Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          hhZgAKyrnJYuCEhlu0Yte4cr7vIxmEl5v1z3Oz1enuQ=
Subject key identifier:   97:B7:A1:9B:2D:FD:88:EF:74:AE:0E:C0:D7:08:7A:F9:00:5C:DE:83
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       63C5822B15568B68424AD0F0830BE40F8183BDF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          020A
Signing time:             Mon 21 Apr 2025 15:07:11 +0000
Manifest this update:     Mon 21 Apr 2025 15:02:11 +0000
Manifest next update:     Tue 22 Apr 2025 19:06:11 +0000
Files and hashes:         1: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: 5Kz92E7dmaGiDvn5OQF7P48AohtTTO3u/CgOdAlXJOk=)
                          2: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: ZU9KvqVGm8P3mgQ79bZVqEr6CzwEvUL9dvZSWmDkOZI=)
                          3: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: sOqje+t86gHWEq91Nahf6waLG/Bt67tz7Ty3X7VmiO4=)
                          4: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: yN5oScA6ukvm7IFr8yyeN0CVJzFt6bPq6zxrTkbYmLk=)
                          5: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: pVjdYkbfOeXKElM1eDSGlFmdTQYSiNTkXdOOeJ1wb3o=)
                          6: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: kWy+KFGUaAZrPS5L1uMSNk7nabZrJmPBwwbdk2M3D+k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c5:82:2b:15:56:8b:68:42:4a:d0:f0:83:0b:e4:0f:81:83:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Apr 21 15:02:11 2025 GMT
            Not After : Apr 22 19:06:11 2025 GMT
        Subject: CN=97B7A19B2DFD88EF74AE0EC0D7087AF9005CDE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:96:13:91:73:46:0a:30:95:28:30:80:61:
                    bf:8b:29:2d:bc:83:ca:5b:6f:0e:09:1c:09:91:97:
                    e5:d5:8a:88:6e:41:5a:3a:6e:a7:76:05:13:ab:b4:
                    a2:47:44:fe:ef:a6:d4:e3:84:a9:ee:a2:80:a5:d5:
                    2d:c3:9f:de:65:04:2b:ab:67:6a:3e:fa:ed:44:e1:
                    7d:8e:9b:2e:f8:cd:0d:c6:2c:a2:6a:c8:e3:58:41:
                    6b:5d:ea:a1:e2:1a:79:0a:00:3f:28:9e:a0:2e:e9:
                    7b:13:04:39:7e:6a:6d:b1:45:30:57:90:34:1f:42:
                    86:4a:f3:e6:53:ed:de:08:c9:e7:b1:f6:2b:99:b1:
                    ab:3f:9c:f4:df:8d:c6:7e:91:05:2e:e9:ee:f3:53:
                    8c:be:fe:5d:98:92:18:a6:54:08:20:6b:73:19:aa:
                    8f:56:b4:96:14:95:08:96:09:1c:db:5a:b2:27:58:
                    8d:8f:82:b9:f0:10:51:1c:57:3a:1b:39:f1:6e:eb:
                    45:2c:a5:15:11:aa:a8:d8:53:b6:84:81:a9:27:5a:
                    59:75:a4:ec:e2:18:63:c2:63:e8:6a:0b:d6:ff:81:
                    16:fd:64:96:29:d2:2d:1d:f2:20:23:05:56:9d:11:
                    0f:82:35:bf:0a:8f:c8:dd:fa:7a:b8:fd:e4:39:aa:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:A1:9B:2D:FD:88:EF:74:AE:0E:C0:D7:08:7A:F9:00:5C:DE:83
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:86:19:85:ee:17:b2:48:c6:d2:ae:ea:9b:9c:6b:23:76:5d:
         28:2e:0e:56:d1:3f:b9:f9:b2:62:bc:a2:3e:a3:56:c7:e3:d4:
         bb:fa:ae:60:80:62:db:61:63:29:86:3f:7c:3c:a5:e1:2a:bf:
         1c:9b:33:74:f1:84:0d:a3:4b:9a:ee:5e:a7:58:aa:68:df:f1:
         13:43:2a:5f:e2:1f:5a:ea:36:b3:9b:44:30:6b:97:34:a8:4b:
         6f:2f:d7:6c:fb:bb:a0:36:dd:71:91:e5:b7:c5:92:fd:ba:c1:
         a7:38:86:b3:af:c6:c4:43:38:dc:ca:ae:08:18:e4:e7:ce:09:
         75:de:3b:55:6b:50:37:7e:03:98:16:62:6a:33:25:48:6b:62:
         a6:84:8a:5a:d1:c7:43:01:72:b3:b5:a7:fc:c5:46:ec:a7:d4:
         2c:08:84:16:b1:23:35:66:25:9b:7f:9c:16:57:fb:8c:cc:09:
         7f:5b:7d:86:75:ad:d9:8c:85:a3:61:03:ee:dd:5f:61:67:3d:
         18:dd:85:66:9a:86:0b:9e:b9:09:84:fb:fb:6d:d3:61:f8:cc:
         72:a2:a4:37:46:37:f9:b0:f7:71:13:4b:01:50:39:c6:2d:3d:
         62:43:f5:2c:61:b1:cc:98:c4:42:48:e8:05:76:a8:4e:48:6b:
         f7:ff:d1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:41 2025 by rpki-client