Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          QDPO741dmCaaK1+BPF7AE1owW5ecxHGe1shvEId9cu4=
Subject key identifier:   87:F7:27:0C:70:CA:FE:B9:A1:53:E0:0E:6B:C5:64:2A:E3:80:3D:5D
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       730580AF41F1D5F743FD0194CA2DD2FE6D8871B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          0207
Signing time:             Fri 25 Apr 2025 10:23:47 +0000
Manifest this update:     Fri 25 Apr 2025 10:18:47 +0000
Manifest next update:     Sat 26 Apr 2025 12:15:47 +0000
Files and hashes:         1: 34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (hash: RTprnNg5aQfyb92AvIkxl/fHyWTeQKd0ma+1zK6ILDA=)
                          2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: 8SckML6BEKwy6Uz2kQFOV34bZsohofuLbDFfO2kBqc4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:05:80:af:41:f1:d5:f7:43:fd:01:94:ca:2d:d2:fe:6d:88:71:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Apr 25 10:18:47 2025 GMT
            Not After : Apr 26 12:15:47 2025 GMT
        Subject: CN=87F7270C70CAFEB9A153E00E6BC5642AE3803D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:5f:13:39:62:5c:68:5b:b8:89:92:b9:9b:
                    87:5c:5c:d0:4f:25:e3:5a:f0:70:0a:5f:9b:52:95:
                    d7:04:91:f2:1b:8b:ce:5c:6d:61:53:83:c6:a1:30:
                    a8:42:3f:e6:9d:42:23:5c:93:44:6f:47:c9:5a:08:
                    4a:a5:f5:c3:8c:3e:eb:f6:3a:22:66:52:c2:4c:47:
                    fa:70:5a:f6:f7:8a:de:4f:48:b1:6b:7c:96:99:2b:
                    24:1e:ab:1f:1d:5c:82:64:94:a9:0f:7f:f6:45:f7:
                    53:03:58:79:e5:cd:8a:3d:ad:a9:63:11:1d:34:f9:
                    07:2f:3d:8e:89:cd:80:5a:78:54:db:e5:2d:a3:34:
                    03:8d:b6:97:9a:9c:53:00:d1:6d:93:ef:0b:88:49:
                    3b:60:04:60:ae:e4:0f:0e:5b:db:32:7a:58:8a:8f:
                    d6:f0:ba:77:24:6c:a0:fc:5d:f6:4d:0e:35:42:07:
                    ad:30:f3:e9:c8:0c:a2:48:8f:2c:a9:64:7c:3b:4b:
                    7e:38:02:52:12:50:7d:0d:c4:9d:a3:32:4e:b6:4a:
                    49:73:4f:4f:9b:dc:e3:77:41:6b:e4:5b:7e:fb:2d:
                    87:06:4a:f5:34:7a:6b:da:10:8b:4e:43:92:5f:23:
                    c8:c8:9d:b5:13:01:86:2a:3c:1d:a8:73:e1:69:be:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:27:0C:70:CA:FE:B9:A1:53:E0:0E:6B:C5:64:2A:E3:80:3D:5D
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:33:fb:f4:4b:9e:bc:7f:ea:47:51:94:6b:93:a0:66:7e:ea:
         61:81:fa:7a:27:0e:dd:ce:d4:5b:0d:ec:5e:f4:03:e8:0f:d5:
         5c:01:e3:e9:41:64:6d:43:2d:13:90:c2:4b:b7:76:6f:92:6c:
         ae:cb:83:f2:13:03:45:a1:f6:77:2e:be:49:dd:7c:7b:97:02:
         1a:ff:1a:41:97:69:59:4f:e8:b4:6b:81:6f:50:31:45:71:82:
         78:16:e2:e5:92:70:8d:46:30:56:0a:c0:a3:23:7d:bd:16:ac:
         bf:1f:f3:53:5d:f4:71:fc:96:d6:54:6d:34:54:d8:b9:9e:9a:
         ac:74:87:d0:bc:cf:5b:a6:f6:2a:9f:07:24:cb:b4:8f:fc:d4:
         37:df:c5:dd:4e:7c:46:1b:6c:46:66:ed:22:53:9a:aa:cd:6f:
         7c:99:eb:4e:4f:5f:4c:f7:2c:fd:2f:de:78:e5:ca:c8:df:06:
         bc:9f:af:a5:c5:c2:99:49:29:65:3a:85:07:07:ae:43:f0:2c:
         a9:87:9a:0e:4f:74:86:ba:82:63:e0:21:82:69:8c:b2:f1:1d:
         7e:6b:9b:49:3e:ef:65:5c:b4:93:a5:7e:25:12:7a:b8:9f:90:
         b3:05:93:66:1d:59:58:7b:16:97:42:12:13:76:18:1e:b9:5a:
         27:f4:ff:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcwWAr0Hx1fdD/QGUyi3S/m2IcbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1
MDhCQjQzQTAeFw0yNTA0MjUxMDE4NDdaFw0yNTA0MjYxMjE1NDdaMDMxMTAvBgNV
BAMTKDg3RjcyNzBDNzBDQUZFQjlBMTUzRTAwRTZCQzU2NDJBRTM4MDNENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUYV8TOWJcaFu4iZK5m4dcXNBP
JeNa8HAKX5tSldcEkfIbi85cbWFTg8ahMKhCP+adQiNck0RvR8laCEql9cOMPuv2
OiJmUsJMR/pwWvb3it5PSLFrfJaZKyQeqx8dXIJklKkPf/ZF91MDWHnlzYo9ralj
ER00+QcvPY6JzYBaeFTb5S2jNAONtpeanFMA0W2T7wuISTtgBGCu5A8OW9syeliK
j9bwunckbKD8XfZNDjVCB60w8+nIDKJIjyypZHw7S344AlISUH0NxJ2jMk62Sklz
T0+b3ON3QWvkW377LYcGSvU0emvaEItOQ5JfI8jInbUTAYYqPB2oc+FpviNFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUh/cnDHDK/rmhU+AOa8VkKuOAPV0wHwYDVR0j
BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG
SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG
NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVGSFMvMS8w
Njg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhjP79EuevH/qR1GUa5OgZn7qYYH6eicO3c7UWw3sXvQD6A/VXAHj6UFkbUMt
E5DCS7d2b5JsrsuD8hMDRaH2dy6+Sd18e5cCGv8aQZdpWU/otGuBb1AxRXGCeBbi
5ZJwjUYwVgrAoyN9vRasvx/zU130cfyW1lRtNFTYuZ6arHSH0LzPW6b2Kp8HJMu0
j/zUN9/F3U58RhtsRmbtIlOaqs1vfJnrTk9fTPcs/S/eeOXKyN8GvJ+vpcXCmUkp
ZTqFBweuQ/AsqYeaDk90hrqCY+AhgmmMsvEdfmubST7vZVy0k6V+JRJ6uJ+QswWT
Zh1ZWHsWl0ISE3YYHrlaJ/T/dg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net