Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
File:                     411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft (raw, json)
Hash identifier:          L1ExZXDI90I9WKudRSMBLbeErCltmTCOwOv+3fm7lQw=
Subject key identifier:   8C:65:30:5B:B9:1B:B3:2D:9C:3E:F2:55:CD:F8:0A:A1:39:23:30:8C
Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B
Certificate issuer:       /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
Certificate serial:       5D3BEDFAA9541339961F5E409EA5ADA2F1590A5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
Manifest number:          17
Signing time:             Sun 20 Apr 2025 22:30:00 +0000
Manifest this update:     Sun 20 Apr 2025 22:25:00 +0000
Manifest next update:     Mon 21 Apr 2025 22:30:00 +0000
Files and hashes:         1: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl (hash: TMT0FsOs/qnnjW64G5FmWudQighZWjM9wKfajuSCU+I=)
                          2: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: /LHvi05kCt9zKgKY+WIZNYGkbzjxuWi5IXygDqTTTek=)
                          3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3b:ed:fa:a9:54:13:39:96:1f:5e:40:9e:a5:ad:a2:f1:59:0a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
        Validity
            Not Before: Apr 20 22:25:00 2025 GMT
            Not After : Apr 21 22:30:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:50:dc:2b:56:3a:ae:2a:85:1f:cc:77:44:9e:
                    da:47:d1:6d:b5:6e:1b:bd:1c:e0:29:1a:55:8c:89:
                    9d:ad:94:4b:fd:44:7a:11:d7:43:06:dc:60:ed:00:
                    f3:cb:d5:3b:07:1d:6c:32:8b:47:ae:8b:38:39:d3:
                    3a:5e:41:89:4b:4b:f2:26:6f:d9:9f:4f:77:d7:50:
                    3b:0b:be:96:7a:d4:65:f0:e7:9a:a7:76:31:86:e8:
                    0c:ff:dd:c1:bd:8e:2f:fd:a2:c3:84:60:7b:8c:00:
                    5f:dd:8d:d6:50:50:1c:1a:71:f5:1a:4c:0a:3f:45:
                    d8:74:b4:c0:a4:d9:27:be:d4:32:a2:1a:4c:3d:3c:
                    05:65:9a:5b:3e:48:68:ef:74:67:23:18:37:c6:06:
                    58:dd:65:17:52:f0:ab:b0:2b:ba:1d:b7:75:87:02:
                    6a:a5:8d:1b:66:42:86:32:ab:67:b1:21:03:bf:96:
                    72:01:8e:59:92:88:ba:97:e9:8e:3d:ed:5c:b1:19:
                    57:5d:d8:d9:eb:70:4f:a8:62:d7:f5:b5:21:4c:c3:
                    de:ca:d5:6c:57:22:5e:57:ff:44:6c:d5:0f:9f:e9:
                    eb:8a:49:4e:7c:60:33:7e:f8:4a:af:2e:6c:9c:95:
                    8a:54:b6:56:9f:c8:b4:e3:bf:d2:3a:8c:1a:1f:38:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:30:5B:B9:1B:B3:2D:9C:3E:F2:55:CD:F8:0A:A1:39:23:30:8C
            X509v3 Authority Key Identifier:
                keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:88:aa:9d:49:82:f6:7f:c4:20:0c:63:cf:10:d4:12:06:24:
         27:0b:08:1f:94:cc:7a:c3:22:08:65:a8:2d:51:1c:0f:5c:aa:
         60:ee:e1:da:10:e3:60:79:c9:02:45:64:f2:06:c2:b5:dc:2a:
         42:78:53:d4:7d:32:bc:a7:21:ca:df:52:55:ab:11:cc:cb:03:
         b3:7f:81:9d:d0:20:c2:50:f2:9d:b8:7c:49:07:f2:b1:92:26:
         c5:f5:83:de:58:53:7c:da:90:a7:dc:a3:5e:1c:24:6e:00:4d:
         26:54:a9:91:95:2e:c5:c3:77:4f:e4:7c:d6:99:c3:35:56:aa:
         23:d1:e2:ab:85:df:40:39:a7:e7:12:4f:ee:22:d6:30:db:ac:
         4f:41:51:f8:94:ed:43:a1:c7:da:b7:e6:28:28:ef:57:a1:d2:
         b8:0e:c3:be:4d:24:da:56:98:14:d2:f2:f3:49:d8:ef:ca:71:
         8b:a9:b8:b1:a4:7e:d7:d1:da:b1:ae:3a:a0:6c:3e:62:71:03:
         c1:9d:12:8d:37:26:65:61:3e:d2:d5:5d:d6:81:fc:7c:1c:21:
         a0:4a:bb:42:1f:e0:f3:69:ad:e9:bb:63:9e:2b:92:60:fc:f0:
         d8:87:38:72:04:13:2d:c1:d8:ed:50:c6:23:36:36:49:5a:b0:
         b9:74:04:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:28 2025 by rpki-client