Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
File:                     A25520F1E15109C50B44F56EA799FE2E685092D4.mft (raw, json)
Hash identifier:          TGSslOlSrM6r9Xs7V6glKWtD6hUsEkzlFK2kRf4R4mg=
Subject key identifier:   BF:3F:EF:31:95:35:BA:3F:FA:5C:C4:24:7A:CC:1F:FE:7C:0E:B2:A0
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Certificate issuer:       /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial:       2AC696A190D5B3D77EA7BF7494ED2105D25C9403
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
Manifest number:          30
Signing time:             Thu 24 Apr 2025 16:21:24 +0000
Manifest this update:     Thu 24 Apr 2025 16:16:24 +0000
Manifest next update:     Fri 25 Apr 2025 19:04:24 +0000
Files and hashes:         1: 3133382e3231392e3132382e302f32322d3232203d3e20323633393334.roa (hash: ynkRZ+lgRgFJeoAld4U4VaMMiZSRqaEpekkBzQUvJl8=)
                          2: 323830343a323830303a3a2f33322d3332203d3e20323633393334.roa (hash: 31Sk0TxSp/i4x8BEM20qtZ+eGQVQ6z3ZLiqQy0i+cdk=)
                          3: 323830343a323830303a383030303a3a2f33332d3333203d3e20323633393334.roa (hash: drampjUEEeNSSiYjSF4VHammwWzWdWMvA9aTnnySKXI=)
                          4: 323830343a323830303a313030303a3a2f34302d3430203d3e20323633393334.roa (hash: doGdOAdpTRbsV0YVPujxAxqn8lGofkI+8lbG/IOfP/s=)
                          5: 323830343a323830303a3a2f33332d3333203d3e20323633393334.roa (hash: RrZvuMglHClV0f3Wu40L2Pb8bUNUJCnO6Bp5zkaggb8=)
                          6: A25520F1E15109C50B44F56EA799FE2E685092D4.crl (hash: 8WcVfjDpKQw3qKcD1MFIWHVfep81owH4lGbOdlfezOQ=)
                          7: 3133382e3231392e3133302e302f32332d3233203d3e20323633393334.roa (hash: xGLxUgAJSDyuoalOVFgSdPs910srBLqM2jE3HJXXlug=)
                          8: 3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa (hash: hg0uZ/XxK9MD5mHXoJ8d+kJSu0HRUgNGzplmshSH2fU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 19:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c6:96:a1:90:d5:b3:d7:7e:a7:bf:74:94:ed:21:05:d2:5c:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
        Validity
            Not Before: Apr 24 16:16:24 2025 GMT
            Not After : Apr 25 19:04:24 2025 GMT
        Subject: CN=BF3FEF319535BA3FFA5CC4247ACC1FFE7C0EB2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:14:77:26:46:56:af:95:81:5d:30:ca:c0:
                    22:de:f4:5f:18:be:e6:43:13:b1:ee:95:b4:04:8d:
                    94:38:8e:44:21:19:07:fa:41:e6:e4:a9:d2:45:15:
                    43:19:fb:6f:5a:0c:14:be:0e:69:c2:df:eb:c3:60:
                    ec:3a:60:99:71:f6:ad:6b:f7:70:13:5b:3e:d0:6a:
                    69:23:86:df:04:b1:08:b8:93:4c:c6:65:a1:e0:39:
                    1b:d8:01:ae:e5:f8:a1:ab:cf:78:2b:62:2d:80:f3:
                    9e:ed:ba:16:dd:32:43:72:67:91:f5:6d:05:17:a8:
                    93:85:e9:6d:c8:47:b9:98:fa:8f:8f:8e:1c:ff:82:
                    69:76:ec:bc:ba:8e:70:6d:7d:3a:ce:dc:05:be:a0:
                    cb:a1:69:5e:df:72:3b:b7:07:7f:b6:d6:85:b0:9a:
                    e6:89:4c:d5:2b:14:24:17:05:97:22:1f:c2:d9:f8:
                    5b:a2:61:18:6a:c3:ae:02:5a:3b:ff:97:1d:45:1c:
                    d8:e4:ab:00:dc:1a:fa:74:87:a0:d0:87:6c:5c:10:
                    bd:b6:7d:e0:9a:46:70:db:cd:04:d9:69:f0:ef:f0:
                    01:59:00:4d:83:fe:9d:40:81:fb:3d:7c:11:d5:54:
                    33:9f:95:d2:f0:e5:e2:f1:a9:59:e5:86:9c:3b:90:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:EF:31:95:35:BA:3F:FA:5C:C4:24:7A:CC:1F:FE:7C:0E:B2:A0
            X509v3 Authority Key Identifier:
                keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:15:76:46:5e:14:e8:fb:59:9b:e7:fc:31:7f:0c:77:8a:cc:
         52:71:ea:28:02:b9:d4:ab:1b:8c:76:91:ed:77:3b:a7:d8:56:
         2d:96:e1:10:aa:66:6b:6b:90:b8:98:a8:a1:9c:77:5f:9b:29:
         d3:50:ca:b4:24:88:48:5a:41:23:38:6b:38:de:8f:5c:70:5c:
         f4:8e:4a:7b:00:0d:cd:ba:43:65:38:49:80:e8:02:aa:90:bf:
         fd:14:c6:e4:e4:b3:49:e0:8f:36:1f:8f:90:5c:38:6c:51:22:
         7b:94:79:ca:68:20:22:11:00:2c:40:d0:40:b4:85:48:d2:a4:
         3d:ab:a4:6c:2f:57:e2:95:c6:37:45:34:90:ae:5b:52:db:7b:
         75:c5:92:8e:ba:0f:92:52:e8:27:3e:5b:dc:fa:cb:c5:13:53:
         0b:0b:fc:a5:3b:7a:c1:9c:75:f0:12:1b:07:9f:47:8d:29:b3:
         23:d1:84:1c:39:1a:88:13:fd:a4:c4:8d:d7:51:d5:5e:d6:44:
         2a:81:68:52:83:9d:b6:b4:7b:83:d0:5f:37:d5:92:86:51:c1:
         71:ca:06:33:d0:24:27:8d:0b:bb:8b:a4:03:95:09:e2:d4:e5:
         58:97:35:ba:65:fd:2c:66:cd:8a:7b:6e:53:47:88:5b:99:a5:
         9d:0f:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:46 2025 by rpki-client on console.sobornost.net