Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
File:                     2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft (raw, json)
Hash identifier:          D+h6GjCgCTIg7dUW0M7lFIg74kyTzXQuKlhEc7H4DOo=
Subject key identifier:   3E:C9:4C:50:A1:45:25:4D:AE:68:B8:B9:34:49:3D:9A:D4:3F:60:10
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       4613CB08889246729656CA6DCF42BDE4E3ABC5EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
Manifest number:          68
Signing time:             Mon 28 Apr 2025 12:34:32 +0000
Manifest this update:     Mon 28 Apr 2025 12:29:32 +0000
Manifest next update:     Tue 29 Apr 2025 15:07:32 +0000
Files and hashes:         1: 34352e36352e3230342e302f32342d3234203d3e20323636353434.roa (hash: aULvvjaBI5CWve/Abev/1REj+S7IsGIzsCkjipRRoUQ=)
                          2: 323830343a336461343a3a2f34302d3430203d3e20323636353434.roa (hash: 09hisYJc1VosXsVh7+Z9+ofTW2WLctfcYNSk2Ousozs=)
                          3: 2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl (hash: fhN6Z9tLihnuEL0lruamMtbEgvbwdh0I8xXyVaNuuYc=)
                          4: 323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (hash: DvcsaLp8E0Ouamb2Fwv0KT11deEDA6WBjUoErFqzlgc=)
                          5: 34352e36352e3230342e302f32332d3233203d3e20323636353434.roa (hash: Vt/gQuRH6Ut7MDX+FeHi3lFHnqWD10nSXGUgQmAo4Jc=)
                          6: 323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa (hash: GS2xXRNMwHse9m4AUjP2BjRHrpXrXQJ6LsBNXTcSD6o=)
                          7: 34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (hash: y+QEhouUhOoETai0OImI1nXkg8+POCGmWct0GlhGcQw=)
                          8: 34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (hash: gmBfkFcP1FmjECVTK0E9EveVsOhM/UD0beivJWf5e30=)
                          9: 34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (hash: UBvS06FMuKqSrQS0LkIaSgc02wwjCwehpcAxAJgunxo=)
                          10: 323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (hash: fNZ/9r46FClcYJgFPwN7V/mAYWUg10WZ4IB5KtcTfcI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:cb:08:88:92:46:72:96:56:ca:6d:cf:42:bd:e4:e3:ab:c5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Apr 28 12:29:32 2025 GMT
            Not After : Apr 29 15:07:32 2025 GMT
        Subject: CN=3EC94C50A145254DAE68B8B934493D9AD43F6010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:0b:e6:ba:3d:82:4d:90:ef:8d:f4:fb:73:
                    b6:e6:21:03:13:cf:fc:e3:eb:c5:51:3d:ec:81:02:
                    bb:9f:08:fa:cc:f2:45:67:8f:5b:e9:c8:51:bd:d9:
                    42:99:39:7d:27:c5:b9:1b:76:df:30:cb:a8:6f:ef:
                    76:97:56:ff:23:1d:d9:ad:53:2c:8c:2b:cf:4b:91:
                    13:f5:62:0d:08:48:39:85:36:75:9e:7e:54:ed:46:
                    7b:1c:47:12:c6:fe:34:d8:9c:8b:c5:45:cd:7d:3b:
                    50:23:76:ea:be:5c:20:68:cf:d1:1f:0e:30:2c:6b:
                    79:bc:16:46:73:f9:62:61:b9:eb:a4:b1:32:b9:20:
                    00:67:16:17:c1:5f:6f:c2:18:92:28:24:0d:09:97:
                    8a:45:90:44:04:d5:0b:6a:e4:b3:32:76:e3:7d:09:
                    77:41:72:08:db:0f:bf:14:35:04:ff:47:c7:53:53:
                    d2:33:70:82:c5:a8:26:dc:d3:c0:f8:1b:b3:d7:50:
                    65:d0:68:56:f9:d5:31:f5:d9:2a:ec:af:e2:97:de:
                    a6:b8:77:9e:13:33:98:8e:fe:e7:22:be:c3:42:9b:
                    08:2f:aa:ed:94:aa:86:6e:95:1c:a9:3d:fb:87:cd:
                    39:d0:cf:c4:18:f9:4e:ef:cb:82:21:3d:b2:90:b0:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:4C:50:A1:45:25:4D:AE:68:B8:B9:34:49:3D:9A:D4:3F:60:10
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:63:d2:f3:99:5b:03:02:d5:02:b1:80:ff:23:07:3c:c6:22:
         f4:4c:12:22:a2:73:f6:8e:a6:d4:e2:4a:ed:21:a7:0e:27:60:
         9b:93:b2:3c:cf:2c:bb:c8:ed:dc:0b:dc:49:56:e3:ca:4f:e7:
         5d:1c:f5:6f:11:fe:61:2e:eb:53:ca:56:96:ee:74:e3:fa:60:
         80:d5:15:0b:85:e1:41:93:19:aa:9b:d0:a3:51:0d:01:34:47:
         99:33:73:67:55:60:9e:a7:22:99:69:dc:ba:e4:de:f4:4c:cd:
         c3:6a:d1:59:3d:20:c8:df:ef:4b:be:fe:8f:95:68:fc:7a:8c:
         37:58:55:4b:c0:ae:af:6e:5a:9e:4e:1b:d7:8f:44:db:1f:43:
         60:ad:21:24:f8:88:58:ce:88:6b:34:97:4a:e2:e4:70:ee:11:
         ac:a6:9f:7e:22:5d:99:a6:e1:22:19:69:58:0a:a2:55:57:62:
         3a:da:bb:10:69:3f:d2:4d:46:6d:85:f7:f3:f8:d5:a1:77:6c:
         b7:91:99:0e:e4:c6:21:ce:3e:2f:80:0a:6f:27:59:e5:e3:76:
         9d:b0:bf:b3:94:f1:61:7d:d8:39:1d:c5:01:c4:63:44:3c:1e:
         fd:0a:fa:5f:63:4b:00:a9:4c:9a:51:98:0c:4d:03:5b:4c:62:
         c6:e4:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net