Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
File:                     BB28C577DF924111463D0D089EB3700DB6333A08.mft (raw, json)
Hash identifier:          8Oilri9Ja5V8GKks9vQ3WIGq/NjrzM8RC0ZumgCCQk0=
Subject key identifier:   13:93:6E:F3:6E:68:C2:08:16:7C:B5:55:13:4A:7F:BC:0F:CD:05:02
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       21FDCC9ED3635DE5E502492513E8E181FCD47466
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
Manifest number:          34
Signing time:             Thu 20 Feb 2025 05:48:04 +0000
Manifest this update:     Thu 20 Feb 2025 05:43:04 +0000
Manifest next update:     Fri 21 Feb 2025 08:45:04 +0000
Files and hashes:         1: 323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (hash: rMLm5hkY3lLZTv23WMtyompaxAN9MdvbPHahAcydOtI=)
                          2: BB28C577DF924111463D0D089EB3700DB6333A08.crl (hash: 80/CwZLnDqgdM3OtNLgyUiMZDzEltJwC/3BEXCmYcK8=)
                          3: 3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa (hash: UK1FVjUUS4NN95+sbBGz7vOGXmhAugdySF3Yo3LFggk=)
                          4: 3137392e34382e3138342e302f32342d3234203d3e20323731303935.roa (hash: rxXWlnG9uSrzj/oTEfd1aQfeZWUr6LNsK2YLrN23yqg=)
                          5: 3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa (hash: mf5kOnGLinzLoK2P/Age80BdVk/qTly4H6v3aFtSNSc=)
                          6: 3137392e34382e3138372e302f32342d3234203d3e20323731303935.roa (hash: SavhPxPE5Lyf7T0B4MpwnGMSqHRjb2lI5Yxz3msUeYc=)
                          7: 3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (hash: 3k9Wk5BftPyULW/+XZwhH81s3yMlae2T/feE4Z166ZI=)
                          8: 3137392e34382e3138352e302f32342d3234203d3e20323731303935.roa (hash: qwQzXDvA/TR6rEcBF3MKa/9LCG7ymfe1c48+OCzzsOE=)
                          9: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (hash: kOaelJSbrawNGUj8SHViCcp4NpZdOn1Ab0xJJJsOHrU=)
                          10: 3137392e34382e3138342e302f32332d3233203d3e20323731303935.roa (hash: hkmXaAW54tx3D58QrdDkfMXZVkhFpkSCBOUaBNTviWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 08:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fd:cc:9e:d3:63:5d:e5:e5:02:49:25:13:e8:e1:81:fc:d4:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Feb 20 05:43:04 2025 GMT
            Not After : Feb 21 08:45:04 2025 GMT
        Subject: CN=13936EF36E68C208167CB555134A7FBC0FCD0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:0d:e4:d2:ac:12:c6:c2:00:e0:aa:7b:c7:
                    c9:e5:ca:26:ef:1b:c2:01:b9:81:ac:82:50:3a:4f:
                    e8:ca:f0:a8:89:72:b2:2d:95:57:6d:60:7e:37:d7:
                    e0:8e:a7:a7:cc:50:0c:d3:2f:b0:8f:19:c3:6b:ab:
                    5b:ea:35:7f:dd:f7:c4:da:f0:38:fc:56:41:c2:bd:
                    df:05:99:cd:5f:42:d1:79:b4:a7:5b:5e:3d:59:19:
                    99:2a:ce:24:a9:ea:05:ba:dc:66:24:66:8c:a3:da:
                    4d:f2:9a:52:2d:93:ab:f1:ce:df:6c:a8:cb:f5:eb:
                    07:4c:8d:d9:1a:bd:73:2b:10:53:2b:09:c1:83:99:
                    12:a8:b6:d2:2d:75:de:5a:af:79:b8:ef:ae:dd:81:
                    2c:c5:f1:e1:64:70:dd:7a:65:71:30:77:6f:8c:b9:
                    27:ef:1a:b0:4f:fc:09:31:b3:4c:b6:1b:fe:6d:23:
                    37:b7:46:be:74:5a:29:1a:e7:45:9f:49:d0:0a:ed:
                    34:ec:31:9d:61:75:ab:57:aa:0d:3a:7a:90:1d:14:
                    88:8b:0a:1f:fd:0b:00:e5:45:5a:49:c8:38:6f:6e:
                    4a:9c:86:0c:c4:75:e9:a0:07:8c:96:a0:9c:6f:7d:
                    3f:6a:9e:f4:9a:bd:d4:08:89:37:14:c5:a0:34:ce:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:93:6E:F3:6E:68:C2:08:16:7C:B5:55:13:4A:7F:BC:0F:CD:05:02
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:65:85:4b:84:f0:8f:ac:5e:14:28:e4:01:e2:63:87:e7:c7:
         1c:3e:65:98:c4:96:4a:58:bd:e6:49:f7:cd:b1:f6:c4:1e:ff:
         f5:f1:41:3d:b9:8a:58:3a:ef:02:f3:00:a5:bc:77:15:7b:5f:
         e5:36:d8:a9:d4:0d:4d:1d:8f:28:32:18:67:df:e1:b5:8d:09:
         2d:5a:5e:f3:ea:2b:27:18:32:06:44:cf:1a:f0:44:f7:bb:bf:
         42:be:31:32:8e:f1:b3:e1:fa:5f:ac:9e:13:30:64:a6:5a:18:
         f6:2e:83:fc:79:7d:7c:c2:b4:b6:56:7f:ee:0c:b6:4e:05:85:
         3f:b7:af:29:1e:38:45:45:84:35:9e:1b:23:15:1d:d0:16:d3:
         2b:76:95:0f:d4:c0:fc:15:e1:8f:b1:6c:da:3e:08:c7:a8:6f:
         76:cf:8c:a7:4c:5e:3b:21:51:9a:ad:ca:53:19:77:dd:ba:c1:
         34:d4:65:09:2f:9d:d4:b5:9f:dd:cc:c2:21:bb:72:6b:35:78:
         ef:54:04:cb:99:01:54:7c:d9:68:7c:d9:7a:09:aa:ec:56:1a:
         bc:4f:58:d3:c3:8b:34:8a:2c:a9:99:55:8b:f4:bf:25:1a:01:
         0f:15:5b:e6:27:45:04:05:64:e3:90:38:a2:b3:59:b4:a9:e8:
         b4:55:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:33:00 2025 by rpki-client