Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
File:                     4D2990768E393F68FA14BF3F1F2B973208903FBC.mft (raw, json)
Hash identifier:          3fK6f1UyXJOlBXDWbiaiTziaBeA3IPrDkBo1A9T4/ZM=
Subject key identifier:   0D:05:11:33:97:02:26:21:C5:8A:10:D6:A6:66:78:D4:DB:B4:49:CA
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       6E2324D85651820AC5C25FFEF3F235870A930EA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
Manifest number:          0118
Signing time:             Fri 13 Jun 2025 14:48:48 +0000
Manifest this update:     Fri 13 Jun 2025 14:43:48 +0000
Manifest next update:     Sat 14 Jun 2025 15:24:48 +0000
Files and hashes:         1: 3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (hash: Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=)
                          2: 3138362e3231392e3234382e302f32322d3332203d3e203631373435.roa (hash: /4kndRTLPJ7z6o8eMCZNO62enqlcrNH71OhR/rdSbZ4=)
                          3: 323830343a316262383a3a2f33322d313238203d3e203631373435.roa (hash: dpARCrJGTbLpg4On6cAirQCdXCQ94JOs1o9PPF+Mus8=)
                          4: 3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (hash: 4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=)
                          5: 4D2990768E393F68FA14BF3F1F2B973208903FBC.crl (hash: 7H2zuRtbA3EEVFPiexx5cRO9vm6TMf9fVu4e8rCnhn4=)
                          6: 3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (hash: aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=)
                          7: 3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (hash: V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 15:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:23:24:d8:56:51:82:0a:c5:c2:5f:fe:f3:f2:35:87:0a:93:0e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Jun 13 14:43:48 2025 GMT
            Not After : Jun 14 15:24:48 2025 GMT
        Subject: CN=0D05113397022621C58A10D6A66678D4DBB449CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:6f:1e:50:24:38:b9:c5:23:dc:d2:c9:24:
                    8a:d9:19:a4:17:cd:f5:02:19:38:bb:3a:e5:80:7c:
                    78:24:f7:06:fb:75:bb:f3:5c:6d:c2:5f:ec:48:5b:
                    76:b3:5f:09:fe:72:04:d3:5e:b4:f9:66:25:b2:83:
                    db:c5:e7:75:b9:6c:eb:4f:b3:6a:46:5f:8c:03:25:
                    d9:ff:48:17:25:a0:34:5f:1e:a0:54:db:76:d1:c0:
                    bc:b9:0c:da:23:60:5a:cc:67:72:6b:86:3c:95:71:
                    c6:fa:1d:82:1d:d2:4e:f6:9c:c8:83:b5:41:a5:b5:
                    35:a8:0d:b1:3a:5b:00:a8:38:8f:17:fd:b0:1c:76:
                    bc:bd:93:01:02:c1:40:d3:ce:26:d8:3f:66:0c:3f:
                    ce:78:9f:cb:23:fa:23:14:18:21:27:81:b4:f4:7d:
                    42:64:89:3f:66:26:75:e4:2a:4c:92:7b:01:0a:e0:
                    10:c3:48:d7:27:1d:03:a1:a1:1a:bc:9a:0d:6d:15:
                    08:aa:4c:82:5b:4b:82:2b:ec:7c:23:b4:37:a3:de:
                    88:b6:10:10:19:c4:01:b2:a2:4c:53:dd:b6:cb:fd:
                    f2:36:6e:4a:e0:5a:c2:19:64:01:dc:5f:68:5b:bd:
                    0f:17:9a:c4:08:c3:fa:47:64:44:6e:39:e3:14:ce:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:11:33:97:02:26:21:C5:8A:10:D6:A6:66:78:D4:DB:B4:49:CA
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:37:0c:63:4f:f4:5a:65:c9:ea:05:9b:ec:9c:8d:b4:77:
         8b:83:63:e8:14:d2:8a:fb:f6:d5:54:15:fb:50:a8:e7:20:41:
         a6:c3:3c:38:3f:e5:84:35:85:13:d8:15:dd:f1:25:1b:1e:55:
         f4:ac:4c:e3:16:e2:84:63:6d:72:a4:0f:17:a1:22:25:9f:f1:
         3d:75:1a:17:ec:35:eb:c3:fd:f4:b1:66:8a:b5:81:4b:2e:69:
         2c:96:dd:93:55:b4:e5:7a:66:c2:b9:a6:67:0c:c0:ca:4d:6a:
         52:20:7a:fd:46:f7:ab:34:df:21:a8:cf:af:67:1d:0f:7d:fc:
         df:37:5c:63:53:13:75:da:20:a7:c6:d2:33:40:a1:ee:7e:08:
         50:d5:c3:64:06:74:4a:8a:77:9b:5c:46:c0:9f:29:34:53:bf:
         4a:1c:01:df:1c:e9:f4:31:46:f2:2d:e7:0d:bc:a4:57:93:77:
         74:3b:a8:5b:d2:01:be:5e:aa:3d:5f:49:de:ec:2d:84:00:0f:
         b4:e8:04:d3:88:2b:db:2e:9a:a7:f5:6e:73:89:43:a4:2a:1c:
         eb:86:bb:e1:aa:f5:9c:a2:2a:fd:5c:18:f1:a2:12:73:d9:54:
         eb:98:16:9d:22:b7:12:03:97:49:36:45:96:9c:8d:92:3e:fd:
         0e:bb:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:16:56 2025 by rpki-client