Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          tCtbiaO0mEkQz0LElOMgnAs0eGoJkil0/BoaRrsFs0A=
Subject key identifier:   68:C2:10:E4:69:9C:13:BD:F2:02:76:C7:69:B9:E5:B1:E5:51:80:B9
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       5B889374680DCB0729C6BD806C2BE5AD9F96CF50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          0246
Signing time:             Sun 08 Jun 2025 21:42:17 +0000
Manifest this update:     Sun 08 Jun 2025 21:37:17 +0000
Manifest next update:     Tue 10 Jun 2025 01:41:17 +0000
Files and hashes:         1: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: DLXwjCeMLBvIeKOLzFt3HCcPZ+8cjQuMJE3Kyj0FUk0=)
                          2: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: NV6voyolRqTjGjGU6jNIlNCK4cFtLaDS1ZMCl6odHCk=)
                          3: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: 5lvhdKKVxPcZ3/nd628FoXyR2ITdSGX90BwjYAK8rAQ=)
                          4: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: Q+6zb8/52SCseUccO/k8n9a/FXB90wWY4SheKioGF5I=)
                          5: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: BcM6j+OwDyoPY5saIhljxjNWGNX33CnT7EmA2Ywuaco=)
                          6: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: IeqfO60APtI/aiujhRBbK+p5lGRCUGsDS7H6b+Gn6jY=)
                          7: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: j1Avox9NgQODW3LhBzJuljIRz5meY02BEta5hWYd8Ak=)
                          8: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: 9+ioA8iW3wDN9f27KoCoYuS2Xxc1WiJBzblSsKv38+c=)
                          9: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: 1ke442G4sr1gdXVL5S2dIvsAioTdoxCJCdzpNrSzpFk=)
                          10: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: fgaktkZvREqEdKxhCwkQM0vrGN+uJ33xvruPLYDVzIA=)
                          11: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: HodIiouYpi5HRYferTFJC9p/9oItbt3HQJ/8I8MD+HI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:88:93:74:68:0d:cb:07:29:c6:bd:80:6c:2b:e5:ad:9f:96:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Jun  8 21:37:17 2025 GMT
            Not After : Jun 10 01:41:17 2025 GMT
        Subject: CN=68C210E4699C13BDF20276C769B9E5B1E55180B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:b7:98:66:95:96:fc:e4:3c:57:a8:1b:62:
                    8e:ed:c2:35:88:26:c0:63:23:a1:30:54:67:61:7b:
                    05:c1:66:b9:ef:80:19:be:a8:95:65:56:57:76:15:
                    d4:f4:e5:1d:40:39:8c:31:05:eb:94:71:02:89:3e:
                    83:64:1f:69:e3:eb:c5:57:3e:d0:47:5a:d7:07:e1:
                    bb:ce:6d:8d:8d:25:da:13:09:30:33:50:cf:78:47:
                    78:10:b0:d8:7b:96:e3:4f:b6:ac:a8:5e:ce:b1:c1:
                    d8:02:20:92:c1:f1:5e:b2:6e:49:7d:b7:9a:cd:b4:
                    43:62:2e:5b:3c:cd:ce:fd:59:76:d0:a2:75:8a:78:
                    71:83:12:1e:94:5b:ee:5b:f2:36:4a:9a:5c:0c:a4:
                    01:4e:6e:99:3d:81:17:a5:48:b8:31:51:3b:bf:12:
                    e8:0f:0e:c1:ce:46:7c:3a:1e:d1:95:58:b4:47:c6:
                    83:65:55:db:ac:2b:d7:2f:e9:2c:53:92:f9:67:89:
                    aa:a8:11:49:6c:98:86:fa:33:a4:9c:f0:36:32:90:
                    6e:fe:25:50:76:b6:74:80:38:33:39:25:ce:a6:d4:
                    2a:b1:06:91:a6:e1:aa:95:b0:56:56:e6:b4:98:ae:
                    92:40:c1:83:95:c0:2d:95:d4:24:00:ee:e6:7d:24:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C2:10:E4:69:9C:13:BD:F2:02:76:C7:69:B9:E5:B1:E5:51:80:B9
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:8a:ef:d1:f7:4d:74:61:ad:14:79:24:17:e8:1f:40:83:
         b6:a9:ad:58:97:f0:e2:11:23:a7:a3:6d:51:cf:4a:34:8a:57:
         75:60:49:9e:6d:61:4b:f0:10:42:2e:bc:06:42:2a:e0:f3:ec:
         ab:8e:8e:8c:ce:58:92:5c:93:64:82:2f:68:be:73:26:b0:1c:
         47:a2:3a:a9:f7:d5:06:79:cf:61:17:54:87:dd:3e:7b:d0:41:
         88:ca:05:e6:22:16:f3:86:a7:4a:e1:d9:a5:65:e7:55:15:ba:
         5f:4c:7b:d3:b8:53:48:b4:1b:bf:1f:6f:bd:61:15:e9:e4:13:
         72:f0:ae:0f:cd:d5:b0:6b:20:47:0b:1e:61:ac:43:44:50:95:
         3e:af:9e:41:69:76:1b:fc:68:9f:11:b0:73:81:4a:ec:98:9e:
         9f:42:a7:4d:f9:1c:52:21:ff:bb:01:68:57:f8:5d:f6:8f:43:
         1a:d8:15:6f:e7:fd:01:d2:45:74:d4:07:5f:35:7d:b9:c2:cd:
         24:26:f8:ee:a8:14:4f:8d:2b:ea:e2:b7:19:3a:52:4f:7b:fb:
         82:50:2c:da:e4:f1:e2:5d:32:40:2c:1e:95:cd:17:db:c2:2a:
         58:e6:84:25:38:92:52:42:d7:8d:31:47:eb:7b:78:c1:a9:ad:
         fa:6d:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:37:54 2025 by rpki-client