Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
File:                     3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft (raw, json)
Hash identifier:          t1AiuG3eq8swUeElMRGnwgeAkrkwDHzrFEl3HVzJQTA=
Subject key identifier:   22:E0:0E:22:32:A9:59:6E:97:5D:8D:0F:E7:E4:A0:FA:4A:14:C1:7F
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Certificate issuer:       /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial:       23197EFB4DA6AF5077C4C1AD791C43B37B3EB7D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
Manifest number:          3C
Signing time:             Sun 27 Apr 2025 04:58:46 +0000
Manifest this update:     Sun 27 Apr 2025 04:53:46 +0000
Manifest next update:     Mon 28 Apr 2025 07:14:46 +0000
Files and hashes:         1: 323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (hash: cTXjoWSfv/mYljyRDu+kfqYiECzj1oZALrx4yxpYaA8=)
                          2: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (hash: M2OHNyHYafPHAeIhRu2d+ofzCgbs7HAWooObGlHNvis=)
                          3: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: hVjcZbi623bMo0BdTaxfx7PE+EgC1vYkTQqhvJwGKk4=)
                          4: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: Aj3U16+Rd2zAeI2BhmHJKoxqJLMes1zRvBI21FM9tL8=)
                          5: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: jxcT7UQCB25cOhI7bfbqMPMJ8mZBKfS+t1689GTxsI0=)
                          6: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (hash: cyMTuiLBnYMIlubxvHXL7Vr8yEnBsmrqucpDLPPN238=)
                          7: 323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (hash: jOkZkNvbEv8eWb+e9TXqmtND57CKQOnJY5Jl5it39/M=)
                          8: 3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl (hash: CQWbtbdZCga8DF6XAwSbGgKL4tdSVTUbtLe6Y35zmm8=)
                          9: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: kxdMBUt5jpp/DhkqO9p5Eucys82Y+hZDMce1OQ/LR1Y=)
                          10: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (hash: EBQvGiWf4eXBbMgvN+X3Q6vosdWQTHhJgbaV9HvFUI4=)
                          11: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: yxMic9K3C5dEfbizwmsYeriIVa7OpMEITqz4cvpWt68=)
                          12: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (hash: aQuzLEeWFxfp36SqhKnPWN0pPXjsiYDj1Ey8BwUF9RA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:7e:fb:4d:a6:af:50:77:c4:c1:ad:79:1c:43:b3:7b:3e:b7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Validity
            Not Before: Apr 27 04:53:46 2025 GMT
            Not After : Apr 28 07:14:46 2025 GMT
        Subject: CN=22E00E2232A9596E975D8D0FE7E4A0FA4A14C17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:c9:61:a2:7f:c0:8d:01:9c:42:08:53:10:
                    8d:41:c9:af:ae:0d:e6:11:4e:0e:c9:38:41:1e:e9:
                    59:cc:1c:22:ce:91:c8:7c:17:da:63:86:cd:3f:c0:
                    c9:65:5d:02:64:b7:ca:09:fd:3a:67:33:45:5f:3d:
                    6c:e7:b4:95:8e:c3:78:43:8f:69:39:84:c1:88:40:
                    47:cb:48:2f:4f:da:e9:49:bb:3c:15:15:5c:6c:56:
                    ca:55:a9:d9:69:74:81:fd:52:84:45:e0:2d:bc:d4:
                    eb:93:8f:db:04:95:6d:6e:06:eb:fd:b0:81:d6:7f:
                    db:ae:ad:cf:6b:4c:4a:fa:27:ea:1c:c4:81:aa:a2:
                    ad:34:7f:4f:07:df:be:8a:65:77:bf:e8:01:b5:1a:
                    db:70:c8:db:5f:46:d1:f8:7e:49:0b:cc:27:70:b3:
                    64:e5:cb:86:ee:d9:69:5e:24:e1:bd:43:90:08:2a:
                    26:28:1d:df:ce:57:13:15:7a:71:b8:fe:ff:2b:b9:
                    8a:cc:03:c8:f0:e7:d3:94:ae:45:4a:05:15:44:5e:
                    8f:15:42:33:fe:48:23:01:80:1c:49:50:05:fe:6b:
                    94:cf:1a:30:bb:26:2e:0e:34:0c:10:15:60:e0:ab:
                    fd:af:07:43:c2:51:81:93:02:f3:1c:7d:ce:42:6a:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E0:0E:22:32:A9:59:6E:97:5D:8D:0F:E7:E4:A0:FA:4A:14:C1:7F
            X509v3 Authority Key Identifier:
                keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:21:f0:f5:b9:b0:11:b1:22:f8:ef:86:75:f0:36:eb:ae:
         62:7e:69:65:3a:34:64:6f:c2:d4:07:e0:c0:0d:49:5b:c7:d4:
         82:e2:82:e0:da:79:81:09:72:8b:20:fb:b9:98:d9:15:b9:04:
         ee:6b:cc:84:88:7f:13:96:67:ef:12:93:da:d8:d8:ba:78:13:
         91:de:52:a1:ef:b7:87:3d:0f:a4:2c:3e:26:ed:ff:46:b8:4f:
         a6:bc:a4:54:d7:e3:36:24:9b:76:39:e1:c7:d5:bc:64:ba:bf:
         75:8a:b1:06:bc:a8:65:f8:22:66:b5:c6:ec:03:3a:04:e4:63:
         6a:57:68:05:f3:39:d5:ac:47:5b:dd:a1:bc:2c:6f:38:a2:5c:
         ab:f5:79:56:90:2f:3b:f9:0f:e6:92:2f:56:fb:12:ba:97:a2:
         38:cb:94:f6:68:e2:bb:ae:2c:d6:ac:9d:e7:0d:c0:05:a2:0d:
         3e:de:78:12:7b:3f:c5:a0:68:b7:5f:aa:4b:8f:c0:68:45:da:
         7e:6f:0c:91:31:76:3a:a6:a4:1f:8e:d7:70:86:8e:f6:85:2b:
         e5:ef:8f:d2:1c:25:54:46:59:6f:7d:1b:9b:9a:40:a4:c7:46:
         79:5e:a6:60:ec:7b:38:21:9d:37:e2:1b:bd:f6:e8:5e:9c:3e:
         b2:d1:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:02 2025 by rpki-client on console.sobornost.net