Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
File:                     582517B9105955B7B839FB60DC59AE677C6B4DED.mft (raw, json)
Hash identifier:          BnyTa67L1YpyYTtApoOBNsFA3zbcPJ0fme+wGpT/YVM=
Subject key identifier:   A9:49:BB:2C:5F:88:49:93:58:54:19:CB:E7:7F:B4:6C:84:27:7F:B7
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       4868BB5CD6FD0CC618C11BB6F7580F2848A0581B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
Manifest number:          01EA
Signing time:             Fri 04 Apr 2025 13:54:02 +0000
Manifest this update:     Fri 04 Apr 2025 13:49:02 +0000
Manifest next update:     Sat 05 Apr 2025 15:05:02 +0000
Files and hashes:         1: 323830343a363434343a3a2f33322d3335203d3e20323639343137.roa (hash: H8Elqz19bRblZhKEx7VnGb4ZBsNWV8X8BsYHFXyB+AI=)
                          2: 323830343a363434343a313030303a3a2f33362d3336203d3e20323639343137.roa (hash: Fm72jXNedihMmSVYwWDB9msaqzvPn+whkD1ujIfoFQ0=)
                          3: 582517B9105955B7B839FB60DC59AE677C6B4DED.crl (hash: YNUdkkaHCz8iM7hdaAqGVyLMnm2Q5t0nY04NsSyFM/o=)
                          4: 323830343a363434343a3a2f33362d3430203d3e20323639343137.roa (hash: JPJQP27OEK8rUPH8CmEfxGwM8CyPkwEg19EZpb7vMjk=)
                          5: 34352e3138362e38382e302f32322d3234203d3e20323639343137.roa (hash: xP1F0pMSSokgmJoEtD1tmFwDICZcoxgevpV5id1ez8g=)
                          6: 323830343a363434343a313130303a3a2f34302d3430203d3e20323639343137.roa (hash: 6f1yJXItyt0SjHHrPR4mrHZLPA/DpvcqSMVQ6OliXwg=)
                          7: 323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (hash: 8s5e127dU7/EznWjKEQqBfCMfHXWL9OO9dUHUkrLvUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 15:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:68:bb:5c:d6:fd:0c:c6:18:c1:1b:b6:f7:58:0f:28:48:a0:58:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Apr  4 13:49:02 2025 GMT
            Not After : Apr  5 15:05:02 2025 GMT
        Subject: CN=A949BB2C5F884993585419CBE77FB46C84277FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:7a:10:d6:0f:bf:c0:89:7e:ed:34:cd:0e:
                    71:16:70:b4:33:ea:a8:7b:4e:9b:75:bc:1a:9b:16:
                    6b:e6:43:58:19:1b:ed:00:4b:00:64:40:78:8b:a6:
                    92:c3:79:ee:b8:dc:e4:91:09:b5:98:b9:39:f0:91:
                    83:c5:d1:e9:eb:e2:e1:8f:8e:dd:d4:e8:28:74:5a:
                    a9:ba:d9:cb:a2:62:0c:d0:7d:3a:6e:25:fe:48:80:
                    8d:dd:53:31:3b:47:c3:97:0c:42:cc:e0:6a:a7:87:
                    24:30:fb:39:0f:6f:d0:e8:e3:3c:f1:f5:af:21:f9:
                    32:91:19:af:69:62:8a:b8:a3:99:ef:1d:92:e3:f7:
                    3d:22:2f:eb:b6:a1:72:a3:b4:50:a2:09:57:10:0f:
                    e6:de:69:47:98:a2:46:cf:0d:85:cd:9c:ab:b1:cf:
                    50:0d:cc:39:a5:bd:69:2f:86:eb:44:0d:51:23:9c:
                    4b:ac:a0:d7:1b:ff:e2:cb:6e:96:61:32:12:46:e3:
                    48:34:91:e4:30:f8:35:88:6c:d9:d3:91:a1:15:ed:
                    5c:f6:e4:e5:dd:af:02:10:e8:65:dc:1b:80:b5:a4:
                    e8:01:04:61:f9:e8:c5:81:22:22:8a:34:fa:ad:a3:
                    01:41:44:72:f6:88:ef:a4:3d:a3:92:14:3a:3f:8e:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:BB:2C:5F:88:49:93:58:54:19:CB:E7:7F:B4:6C:84:27:7F:B7
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:7d:f1:d7:98:d4:24:22:a8:97:8d:fd:bb:d0:f1:4e:cb:
         7f:cc:e9:8c:12:56:dd:12:61:04:5f:db:b6:ee:04:d4:6e:d1:
         45:fa:08:15:b7:c7:73:3e:75:e1:2d:b7:e4:1d:ff:9a:d3:68:
         ce:73:fd:87:ec:00:af:64:a3:be:a8:f2:bd:3c:ee:fa:ae:f4:
         65:2c:a8:d0:c7:26:e2:ab:73:35:e4:c8:55:dc:25:b6:ea:3c:
         6d:75:dc:dc:ee:c1:5b:62:27:2f:fc:9f:f5:fb:41:3e:e1:6b:
         53:8c:79:2e:91:f7:06:36:53:bd:2b:b0:d2:41:e0:22:0a:ce:
         e9:63:a2:d3:35:ef:c6:c7:59:4f:b7:01:9b:c5:d6:d2:8a:ed:
         06:6a:a6:11:57:5c:fc:2e:82:28:1d:a1:3d:36:cd:cd:f0:23:
         03:89:73:af:8e:53:52:10:4a:0c:34:2a:2e:8d:02:d3:02:39:
         3f:97:fb:bc:4f:3a:6e:17:0d:19:21:5b:4b:c1:94:9f:b6:7c:
         40:0f:6a:44:0e:46:68:5e:72:57:bc:c9:27:24:3f:ac:d2:c0:
         23:cf:b4:8b:8b:ac:a9:bc:7d:06:11:6a:2e:b8:27:6b:e0:eb:
         9b:5c:d0:f7:e5:a4:94:6f:0a:13:88:50:89:1f:56:cf:62:1b:
         3b:8b:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:38 2025 by rpki-client