Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
File:                     B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft (raw, json)
Hash identifier:          kYSiz0CyHI4w/Oj1l5c6bChKL8uZf/vALc0c2O/zliI=
Subject key identifier:   69:F2:59:DC:E5:7F:3C:8E:12:77:D9:C9:D5:4E:49:90:84:C8:E3:75
Authority key identifier: B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7
Certificate issuer:       /CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
Certificate serial:       71472141C29985B81640FE8DFF34FD9727869518
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
Manifest number:          018C
Signing time:             Fri 25 Apr 2025 20:37:02 +0000
Manifest this update:     Fri 25 Apr 2025 20:32:02 +0000
Manifest next update:     Sat 26 Apr 2025 21:00:02 +0000
Files and hashes:         1: 323830343a6466383a3a2f33322d3634203d3e203532353332.roa (hash: nvEKPWbJq/SVuBzG6hfQZ0xuG5+mUQg3/ymLLJfWHj0=)
                          2: B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl (hash: /ISIaMgttrwYmn5PbrFHbayqRxzNFpy/q9lME4Cwr1Y=)
                          3: 34352e3233352e38302e302f32322d3234203d3e203532353332.roa (hash: foeIUS17XFoVbixfQvmK+2W5iqDO+gFCbbmbMYTVhgY=)
                          4: 3137392e3130362e39362e302f32302d3234203d3e203532353332.roa (hash: ugx2F3oEHXbd5JaAhCFE9BHi6v5n7WLPtIhi4rMkHKA=)
                          5: 323830343a3264383a3a2f33322d3634203d3e203532353332.roa (hash: SgWgXagZq6V0+SaGwgpXR/XQPBxlx83Rqc+trBVg3Os=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:47:21:41:c2:99:85:b8:16:40:fe:8d:ff:34:fd:97:27:86:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
        Validity
            Not Before: Apr 25 20:32:02 2025 GMT
            Not After : Apr 26 21:00:02 2025 GMT
        Subject: CN=69F259DCE57F3C8E1277D9C9D54E499084C8E375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:b4:91:78:30:62:a2:f3:a1:f9:b4:43:2d:
                    41:58:bc:4c:94:7f:de:ce:c0:61:f5:23:cc:48:1c:
                    2c:be:31:d4:26:de:9e:9b:5d:6a:cf:c2:35:ff:18:
                    30:e2:f2:ab:ce:3c:81:02:d7:91:47:aa:c8:63:7e:
                    02:ef:1f:c6:86:15:a9:b5:92:ae:95:5a:0d:8c:97:
                    af:6d:fa:2c:92:ba:cf:3c:46:95:f1:2a:32:39:3e:
                    10:eb:77:e7:5a:e2:9f:a5:36:27:9f:46:49:a8:df:
                    21:75:ef:6d:ef:21:3b:6f:02:01:c6:49:04:91:22:
                    28:e8:d0:e8:73:41:53:69:7d:71:0c:ee:c9:b3:15:
                    d4:c1:6e:88:76:8e:a5:c3:59:fb:29:7e:64:12:8d:
                    56:7f:77:aa:36:77:60:ec:3a:78:be:b1:97:52:8c:
                    e0:c1:ae:f7:be:2e:ef:83:e7:85:62:3e:d2:60:52:
                    5f:82:70:5a:e3:0a:6f:c9:bb:33:45:cd:56:c6:a1:
                    df:88:bc:50:51:d3:bd:2f:ee:12:93:4b:c6:39:d5:
                    60:ec:35:a4:80:02:fa:ec:c6:46:51:ff:0c:22:70:
                    42:97:a1:49:d2:6d:08:fd:24:fb:0c:3a:96:2a:12:
                    4d:6e:a3:f7:bb:94:62:ca:51:f9:06:cf:37:01:19:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F2:59:DC:E5:7F:3C:8E:12:77:D9:C9:D5:4E:49:90:84:C8:E3:75
            X509v3 Authority Key Identifier:
                keyid:B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:ab:36:f8:ed:cb:14:f7:1d:d7:3e:e0:1f:79:35:c3:08:
         e0:cd:b7:c1:80:6c:3c:69:8d:ac:ab:52:26:d5:b3:0d:d4:06:
         62:4d:4c:3c:d4:6f:b1:2b:68:a2:4e:8e:d3:df:6a:6d:87:4d:
         74:aa:d9:1a:94:34:a0:11:b2:c5:8a:fb:4d:3a:5d:e4:c9:aa:
         87:3e:60:cc:08:0a:b1:3a:ba:7d:48:71:41:04:06:80:3e:fb:
         2d:48:79:b0:60:ed:50:d2:31:fe:ef:f1:34:2e:c4:6b:b1:c1:
         de:1c:79:7f:f6:e9:5a:91:fb:7d:b0:b5:a2:03:ac:c9:c8:a2:
         fa:37:4f:12:9c:eb:14:b6:a3:66:db:db:81:2c:8c:ac:74:e1:
         6c:6c:dd:8a:b6:71:07:e1:8f:63:31:40:70:a7:9e:b7:f1:35:
         e5:5d:0b:42:0f:27:7a:6c:ca:4d:4f:ba:c3:43:cf:d1:aa:88:
         4b:3b:88:b9:b6:e4:c2:25:f1:f8:b7:d5:96:c7:f7:22:7f:11:
         d9:ab:25:4c:9c:67:6f:d8:3e:af:c6:f6:23:61:62:c9:6a:d7:
         aa:54:27:3b:dd:01:b2:b0:71:d0:89:3a:61:b3:87:a6:04:8d:
         e4:2b:43:42:c0:b9:80:a4:51:d8:50:10:e6:0e:ab:d0:c4:f9:
         13:1f:fe:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:33 2025 by rpki-client on console.sobornost.net