Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
File:                     D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft (raw, json)
Hash identifier:          Aqxkg3N0aaojInYoCeM0MxvNGKOnbDYqI9P4DFtiGWk=
Subject key identifier:   AE:BD:0F:5D:87:9F:48:A6:47:4E:52:09:EB:65:10:E8:88:A1:18:09
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       65D4F25EACEC13237C5252A8218E4F468F6B4C5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
Manifest number:          01D6
Signing time:             Tue 08 Apr 2025 20:44:44 +0000
Manifest this update:     Tue 08 Apr 2025 20:39:44 +0000
Manifest next update:     Wed 09 Apr 2025 21:44:44 +0000
Files and hashes:         1: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: yuUN7yiHWs923bHitB6dyQ6w+MoW439QGWA0xRQoCEY=)
                          2: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=)
                          3: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: 7GQpIb7eN0gEhjMCm8bJJo8/053mAvBMK769o/t1ImA=)
                          4: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=)
                          5: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: 1EPG9j2IFN7RdrK+OBQg1vA1qlOU4uWKrh0eWi6f4z0=)
                          6: D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl (hash: w1Zhmr51N8hBcEoVA0gwClcYN3w7yvfcdFwlsGSemV8=)
                          7: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: l+1vkNbJX9FznsoCq04IQdf645yMO+XY7naPC5k2nAc=)
                          8: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: QsO1DL8JBb7HVDv32XyDE5mIRhLWooOEuQSlsQhv0nA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d4:f2:5e:ac:ec:13:23:7c:52:52:a8:21:8e:4f:46:8f:6b:4c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Apr  8 20:39:44 2025 GMT
            Not After : Apr  9 21:44:44 2025 GMT
        Subject: CN=AEBD0F5D879F48A6474E5209EB6510E888A11809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:ca:14:8c:4b:b0:4c:7e:5d:24:86:7c:ed:
                    6b:5e:c8:39:1c:4a:d1:c2:d2:3f:da:86:9b:9d:a4:
                    f3:55:26:04:89:75:3e:47:33:7a:a3:d0:f6:e7:a1:
                    de:4f:44:a9:6b:d6:1b:9d:15:bd:eb:43:12:4c:66:
                    4a:e0:e4:41:dc:89:06:69:dc:b1:8d:f1:5d:df:53:
                    3d:d6:67:d5:9a:f3:fc:1a:0a:21:e7:e7:06:53:c2:
                    a5:6e:d0:92:aa:43:f3:f1:c9:f7:b2:42:53:31:ce:
                    1c:9d:5f:4f:32:d4:9d:2d:01:0a:c2:62:65:1b:0b:
                    b2:fd:a2:65:e4:99:1a:c9:1d:6a:91:18:0e:0f:49:
                    81:57:f5:94:9c:59:c2:7a:8e:c6:69:2d:16:06:47:
                    b0:27:92:24:59:b4:08:a3:74:74:40:2d:e7:18:a9:
                    40:22:7a:a0:21:70:0e:7e:c5:8b:d1:e5:22:e1:ba:
                    5a:47:b2:db:bd:ab:5f:6c:c1:fb:55:2a:e2:be:be:
                    3a:f4:f1:e2:28:cd:43:2a:42:84:a2:31:c2:26:9f:
                    8d:63:dc:cd:04:c6:ca:52:3c:fd:6f:33:78:b8:b4:
                    e3:a7:99:cc:4b:b1:91:92:41:45:eb:ee:83:b0:d4:
                    7c:b3:4c:d8:8e:f4:f5:f2:da:fb:33:9a:32:1d:7c:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:0F:5D:87:9F:48:A6:47:4E:52:09:EB:65:10:E8:88:A1:18:09
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:14:d3:28:97:80:e3:5a:3f:d9:34:5d:ff:00:02:7f:db:71:
         eb:65:9c:47:0d:bd:c4:ed:89:f5:ae:17:54:da:5d:70:10:9b:
         e7:70:51:84:ef:bb:93:70:44:9b:7f:70:cb:cd:33:2c:03:8a:
         1c:93:a1:3d:f4:2c:e5:d6:0c:9b:af:8e:f6:5a:67:38:30:fd:
         4b:b6:e6:0e:87:10:e8:87:be:d6:ed:f0:06:77:2e:a6:e3:3f:
         20:8b:fa:4b:ed:be:19:c8:fc:54:43:9e:a9:03:8d:0f:fe:1e:
         7b:df:ec:39:f1:32:2e:56:f9:eb:3e:a5:95:4d:dd:3f:69:f0:
         54:56:c0:44:f1:ae:d5:14:82:2b:c4:ab:99:0b:2b:15:55:50:
         38:63:4a:9c:2f:35:74:fa:67:2f:d4:a6:b2:11:c0:b5:ae:90:
         2d:4d:ba:25:9b:8e:09:06:84:53:b5:0f:37:64:54:33:6d:89:
         f5:e8:2b:7e:fd:50:fb:77:33:5c:80:ca:68:c5:6b:17:8a:b7:
         e8:42:97:f8:7c:3c:2b:02:79:ef:3a:c8:2e:e1:3c:52:bf:c4:
         9c:ed:17:dc:20:43:d2:a9:41:b4:bf:56:71:d8:60:df:4f:d0:
         4c:fa:82:96:03:b8:98:74:ad:76:ef:7a:a9:e1:7a:cc:39:45:
         54:61:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:57:50 2025 by rpki-client