Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          UteSyhrewuZbOUpocGD0ZXKzZ9zu8k5ysRn7ZsPXM1o=
Subject key identifier:   1A:80:7E:9D:80:DD:6B:8F:72:7D:1A:9B:B2:72:9C:2C:2C:DB:01:9A
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       4B6E2CDB48E0106E3B11D81D669863289C76A21F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0239
Signing time:             Thu 05 Jun 2025 11:20:31 +0000
Manifest this update:     Thu 05 Jun 2025 11:15:31 +0000
Manifest next update:     Fri 06 Jun 2025 12:41:31 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          2: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          3: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          4: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          5: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          6: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
                          7: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          8: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          9: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          10: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          11: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          12: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          13: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: HXT1e44x33hiNZ2SGivMujmjqYtTzHkVmaQlQomOUME=)
                          14: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          15: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          16: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          17: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 12:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:2c:db:48:e0:10:6e:3b:11:d8:1d:66:98:63:28:9c:76:a2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Jun  5 11:15:31 2025 GMT
            Not After : Jun  6 12:41:31 2025 GMT
        Subject: CN=1A807E9D80DD6B8F727D1A9BB2729C2C2CDB019A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:03:57:26:0d:6e:39:73:c4:51:6d:28:be:
                    33:25:08:77:9a:41:e5:23:ec:1c:df:c2:e6:15:6f:
                    60:0a:ac:d0:24:c8:14:70:90:7d:60:47:3a:91:e3:
                    f7:cb:f4:d1:46:80:8a:17:25:57:7f:46:78:c2:e1:
                    89:45:1b:9f:48:c1:be:96:92:ec:90:ff:5d:fe:e4:
                    97:e5:54:0c:d1:78:5c:68:56:56:6c:6c:9e:f7:8e:
                    86:b8:b6:ef:23:08:e2:d7:f1:ab:50:58:3f:4e:37:
                    92:5c:3e:86:6a:fc:83:c7:ad:91:4e:f2:b0:7d:d3:
                    bb:2f:b5:2f:9c:d6:8c:50:79:ca:67:96:82:e9:71:
                    f9:94:84:15:70:20:55:d0:60:54:16:09:e9:a5:6c:
                    92:80:fb:82:89:0f:3b:db:ea:da:9f:61:eb:3b:ca:
                    62:e5:35:07:26:4f:22:27:75:7f:46:75:f7:3b:0f:
                    8e:ac:97:dc:79:e6:51:28:33:8a:bc:2c:54:10:c7:
                    f9:70:ae:50:50:bf:53:13:5a:68:de:f4:e8:83:51:
                    88:f3:d6:6e:bf:b8:71:e9:2a:07:dc:8d:22:16:cf:
                    ea:19:c8:5f:ed:27:50:88:d5:f6:72:a3:7b:db:48:
                    13:e1:64:ee:ad:ef:1a:9f:ec:e5:38:d3:9e:24:44:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:80:7E:9D:80:DD:6B:8F:72:7D:1A:9B:B2:72:9C:2C:2C:DB:01:9A
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:3f:31:47:e4:66:78:67:64:a9:93:e2:02:03:01:10:d0:
         5a:d4:9b:39:24:2c:41:e6:43:d4:47:6a:2c:a4:a5:46:00:ab:
         11:84:8e:13:d3:44:25:0a:f5:42:eb:e4:db:d7:67:e8:66:79:
         29:a9:d0:e3:4f:4d:54:1b:95:ad:23:ac:e7:6a:9f:33:61:ac:
         37:8b:6b:59:6c:b5:21:e9:5e:ea:7d:33:d1:78:cf:67:9d:3b:
         49:e1:b1:42:64:58:47:4c:ae:3c:62:86:21:d7:62:42:2e:fa:
         ea:bb:48:20:e9:3c:89:29:cc:a6:28:4a:94:43:be:27:8a:ef:
         52:6f:03:88:d2:af:c0:89:df:25:c0:b5:91:f1:eb:5c:d7:f5:
         34:4d:b1:57:44:fc:5c:54:77:41:bc:9e:46:c8:e1:c2:5a:3a:
         2e:16:7a:bc:a7:0c:3b:05:56:e9:d9:f0:fc:43:a2:d7:2d:c0:
         ec:78:b0:56:e3:7e:b2:4a:75:b4:d5:b8:14:36:3f:aa:16:a4:
         04:4e:90:86:56:14:ab:e3:48:71:ab:d8:37:6d:1c:16:47:cb:
         72:33:d5:f5:3d:36:19:4a:5d:0f:77:11:37:53:03:4c:06:87:
         e9:0c:c3:8e:6d:e6:78:bc:1f:88:07:f7:42:bc:48:4a:2a:bc:
         84:be:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:34:25 2025 by rpki-client