Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          XRtdykKGhfUv8pcVqarypdET5gYtrJJpjfSx7LtGfEI=
Subject key identifier:   15:31:8B:68:0A:34:6F:1D:18:CF:A6:9B:72:1B:8D:3E:64:C1:B1:D9
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       4D61A5E323196D393610AE53EA6C0E1C4FB15060
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          0205
Signing time:             Fri 25 Apr 2025 07:53:58 +0000
Manifest this update:     Fri 25 Apr 2025 07:48:58 +0000
Manifest next update:     Sat 26 Apr 2025 11:10:58 +0000
Files and hashes:         1: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          2: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
                          3: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          4: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          5: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          6: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          7: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          8: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          9: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          10: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          11: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: mlHlhseK1l44xFHSr1rD+BV67foD3EEPqMpsKpyUf4E=)
                          12: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          13: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          14: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:61:a5:e3:23:19:6d:39:36:10:ae:53:ea:6c:0e:1c:4f:b1:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr 25 07:48:58 2025 GMT
            Not After : Apr 26 11:10:58 2025 GMT
        Subject: CN=15318B680A346F1D18CFA69B721B8D3E64C1B1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:e4:4e:7a:77:c2:42:7d:d0:5f:45:8d:f8:
                    fd:c3:16:d5:42:e3:f9:d8:31:f6:c2:e5:ac:b2:1d:
                    a2:f4:a8:f9:16:fa:14:84:25:2f:c8:09:c9:ae:fa:
                    38:e9:9d:f4:30:93:99:6f:50:27:cc:5b:ce:b0:06:
                    a6:28:43:85:5e:36:6f:b6:19:78:f8:f2:c2:7c:a0:
                    ef:83:48:94:ec:63:20:7c:c2:a1:e3:ab:8d:ee:2e:
                    b8:50:0b:5f:4c:cd:25:cb:1c:9e:e8:fb:35:67:b9:
                    63:5a:52:8a:69:a9:7f:79:b2:63:3e:87:f9:14:b4:
                    10:fa:39:3d:55:77:2e:00:c8:5c:93:c1:a7:c3:0d:
                    06:3b:83:b1:d8:b1:92:3a:74:ad:77:55:9f:4c:99:
                    4d:98:59:dc:ad:39:73:c2:83:ba:22:25:81:85:5c:
                    03:eb:04:3a:06:e9:92:55:59:f0:e4:f6:0c:de:1c:
                    90:71:fa:02:d6:42:c0:48:37:86:99:c5:8f:1b:26:
                    c5:b1:21:21:9c:41:4e:34:fc:fd:5d:da:ae:3d:28:
                    32:e1:68:44:e1:20:9b:e4:7d:f6:d5:09:42:21:70:
                    4e:7e:57:23:5c:7f:fd:29:f0:10:57:c6:cb:39:97:
                    bb:3e:90:68:b4:27:53:cd:7c:6c:d8:2e:d4:cc:9b:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:8B:68:0A:34:6F:1D:18:CF:A6:9B:72:1B:8D:3E:64:C1:B1:D9
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:21:6d:be:e5:e5:5f:b1:ab:32:d2:a0:34:2c:ed:b8:8a:
         82:d3:9f:7d:43:64:a7:fa:6b:01:c2:d7:71:73:2c:f7:8b:0f:
         3d:8a:04:d2:ba:32:da:a2:0c:7e:a1:d6:07:31:46:9a:6c:e4:
         d0:20:de:ab:44:7b:be:06:f4:6c:82:71:65:bd:65:7b:b7:42:
         d3:15:67:3c:e3:7a:c6:4e:b9:5f:21:eb:4f:5a:a4:9d:e6:aa:
         16:14:61:99:72:1c:73:d8:53:5e:5b:76:76:bf:be:54:23:83:
         23:33:02:7e:6d:5b:b4:b5:e1:c2:2a:b7:ed:99:f1:f5:67:e9:
         1f:51:ec:f2:07:20:d7:bb:a2:6e:b1:68:8b:17:7d:b9:c5:2b:
         6b:e8:38:2c:ea:d9:ee:d7:e3:92:32:d2:8c:ff:5d:7a:fd:57:
         df:fc:fa:52:ff:d3:44:42:10:f4:0d:f4:ea:4f:49:f4:44:9e:
         c1:67:81:96:14:90:dc:48:ac:85:9e:c3:8e:58:65:d1:e7:34:
         b8:97:dd:10:49:b3:81:07:7b:f6:82:99:b8:e6:0e:45:d1:08:
         72:8b:60:06:e5:68:35:52:a6:b6:20:ad:82:37:af:0c:79:6e:
         77:76:c0:ab:0a:f0:95:a9:5e:9a:31:06:04:47:3f:3b:46:42:
         8b:35:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:58 2025 by rpki-client on console.sobornost.net