Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          sl93nZL8oUQU6peK0uy5YvmXoaJJk+nMkdA8CZHckcY=
Subject key identifier:   9F:92:18:FA:F5:DC:5E:D7:1A:28:98:65:24:9A:F3:13:67:2B:5F:78
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       3C7F29C84D13DFC619EC253D23FF6E0F8DC2E0E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          01E7
Signing time:             Fri 04 Apr 2025 16:05:24 +0000
Manifest this update:     Fri 04 Apr 2025 16:00:24 +0000
Manifest next update:     Sat 05 Apr 2025 16:36:24 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          2: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          3: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          4: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          5: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          6: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          7: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          8: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          9: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          10: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: /J8/zAHpbGlGrlit6HruhYyEqps0kMMPr6AFgJeTXkE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 16:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7f:29:c8:4d:13:df:c6:19:ec:25:3d:23:ff:6e:0f:8d:c2:e0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 16:00:24 2025 GMT
            Not After : Apr  5 16:36:24 2025 GMT
        Subject: CN=9F9218FAF5DC5ED71A289865249AF313672B5F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:63:c4:9a:19:eb:41:ae:6f:c3:57:d2:15:
                    75:57:9c:ee:ee:24:51:f8:ef:50:9e:a8:ff:52:07:
                    2f:98:0a:6e:3d:04:6c:37:f6:f7:75:ef:e5:d0:a8:
                    a0:6c:bb:a3:50:bf:e7:e2:00:16:ae:44:e0:cb:3b:
                    66:55:29:c9:17:81:9d:77:33:9c:e3:c0:f1:9b:d3:
                    f5:69:06:e9:c8:83:e7:7b:c7:b5:b6:b1:5c:ce:aa:
                    a6:5e:65:c6:14:17:ae:6b:ae:98:d2:db:dd:9e:4b:
                    8e:ae:a5:8c:a6:ef:b4:5a:cb:67:b1:ba:56:8b:6e:
                    e7:e5:02:6b:13:ed:3e:81:d9:f4:27:72:6c:5c:92:
                    ee:35:68:e4:ea:ab:9a:17:4f:bd:79:a7:6d:5b:fa:
                    04:ad:f7:6f:17:64:6f:74:6d:66:f1:ec:2f:e2:6b:
                    51:42:81:86:96:2d:8b:8e:12:4c:54:73:a3:dd:03:
                    2e:da:9d:23:43:b0:e1:60:5b:6d:a0:7c:32:5c:2a:
                    9c:e1:ae:0e:41:10:79:72:01:7e:b5:d5:eb:e8:fd:
                    35:fe:2b:6c:dd:23:99:66:35:93:42:b1:a0:87:8f:
                    d3:1d:8d:f3:3f:57:dd:a0:ab:50:44:2d:db:2f:20:
                    b1:08:c7:92:45:8f:62:60:9c:85:a8:45:e4:fa:0c:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:92:18:FA:F5:DC:5E:D7:1A:28:98:65:24:9A:F3:13:67:2B:5F:78
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ba:85:f0:60:ab:b3:c3:01:cf:28:a5:8b:93:f9:51:51:ef:
         b4:49:6a:5c:e9:20:f1:d7:f7:67:23:09:79:e1:16:18:4a:00:
         d6:4d:12:ca:f3:67:05:1b:f4:0b:4b:91:8a:20:77:ad:c4:73:
         03:65:2f:e4:88:80:f4:a9:17:18:6c:0b:b6:de:17:a9:d9:0e:
         da:a6:b0:a1:9f:a6:be:d1:7a:7d:06:d0:e3:31:a6:f2:3c:3e:
         66:63:54:9b:f7:4a:4b:9a:bf:cf:6b:dd:64:80:96:19:84:98:
         71:5d:ec:df:be:d1:b8:42:61:ce:9a:db:f3:84:7b:4f:7c:68:
         28:fa:b6:76:22:ac:cf:25:b5:78:1d:54:88:6a:db:15:c9:bf:
         30:60:ee:c8:9c:2e:6f:ab:d1:34:83:2a:09:87:3b:3e:83:5a:
         3d:03:57:cb:2f:c5:d3:b3:dd:79:44:6c:54:ce:63:ae:45:ad:
         df:67:dd:a9:b0:3d:69:ce:4b:75:72:19:52:95:e8:c3:31:2e:
         21:da:7d:cf:4f:0a:eb:a7:03:93:67:9c:93:41:dc:99:35:d8:
         7b:11:17:3b:45:81:d2:7c:dd:19:10:29:35:51:42:a5:55:e1:
         56:ec:27:c8:d2:8c:24:24:c1:f1:65:c0:cb:ab:1f:87:dc:48:
         ec:cc:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:29 2025 by rpki-client