
Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
File: 861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft (raw, json)
Hash identifier: H7KXGGecTq/1zJ5QNyv1sHbb195TL18aISszByJpa1Y=
Subject key identifier: A6:26:9E:2A:3E:8F:BC:59:05:EC:8A:03:AC:72:8B:FF:F5:1A:3E:30
Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
Certificate issuer: /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Certificate serial: 5D4BA5C107338427C56BAD6395AB24C8AE13F44A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
Manifest number: 01F3
Signing time: Sun 13 Apr 2025 07:42:00 +0000
Manifest this update: Sun 13 Apr 2025 07:37:00 +0000
Manifest next update: Mon 14 Apr 2025 10:48:00 +0000
Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: jaNv2fV4mhnIdGMm/AT8dho4q8Mx61jU8wHoeKe2llk=)
2: 861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl (hash: tKwrlNhuRY0/MIBx5LtRtMf+imq2OeEBGti8EpCEx5o=)
3: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: O5QSN1jbLmIGPs7ioqES0lmd/QqWdB/0zeylEL8fbuw=)
4: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: VOtxJ10zH5zpJE9PI2+E/kC2LhQ+eYZLKWlBr90BHC0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl
rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 14 Apr 2025 10:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4b:a5:c1:07:33:84:27:c5:6b:ad:63:95:ab:24:c8:ae:13:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD
Validity
Not Before: Apr 13 07:37:00 2025 GMT
Not After : Apr 14 10:48:00 2025 GMT
Subject: CN=A6269E2A3E8FBC5905EC8A03AC728BFFF51A3E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:a1:26:e7:c0:8b:95:25:96:95:95:cc:9c:
97:3a:f2:02:dc:a2:c3:d3:43:03:b4:5d:db:d2:7d:
94:b3:3c:9b:11:52:1b:5b:1b:2d:8d:78:04:71:8c:
5f:43:c6:58:5f:a3:d8:7d:0a:18:62:36:70:27:58:
7a:aa:42:5a:86:ad:3a:8f:d8:0f:60:7a:5f:62:25:
ee:b5:cc:38:52:e2:ee:48:59:a8:cb:1c:1c:ad:d3:
c6:00:cf:fb:60:c4:a9:38:2a:6e:c3:a3:fb:b1:3a:
38:e7:4a:06:98:d5:9b:42:0d:d2:7c:1a:fa:c8:7f:
b7:f2:dc:b5:d8:2c:b8:a5:c3:15:b6:b8:a9:2f:fe:
7d:20:90:ef:87:36:a6:8b:86:3d:7f:b1:9e:b6:27:
1b:c1:04:6f:31:9f:14:67:ae:c2:4b:7f:23:ab:61:
7b:1f:89:f8:73:a2:bb:94:02:5c:5a:34:90:19:37:
be:8e:3b:af:50:d6:1f:d4:17:26:25:76:56:86:7b:
06:54:a3:ad:aa:3c:7d:c4:97:8b:8b:56:7e:69:8b:
3f:76:64:43:35:6a:87:05:23:9c:74:a8:92:00:35:
42:c8:1e:61:60:f8:fd:a4:d5:bb:3f:a4:de:db:d9:
cd:74:d0:f9:ce:5a:fd:b7:75:98:c0:62:6c:c5:6f:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:9E:2A:3E:8F:BC:59:05:EC:8A:03:AC:72:8B:FF:F5:1A:3E:30
X509v3 Authority Key Identifier:
keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:0a:fd:c5:0c:88:da:df:53:ea:23:33:d4:34:95:63:fe:
f4:26:65:20:9b:dc:72:89:bc:a8:54:1b:41:12:24:63:67:14:
a2:1b:1c:14:05:9d:a2:29:d3:63:01:f9:f6:df:91:85:fb:8a:
cf:8c:fb:e3:9d:e3:21:f2:2e:38:25:1c:83:5d:5b:bf:81:cd:
54:41:4b:49:ea:64:cc:d1:eb:32:1b:f5:7a:21:70:b1:c4:c1:
63:ea:a9:41:0b:4a:69:48:22:6d:b3:42:92:22:30:5f:d2:b8:
a0:9a:fa:8f:10:b2:ab:0c:10:31:60:be:26:8f:f9:46:2b:36:
68:4c:99:da:2b:5f:ff:67:ce:ea:59:54:7e:97:be:f7:cd:f0:
f1:5f:a8:0f:b3:64:c9:6c:ce:8a:53:ca:c6:20:38:cd:ab:87:
44:91:b3:8a:f6:cf:3f:86:70:fd:89:5c:10:67:84:05:10:13:
a1:eb:f1:37:18:e1:02:3d:35:e1:1b:47:59:da:86:bc:cf:16:
36:c5:ee:d7:32:78:80:8a:bd:4b:57:5f:9f:39:14:31:50:c4:
16:01:c0:ad:72:b8:7c:f1:b5:20:7b:eb:70:e9:c3:b7:ea:01:
0e:fc:8d:a3:da:f3:41:da:54:de:bd:be:11:70:6c:16:58:e1:
1e:3d:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:49 2025 by rpki-client