Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
File:                     E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft (raw, json)
Hash identifier:          CHKJFGxRErFDMtU29MV0mh6o90y3BR+BC3st9y/JxwA=
Subject key identifier:   44:C4:28:54:22:0E:9C:3B:2F:4C:99:DD:A2:AC:8F:7C:F2:40:FF:52
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       5E67248378B14F7383F0383EC5E6CB4C4583359E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 06:46:28 +0000
Manifest this update:     Mon 28 Apr 2025 06:41:28 +0000
Manifest next update:     Tue 29 Apr 2025 08:30:28 +0000
Files and hashes:         1: E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl (hash: lGLvgbE9ObJNXmLKx+406CXv7v/ntib+PRN2jWAA6YQ=)
                          2: 323830343a373138633a3a2f33322d3438203d3e20323730373936.roa (hash: hy+PYw9smVKZXTiWxh17j209/4jADdXXtIvOCYFEFiw=)
                          3: 3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (hash: q/6qUhrGpywsYVU0hghyX+iDJDoyen0tHtGj+/ZKltg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:67:24:83:78:b1:4f:73:83:f0:38:3e:c5:e6:cb:4c:45:83:35:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Apr 28 06:41:28 2025 GMT
            Not After : Apr 29 08:30:28 2025 GMT
        Subject: CN=44C42854220E9C3B2F4C99DDA2AC8F7CF240FF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a1:83:e0:80:3f:0d:36:cd:92:18:8e:95:5e:
                    bb:7c:f6:e0:f0:fb:d3:0e:4b:6d:0f:48:71:9d:27:
                    8d:23:b8:d5:d6:ce:6c:f8:8c:f2:9b:69:60:75:76:
                    3e:ca:3e:d3:b3:0c:6c:01:1b:7a:03:dd:3d:12:67:
                    e0:de:ed:69:2b:3f:ac:9e:2b:b5:b7:08:86:62:a2:
                    ba:9c:8e:dc:6e:9e:b1:b5:53:80:8d:12:88:10:f8:
                    b8:ea:ab:69:b4:65:75:c6:50:17:68:6a:54:a3:a6:
                    9e:77:a3:0a:22:0e:23:62:3a:ce:25:96:c1:8e:89:
                    dd:b8:c4:11:55:9d:c1:83:8f:7d:d1:e2:0b:f2:37:
                    88:cb:bf:f1:e9:af:82:92:cd:18:42:cb:a8:f0:df:
                    43:a9:e5:6f:0d:89:ab:71:8d:00:58:c4:a3:06:93:
                    b8:7d:29:ff:12:10:a9:81:28:63:c5:0c:40:38:e6:
                    06:05:b5:ec:e7:fe:3b:c1:11:d7:47:8c:94:f9:3c:
                    f7:bd:49:2e:d3:74:ae:40:4c:95:24:b8:9a:04:42:
                    ac:1d:69:64:06:73:62:8c:6d:ca:52:b3:cc:b6:92:
                    e4:5c:af:66:c2:f7:77:7a:a7:9d:db:7f:93:46:0e:
                    2b:f1:c5:0b:e9:2d:99:6c:f0:75:67:57:8b:95:5c:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:28:54:22:0E:9C:3B:2F:4C:99:DD:A2:AC:8F:7C:F2:40:FF:52
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:47:ca:5d:04:84:58:3c:a6:db:85:3b:c2:1d:9d:05:b7:
         7a:f3:aa:dd:1a:55:7e:d5:36:ad:ca:9d:84:88:3d:c4:78:5c:
         5f:d4:4d:5e:ce:41:19:58:72:5c:59:82:b2:bb:99:f3:57:7b:
         cf:b3:5b:d5:e3:78:8e:d9:87:4c:29:1d:64:4b:6e:cf:25:2a:
         87:49:f3:2c:f4:6e:d7:ff:be:1a:6c:36:48:6b:46:a8:6f:e7:
         6f:05:d2:b9:00:c8:79:40:0f:79:3d:75:fb:7e:3f:44:74:e7:
         34:14:0c:9c:f0:8c:ab:1c:8d:8e:11:67:4e:ec:a2:a6:aa:e7:
         05:1b:0e:84:8b:4f:f5:64:0a:1f:e6:67:e4:3f:5f:d7:1f:2d:
         50:4d:ae:67:00:45:4b:a3:23:ae:76:ec:83:21:90:6b:58:36:
         cc:20:12:af:14:b8:37:dd:27:78:13:ad:cc:27:5c:e3:ea:9a:
         64:e5:0f:8f:0d:6f:3e:c3:e8:82:7e:d1:42:82:53:85:36:f9:
         1a:e4:ac:37:ed:7e:d3:21:2b:7f:0e:17:11:7b:0c:37:e8:83:
         31:92:c9:c3:d5:99:5d:52:91:b5:02:5c:35:e5:7d:5e:16:46:
         52:c8:17:d3:52:58:d3:c9:f7:bd:42:bb:7e:b8:25:28:71:bf:
         3f:42:f8:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXmckg3ixT3OD8Dg+xebLTEWDNZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMyMEIzNDU0RUVCOEU0MUZEMzFDNzczQ0Y4M0IzQzdD
RUVBMzM1MjAeFw0yNTA0MjgwNjQxMjhaFw0yNTA0MjkwODMwMjhaMDMxMTAvBgNV
BAMTKDQ0QzQyODU0MjIwRTlDM0IyRjRDOTlEREEyQUM4RjdDRjI0MEZGNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2oYPggD8NNs2SGI6VXrt89uDw
+9MOS20PSHGdJ40juNXWzmz4jPKbaWB1dj7KPtOzDGwBG3oD3T0SZ+De7WkrP6ye
K7W3CIZiorqcjtxunrG1U4CNEogQ+Ljqq2m0ZXXGUBdoalSjpp53owoiDiNiOs4l
lsGOid24xBFVncGDj33R4gvyN4jLv/Hpr4KSzRhCy6jw30Op5W8NiatxjQBYxKMG
k7h9Kf8SEKmBKGPFDEA45gYFtezn/jvBEddHjJT5PPe9SS7TdK5ATJUkuJoEQqwd
aWQGc2KMbcpSs8y2kuRcr2bC93d6p53bf5NGDivxxQvpLZls8HVnV4uVXCrlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURMQoVCIOnDsvTJndoqyPfPJA/1IwHwYDVR0j
BBgwFoAU4yCzRU7rjkH9Mcdzz4Ozx87qM1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBa
Y0gvMS9FMzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjBCMzQ1NEVFQjhFNDFG
RDMxQzc3M0NGODNCM0M3Q0VFQTMzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBaY0gvMS9F
MzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE7BHyl0EhFg8ptuFO8IdnQW3evOq3RpVftU2rcqdhIg9xHhcX9RNXs5BGVhy
XFmCsruZ81d7z7Nb1eN4jtmHTCkdZEtuzyUqh0nzLPRu1/++Gmw2SGtGqG/nbwXS
uQDIeUAPeT11+34/RHTnNBQMnPCMqxyNjhFnTuyipqrnBRsOhItP9WQKH+Zn5D9f
1x8tUE2uZwBFS6MjrnbsgyGQa1g2zCASrxS4N90neBOtzCdc4+qaZOUPjw1vPsPo
gn7RQoJThTb5GuSsN+1+0yErfw4XEXsMN+iDMZLJw9WZXVKRtQJcNeV9XhZGUsgX
01JY08n3vUK7frglKHG/P0L4Mw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net