Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft
File:                     4766F3CA43125EDED2BA274155576386D9101EDC.mft (raw, json)
Hash identifier:          DXq8+N58IEPB/0sqoN7MU4SHOoILCu/pRxiB1MtChVY=
Subject key identifier:   4A:36:57:01:3E:C7:7A:C5:D8:E9:79:0E:22:A7:47:AD:E8:C8:73:79
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Certificate issuer:       /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial:       37E6EE8309905974F77FF9095686747DAF69F64F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft
Manifest number:          75
Signing time:             Sun 27 Apr 2025 17:26:36 +0000
Manifest this update:     Sun 27 Apr 2025 17:21:36 +0000
Manifest next update:     Mon 28 Apr 2025 20:45:36 +0000
Files and hashes:         1: 34352e37312e38302e302f32322d3234203d3e20323634353235.roa (hash: WzBRHjXq6dJ94scyJGlUwS6f7NoyD1wIwkHLjGIZWEw=)
                          2: 323830343a323066633a3a2f33322d3438203d3e20323634353235.roa (hash: u8bA8o/+fLdK2R65qXMmeq/8v+VxzaXmGkUnNOOemQk=)
                          3: 3133382e302e35322e302f32322d3234203d3e20323634353235.roa (hash: 7g3t6cU4fUzYFakPW1n1q7khgxUBbdF7ot42h14uq9M=)
                          4: 3132382e3230312e3230382e302f32322d3234203d3e20323634353235.roa (hash: Dznk/aDtjd/Xne0TnK3n8HXhpd9hXlGWAzldkVkKyGM=)
                          5: 4766F3CA43125EDED2BA274155576386D9101EDC.crl (hash: EEj/3V7LxZ2h5OqfgMleym0GQHe+fnfPdhdeZk3lbOE=)
                          6: 3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa (hash: Z4M9dsaXUobkZJ7IBfV23sKv1hFv40dFs8MA1zGAsbU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e6:ee:83:09:90:59:74:f7:7f:f9:09:56:86:74:7d:af:69:f6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
        Validity
            Not Before: Apr 27 17:21:36 2025 GMT
            Not After : Apr 28 20:45:36 2025 GMT
        Subject: CN=4A3657013EC77AC5D8E9790E22A747ADE8C87379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:7d:cd:86:8c:89:e0:ce:e5:da:c1:42:3b:
                    16:ec:ec:b6:82:16:a6:1c:fe:1f:b6:bd:2c:d4:ea:
                    77:e4:4f:0c:43:75:0b:a4:95:3f:db:fb:7a:19:02:
                    bf:17:10:fd:22:43:fb:51:9d:3b:72:2a:e6:bf:ee:
                    c7:06:b7:6b:fc:c4:0d:04:79:19:ad:59:02:a7:d1:
                    bd:cb:7f:19:57:dd:95:6d:f5:bc:7e:85:a6:ff:eb:
                    24:aa:04:81:e2:a4:12:d2:99:2a:b2:ff:b8:e0:a4:
                    1d:58:12:65:ef:61:7a:9b:b8:e3:6e:14:0b:d8:4a:
                    6c:1c:df:19:09:bd:d6:a1:55:0c:55:06:2d:49:a3:
                    5a:a2:2a:30:16:59:c4:79:77:56:f0:26:92:5a:6e:
                    7d:26:f3:b4:53:81:af:6e:fe:94:40:56:b7:4d:69:
                    23:ca:d3:7f:b3:96:46:e2:f3:f2:7e:b9:95:e0:f3:
                    5d:e6:eb:8f:d1:b6:6b:dc:08:29:c8:5e:ed:ac:f5:
                    5b:2f:cf:c9:b5:80:9b:e8:11:c7:cd:72:43:1c:fe:
                    20:dc:9d:3f:bb:f3:90:3f:53:10:95:cd:85:59:7b:
                    16:ab:59:b1:4b:00:9b:4c:f1:fb:36:1a:31:03:03:
                    08:4c:2d:7c:fa:16:af:a0:16:f8:03:5c:85:cb:c3:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:57:01:3E:C7:7A:C5:D8:E9:79:0E:22:A7:47:AD:E8:C8:73:79
            X509v3 Authority Key Identifier:
                keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:82:ad:8f:59:f0:66:72:a5:d6:ab:82:97:91:65:45:46:b7:
         2d:6e:1d:af:66:2e:89:47:41:09:f3:23:94:01:e6:96:f8:8c:
         5d:f6:76:d2:96:a1:31:08:b2:18:94:c8:5f:37:85:86:f4:75:
         81:75:d4:47:53:a8:33:8c:1b:cf:16:c6:55:fe:83:40:56:4c:
         ee:b8:b2:9b:04:59:d8:9f:8f:2d:ea:d9:17:20:41:24:1c:48:
         68:73:11:0b:5c:23:57:fe:90:e3:71:de:ea:32:37:eb:4e:4d:
         39:c2:2f:1a:f6:71:31:89:3e:d6:f9:e2:35:b4:d9:ba:a0:62:
         a7:6a:8a:3d:b5:ec:8f:94:ab:8b:cf:44:fc:03:c2:ed:e4:4c:
         0f:52:23:ee:ce:be:e4:99:d2:74:f5:88:b5:5e:cc:50:4c:d7:
         ec:78:1b:fe:8f:f3:d5:48:e9:f6:67:5a:5e:a2:15:f5:66:f4:
         00:f0:b3:76:b9:3c:25:5f:63:35:ea:d6:de:49:7c:e6:c9:b4:
         41:be:89:2c:89:63:2b:19:64:7d:9e:41:90:d0:28:49:6a:73:
         5d:6e:f9:54:55:5f:0d:17:68:37:2a:02:18:18:12:9c:7a:76:
         47:5d:01:ee:72:65:42:ef:2e:c0:e0:b8:8c:e1:09:01:0e:17:
         00:66:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:05 2025 by rpki-client on console.sobornost.net