Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
File:                     0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json)
Hash identifier:          W655TwUafADNvJigpDMgeueeXbQtl4Qj0+RScz5PHQU=
Subject key identifier:   95:86:43:6D:83:C0:1D:15:05:E8:B1:BC:C6:8C:98:6C:BB:39:6C:E4
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       3D90704B168D9AB393BDA369E709371F99B7C561
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
Manifest number:          01EF
Signing time:             Sun 06 Apr 2025 02:09:36 +0000
Manifest this update:     Sun 06 Apr 2025 02:04:36 +0000
Manifest next update:     Mon 07 Apr 2025 02:20:36 +0000
Files and hashes:         1: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: QNFyXkDjYxtjAY+XGMe5tcCI6hXOc6k0U04RR0wk06M=)
                          2: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: vBgYmFfcGMVNaLDjMU4ps9pVifKrCdkR8DiaxgX0VHU=)
                          3: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: NAlyE1gP5eEm2QCzZwWb0ZvOj7kmRHCKooa9+7IETXo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:90:70:4b:16:8d:9a:b3:93:bd:a3:69:e7:09:37:1f:99:b7:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Apr  6 02:04:36 2025 GMT
            Not After : Apr  7 02:20:36 2025 GMT
        Subject: CN=9586436D83C01D1505E8B1BCC68C986CBB396CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:ad:33:65:cf:d0:25:a5:0d:ad:59:b4:be:
                    bc:37:49:ef:c3:a4:30:f3:b8:58:e6:cd:c4:72:3a:
                    c6:19:7b:3c:14:7f:41:3b:ea:73:b5:01:18:f4:63:
                    5c:6d:f4:55:0b:4f:4e:17:2d:3d:33:c1:d3:15:c9:
                    d5:01:d7:55:88:9b:22:0b:97:1d:4d:93:d2:b4:d6:
                    c7:12:f7:c0:57:e3:5b:f0:0e:73:c8:bf:c2:24:1e:
                    78:37:de:33:ce:c2:5a:14:67:7e:c5:dc:0f:ba:32:
                    96:50:fa:fc:05:06:57:27:d3:e1:07:03:68:3e:24:
                    6e:66:b4:4f:31:6b:9c:28:66:20:2b:8e:0b:cb:87:
                    06:71:5b:3c:c3:b5:1e:57:04:ef:eb:66:a2:1f:8d:
                    75:2a:f9:c3:d5:75:58:8f:80:6f:54:6b:4b:67:96:
                    39:e9:dd:da:a2:b8:57:38:d5:23:10:8b:d6:f0:0d:
                    e4:87:02:9c:0e:ad:4f:28:05:a0:11:85:c7:2e:a1:
                    29:e7:18:c1:18:6b:f7:f6:ad:b3:28:20:94:64:2f:
                    52:e4:c7:c2:97:28:ce:9b:33:d8:ee:34:20:74:23:
                    55:03:a4:c5:9f:5d:d3:5f:89:b1:94:d0:df:06:48:
                    f1:d3:72:4c:36:1a:7c:2b:fb:30:f5:d2:9d:fc:7c:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:86:43:6D:83:C0:1D:15:05:E8:B1:BC:C6:8C:98:6C:BB:39:6C:E4
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:54:d7:39:a4:1b:ea:d4:6b:bb:7b:44:2e:37:c5:b3:4f:
         ff:5d:f6:0b:10:86:b1:ec:38:8f:25:37:88:85:e2:6e:18:31:
         b3:56:83:ae:41:bf:d0:41:bc:e2:70:6f:11:d5:e0:c9:54:26:
         a1:be:e2:bc:0f:f0:f4:4b:c9:6a:24:2a:41:df:2c:ec:6b:e8:
         32:de:2f:d1:5d:6f:79:9d:d5:04:78:5f:0d:b3:3f:f6:25:78:
         27:b2:83:e4:65:ce:f4:b2:3b:0d:b0:92:1b:1d:e2:ed:1f:11:
         71:91:aa:da:a2:35:88:7d:89:15:bc:75:9a:70:ba:43:89:b7:
         c5:20:04:07:0d:73:37:6d:bd:63:85:a8:a3:15:17:3f:62:be:
         af:09:09:bc:81:cb:6d:85:94:4e:0d:fb:70:79:cc:73:5a:61:
         ba:ba:b2:31:af:bb:0f:f4:f8:7c:57:00:c5:fa:cc:8f:c4:45:
         74:1b:43:61:6e:ad:84:b8:86:86:6e:51:43:7c:97:a5:61:9b:
         35:b5:40:59:43:b8:39:73:a5:8a:59:a9:5d:9a:cb:1c:83:3d:
         ca:ab:d7:1f:11:2b:41:cb:be:97:f6:81:ed:1d:5e:6c:03:5d:
         d1:46:97:b7:b2:e5:1b:f7:93:11:ce:97:cd:61:8b:3b:13:28:
         9f:ab:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:40:46 2025 by rpki-client