Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
File:                     CBB8A038671DF77F8F9579424916B82CCF45F66A.mft (raw, json)
Hash identifier:          aLomP7reY6hrzpi0b5aD+T9XgcK0WtAQnzC8VE8iYWQ=
Subject key identifier:   5C:9C:AE:95:08:9D:81:57:24:4B:42:2B:44:C8:43:4C:15:63:99:FE
Authority key identifier: CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A
Certificate issuer:       /CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
Certificate serial:       3B65671F844535FD1907B4E749C236E99E1095CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
Manifest number:          01BA
Signing time:             Thu 24 Apr 2025 19:31:36 +0000
Manifest this update:     Thu 24 Apr 2025 19:26:36 +0000
Manifest next update:     Fri 25 Apr 2025 20:16:36 +0000
Files and hashes:         1: CBB8A038671DF77F8F9579424916B82CCF45F66A.crl (hash: csTQXC7qVK3fCZWp6Ob/a5gHL6b2+2CfFPCqE+I/OGE=)
                          2: 323830343a323664633a3a2f33322d3438203d3e20323633383631.roa (hash: YEtwDiRrHGxh30QKAkY7vTgW/uKrAbQFlKcTmg/GvvA=)
                          3: 3133382e3138362e32342e302f32322d3234203d3e20323633383631.roa (hash: ulyarJcPLCoJKmhfI5sU6iMdxgSKZKJLk7GS7grmJIM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl
                          rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:65:67:1f:84:45:35:fd:19:07:b4:e7:49:c2:36:e9:9e:10:95:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBB8A038671DF77F8F9579424916B82CCF45F66A
        Validity
            Not Before: Apr 24 19:26:36 2025 GMT
            Not After : Apr 25 20:16:36 2025 GMT
        Subject: CN=5C9CAE95089D8157244B422B44C8434C156399FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:d9:d8:d5:ef:bd:ce:14:ef:28:43:bb:47:
                    f0:70:6b:c8:5e:d8:05:ac:ef:ae:7f:38:92:a2:7a:
                    82:42:cb:83:f9:e1:5e:09:bd:a5:11:61:ac:b1:8f:
                    42:02:dc:fe:4a:11:1f:f1:45:a3:25:36:bf:06:42:
                    52:cb:3f:19:14:d7:2b:d7:f0:d7:5f:aa:32:b1:6a:
                    38:37:72:71:1a:bf:e2:4e:6d:eb:b6:54:5b:a3:95:
                    c5:33:6f:fd:b2:79:f7:41:fb:12:ab:f4:bf:fa:24:
                    44:72:fd:09:2a:0f:43:cb:56:d3:bb:c8:51:08:ee:
                    26:3e:bb:b6:fa:bd:52:50:29:55:c0:8a:2f:1d:d7:
                    c9:a2:3d:84:e5:7e:d0:dd:9d:49:48:67:bb:c8:ce:
                    ba:29:d7:4f:d8:37:1a:89:9b:ba:f6:28:80:1a:07:
                    66:a5:c7:a4:c3:8f:f9:ee:c4:ce:38:3b:86:eb:75:
                    78:89:ba:82:70:ac:79:d2:ed:23:9d:bc:bf:13:43:
                    4a:c4:4e:e1:da:33:bf:e8:26:e3:27:09:b4:f2:a5:
                    51:50:c9:3e:93:4b:5a:5d:99:e0:c2:70:42:e2:7f:
                    c5:dc:36:26:a6:b2:4a:e7:22:ad:06:5d:63:99:70:
                    df:97:0a:77:fd:2e:63:d7:42:64:53:46:88:92:72:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9C:AE:95:08:9D:81:57:24:4B:42:2B:44:C8:43:4C:15:63:99:FE
            X509v3 Authority Key Identifier:
                keyid:CB:B8:A0:38:67:1D:F7:7F:8F:95:79:42:49:16:B8:2C:CF:45:F6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBB8A038671DF77F8F9579424916B82CCF45F66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RpH1TCJErLi2F5agNLtBKFihJKgKrjdcBsHvqTKk5Do/0/CBB8A038671DF77F8F9579424916B82CCF45F66A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:f5:52:29:92:e0:e6:f9:17:a7:20:d4:e9:36:73:9e:c8:
         07:eb:7c:ad:b9:cc:a0:07:1d:fe:41:0b:ea:0a:75:3c:e6:f7:
         4e:df:22:96:69:6d:f9:37:e5:5d:93:4f:88:d5:96:81:5e:f5:
         2c:f8:f5:31:25:03:d7:8b:e9:ff:7a:73:cb:f4:0d:29:a1:8b:
         a1:f1:96:d8:be:37:03:3b:4c:b0:44:47:b7:f2:5b:94:89:17:
         6a:f0:20:f6:72:0f:41:b0:fa:74:bd:0c:21:5d:42:3f:1e:67:
         b1:c4:e7:58:0d:df:af:e9:ee:e2:8f:97:b0:b4:4f:20:71:37:
         3f:47:6e:65:8a:9d:d6:d7:48:c8:0a:68:f8:e0:8a:32:62:07:
         cf:3d:f8:fe:64:39:3f:74:8f:fe:8a:04:82:43:13:ce:ce:9f:
         b8:82:09:fc:6c:59:93:f2:7e:b3:90:1a:78:51:6c:d3:12:8b:
         f3:ad:49:85:43:02:d4:a2:8c:4e:1c:ee:98:f4:0b:86:e1:f3:
         20:45:dc:d0:40:95:79:cb:b4:fe:57:d2:e6:8c:e4:17:b3:e1:
         d6:6a:a9:e3:05:43:a7:20:d7:5b:ab:68:88:47:e6:8b:23:80:
         7e:57:1e:99:ee:d9:67:0e:e5:70:44:1a:87:3b:e4:87:80:ab:
         6d:45:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:40 2025 by rpki-client on console.sobornost.net