Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
File:                     1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft (raw, json)
Hash identifier:          4zv9e8uTTQlfHvYWEg0xAduXvIRcJZ5qoPxhJoEr50E=
Subject key identifier:   B7:9F:32:98:98:57:65:6B:9D:52:79:AA:86:C8:E5:90:80:5B:FE:0F
Authority key identifier: 1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58
Certificate issuer:       /CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
Certificate serial:       5BE37798236CFAFDE4A43973D444E16FF10CE690
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
Manifest number:          14
Signing time:             Mon 28 Apr 2025 08:29:31 +0000
Manifest this update:     Mon 28 Apr 2025 08:24:31 +0000
Manifest next update:     Tue 29 Apr 2025 11:38:31 +0000
Files and hashes:         1: 1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl (hash: sy9fznrmL9RD/jJe0D0yLtjPlC3jO7KTOmyqG00WQLw=)
                          2: 34352e3136392e3230382e302f32322d3232203d3e20323638313330.roa (hash: qAqkSzlPGDccwgcgmaEmYaQ41AMoxvdr8YQlvtCQmKA=)
                          3: 323830343a353838383a3a2f33322d313238203d3e20323638313330.roa (hash: lZe7mID9ulcppfy7S/YK7xuVEydlvRK3HhwlLKJzLzQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl
                          rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e3:77:98:23:6c:fa:fd:e4:a4:39:73:d4:44:e1:6f:f1:0c:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
        Validity
            Not Before: Apr 28 08:24:31 2025 GMT
            Not After : Apr 29 11:38:31 2025 GMT
        Subject: CN=B79F32989857656B9D5279AA86C8E590805BFE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:6f:a9:72:c6:11:b7:e9:fc:a8:d6:14:26:
                    3d:2a:32:06:e6:66:56:59:34:e3:c8:14:5c:59:92:
                    61:6d:e7:d9:26:9c:58:c5:9d:5c:1e:93:b2:ab:04:
                    7d:31:cc:f7:c0:9d:79:72:2a:15:7b:43:96:59:a8:
                    9b:46:04:1c:c2:18:63:f2:1b:b2:76:fe:b8:59:32:
                    33:a6:ea:95:83:93:4b:d2:b8:f1:9a:e8:11:5e:f8:
                    4f:71:77:5d:ec:4b:61:8f:b1:29:a1:74:f3:5a:65:
                    b6:7f:c6:a2:47:39:aa:72:12:d8:67:87:af:2c:bb:
                    68:2b:ef:72:a0:c2:41:2e:79:f3:ef:d7:19:ab:88:
                    a5:d0:3f:51:a9:d3:ac:26:3d:4e:fd:c8:17:42:80:
                    26:89:ed:fd:71:83:b3:35:58:48:f4:be:3d:88:1e:
                    ec:54:2d:08:47:3f:7b:71:ad:0d:4a:ea:95:7d:f4:
                    95:3b:52:a5:dc:34:25:e5:00:23:73:8f:ca:5a:b1:
                    67:0a:6b:b3:45:ce:00:90:fe:07:ee:13:4b:d6:a2:
                    5e:87:32:ff:d3:d0:bc:e0:48:1a:d3:b8:25:8e:f6:
                    f0:1a:2b:95:94:e8:cd:34:99:ee:79:2d:cd:df:6f:
                    b4:af:12:a1:ab:18:31:09:2f:f9:51:70:89:58:34:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:32:98:98:57:65:6B:9D:52:79:AA:86:C8:E5:90:80:5B:FE:0F
            X509v3 Authority Key Identifier:
                keyid:1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:e0:30:91:ee:05:30:89:23:90:b3:b3:e6:20:82:ec:06:
         d7:fb:fb:cd:b3:c1:be:88:36:10:c4:f4:13:9d:5c:8b:6f:f3:
         35:80:17:67:51:68:7a:c4:f8:4f:71:51:6b:22:e7:68:9d:be:
         7a:ed:71:5e:aa:69:6e:21:86:2e:d2:d9:75:89:f2:72:62:e7:
         c2:a4:b2:b7:50:8f:a5:8f:c8:fe:8d:c2:a0:72:9f:1d:e2:78:
         1b:26:f9:b4:14:d3:33:ea:f3:7c:0a:a9:21:98:31:c7:40:f3:
         14:39:e9:2d:b2:22:ae:b6:ae:5d:2b:10:81:a9:34:57:08:cc:
         00:23:d4:28:4e:d6:6b:43:34:fa:b3:08:92:bf:d4:48:51:b3:
         d7:c9:3d:73:30:5b:a8:3b:44:0a:03:19:c8:31:57:41:f4:63:
         56:fc:10:df:d8:50:e3:82:96:ca:cc:d6:64:df:19:7b:3e:5d:
         87:86:fe:4f:43:45:99:80:ac:d4:1a:a1:28:c3:c8:12:f1:40:
         a9:f5:07:de:78:4b:2e:e0:97:41:a6:07:9b:32:19:ba:bd:6d:
         f3:62:d2:35:68:64:6f:b1:aa:0f:d6:72:9a:72:2d:f6:64:eb:
         0a:15:23:4a:44:ec:3d:4e:ea:46:e9:24:23:7c:aa:65:4b:d2:
         0b:51:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net