Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
File:                     430FB5BDF465EB5283536F57FCCA377B820BED2A.mft (raw, json)
Hash identifier:          jDBKTw8k+Shc9TLqjE2GEWDryvd5Lvcaei28dSxa5QQ=
Subject key identifier:   F3:71:E0:26:98:C7:62:40:B3:AF:DE:B0:C8:F0:70:3A:28:3F:19:22
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       285F18A9991ED23A9F15E933B47E2E771641158F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
Manifest number:          1F
Signing time:             Tue 10 Jun 2025 00:24:35 +0000
Manifest this update:     Tue 10 Jun 2025 00:19:35 +0000
Manifest next update:     Wed 11 Jun 2025 01:33:35 +0000
Files and hashes:         1: 34352e3138362e39352e302f32342d3234203d3e20323638313833.roa (hash: ofd2wR6pH72dv/mAMqhhf7mC9OiE6Aalc21ZieASeHI=)
                          2: 34352e3138362e39332e302f32342d3234203d3e20323638313833.roa (hash: gQMe/xy6ntj2MeHSwDbqry6Z6Qib92CjffengjjoD+c=)
                          3: 34352e3137312e32372e302f32342d3234203d3e20323638313833.roa (hash: iZbaBf2rq2JjM4lcv/PRGFzUONmMJjth7yHXA+/m7EY=)
                          4: 34352e3137312e32352e302f32342d3234203d3e20323638313833.roa (hash: ppxaf1gfv0HFGEe0KHbY11vXWeC7+QQcz+W+QIoq/+c=)
                          5: 430FB5BDF465EB5283536F57FCCA377B820BED2A.crl (hash: XFQUeSOYhiIzr6+wDy7fxGyB2bX+DLmuPQJt6ZONt54=)
                          6: 34352e3138362e39342e302f32342d3234203d3e20323638313833.roa (hash: flB398YvehjMqBIzUEV5bg3oI3/cBMHC1cB1qdZP+uc=)
                          7: 34352e3137312e32362e302f32342d3234203d3e20323638313833.roa (hash: FiGpPzDufq5aJ4/Ne3HxZ0+I/exmSWpZRdGaFBicVqQ=)
                          8: 34352e3138362e39322e302f32342d3234203d3e20323638313833.roa (hash: d/SIiWYDTCdfpDzkwCwhavyT5CFLWN+IbJsBkxLqR0c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5f:18:a9:99:1e:d2:3a:9f:15:e9:33:b4:7e:2e:77:16:41:15:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: Jun 10 00:19:35 2025 GMT
            Not After : Jun 11 01:33:35 2025 GMT
        Subject: CN=F371E02698C76240B3AFDEB0C8F0703A283F1922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:19:a5:3d:ab:a4:66:fd:e0:96:29:ce:56:
                    d5:d5:83:e4:76:0c:fd:46:a4:91:b6:42:e1:c3:48:
                    15:64:4d:6b:56:27:22:0e:f3:3a:fd:6b:8b:da:dd:
                    39:aa:20:f6:20:d8:ad:f0:ee:30:e0:89:92:15:09:
                    55:44:c2:77:bb:1e:95:19:12:28:28:57:04:8e:88:
                    22:87:17:22:61:cb:09:d3:bf:cc:6a:4c:5c:d6:b0:
                    c2:08:55:fc:69:ea:d4:2d:29:f7:54:c8:09:6e:12:
                    7b:7d:a4:09:d3:71:69:6d:d8:bc:31:fe:8a:bd:4d:
                    f4:49:69:4b:3c:9a:b1:b6:70:65:a7:1a:98:78:d4:
                    79:c5:37:2a:7e:6c:9c:3f:1d:d4:bd:8b:b6:1d:43:
                    ec:eb:33:8d:79:07:9c:8e:5f:a0:bf:35:19:48:2e:
                    ed:10:0b:08:1a:1c:3c:7d:e3:f1:be:59:df:0e:64:
                    53:bf:ee:69:52:82:72:6c:13:8f:3f:19:a1:63:94:
                    06:3c:34:c6:8c:a3:b5:4e:e4:91:d3:3f:82:da:51:
                    20:15:e2:8c:e4:30:8e:23:cf:2f:ea:0d:9c:98:65:
                    5f:04:2c:04:5b:8b:5f:1b:a1:98:87:6b:08:6d:99:
                    2d:0f:28:7b:82:5a:59:62:f2:70:13:76:72:50:e9:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:E0:26:98:C7:62:40:B3:AF:DE:B0:C8:F0:70:3A:28:3F:19:22
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:61:a2:d5:dd:68:cf:3d:f8:ad:68:6d:d6:63:d9:00:22:23:
         f1:8a:7f:41:d1:b2:1a:2b:17:ec:6f:3a:63:81:4d:ac:79:06:
         78:d6:47:0c:9b:58:1c:90:ba:ca:20:0f:43:72:f2:f0:6e:b8:
         83:7e:12:28:36:5c:7e:f0:33:91:1f:34:37:db:a9:f3:c8:a1:
         1e:bd:0e:67:71:70:50:b4:c2:96:28:07:61:58:af:97:e1:e7:
         6e:b8:f4:fd:ec:82:ba:53:bc:08:e6:58:58:76:80:c5:a8:1f:
         8a:32:ae:56:b0:28:ef:aa:5e:71:3d:45:c3:7d:ad:f7:8b:44:
         05:97:da:a7:ef:9a:6c:75:d8:c2:c5:79:ee:ad:56:29:9d:2e:
         45:64:be:d2:f5:ab:be:83:50:5e:2a:e4:6c:96:16:de:c6:8f:
         79:ad:28:c0:0f:82:57:fb:31:af:79:ce:fa:59:5c:d4:37:e5:
         8b:77:08:8c:37:3f:5f:ab:1c:ec:0a:66:cc:f4:2a:68:06:e2:
         01:07:81:84:a8:ee:5e:a1:fd:57:dc:b9:53:21:01:e3:2d:50:
         b4:24:b0:3e:43:b5:dd:c6:b8:65:63:82:08:88:2f:37:79:c8:
         91:69:06:4d:80:6e:5f:73:c6:f4:54:bb:27:c6:69:50:c7:36:
         b5:b8:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:22:34 2025 by rpki-client