43:da:89:26:6a:51:74:45:
         30:4f:c8:79:e4:90:7f:2a:f5:8f:1b:94:01:64:7e:d9:42:a5:
         d2:2c:91:60:e4:47:5c:09:fa:3d:68:81:37:50:f4:ff:1b:f6:
         67:08:a9:0c:6b:ec:2a:44:34:a7:cb:0a:0d:cc:75:44:5f:55:
         a8:5a:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:36:47 2025 by rpki-client