Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
File:                     42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json)
Hash identifier:          wBTWX83c/NxwUp3GDleDnkeLutJ2kIoF5PkwPVOUV5E=
Subject key identifier:   17:74:F6:C9:76:7E:3A:37:1E:5E:23:C2:02:E7:BC:BA:FA:7E:A1:54
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       6BB2FA0636054E7CC3A14E9F5F34E289E0653946
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
Manifest number:          01C1
Signing time:             Fri 25 Apr 2025 14:34:00 +0000
Manifest this update:     Fri 25 Apr 2025 14:29:00 +0000
Manifest next update:     Sat 26 Apr 2025 16:42:00 +0000
Files and hashes:         1: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: eMu5Pox28SzpvKP8YjdU77zU4I+utFls48SBZE/y4GM=)
                          2: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: cd/o+cgKT+7B5IJvmnlfVE22M1Gk5tst27TuMc9NCmo=)
                          3: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: zm5/NlBNjY2gBXg5qFRPR4Pe/AbFSWS6ddEBKS+LqUw=)
                          4: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: vGrE2QkyLb0ZqSk3VbDFyFYQZDWgFD0gMkk1SZHUtZ8=)
                          5: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: DyMsIolMJZV321T0cBRoRbsiiat/HZ54rBCkTTrlbmc=)
                          6: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: TP1DZhDPcJtZEbCLC5hzbgMAWAKbtcDJimX9hhg43y4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:fa:06:36:05:4e:7c:c3:a1:4e:9f:5f:34:e2:89:e0:65:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Apr 25 14:29:00 2025 GMT
            Not After : Apr 26 16:42:00 2025 GMT
        Subject: CN=1774F6C9767E3A371E5E23C202E7BCBAFA7EA154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:35:70:82:bf:1e:9a:ea:d4:60:02:21:94:75:
                    07:93:90:71:58:40:3e:96:fd:9e:81:4c:91:e8:42:
                    f2:81:38:2e:ea:fe:3e:75:14:2f:39:bb:b3:51:f8:
                    e7:73:56:49:54:b8:1e:ec:94:af:19:cc:be:27:d0:
                    44:f8:1f:a9:b8:0f:9e:de:30:60:a3:67:ca:c9:1e:
                    11:b9:28:3f:1e:c1:94:e0:cc:20:c9:1f:6c:91:17:
                    f4:58:4a:32:a4:43:79:0e:15:cb:ca:3b:50:af:9e:
                    da:31:94:23:49:a8:d2:68:78:12:06:19:d4:07:94:
                    5d:de:53:12:3a:6c:92:09:a0:7e:be:c1:7f:bc:22:
                    1a:fd:1c:ec:0c:cc:49:58:54:18:f5:81:aa:e9:14:
                    14:8c:c3:a3:0a:9a:1f:92:6d:24:f6:c4:c7:14:69:
                    51:c2:98:01:dc:9f:3a:13:55:ca:95:ef:a8:24:31:
                    dc:e1:85:72:50:86:ab:fa:e8:6e:9c:2d:e8:cc:e7:
                    6e:2e:da:09:5b:db:83:7f:76:1c:c6:7d:4f:82:5d:
                    79:58:2c:bd:60:a5:74:8a:81:5f:c9:56:81:59:71:
                    93:5a:c6:5e:5d:75:0c:15:9d:98:d9:d8:5c:6b:1e:
                    bd:7d:09:61:0e:74:a2:cb:01:d1:6a:a3:5c:b9:f4:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:F6:C9:76:7E:3A:37:1E:5E:23:C2:02:E7:BC:BA:FA:7E:A1:54
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:39:27:f2:1a:af:09:2d:0e:25:15:e1:cc:54:1a:50:59:
         1f:4e:48:39:93:49:8b:ba:05:91:47:e7:92:51:0a:89:d7:38:
         a1:6a:dc:f7:8a:9b:89:fb:b2:e0:64:aa:2a:96:fe:9b:3d:12:
         21:4c:50:60:d4:85:ef:df:4d:99:91:31:75:26:f3:ba:9e:30:
         ae:53:bd:e5:f3:aa:f4:d2:f9:11:d2:cf:ec:de:23:3d:e0:d4:
         a8:4d:18:05:0b:0c:f9:13:cb:dc:a4:78:88:33:2d:a3:fd:00:
         f7:d9:27:26:aa:f9:9e:b9:dc:80:3b:f9:44:a2:7e:db:54:03:
         6d:7d:f9:5b:f2:72:c5:c4:08:c8:51:c2:fe:68:68:2f:bf:58:
         c9:43:3d:7d:66:13:3f:50:b7:e5:02:a7:07:05:0e:b2:d0:92:
         5d:64:82:4d:e0:3a:f3:8f:45:9b:70:33:96:bd:42:52:26:1a:
         09:2e:ac:49:ae:a4:f9:1c:f2:ce:13:b3:35:f1:e4:23:52:a3:
         9a:f7:82:6b:f9:c4:a4:b4:b7:fb:fa:84:cf:b5:36:73:27:22:
         7a:ce:62:b9:2f:67:2b:68:90:9a:b3:9e:3f:bf:fb:53:88:35:
         47:77:de:42:24:11:9e:46:5f:f4:fe:32:37:6d:5d:27:a7:4c:
         7e:0b:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:04 2025 by rpki-client on console.sobornost.net