Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
File:                     DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json)
Hash identifier:          e2p1mtHrmAiFTVxnHxFbjcHzWhQP0sJEJGbZZthYsmM=
Subject key identifier:   74:EF:B1:AF:B2:AD:8D:B3:50:7F:A2:1F:C5:A7:1D:6C:B8:11:E9:C8
Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0
Certificate issuer:       /CN=DD0CBBA83E82BACB16521E6328443385F92099E0
Certificate serial:       250E4EFB7E0E9491F9BEB6A2379893BDFBD3F9BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
Manifest number:          63
Signing time:             Mon 28 Apr 2025 15:35:41 +0000
Manifest this update:     Mon 28 Apr 2025 15:30:40 +0000
Manifest next update:     Tue 29 Apr 2025 19:23:40 +0000
Files and hashes:         1: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: Ca1pmAXz0FFwQDKx4al/0Enxv3kwvor9qxc1ErXA0kU=)
                          2: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: FpGnvpbvUN4wSxkyARUpugSeNEsfQPQdp6+kknhJvXk=)
                          3: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl
                          rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:4e:fb:7e:0e:94:91:f9:be:b6:a2:37:98:93:bd:fb:d3:f9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0
        Validity
            Not Before: Apr 28 15:30:40 2025 GMT
            Not After : Apr 29 19:23:40 2025 GMT
        Subject: CN=74EFB1AFB2AD8DB3507FA21FC5A71D6CB811E9C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:72:34:bb:c5:93:35:1d:4f:37:07:e5:5a:
                    03:6a:2e:c3:31:5b:56:1e:38:ae:fb:92:78:c5:1d:
                    83:4c:73:4d:9e:39:ba:5f:59:1e:0f:52:3c:b8:c9:
                    44:97:1f:2a:9a:fc:80:b0:d3:65:5a:9b:43:83:4b:
                    9f:6e:36:16:af:68:11:d6:de:c8:31:95:b6:43:1a:
                    2c:13:8d:d3:27:dc:13:41:a9:86:3c:57:a6:51:26:
                    a0:cf:22:cc:c4:40:75:9f:fe:f4:e2:c7:10:ba:81:
                    2d:49:35:34:9c:09:30:d5:f2:74:a7:a4:e5:b7:82:
                    93:3e:57:f8:37:4a:62:b4:f8:b0:16:29:cd:55:ce:
                    55:61:60:de:ef:b3:b9:3f:bf:39:c7:4a:c9:6e:ff:
                    55:59:bb:09:bc:b5:71:fd:cf:a8:92:f6:e3:83:7e:
                    eb:bf:3e:0b:30:9b:a5:f1:39:1f:fd:fb:46:3d:b4:
                    d9:16:a3:5a:a8:01:a2:91:83:d0:00:b1:66:cf:dc:
                    bc:7b:90:1a:e6:d9:c0:6e:fe:b9:ad:d6:d2:6d:a2:
                    98:d1:79:a9:44:1d:05:4e:0f:27:9f:5f:f8:4f:47:
                    0c:7a:c2:f3:10:03:c7:50:9f:9b:cc:8b:ee:92:ad:
                    53:16:42:b0:ce:dd:bc:2b:30:58:64:53:1b:28:a7:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:B1:AF:B2:AD:8D:B3:50:7F:A2:1F:C5:A7:1D:6C:B8:11:E9:C8
            X509v3 Authority Key Identifier:
                keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:32:e1:13:17:cf:8b:3d:f8:d8:74:84:5b:d5:4c:74:76:
         ea:79:87:01:dc:f7:96:66:39:3e:26:bb:3c:88:a0:ef:9b:1f:
         ce:e9:1c:ef:f4:36:17:1f:f5:5d:3f:b5:2f:bb:50:ab:4c:1c:
         ff:1f:4e:be:21:dc:7a:fb:31:c6:e5:f6:f3:8a:c9:4b:df:3c:
         da:db:2e:e8:13:5c:1c:5f:d8:d6:4c:cf:a8:42:69:25:85:93:
         a2:e4:62:f8:97:43:77:7b:62:2b:d8:13:01:81:ea:22:b7:d4:
         91:bd:53:4e:fe:d9:71:dc:d4:c6:ee:e0:80:c9:ec:2a:ec:e4:
         00:f5:ea:61:0c:a7:6d:f0:cf:cd:20:67:66:7a:32:9f:3d:c1:
         5f:98:b7:26:b6:41:4a:73:81:f0:a2:6c:65:c0:94:3e:57:79:
         bd:84:ac:fa:b5:37:64:c5:cb:30:b4:b4:1a:3b:2f:7c:fd:8c:
         a9:53:07:84:89:f9:ed:fa:40:c4:79:db:b1:ac:a4:2d:65:4c:
         f4:5e:e8:c1:e6:11:d6:d1:e1:f8:4f:22:d7:7b:87:fc:6b:00:
         ce:de:7b:ca:ba:a3:80:4c:f5:2d:b8:b5:e6:3f:c0:57:db:f1:
         d6:67:cd:e1:f5:7c:f3:76:16:bd:9d:c7:b2:7d:fe:60:83:39:
         a3:f6:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:53 2025 by rpki-client on console.sobornost.net