Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          kxBCrqO1PJ1rQ+fW+WVkHkt8V30WoEcmMfgNjI/I7jc=
Subject key identifier:   23:F6:06:8E:CB:3A:E5:2C:F3:7E:38:5D:79:7E:68:8C:04:D6:8D:91
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       395597AE71835E123C88DD1B29AAFE231A7D9DDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0244
Signing time:             Fri 13 Jun 2025 05:59:19 +0000
Manifest this update:     Fri 13 Jun 2025 05:54:19 +0000
Manifest next update:     Sat 14 Jun 2025 08:50:19 +0000
Files and hashes:         1: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: xAE/ye5FwN+yeunPOx5tBuMtMElwJ67wOLWjjw7QBpc=)
                          2: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          3: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          4: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          5: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          6: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          7: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 08:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:55:97:ae:71:83:5e:12:3c:88:dd:1b:29:aa:fe:23:1a:7d:9d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 13 05:54:19 2025 GMT
            Not After : Jun 14 08:50:19 2025 GMT
        Subject: CN=23F6068ECB3AE52CF37E385D797E688C04D68D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:32:4f:6d:93:1a:e1:ea:09:ca:15:3c:ca:
                    9c:7f:0b:ec:2a:3d:c8:c2:0e:ad:40:df:c3:46:9f:
                    a8:78:25:fb:f3:c0:09:20:6e:a8:8d:1c:b3:ee:46:
                    7f:a3:83:07:80:83:7c:d2:74:f8:8f:c4:03:a7:41:
                    fd:4d:8e:34:51:58:42:a3:f0:09:39:0c:17:87:88:
                    2f:84:ce:c0:6d:b8:ab:ad:bb:ae:93:a7:22:06:52:
                    52:79:66:8e:b9:6b:36:ea:6d:50:90:22:a0:1c:16:
                    19:1d:7f:cb:b8:2f:49:2c:e7:16:a9:6b:c8:2a:1f:
                    7e:b4:1a:d9:df:2a:0b:ce:82:83:49:3d:62:cd:10:
                    76:68:d3:42:bd:eb:74:5d:e6:30:5b:22:ab:fd:76:
                    d8:27:39:47:25:fa:c2:02:5d:5a:70:b0:73:07:b9:
                    a6:50:82:89:3d:3b:28:bc:d8:bb:c0:30:f7:95:2f:
                    1f:53:3a:ee:e3:2d:e0:2f:15:59:66:a0:7f:b0:33:
                    19:f5:b8:76:48:3c:52:89:48:2e:5d:da:a2:c2:6e:
                    d5:a2:ce:7b:ad:e0:38:c4:9a:29:54:22:2e:85:f7:
                    5f:0f:0f:aa:14:84:5b:3b:0f:61:12:71:a1:dd:2e:
                    81:2a:07:fe:90:cc:40:83:e1:bc:ed:41:59:81:9b:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:06:8E:CB:3A:E5:2C:F3:7E:38:5D:79:7E:68:8C:04:D6:8D:91
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:01:1c:4e:37:cb:45:87:48:74:1f:a6:5a:a3:ea:07:64:
         bb:10:ea:41:c8:36:ca:da:dc:a7:1a:11:cf:ac:31:c0:7b:a7:
         0c:d3:23:4e:94:b6:6a:a3:dc:38:55:8a:ce:f6:c1:34:25:ca:
         ce:37:63:8d:2b:b7:5f:ae:24:ed:6d:62:78:59:09:3f:09:c4:
         e5:f3:d6:e4:c2:bf:49:50:99:ee:3e:3e:b1:69:c8:84:07:83:
         96:74:3d:83:0d:dc:52:cf:1b:1a:a7:85:c4:2d:14:4b:07:63:
         0b:ef:ad:b7:bb:49:17:cd:11:de:3a:ba:de:eb:d9:fa:12:a9:
         e2:a0:d4:76:11:c8:c7:c6:11:99:f9:a4:3e:0e:7a:04:1c:d2:
         cd:ec:69:2c:1e:22:82:e3:ae:d9:31:71:0f:56:c4:9f:7b:25:
         62:ce:c0:42:09:9a:91:fe:a7:a6:dd:24:76:5c:03:85:b5:5b:
         f6:8f:02:27:48:23:9d:38:b8:99:fd:6d:e9:93:9f:8f:09:72:
         8f:29:04:2b:6e:c1:cb:a0:10:2c:38:af:fe:1c:c4:60:d1:6f:
         83:ae:dc:bb:f7:cf:90:e6:55:4a:6f:da:8b:7c:ea:40:f1:78:
         57:94:42:99:f4:9c:37:8c:6b:7a:43:fb:6f:f3:0c:e6:c4:34:
         ee:f7:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:10:43 2025 by rpki-client