Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
File:                     411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft (raw, json)
Hash identifier:          H1GIbNZ0Da4IAT6+H2mEnVZENYP9yLJQXVW4busRBQ4=
Subject key identifier:   C3:41:5E:F8:34:E7:6C:8D:E7:0E:88:AB:C5:54:65:63:19:C3:EE:EB
Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B
Certificate issuer:       /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
Certificate serial:       0CEFD7E6CC0EAF43B97CE2A9D4D069BA606A3499
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
Manifest number:          1D
Signing time:             Thu 24 Apr 2025 22:30:00 +0000
Manifest this update:     Thu 24 Apr 2025 22:25:00 +0000
Manifest next update:     Fri 25 Apr 2025 22:30:00 +0000
Files and hashes:         1: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: /LHvi05kCt9zKgKY+WIZNYGkbzjxuWi5IXygDqTTTek=)
                          2: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=)
                          3: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl (hash: beBHy/+Q9ZckczsomYMRobNNbQiIZjBQKlLQS4U01rs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:d7:e6:cc:0e:af:43:b9:7c:e2:a9:d4:d0:69:ba:60:6a:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
        Validity
            Not Before: Apr 24 22:25:00 2025 GMT
            Not After : Apr 25 22:30:00 2025 GMT
        Subject: CN=3082010A0282010100C06793DDCDA7576158DF2190C79998F00D4E09AF286B9B085BE64734B62AD78F5109690C85D9827EC6ED3AD9ED272862416B3FD5ACCA609D1FB13D1E9B744C335EF4AC401507CE3502B461E270AD40F27D1A3329AFE5C8E2238BC41D067A29E68DD07B02342944C872C2807024F2E6BC81A8B86B0D7C8E81439F79F4EF3C964ABAEC1940716063A9BA01A5A4B434D8E0EA608E9B29AE8F81C445FE0B00150A3C740A85B1DEF8921DD767E61D5D7429DCC11B7C7631EDBEA931AF1B930728EA6E48FEAE02228AF363B108C4C0C48EA9415E5ADEBEBE00F9A728E120006674DED42C9DF2C955B5D6FCA1A39581DA1218E7AE7A39FCBDC2A28F915AFFC2E63DA5250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:93:dd:cd:a7:57:61:58:df:21:90:c7:99:
                    98:f0:0d:4e:09:af:28:6b:9b:08:5b:e6:47:34:b6:
                    2a:d7:8f:51:09:69:0c:85:d9:82:7e:c6:ed:3a:d9:
                    ed:27:28:62:41:6b:3f:d5:ac:ca:60:9d:1f:b1:3d:
                    1e:9b:74:4c:33:5e:f4:ac:40:15:07:ce:35:02:b4:
                    61:e2:70:ad:40:f2:7d:1a:33:29:af:e5:c8:e2:23:
                    8b:c4:1d:06:7a:29:e6:8d:d0:7b:02:34:29:44:c8:
                    72:c2:80:70:24:f2:e6:bc:81:a8:b8:6b:0d:7c:8e:
                    81:43:9f:79:f4:ef:3c:96:4a:ba:ec:19:40:71:60:
                    63:a9:ba:01:a5:a4:b4:34:d8:e0:ea:60:8e:9b:29:
                    ae:8f:81:c4:45:fe:0b:00:15:0a:3c:74:0a:85:b1:
                    de:f8:92:1d:d7:67:e6:1d:5d:74:29:dc:c1:1b:7c:
                    76:31:ed:be:a9:31:af:1b:93:07:28:ea:6e:48:fe:
                    ae:02:22:8a:f3:63:b1:08:c4:c0:c4:8e:a9:41:5e:
                    5a:de:be:be:00:f9:a7:28:e1:20:00:66:74:de:d4:
                    2c:9d:f2:c9:55:b5:d6:fc:a1:a3:95:81:da:12:18:
                    e7:ae:7a:39:fc:bd:c2:a2:8f:91:5a:ff:c2:e6:3d:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:41:5E:F8:34:E7:6C:8D:E7:0E:88:AB:C5:54:65:63:19:C3:EE:EB
            X509v3 Authority Key Identifier:
                keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:90:28:52:2e:b4:12:38:c3:b8:39:7f:b9:63:00:41:e0:
         4e:02:22:f6:5e:2f:d7:76:3d:b1:fc:57:c8:74:16:b2:d1:8c:
         d6:81:d6:b6:57:72:c1:52:31:b5:5c:d6:4b:b8:5a:8b:ba:09:
         27:29:1c:e7:0b:a4:47:5d:96:43:99:fb:27:6e:84:e1:e2:0c:
         d5:b6:f6:92:fb:64:fa:9c:21:b5:4f:80:cb:a4:d9:93:5f:63:
         2a:b3:1f:7b:cb:e6:49:c6:cd:d4:15:09:84:6e:a5:46:6b:0f:
         d7:8e:12:77:87:d0:36:b5:04:62:90:5f:74:4e:39:d2:ce:2d:
         a7:84:13:2d:8f:81:66:07:b8:b7:6c:41:c6:6a:c0:ac:ec:09:
         a4:ec:5d:4b:3f:f2:7a:40:d0:42:5d:b2:06:bb:8d:89:cb:8b:
         6a:a9:9e:7e:1a:db:27:18:aa:fc:99:cc:51:7d:3e:80:64:ea:
         ca:4d:9d:d3:53:71:12:c9:40:78:28:0a:90:e3:26:9e:a2:e3:
         90:e7:79:e1:75:ce:0d:c7:a2:14:50:b0:e6:15:cb:47:6b:47:
         6d:c0:10:38:7e:2d:7d:7e:d7:36:55:8a:5b:b6:31:cd:93:41:
         c2:24:fa:0c:00:67:07:99:e7:ed:6e:b6:07:2c:44:b7:af:57:
         21:74:13:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net