Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          IxTnCqmfsvht4K+ezKEvO58Y2v0z2ZblH9UD2vd8Rm0=
Subject key identifier:   4C:8D:AB:68:B5:12:EA:3D:F6:3E:E5:D0:84:33:33:4C:82:2B:BD:5C
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       364D007D3E4C923B517F6AC9CC55D955204DAA98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          0241
Signing time:             Tue 10 Jun 2025 22:13:36 +0000
Manifest this update:     Tue 10 Jun 2025 22:08:36 +0000
Manifest next update:     Wed 11 Jun 2025 22:53:36 +0000
Files and hashes:         1: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: YQUm5exzBthwq9enekcixkKW/9a04ODqoB1LUE2D6qw=)
                          2: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          3: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          4: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          5: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          6: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          7: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4d:00:7d:3e:4c:92:3b:51:7f:6a:c9:cc:55:d9:55:20:4d:aa:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 10 22:08:36 2025 GMT
            Not After : Jun 11 22:53:36 2025 GMT
        Subject: CN=4C8DAB68B512EA3DF63EE5D08433334C822BBD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:ea:c6:45:c0:5c:13:f3:26:e5:2d:45:84:
                    11:6c:31:96:48:7f:c6:e0:8e:7e:84:57:8d:3f:af:
                    21:f2:4e:3a:e5:a1:96:b6:fa:10:5b:53:5f:dc:78:
                    92:88:45:13:89:69:8d:cc:dd:ab:09:e3:0f:fb:40:
                    83:f6:76:71:c5:58:1b:62:0d:63:79:c5:26:25:15:
                    2b:13:53:07:0e:ae:c7:11:76:42:ee:bc:a6:b3:c5:
                    63:c2:55:80:cf:5a:88:cf:20:c1:51:41:b2:16:45:
                    f9:00:5c:5d:ba:9d:e1:a4:51:5a:e9:f0:8d:37:a1:
                    c3:aa:ad:67:94:c5:f1:20:e9:6f:5f:2f:3b:05:39:
                    54:3c:7d:de:72:da:a9:d2:ee:44:e6:d3:e1:63:3d:
                    dd:16:d8:54:7b:c4:40:b3:59:51:73:c2:66:de:0e:
                    9b:be:c2:0e:0a:a4:a2:bd:af:b1:0f:15:5c:d8:4e:
                    cc:6f:66:aa:3b:cd:55:3a:e4:ab:69:cb:5d:c0:aa:
                    0d:fc:9d:6d:f9:5f:38:61:e8:b2:bc:29:bd:fa:1e:
                    a4:43:b6:f7:45:58:26:a2:d1:19:d3:33:17:61:03:
                    a8:28:d7:18:8e:f6:5b:50:19:86:de:f1:fe:4e:ba:
                    d7:a9:52:d5:c1:56:fa:82:22:7c:3d:b7:27:6b:3e:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8D:AB:68:B5:12:EA:3D:F6:3E:E5:D0:84:33:33:4C:82:2B:BD:5C
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:35:83:24:6d:6c:a2:bc:50:61:9c:0b:1d:61:95:ea:08:
         53:54:29:35:9c:42:cd:9c:f6:2d:b5:f2:0f:f1:b4:95:26:eb:
         42:77:f4:d2:05:92:8f:5b:1c:0e:cf:fb:68:2c:da:c3:3b:97:
         36:b4:e4:4d:95:f2:ef:f7:5c:0e:35:1c:95:d2:13:b2:73:f3:
         81:86:75:7d:0c:d4:78:31:95:bf:a7:23:1f:81:60:3b:80:f3:
         04:98:1e:65:fd:d0:ef:ff:33:86:c9:d3:47:5c:22:8c:6f:cb:
         d4:9e:5f:cf:16:fb:f4:e5:ad:b3:5b:23:51:ca:4b:5a:7c:01:
         42:54:96:9a:ad:17:76:01:78:50:a0:de:3c:dc:5a:ff:7f:a2:
         7a:7a:db:40:99:70:a0:a8:eb:f7:79:04:ad:b3:a6:53:90:ef:
         c9:1a:1b:68:cc:c9:07:f9:35:6d:f6:46:69:1c:6e:a8:9a:c9:
         e6:ee:bf:4b:ef:1c:4d:73:7e:da:5d:c2:b2:2e:50:e2:3c:c4:
         82:5e:f7:07:f4:a7:f6:c4:cc:95:2a:31:ab:1c:15:6b:10:c6:
         ba:24:c0:fa:ce:bc:24:34:91:ae:4d:e3:05:7b:19:80:e6:8e:
         a9:0b:cc:a6:4d:46:3e:0b:96:32:fa:ce:36:27:73:59:d4:91:
         60:d2:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:25:48 2025 by rpki-client