Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.mft (raw, json)
Hash identifier:          4fH4j5oosWlTRrrwyGh7Qu0TkRHoMnDsQTIirWCF7TA=
Subject key identifier:   B6:0B:F3:47:8A:7C:A9:60:7A:D6:E1:20:DD:29:E6:B0:E9:B2:F0:07
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       5DC144E818396A9F1BEEA696D3D4DE5B1C7FCE46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
Manifest number:          B4
Signing time:             Mon 09 Jun 2025 17:36:17 +0000
Manifest this update:     Mon 09 Jun 2025 17:31:17 +0000
Manifest next update:     Tue 10 Jun 2025 18:01:17 +0000
Files and hashes:         1: 3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (hash: Mzm6LEaGyjjyqpnZ6FeNic1af8TjOs4d2L3eGTSkHGI=)
                          2: 3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (hash: IbbwJfvVHD7NWuSEOlKiZedgV+CkNrEUse8OowGtH+M=)
                          3: 3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (hash: b0tQygd01X8y9cU9NeVEUawK0KgmCDr/R/oGSGB9r3U=)
                          4: 323830343a366532303a633030303a3a2f33342d3334203d3e20323730353737.roa (hash: v+JN+tn0cVioypFGRyLxkoVuwHNdtJF9Rh4gEIbM340=)
                          5: 3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (hash: eBYm42+1W1fGcFwuZmXMRlKyQCOL5aYpZefRvtpQWhA=)
                          6: 3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (hash: f0A0SW8C/83W4VceZCY58OSq5wvSOi5qTCw783wE0J8=)
                          7: 3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (hash: b67cK4a/rsVCTeyWhTLwvGRtbmz+Hxq6t70ISE4OC5U=)
                          8: 24C0BF59215339684BA80028158EEDE0FD534D91.crl (hash: taL8IFT5uwbJf0RY2sUBJuJs5cLD2KfWbA/nfdCmAW8=)
                          9: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (hash: PVq+hF7vsW69/LZUNpWq+A3qzKDzP7Q3cU3sANu0X9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c1:44:e8:18:39:6a:9f:1b:ee:a6:96:d3:d4:de:5b:1c:7f:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jun  9 17:31:17 2025 GMT
            Not After : Jun 10 18:01:17 2025 GMT
        Subject: CN=B60BF3478A7CA9607AD6E120DD29E6B0E9B2F007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:4d:c5:cd:4c:70:3a:e4:59:83:94:60:26:
                    72:05:a3:76:91:8c:bb:79:f0:94:17:73:87:8b:31:
                    0b:e3:2c:28:d4:0d:6b:e6:ad:b2:98:be:94:eb:a7:
                    d9:7d:ad:44:9f:e8:7e:dc:ef:54:5f:c5:75:35:79:
                    5f:f8:28:d1:b5:f4:fb:38:62:a0:15:3e:65:d3:41:
                    16:4e:17:7c:d5:4c:52:18:e0:ae:a2:8a:97:64:0f:
                    75:2f:01:a2:80:01:0f:8d:db:ea:17:61:23:3a:0b:
                    35:72:b5:a0:4e:05:c2:7c:cd:13:3d:da:e6:32:7b:
                    be:46:c8:88:00:6a:5d:a3:77:5c:9c:18:75:98:69:
                    6a:b0:ee:b7:4a:83:1c:b1:22:fd:ac:f7:2d:ba:56:
                    40:ba:dc:c3:44:74:39:72:65:c9:77:b4:8f:00:23:
                    91:a0:14:54:20:7e:a4:45:1b:28:53:bb:6d:bb:54:
                    7a:e1:8c:72:d6:ae:50:9c:2e:63:7b:1c:9b:73:ff:
                    23:c7:ce:8a:70:79:50:62:bc:99:71:11:3c:f2:3f:
                    ca:c6:8c:4d:7b:1b:e3:d0:4f:28:38:58:79:07:e6:
                    ed:ee:5b:e8:82:2e:b5:89:41:fd:2d:bd:f6:65:39:
                    be:6c:c6:f2:f1:cf:71:fe:e2:0b:f9:50:1c:a0:c2:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:F3:47:8A:7C:A9:60:7A:D6:E1:20:DD:29:E6:B0:E9:B2:F0:07
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:15:1b:71:5c:a5:75:c1:0b:a0:2a:3e:b4:56:be:3b:c4:
         01:6b:3e:14:02:23:04:90:17:df:48:d3:5a:49:9b:cb:94:2a:
         c2:8b:db:58:a2:b4:92:f6:2d:7a:29:e8:0b:ec:02:84:8e:bd:
         d7:5a:d5:1c:ca:75:d9:48:4e:ab:24:1e:3c:25:fe:00:c5:32:
         2f:74:e8:dc:82:7d:95:fa:b1:01:81:d9:37:76:1c:ef:ae:56:
         15:d4:8b:0e:41:ea:90:3f:31:9f:d2:9e:e4:12:2b:a0:d2:f1:
         fb:63:a2:17:ee:50:f1:3a:59:52:c0:4e:09:5e:0d:20:65:2a:
         73:c1:4a:d0:4f:7e:aa:ea:13:11:9d:36:45:7e:e7:39:8a:28:
         72:46:40:61:f7:48:1d:45:95:c3:18:dd:b8:21:5a:62:65:b4:
         f6:04:48:23:91:4d:44:d3:a6:e5:7e:62:16:b7:ca:65:96:51:
         f9:c3:e3:c0:c4:92:1d:ab:e7:9b:94:08:19:bb:e6:1a:09:a0:
         be:92:2e:5c:06:ae:99:10:64:9a:b6:95:31:ab:7b:2f:87:4c:
         14:27:8d:20:08:82:d2:a4:1d:63:ed:16:ca:5a:ba:38:9b:4d:
         45:c4:6c:80:0b:43:ba:3e:61:40:84:c1:15:0a:6f:88:5e:fd:
         20:71:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:38 2025 by rpki-client