Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          XD+9Fn7OfkJxy59R1/wFbdLjTyAe0Qes6Kj73shDxWc=
Subject key identifier:   04:CD:10:1C:41:29:71:02:26:F6:A9:45:5F:5D:67:A8:6A:68:DA:13
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       0471322D3BCB2383EE7AD0E70D40F71B9B741C47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          01F0
Signing time:             Thu 10 Apr 2025 12:40:00 +0000
Manifest this update:     Thu 10 Apr 2025 12:35:00 +0000
Manifest next update:     Fri 11 Apr 2025 14:16:00 +0000
Files and hashes:         1: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          2: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
                          3: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          4: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          5: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          6: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          7: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          8: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          9: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          10: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          11: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          12: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: Fc28Ei+cQynGkbm3f4nRDYdudosYNRHWOJcHnAbkeVA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 14:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:71:32:2d:3b:cb:23:83:ee:7a:d0:e7:0d:40:f7:1b:9b:74:1c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Apr 10 12:35:00 2025 GMT
            Not After : Apr 11 14:16:00 2025 GMT
        Subject: CN=04CD101C4129710226F6A9455F5D67A86A68DA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:43:61:e2:7a:3b:91:85:94:f8:d4:cb:40:
                    38:5f:2e:ea:b2:94:66:a3:79:98:8a:31:60:ea:b1:
                    3e:7e:bd:b1:58:24:6f:1d:de:ee:70:43:06:28:e4:
                    8f:3a:ef:16:da:7b:c1:54:79:2f:b9:6d:fb:c6:ba:
                    7e:a1:2f:26:07:10:d5:e2:0f:45:0e:71:53:26:ca:
                    91:70:8d:94:1a:03:38:e3:1b:80:9f:5b:17:9c:4e:
                    d7:7b:4c:0d:7d:36:2e:d2:2f:8c:67:18:01:67:09:
                    65:06:25:be:a0:37:1e:11:7f:44:0b:93:11:39:b4:
                    8c:8f:0b:8c:d5:34:a4:fa:79:6a:ff:0d:f7:de:56:
                    4e:54:4e:8d:8c:74:6b:57:a4:61:73:6c:c6:8c:d5:
                    fb:8a:dd:ae:c9:5f:f8:21:08:03:54:4b:53:4c:a1:
                    72:f1:fe:a8:fe:9b:db:22:f3:52:68:d9:12:7c:e9:
                    b8:24:03:d0:33:22:04:b9:2d:ef:62:3b:90:49:d1:
                    b5:01:5d:1a:89:0a:aa:62:ad:ca:4d:ed:33:7c:09:
                    f8:b7:dd:ec:bc:68:5b:65:4f:36:dd:97:87:89:76:
                    3d:19:5e:21:5f:e4:ac:ab:e7:18:74:3a:4b:92:df:
                    96:89:fe:b5:c2:5d:60:5d:06:80:b4:b0:76:12:53:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CD:10:1C:41:29:71:02:26:F6:A9:45:5F:5D:67:A8:6A:68:DA:13
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:d4:05:51:74:0c:31:30:3d:f6:34:58:df:87:57:fd:49:
         db:26:07:21:be:c8:79:7b:b3:c6:ed:06:d2:09:37:49:2f:5c:
         3f:16:c0:08:74:99:48:b4:04:b7:40:9a:bb:89:c3:c3:1b:08:
         36:a5:49:d1:86:b1:e8:71:db:72:07:a5:6e:82:ef:cc:43:56:
         91:82:22:1f:91:53:93:40:15:91:9d:ca:05:3c:6c:dd:62:bd:
         04:89:cd:96:d8:f0:78:4b:26:7c:da:40:98:5d:d3:d5:bc:c0:
         da:cf:34:b2:68:d9:8a:6f:96:a6:54:28:66:49:50:98:9c:cc:
         e0:45:28:d6:85:ff:19:d6:2c:20:53:c3:92:cf:9e:f7:00:84:
         b5:44:03:9e:08:e6:d5:b3:82:f3:65:46:ad:74:47:e7:db:6a:
         52:d9:56:4d:fd:85:a7:a1:b6:0c:40:b3:cd:ea:b6:c2:a2:88:
         2f:0a:90:2d:19:5b:6f:41:6a:fb:d9:7b:7e:dc:78:d4:61:95:
         77:d2:22:41:cf:5f:7e:04:db:cc:03:5f:ad:62:6e:4c:75:25:
         38:64:94:09:ea:2b:ad:39:d3:b5:b4:20:19:ff:05:bc:d9:d2:
         2d:e3:9d:66:b0:43:ed:3d:be:66:01:5b:5c:e6:59:3c:9e:26:
         e0:30:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:33:21 2025 by rpki-client