Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
File:                     D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft (raw, json)
Hash identifier:          hvx6Oafr57l/dJGqvMG2VnLTYADDhyDZ+4Vmey6e7Pk=
Subject key identifier:   9B:90:2E:1D:E8:66:22:4F:55:1B:99:52:F3:E4:69:F5:CE:F9:94:E4
Authority key identifier: D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32
Certificate issuer:       /CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
Certificate serial:       10BE739F95DE3193F533CE59BE9C5C50F0C76D5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
Manifest number:          0151
Signing time:             Sat 05 Apr 2025 15:45:20 +0000
Manifest this update:     Sat 05 Apr 2025 15:40:20 +0000
Manifest next update:     Sun 06 Apr 2025 16:52:20 +0000
Files and hashes:         1: 3137372e38352e382e302f32342d3234203d3e20323731323633.roa (hash: CFNZ/u6o+I8DRkP+BNDvMlb/omet9ro/ususEiy23ao=)
                          2: 323830343a373863303a3a2f33322d3332203d3e20323731323633.roa (hash: IxxYss7a6LKV1wRq6NkcoTgtcoKXCjvfumIDNTpOHJE=)
                          3: D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl (hash: xLR2mppJKfh70BxsFZzynFooXSVTAAl3Bh0I/ieP+JM=)
                          4: 3137372e38352e392e302f32342d3234203d3e20323731323633.roa (hash: 7YI1RjreNNYYpg7xPxXjE+lc4rKTlsuvP/U2tfD1/EQ=)
                          5: 3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (hash: 8A3zq9EsRbE2d/r/m4Yz6Bq+PPjl4MpjNL13Wo7c8LU=)
                          6: 3137372e38352e382e302f32322d3232203d3e20323731323633.roa (hash: UD4osjkE+MafwEBZCoEFABfKuQuTBWU8nKXWUb8SVPw=)
                          7: 3137372e38352e31312e302f32342d3234203d3e20323731323633.roa (hash: yZdpl1MeiH0X1iYrn0mf4e0WK0lNkAQ0zftlllFyDQg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:be:73:9f:95:de:31:93:f5:33:ce:59:be:9c:5c:50:f0:c7:6d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
        Validity
            Not Before: Apr  5 15:40:20 2025 GMT
            Not After : Apr  6 16:52:20 2025 GMT
        Subject: CN=9B902E1DE866224F551B9952F3E469F5CEF994E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:ba:af:d7:16:46:fb:ba:ba:59:c8:a7:60:
                    58:86:98:89:5e:1e:4b:bd:55:89:92:10:f9:e8:4c:
                    99:32:ec:12:a2:52:0d:7a:f3:6d:b8:8b:c6:df:e5:
                    d3:28:37:64:37:b5:ac:16:ae:eb:a1:41:31:3e:43:
                    5f:97:f0:0a:6f:04:83:e9:1b:62:5a:09:69:c7:36:
                    b2:20:44:b5:cd:6d:fc:c4:c9:40:50:d9:4c:8c:f5:
                    4c:ed:d1:fa:02:01:d5:94:54:a7:a4:ab:80:a0:a4:
                    a6:d2:01:a7:50:bc:4a:21:a7:16:ab:c2:fc:e6:6d:
                    da:f9:ea:27:d0:7b:66:ba:6f:a8:91:83:f3:87:14:
                    bd:4d:20:b0:b0:a3:ee:15:97:bd:81:30:07:d5:2a:
                    45:47:cc:2d:f4:82:93:fd:92:c4:44:5f:d0:e8:cd:
                    7a:19:e9:f3:34:69:b8:00:fe:33:02:bb:19:b1:a6:
                    60:96:5d:11:7a:38:88:c4:dd:1b:aa:ad:a1:48:b0:
                    55:cb:77:86:9e:2e:a9:18:b0:1e:6f:0a:35:ae:58:
                    da:6a:eb:1e:f8:2b:c9:a3:c3:94:46:9a:e7:fd:b4:
                    36:d0:1f:8c:9f:d7:3b:25:d9:82:23:54:be:7e:11:
                    24:d6:49:4d:08:a9:27:b4:de:ed:b1:9a:80:a3:2f:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:2E:1D:E8:66:22:4F:55:1B:99:52:F3:E4:69:F5:CE:F9:94:E4
            X509v3 Authority Key Identifier:
                keyid:D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9a:c4:f7:90:87:2e:ec:17:01:bb:df:a9:a4:4e:80:2c:ab:
         b4:17:ff:75:13:8d:d2:02:f4:89:6f:9b:36:ba:97:e5:c4:6b:
         94:42:ba:4f:12:2d:79:45:5a:a1:37:68:a4:c5:6e:60:48:bf:
         25:d5:fa:c6:1c:cf:2c:ea:f2:5a:15:7d:39:b1:ff:5f:3a:f7:
         3b:fc:c3:00:ac:a5:c8:e9:d3:10:0f:82:b0:c8:0b:2f:e6:0c:
         15:b9:c7:ce:60:51:b4:76:f6:cf:59:68:b7:7d:18:ed:14:80:
         7e:c0:a4:90:a4:d5:d6:23:67:c8:98:51:4b:90:6e:da:f9:da:
         d0:29:b3:17:0c:21:14:cb:71:a2:66:05:c5:46:67:ad:2f:c8:
         97:12:d6:31:49:c1:ad:31:da:a5:52:b4:7a:e5:c5:0d:0a:73:
         b8:41:30:dc:21:c8:d8:10:4c:e1:01:4a:00:18:16:12:4b:aa:
         2c:48:a1:30:8d:45:22:da:93:2f:63:07:6f:82:75:5f:03:e3:
         51:40:e7:c8:64:e1:fe:92:16:2d:45:b4:40:71:23:a5:35:26:
         7b:a7:49:d4:d3:1b:20:af:9f:04:6b:d3:64:44:90:83:99:0f:
         4c:9a:0d:b1:f7:e9:3b:14:9d:8a:7c:a6:5b:65:50:20:5c:01:
         e9:e1:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:31 2025 by rpki-client