Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
File:                     CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json)
Hash identifier:          ij/8HtRIX2WTRzLEbm5gSZTWTq/WClS4v7vaa4n98ec=
Subject key identifier:   96:36:1C:71:A8:C7:CA:72:7A:1F:72:BC:9B:51:6B:6B:0D:F8:D1:B3
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       1EF6DB481ECA99E2BD45D37843B546F91C65B089
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
Manifest number:          0203
Signing time:             Thu 24 Apr 2025 20:40:19 +0000
Manifest this update:     Thu 24 Apr 2025 20:35:19 +0000
Manifest next update:     Fri 25 Apr 2025 22:10:19 +0000
Files and hashes:         1: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: U1S0xHXo3Lta3kLKAGVM3vZFdsfcnzf7UIf5pAcmrGM=)
                          2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=)
                          3: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl
                          rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:db:48:1e:ca:99:e2:bd:45:d3:78:43:b5:46:f9:1c:65:b0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: Apr 24 20:35:19 2025 GMT
            Not After : Apr 25 22:10:19 2025 GMT
        Subject: CN=96361C71A8C7CA727A1F72BC9B516B6B0DF8D1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:c0:ea:f0:21:c6:fa:56:de:a7:22:ed:e0:
                    f3:a3:d1:5f:75:a8:3e:22:91:68:f7:6d:b6:b9:4b:
                    3f:d3:b5:53:e7:cd:96:37:94:f3:89:5b:75:c6:2f:
                    6b:d3:f6:6e:16:1f:f8:85:32:4e:33:1a:92:81:90:
                    20:fa:43:f9:a1:d2:c2:30:46:35:88:35:ab:21:20:
                    b5:81:15:72:c6:80:16:71:92:a6:ed:84:4d:d8:99:
                    a7:d0:e8:44:a8:72:e1:36:0d:be:15:cb:dd:d5:d0:
                    05:d9:26:16:65:48:80:a1:5d:d6:38:ce:93:18:17:
                    86:00:ef:3a:1f:a9:f6:23:e5:5c:93:ea:d9:37:01:
                    f2:8d:b4:e4:90:0d:22:23:6e:3d:6d:47:0f:66:d5:
                    e9:33:b7:8f:c8:08:12:ac:7c:8e:e0:f8:d0:03:95:
                    ee:77:ff:53:f2:91:3a:42:da:8f:66:d9:82:b4:34:
                    ff:e4:f8:f1:7d:4a:b9:53:59:88:6c:ca:2b:5c:aa:
                    54:16:49:26:f2:a5:24:0a:44:f4:32:38:89:78:6f:
                    c1:a2:99:de:74:b4:da:76:2d:fb:66:2a:08:0e:d4:
                    f2:43:f4:e7:7c:1b:6a:db:cd:37:b2:0f:46:d4:f6:
                    b1:b0:13:44:38:f2:4e:d3:93:bd:e9:c4:32:9e:5b:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:36:1C:71:A8:C7:CA:72:7A:1F:72:BC:9B:51:6B:6B:0D:F8:D1:B3
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:6d:e2:01:db:ea:7a:ab:a0:38:d5:a9:52:24:1f:81:27:
         38:d2:d0:e7:56:67:3a:31:a7:ad:cf:63:fb:0c:da:44:83:7c:
         52:fd:ff:b2:b7:e2:f2:5d:7e:81:7b:9c:d4:70:70:f4:10:56:
         fa:1d:9d:99:32:c9:09:06:12:95:40:32:59:86:83:ba:a9:06:
         4e:fb:6a:70:1d:e1:36:47:19:27:32:dd:6b:db:58:74:b9:37:
         5c:8f:b4:87:59:a9:b9:21:dd:52:27:65:34:a8:0b:bb:14:17:
         c2:60:08:d2:c4:1e:5c:f8:a7:15:a3:f5:f6:4c:cb:4a:0f:ca:
         81:47:02:7b:81:96:8a:61:9b:ca:65:4a:92:fe:ec:f3:a3:f6:
         f1:ca:01:0e:26:be:3f:96:76:a8:6a:ac:5c:f8:9a:cd:60:be:
         8d:79:22:29:00:47:e2:3b:8d:c8:f3:9f:1b:c5:78:38:9f:7a:
         32:bb:77:44:7f:a4:46:dc:4e:6a:51:25:98:59:5b:5c:64:aa:
         50:24:32:da:ab:a6:1d:6e:38:a1:c4:73:83:69:bb:ff:da:57:
         56:c8:e6:d6:4e:c9:27:f8:b2:00:0d:07:3a:ab:a2:22:21:a3:
         cc:d2:77:5d:ad:18:36:aa:63:74:9c:e7:22:bf:a9:6a:50:31:
         09:4d:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:40 2025 by rpki-client on console.sobornost.net