Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
File:                     118E5C07438A61E8178F2D60B6311E817D88D0ED.mft (raw, json)
Hash identifier:          unk+VE6wQaPJlCgcZVASqFjFgjHtMUfy9BDrFVVEEc8=
Subject key identifier:   D0:89:5F:6A:19:68:9A:F2:39:08:62:C4:17:AE:3D:1D:6E:8A:5F:1B
Authority key identifier: 11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED
Certificate issuer:       /CN=118E5C07438A61E8178F2D60B6311E817D88D0ED
Certificate serial:       6FAAB129402E1551AEA64981A317B453F87B6583
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
Manifest number:          49
Signing time:             Thu 24 Apr 2025 21:14:21 +0000
Manifest this update:     Thu 24 Apr 2025 21:09:21 +0000
Manifest next update:     Fri 25 Apr 2025 21:36:21 +0000
Files and hashes:         1: 3138372e34392e3137362e302f32322d3235203d3e20323634353632.roa (hash: keBsc921ylJxWPNKR3T8VNr6QGHVrmxn7iAA5871dgU=)
                          2: 3133382e33362e302e302f32322d3235203d3e20323634353632.roa (hash: SqXLvkvzeKuEXT0AxzGiLO4gKHa0PSqAM6TJH+MVfHc=)
                          3: 118E5C07438A61E8178F2D60B6311E817D88D0ED.crl (hash: oJuCRo5RmG5I0G+MhHEVcrbdfztvHCGbkfnriVsa93g=)
                          4: 323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (hash: gDg8gnEx5/aUykHzwCDiWVxYiYS+49AKLXolSRnuG2c=)
                          5: 34352e3137342e3138382e302f32322d3235203d3e20323634353632.roa (hash: XmQStU645GhpszXRckQYuCw3A+YCCh6P3688khXQx8o=)
                          6: 34352e3233392e382e302f32322d3235203d3e20323634353632.roa (hash: L2ZgVPwLpkN6rm5n10NEFM9BrNnN4g7TjfnehHx1rZc=)
                          7: 3136382e3233322e38342e302f32322d3235203d3e20323634353632.roa (hash: +hUDCSO+1+GRP+GclJ3kjHimBOjsSHv6CHF7XpeCU8Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.crl
                          rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:aa:b1:29:40:2e:15:51:ae:a6:49:81:a3:17:b4:53:f8:7b:65:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118E5C07438A61E8178F2D60B6311E817D88D0ED
        Validity
            Not Before: Apr 24 21:09:21 2025 GMT
            Not After : Apr 25 21:36:21 2025 GMT
        Subject: CN=D0895F6A19689AF2390862C417AE3D1D6E8A5F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:3e:e3:34:0a:01:3e:1e:81:c8:3c:89:95:
                    e7:6b:16:ff:6a:d8:a5:9d:2e:85:5f:7c:70:10:d5:
                    bb:d5:5b:2b:f8:0f:73:ac:11:45:3b:29:8e:35:12:
                    87:7f:22:f9:59:74:72:d2:e7:06:5e:a4:cf:31:f7:
                    b4:ee:31:44:d7:51:26:db:e1:26:7a:92:98:e1:99:
                    11:3b:be:b6:2b:72:ba:aa:be:40:9e:b5:fa:42:24:
                    68:53:20:9b:b3:1a:d4:42:cb:31:e8:80:fe:67:47:
                    bd:95:93:3d:de:7f:dc:05:06:35:fd:22:5c:66:79:
                    a2:03:eb:5f:b0:2e:36:1c:a2:d0:7a:ba:dc:a8:9d:
                    39:a0:f9:c7:99:67:d4:ae:eb:aa:ad:3a:77:23:16:
                    19:63:b1:eb:8a:c4:6e:d2:c4:04:53:a7:b8:0e:fd:
                    ca:d5:2d:ea:f8:70:c6:0f:91:88:b4:a8:f1:4d:bf:
                    de:af:8d:59:36:05:3e:cc:ce:09:68:bd:88:8f:2c:
                    cc:dc:c7:3f:27:7d:4b:f1:c4:a0:cb:a4:a3:eb:89:
                    71:d2:74:9f:86:ec:61:c9:26:60:5f:fe:98:08:ba:
                    ff:f4:7b:24:43:fb:9a:c7:9a:fd:82:1a:65:ff:b9:
                    b2:48:2c:f8:89:dd:de:77:f6:79:b2:68:06:07:3d:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:5F:6A:19:68:9A:F2:39:08:62:C4:17:AE:3D:1D:6E:8A:5F:1B
            X509v3 Authority Key Identifier:
                keyid:11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:50:65:96:7a:83:3d:f3:e8:bf:f1:37:a9:2a:8f:fd:5e:
         61:98:45:25:a5:9c:73:a1:39:e0:0b:ee:e9:db:4b:d0:c4:5c:
         11:05:95:5e:f4:9d:93:05:fe:6a:ad:6d:15:4c:7d:1a:83:b2:
         db:8e:34:76:65:81:37:09:d7:dd:af:04:fa:27:e5:13:e4:c0:
         63:85:6e:50:30:e6:d4:ee:8b:ad:2d:50:90:20:5e:6f:41:1f:
         50:45:fa:b9:6e:e0:f1:e6:1d:1a:67:b2:51:74:41:e1:09:4c:
         7b:b6:d5:ea:69:7f:c6:06:cf:cd:93:e9:34:e9:61:91:0f:53:
         13:ce:5a:74:e0:ea:c4:3a:88:bf:62:01:1d:e3:21:52:b7:38:
         4b:16:2a:cc:2e:4e:e8:1c:6c:23:e7:81:47:52:29:da:d8:ad:
         d9:54:09:49:db:4c:a3:e1:16:89:94:bc:3f:03:bd:f0:9e:42:
         38:c1:ea:6f:d4:4b:08:21:fb:cc:6c:b3:d6:54:96:50:b5:e2:
         59:77:36:49:23:a0:9a:8e:16:88:77:2d:51:bd:36:44:e7:e1:
         41:c2:5d:78:91:49:ac:61:b5:51:20:76:ae:3f:e4:34:57:c7:
         79:6b:71:ef:b3:5d:e8:60:31:64:87:db:d3:b8:08:51:46:36:
         79:f2:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:41 2025 by rpki-client on console.sobornost.net