Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
File:                     EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft (raw, json)
Hash identifier:          5vrRgqk8VUwgf3sb/DMTH9bBnWv1kJsCzyTZu1mwwBg=
Subject key identifier:   72:D9:19:F4:DF:19:12:85:98:84:47:C0:AC:4D:17:46:9B:7C:0F:3E
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Certificate issuer:       /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial:       4BF969887D300F8C5C353704B367E06DD1A3BEEE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
Manifest number:          1D
Signing time:             Mon 07 Apr 2025 08:03:37 +0000
Manifest this update:     Mon 07 Apr 2025 07:58:37 +0000
Manifest next update:     Tue 08 Apr 2025 11:58:37 +0000
Files and hashes:         1: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: PPekn/TbiAwZrUnUTvoGIR/C6CK1xTfX/AL5sBGZ0T4=)
                          2: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: +y1vilBwLAReV6zpa5/MYexJEeDB2IAxzkPlUoJxrsY=)
                          3: EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl (hash: rD2Ks+OWmlmQQNxK2HIrtDUwEu1MC6dMawRddX+1F6c=)
                          4: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: LpKH0E9Fiqy6p2z7JZlCFoKYg86XuaBmNFMxvxFaUnk=)
                          5: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: fp71B+OVFduQtnUnUeQM1x6QOqtaPdWFpcDtAkCRBM4=)
                          6: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: eI9IlZl/tRp7/siSUwrP+jwi6ppBfWhGBwwz7vclWQQ=)
                          7: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: Ogv+aWRVYaq/m3tuVWrvpV5SQrW6nzj0FCPiU5vnQgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f9:69:88:7d:30:0f:8c:5c:35:37:04:b3:67:e0:6d:d1:a3:be:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Validity
            Not Before: Apr  7 07:58:37 2025 GMT
            Not After : Apr  8 11:58:37 2025 GMT
        Subject: CN=72D919F4DF191285988447C0AC4D17469B7C0F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:4a:9e:5b:b5:81:d3:97:e0:1d:7f:ad:a6:
                    7a:e5:c4:31:40:a3:95:27:0c:dd:96:ba:c6:51:ae:
                    8d:53:2f:09:52:1e:22:c4:87:04:d9:7a:29:e1:1d:
                    f6:1a:13:a2:56:f7:b4:19:b9:dc:d1:7a:6d:8b:9c:
                    76:5e:3f:c3:07:55:28:d6:1d:7b:d4:fe:3b:35:83:
                    e5:c1:de:e3:af:72:e5:5e:1d:1a:9d:1d:56:f6:af:
                    7e:b5:83:f3:8c:2c:7c:db:3b:04:e2:10:52:6a:76:
                    4e:88:7a:07:32:2f:c2:24:ca:6a:75:bc:21:cc:ec:
                    d0:56:07:0a:99:7a:df:0f:b4:2c:95:42:97:42:bc:
                    58:f5:62:9a:b7:18:d1:14:0b:67:91:34:1c:20:00:
                    fc:34:8d:9e:40:b4:93:15:ff:ae:7e:4f:b7:06:e9:
                    dc:51:ce:1d:60:80:e1:27:4d:0f:76:17:c4:f6:e9:
                    c7:cf:81:de:6e:04:61:68:8b:8a:bc:13:6e:a5:69:
                    c9:7c:e3:7c:b2:c6:84:8d:61:f3:00:4d:7d:64:25:
                    33:1d:8b:93:e6:bd:af:92:a7:67:0d:45:24:47:87:
                    99:b1:6a:dd:75:32:58:d8:a2:4d:54:6b:3c:e9:8f:
                    02:83:9a:a0:66:5c:05:22:dc:a5:a0:16:13:c1:a7:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D9:19:F4:DF:19:12:85:98:84:47:C0:AC:4D:17:46:9B:7C:0F:3E
            X509v3 Authority Key Identifier:
                keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:63:ed:9e:11:0c:67:e6:26:6b:43:92:40:91:75:e6:81:a4:
         4b:f9:39:87:d0:d5:93:e6:a3:ce:16:94:ec:4d:3c:df:5a:91:
         b2:5c:41:3c:52:ff:8e:c6:bf:c9:fa:3a:d6:55:78:50:50:da:
         a1:eb:ad:46:45:3a:e6:e6:5c:c1:a6:a4:09:bc:a4:b3:98:22:
         44:e8:a4:1a:89:da:8b:26:e8:a0:76:e2:6a:05:9c:ad:36:72:
         37:1b:b2:ff:45:cb:8c:73:a7:48:89:26:05:d3:b4:52:fb:9f:
         9c:91:28:ee:17:a4:da:93:a3:8d:4e:b3:05:d5:4a:cc:03:b4:
         f3:c6:38:15:15:14:fc:fc:72:21:04:26:c0:1c:70:c6:cb:1c:
         55:8a:7a:49:d9:55:1e:4c:40:7f:e0:35:69:5b:f1:37:74:c1:
         84:f9:8d:ec:40:d4:66:8a:d2:65:90:a8:62:56:ca:65:69:2b:
         26:f2:63:43:e8:49:5d:f6:be:d7:f3:e8:8f:9b:80:03:1c:b1:
         2a:4e:ec:51:6a:1e:99:78:54:fe:2b:c1:09:e8:09:a6:55:e2:
         8b:aa:c1:10:e7:d2:46:29:cf:7f:23:03:7e:c0:4f:02:d0:ef:
         ea:6f:62:e8:7f:2f:fc:88:5a:9f:6c:b3:2d:64:40:39:11:da:
         d6:a9:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:19 2025 by rpki-client