Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
File:                     E1EF9203E12432F995B9B24544924C4BA28FEE51.mft (raw, json)
Hash identifier:          +BNHRJJ4rWtGquXDMLCiFJUO0ii5WH6fU0UEhLUnrSc=
Subject key identifier:   E6:4A:0B:D1:25:93:85:8C:24:8B:4F:DC:A0:1A:FF:BF:0F:89:46:92
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       42038BF06654E4A855B16B86A6E3378054016232
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
Manifest number:          1D
Signing time:             Thu 12 Jun 2025 16:10:53 +0000
Manifest this update:     Thu 12 Jun 2025 16:05:53 +0000
Manifest next update:     Fri 13 Jun 2025 17:36:53 +0000
Files and hashes:         1: 323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (hash: Vh6IZTV5mVQ2qGqgZ43w1KYLnQ6qZM5fy6yz2yIEKik=)
                          2: 3134332e302e34382e302f32322d3332203d3e20323633353434.roa (hash: p5xOXQxXPzt77Gyp9BPtX/g7zm4TtfGKAFoBVGEnFTA=)
                          3: 3137302e37382e3235302e302f32332d3332203d3e20323633353434.roa (hash: 0+bPUTbYSUDRUZJyaD57TRxvxcZVHotBgXX9Su6sP2Y=)
                          4: E1EF9203E12432F995B9B24544924C4BA28FEE51.crl (hash: fTeW/wndIdQI+Q1Ri96leC2f9kzoseBpl2hps8zL6FQ=)
                          5: 3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (hash: JZvdcT9RhwOExA/2167deF3x0wqUQlBUo3cnRCnsE5A=)
                          6: 3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (hash: RBYdST91niOM+x1zBtSsOW+3Z7jQEe2Wf5c86RThsdc=)
                          7: 3137302e37382e3234382e302f32332d3332203d3e20323633353434.roa (hash: Ft1Ycbt6LfCCcobasx0l2qIYcpXpDcTczvYB8PSlQXs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 17:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:8b:f0:66:54:e4:a8:55:b1:6b:86:a6:e3:37:80:54:01:62:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: Jun 12 16:05:53 2025 GMT
            Not After : Jun 13 17:36:53 2025 GMT
        Subject: CN=E64A0BD12593858C248B4FDCA01AFFBF0F894692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:62:b0:df:26:20:61:ca:19:ac:f3:10:53:
                    96:1c:59:99:0c:14:20:a2:d6:6a:de:96:0e:28:13:
                    64:52:a2:26:03:d6:ff:8c:e9:52:9c:98:a2:59:c5:
                    08:b5:de:c2:99:81:af:ad:04:dd:27:77:77:ef:78:
                    4c:0e:2b:eb:77:ae:a7:d3:5e:d9:4a:12:ae:c8:f5:
                    27:0a:09:d4:67:c8:41:fd:0c:53:c3:69:83:92:08:
                    82:f1:99:a4:aa:90:d1:b3:cf:8d:07:ab:b5:0f:87:
                    6e:0d:67:41:9c:02:51:7c:ff:bb:70:03:3f:d8:bb:
                    61:e8:b2:d1:5a:53:ae:5a:0d:24:de:3e:aa:ad:37:
                    83:1a:13:f1:cd:74:3e:ee:02:ca:2e:2d:59:8e:34:
                    68:6a:c9:ac:e1:33:88:99:c0:db:2a:f7:be:42:e8:
                    38:2a:93:25:74:f2:ab:9a:83:7b:a4:29:52:88:0d:
                    7d:7d:4c:ea:c1:1f:a5:99:b0:66:a4:5a:c5:8f:a5:
                    a5:82:37:2a:41:8f:64:50:04:ab:4a:84:8b:00:ab:
                    2d:ee:60:7d:ca:97:f1:61:1f:cd:20:86:d7:ec:11:
                    bd:f1:50:c2:8e:37:6d:9a:13:15:da:46:49:8e:25:
                    5b:2a:83:df:e0:b3:93:e8:f7:88:5c:88:c7:e4:95:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4A:0B:D1:25:93:85:8C:24:8B:4F:DC:A0:1A:FF:BF:0F:89:46:92
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:69:1c:a7:23:6f:df:2a:cf:d1:66:40:85:5f:b2:ec:96:6a:
         67:bd:d3:43:3d:ed:5b:00:f4:bc:56:fc:7e:43:3b:32:57:44:
         6d:18:b5:fe:6b:ff:72:4f:95:41:a9:cc:ae:bf:c9:26:b0:0b:
         98:2c:5f:7e:44:dd:92:c0:16:7e:34:26:46:81:17:49:85:ee:
         2e:8a:ba:37:d5:84:b2:25:1a:0c:40:7b:ba:a9:dd:b6:08:4f:
         6d:44:5d:89:5d:47:45:e5:0f:f3:3d:c9:5a:16:0a:d5:06:9b:
         e0:52:d0:8a:fd:28:46:bc:de:04:6d:38:29:45:a7:de:01:26:
         0b:ec:a0:32:70:f3:cb:70:95:53:99:67:73:af:4d:40:91:c5:
         6c:0f:db:83:ba:c5:93:90:0e:8a:09:01:f2:d7:8f:79:2a:2a:
         87:66:bf:d6:97:bc:bb:ad:b4:25:2b:32:fd:dc:56:1a:58:90:
         ab:eb:58:29:bf:66:f7:4c:90:04:a9:90:0f:c8:d5:20:48:ae:
         8a:7e:d0:d0:3f:23:6b:4e:0c:b1:01:40:fa:bc:58:81:a9:2b:
         99:20:62:b6:34:ec:36:3e:68:ac:bb:a7:c2:94:a7:4e:c5:d3:
         da:dd:8d:3b:ed:63:9d:2a:11:01:2d:62:88:7e:da:30:f6:d4:
         39:b1:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:54:55 2025 by rpki-client