Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
File:                     B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft (raw, json)
Hash identifier:          QtynwpLNwtraRvixL/3ckLSk2uEdDR4AQZL19YqUaPg=
Subject key identifier:   3B:B9:D7:68:96:54:8E:B3:DB:4B:A8:40:25:D9:4A:0C:1E:5A:47:56
Authority key identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3
Certificate issuer:       /CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
Certificate serial:       1B5F1AA353AE1B8601E665F509EC24A1829FC1CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
Manifest number:          09
Signing time:             Thu 24 Apr 2025 23:57:13 +0000
Manifest this update:     Thu 24 Apr 2025 23:52:13 +0000
Manifest next update:     Sat 26 Apr 2025 01:57:13 +0000
Files and hashes:         1: 34352e3138392e3136302e302f32342d3234203d3e20323639373034.roa (hash: weslLpKCnWw17Cm6g5Hf4oviGTXo4PkEDz427n43SOk=)
                          2: 323830343a363839633a3a2f33322d3332203d3e20323639373034.roa (hash: 2b9CDGdKdAYLs/t5BJl3KHK1ion7nN6OYSsGe5/e6ZU=)
                          3: B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl (hash: D0uok6nNTv3gPcM3Vg8HpTekaAqSIzClcQkGTCakDkc=)
                          4: 34352e3138392e3136322e302f32342d3234203d3e20323639373034.roa (hash: dRGHASJ6dGRQuW3Y7uaAKlVA50IwlwxeHKZAlPiHVOo=)
                          5: 34352e3138392e3136332e302f32342d3234203d3e20323639373034.roa (hash: XvKHwTucpL6V1vqjhjUuSGKACFLp8zP1w8iCVngUczg=)
                          6: 34352e3138392e3136312e302f32342d3234203d3e20323639373034.roa (hash: 5sG3xJ4Bp0lVsjyuK0W2RpF7oX7vhBn7ZvQdgE5I9Wc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:1a:a3:53:ae:1b:86:01:e6:65:f5:09:ec:24:a1:82:9f:c1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3
        Validity
            Not Before: Apr 24 23:52:13 2025 GMT
            Not After : Apr 26 01:57:13 2025 GMT
        Subject: CN=3BB9D76896548EB3DB4BA84025D94A0C1E5A4756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:e7:84:bb:35:c4:c2:d6:14:b2:74:62:03:
                    fc:c5:8f:49:36:99:ea:c8:19:5a:54:6d:1e:dd:87:
                    a8:07:f7:88:8e:b3:90:ce:ee:3e:6e:d7:3d:58:59:
                    eb:56:ef:33:04:f2:42:32:0f:27:e6:14:69:35:9d:
                    55:3c:1f:9f:69:ad:ce:a1:52:e3:e9:be:74:e2:91:
                    f3:bd:99:7b:6a:59:0f:9d:92:cb:43:e6:7c:50:d7:
                    f1:68:03:cf:cc:24:b8:e5:0a:37:c5:e8:02:45:9e:
                    00:b7:f9:77:54:1f:63:ea:33:f7:eb:34:b7:08:d8:
                    d5:a8:99:66:63:48:0d:9e:20:94:f3:e6:60:ed:31:
                    87:94:bc:a1:e9:52:af:7e:2d:c0:d4:21:e1:f1:b6:
                    c0:6c:b9:3e:9e:13:3f:63:e2:d8:76:00:4c:75:7d:
                    11:6a:6d:d2:a6:96:6c:be:24:cc:2d:1f:0e:84:94:
                    9f:20:21:e9:82:2f:16:50:9a:8d:de:ef:27:14:b4:
                    b0:55:48:5a:3b:0b:36:f7:cd:b1:38:ef:1e:8b:e7:
                    ca:4d:98:48:58:f9:b9:92:d2:dd:bb:e3:ce:a5:3c:
                    9c:4d:e7:4a:b0:ba:00:df:02:d9:e6:63:1d:a1:27:
                    95:df:cd:34:c0:86:31:29:c6:2d:19:14:01:2c:6c:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:D7:68:96:54:8E:B3:DB:4B:A8:40:25:D9:4A:0C:1E:5A:47:56
            X509v3 Authority Key Identifier:
                keyid:B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:aa:e9:8e:43:93:0e:a2:76:29:30:0d:12:6f:79:76:19:ec:
         a5:54:a7:64:90:00:eb:b0:a3:ae:b2:74:a5:8b:28:9d:aa:9b:
         48:ba:8e:bf:58:f6:f7:f7:37:05:e6:ed:b5:20:37:45:0d:c4:
         02:84:5f:e9:34:d6:03:89:bd:dd:e7:e1:5a:40:31:c3:8b:84:
         69:f8:69:e7:da:5e:a8:aa:36:94:66:81:a1:15:2b:03:11:7b:
         41:61:07:81:ea:09:bf:e1:f7:55:23:11:34:08:cf:14:40:2f:
         fe:62:41:9c:83:d1:bd:90:c9:b2:56:63:47:fd:3f:f7:aa:bf:
         d7:e9:68:6a:9d:7f:9d:32:7f:40:ce:fd:30:e4:8d:a2:5e:7e:
         ab:48:84:32:b6:fa:15:5f:e3:14:d3:e0:e2:b9:82:df:1e:29:
         75:6d:51:7f:85:56:eb:56:23:fb:16:45:24:37:10:d4:f3:d5:
         f0:83:8b:ee:31:11:31:c0:ca:72:ef:32:5e:42:55:e5:52:e6:
         69:7b:02:b1:07:eb:8e:68:d2:79:d7:47:05:31:f4:45:83:ad:
         75:f4:ed:91:0c:9a:d7:a6:1c:a6:60:52:5e:0c:7a:42:1b:fa:
         4b:ec:d6:0f:ec:b6:b5:08:df:60:1a:e8:f8:aa:a8:e7:62:d2:
         21:5b:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net