Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
File:                     06EA067E007B9311176981678F208CA96CEFDE1D.mft (raw, json)
Hash identifier:          1+CXx3OPrfgWek7FgCPYzJGnZjxNMZ3SPPGsfeIZawE=
Subject key identifier:   E0:4F:03:D5:EF:62:FC:B9:63:18:45:0B:4E:BE:21:66:C2:31:47:14
Authority key identifier: 06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D
Certificate issuer:       /CN=06EA067E007B9311176981678F208CA96CEFDE1D
Certificate serial:       78ED652500711AFCB4EFEE28859E65A76AC3F3EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
Manifest number:          59
Signing time:             Tue 08 Apr 2025 15:56:38 +0000
Manifest this update:     Tue 08 Apr 2025 15:51:38 +0000
Manifest next update:     Wed 09 Apr 2025 17:35:38 +0000
Files and hashes:         1: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: N/Z/0SwUs8Ui+O41tGQKyd2ktNBNDvgX9ka/3Xw5zjY=)
                          2: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: GEt2qNCqwLNHi+MLyc8GGanebkCprDuXtBjyWS8YrLQ=)
                          3: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: Vb+0BI2ddEmTu/78Cg1t8TSemi71IJtFs/A48tUuZq0=)
                          4: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: yGeTQIWIsmjehPczpJgE//RoRaI5zA3RAdfw2t07Fas=)
                          5: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: gc8/kO+eEAm5/bhEGr9HHIXp2Y+t6jGCnTXQNp1ZcwY=)
                          6: 06EA067E007B9311176981678F208CA96CEFDE1D.crl (hash: C06jOTWbS7lQ45EcjjQZc67DZw+0KKPQE49YFJIB0CE=)
                          7: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: 7j1ml5cMBz2z1yRAnv8vStkDBBj0cFyUMmMjwGlXBEA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:65:25:00:71:1a:fc:b4:ef:ee:28:85:9e:65:a7:6a:c3:f3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06EA067E007B9311176981678F208CA96CEFDE1D
        Validity
            Not Before: Apr  8 15:51:38 2025 GMT
            Not After : Apr  9 17:35:38 2025 GMT
        Subject: CN=E04F03D5EF62FCB96318450B4EBE2166C2314714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:21:7f:5e:6d:e1:a8:3b:f1:1a:53:ba:e4:
                    e6:4b:d9:38:6f:26:f1:06:9c:21:5c:36:ea:74:23:
                    b8:f2:85:c3:77:89:7b:0c:d3:f8:09:7f:7b:c5:d2:
                    5b:a8:fb:95:48:95:b3:14:40:da:ff:cd:95:8b:be:
                    f8:59:26:cc:9d:be:1a:d5:43:9a:5f:1b:fe:62:1a:
                    78:76:fe:e2:4c:49:c6:0d:69:5f:47:6b:5d:5c:c4:
                    79:32:c0:bf:b1:4d:bd:df:43:28:b9:1e:43:6e:8d:
                    5c:24:cc:78:89:d6:36:a7:51:b1:de:f1:d0:cf:b6:
                    65:e0:a6:6a:d7:95:1d:f1:77:d8:48:e9:b1:19:41:
                    65:c2:c7:87:93:a4:93:70:61:59:7d:53:b7:88:c3:
                    99:d3:28:66:28:b2:33:e7:09:ef:2e:e4:5a:a7:b7:
                    d4:34:58:c1:95:79:08:f5:b4:61:41:72:fc:db:6f:
                    a3:29:9b:4a:ba:22:dd:db:ba:2a:08:a7:9a:0b:7a:
                    de:87:19:38:64:2f:35:12:ae:80:f8:b0:a1:38:b4:
                    7e:fe:cb:a8:70:61:11:93:52:02:38:eb:92:02:2f:
                    3f:28:5f:0a:8c:e8:a4:c2:ba:8d:ea:0f:3e:34:b5:
                    ae:72:f0:cb:c5:38:19:ad:9f:4d:a5:54:3b:d3:e5:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:03:D5:EF:62:FC:B9:63:18:45:0B:4E:BE:21:66:C2:31:47:14
            X509v3 Authority Key Identifier:
                keyid:06:EA:06:7E:00:7B:93:11:17:69:81:67:8F:20:8C:A9:6C:EF:DE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06EA067E007B9311176981678F208CA96CEFDE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/06EA067E007B9311176981678F208CA96CEFDE1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f3:48:18:21:21:72:9a:c2:8d:2c:6a:74:1f:62:1c:2e:be:
         7b:70:f7:2e:70:d6:58:c1:23:55:d0:ca:3d:79:2e:8c:cb:4a:
         cd:0f:68:3a:16:aa:08:f9:fb:46:01:7b:82:74:83:2e:98:e3:
         ab:67:4d:c6:92:6a:6f:05:b8:07:0a:15:e4:0b:1e:42:e7:f6:
         cd:a7:d2:2e:4b:f8:8e:be:44:73:73:a7:24:b9:4f:65:11:f5:
         e2:f4:42:52:41:45:c3:3d:e3:db:dd:01:8b:cf:1a:16:68:2e:
         b4:22:0b:0a:8b:45:e0:3e:17:45:95:a6:a9:94:90:b7:e1:6c:
         56:08:05:02:04:aa:8e:82:fc:f4:16:62:84:9a:5f:c8:b0:38:
         e1:65:b7:56:ee:56:5f:70:48:4b:37:7d:d9:14:69:2f:83:9b:
         b2:0e:f4:d9:c0:f8:6d:6c:e5:03:f3:7a:e3:66:93:86:07:9e:
         e3:0a:e4:86:f0:3b:68:1c:94:43:4c:ae:43:58:b2:0b:10:58:
         bb:87:ad:cf:bf:89:75:f7:90:e4:4a:b1:50:3f:64:ff:85:6e:
         2d:a3:df:66:bb:4d:43:cc:f4:30:81:c3:bd:36:53:3a:0f:a2:
         c1:c4:14:28:83:da:83:7c:8d:78:f2:d3:b7:70:e5:07:13:64:
         43:20:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:25:52 2025 by rpki-client