Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
File:                     A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft (raw, json)
Hash identifier:          FvxYlDqqB7h5NMqihgd0Gp4fESrlXGjdxJSnKIfAgNQ=
Subject key identifier:   4E:11:B9:E7:4B:7B:68:97:14:54:53:EC:F4:21:A9:B5:1F:CD:B4:A1
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Certificate issuer:       /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial:       53EF473F4C10120D06F71C7F4B194508BC149B55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
Manifest number:          01E8
Signing time:             Fri 04 Apr 2025 17:40:04 +0000
Manifest this update:     Fri 04 Apr 2025 17:35:04 +0000
Manifest next update:     Sat 05 Apr 2025 20:42:04 +0000
Files and hashes:         1: 323830343a313634633a66613a3a2f34382d3438203d3e20323633323830.roa (hash: Bu/IlHVqfrerUZ8q53bzUTf7AYEB+3z4EdZLXZZdicM=)
                          2: 323830343a313634633a6661633a3a2f34382d3438203d3e20323633323830.roa (hash: 6nL36QcETJJFvkiVVyWMLCclaTBJ1x3KCbT9g3ETV2Q=)
                          3: 3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (hash: IS0tA9ntjO/6YSwSpKoc+6y0GOXtntg0W8Yvm4DBaSU=)
                          4: A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl (hash: dOneUYgtEq4LhWA8baHxsepCZUSlFYZm6KBQq3I6FgQ=)
                          5: 323830343a313634633a616263623a3a2f34382d3438203d3e20323633323830.roa (hash: v6vtcVtojKMb7fm54RcvwQ5OYxhclZknjvsFw4uvV8Y=)
                          6: 323830343a313634633a63623a3a2f34382d3438203d3e20323633323830.roa (hash: qIQpkQj0ZHEuXLTDN6BOH5c02tE1erFqyB0POd6mnGo=)
                          7: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (hash: VZn9LAow7O6W9g199BFgEbVbSmNr6lwGD8lpJ00wUck=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
                          rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ef:47:3f:4c:10:12:0d:06:f7:1c:7f:4b:19:45:08:bc:14:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
        Validity
            Not Before: Apr  4 17:35:04 2025 GMT
            Not After : Apr  5 20:42:04 2025 GMT
        Subject: CN=4E11B9E74B7B6897145453ECF421A9B51FCDB4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:76:b5:80:f1:fb:ae:a9:dd:bc:c4:4e:38:
                    cc:36:ce:1d:f0:75:2b:70:b3:e3:6d:70:a5:b0:ca:
                    9f:ce:55:64:88:b4:cc:81:08:eb:39:5c:2e:3f:1e:
                    c1:04:51:60:03:93:51:bb:e8:fc:6f:ea:33:5c:ce:
                    d0:e3:26:af:69:2f:68:88:b1:8f:35:72:23:19:4e:
                    83:30:c4:ae:ed:86:81:4b:5c:1f:78:d2:1c:d1:b9:
                    c9:19:31:d4:6c:33:f4:f6:3e:28:01:7e:eb:b4:70:
                    35:db:03:86:f9:3a:a1:b4:57:fa:6c:af:96:8e:87:
                    c2:3f:4f:43:e1:6d:22:00:20:5e:b2:ea:6c:46:aa:
                    0c:3e:c2:98:d7:32:98:c2:f8:76:12:15:ac:87:b5:
                    c6:ab:a3:d2:25:c7:55:6e:8c:af:3d:78:cf:bf:df:
                    c6:9b:9a:0e:6d:73:ad:54:4a:ba:e5:6e:eb:94:22:
                    b5:50:4e:25:63:59:cb:c5:13:f1:e1:61:7f:20:75:
                    f7:7d:a8:a6:a1:e1:2b:30:ab:d1:69:49:47:18:3a:
                    05:dd:5a:ca:12:7c:a5:2c:be:2e:23:51:17:f6:e6:
                    73:eb:9f:98:6a:c4:c9:b7:48:da:27:41:dc:f7:9a:
                    05:fb:e3:53:ce:3c:54:a8:da:90:6b:0d:64:35:09:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:11:B9:E7:4B:7B:68:97:14:54:53:EC:F4:21:A9:B5:1F:CD:B4:A1
            X509v3 Authority Key Identifier:
                keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:92:b2:36:c7:ee:df:58:f8:a0:bd:76:a9:01:92:9f:1f:03:
         a5:5e:85:7d:6f:a4:01:1b:2a:bb:90:7d:15:a6:d2:b9:fc:3a:
         7a:0b:c4:66:db:d1:a7:b0:0f:da:f9:75:31:71:53:e6:89:8e:
         4f:73:d2:17:6b:f3:46:8f:79:d3:2c:b9:ec:6c:2b:49:47:78:
         52:ca:da:61:2a:2a:ef:06:94:21:5a:b9:3c:74:1d:5d:76:41:
         fc:b9:cc:be:5c:5e:2c:ab:f0:31:62:14:69:e6:35:52:5b:9c:
         5d:76:85:b5:e2:a5:15:02:d8:e4:9e:03:e4:24:69:5e:e6:5a:
         df:65:9e:74:c8:5a:9a:f4:50:95:25:06:a9:4c:73:05:5f:9e:
         2b:5f:1e:6c:6e:c5:9d:a4:48:47:e9:63:2c:55:1b:69:33:dd:
         ea:02:ec:f6:e6:13:fe:8b:56:5d:9d:08:cc:0f:a1:a6:ce:ff:
         ba:61:5d:8b:bf:aa:6a:50:ef:20:95:d2:c3:b5:86:bf:f9:6c:
         9a:f9:f1:0e:3a:fe:22:d5:e8:89:39:ea:89:03:ae:6f:8e:aa:
         6f:4f:85:3b:06:b9:bd:cf:65:7c:12:d4:35:1f:72:1c:bf:ac:
         c0:94:3a:5f:e9:6d:6f:92:1b:0f:e2:66:e5:0b:88:f9:c7:3e:
         a9:ee:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:58 2025 by rpki-client