Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
File:                     677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft (raw, json)
Hash identifier:          /rJDRMUTBywmgzRipLx5Ivcagdu6So2CjKRAXqvsvbY=
Subject key identifier:   77:71:F4:F2:0F:74:5B:1C:18:DC:92:50:86:04:C7:AE:93:0F:A4:1F
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Certificate issuer:       /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial:       6E8F2835499953AFA666F1903C729940A552A7CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
Manifest number:          8D
Signing time:             Sun 27 Apr 2025 16:08:01 +0000
Manifest this update:     Sun 27 Apr 2025 16:03:01 +0000
Manifest next update:     Mon 28 Apr 2025 17:48:01 +0000
Files and hashes:         1: 677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl (hash: BoME32laeq6GYtehp2DyfH4CQK6/nc9HLpVk/Za6OYg=)
                          2: 34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (hash: vVHa43rKpGGbpv4Z9qchlES0Se/oYCQmYzzkcjNjt6c=)
                          3: 323830343a353665303a3a2f33322d313238203d3e20323638303239.roa (hash: +KqSK0dwXPn3Or4fdl27epYyLQTJZE9FNRT+x58Aht0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
                          rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 17:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8f:28:35:49:99:53:af:a6:66:f1:90:3c:72:99:40:a5:52:a7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
        Validity
            Not Before: Apr 27 16:03:01 2025 GMT
            Not After : Apr 28 17:48:01 2025 GMT
        Subject: CN=7771F4F20F745B1C18DC92508604C7AE930FA41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:af:d8:0f:80:c2:34:54:c3:a8:b2:98:a9:
                    d7:ec:6b:19:a4:6f:e1:49:06:d0:e5:1f:09:00:2f:
                    6a:25:f3:49:b8:5c:fc:ba:f4:19:2f:10:5f:ba:7e:
                    1f:25:ab:6e:5d:cb:91:ae:73:f2:57:6b:34:15:74:
                    8d:d1:7d:dd:bb:6d:f2:d2:e0:13:c3:b2:a1:81:99:
                    d8:ea:f0:79:42:29:25:31:35:0d:15:b3:95:2e:51:
                    59:6d:9a:45:92:dd:ca:0e:5b:68:c0:60:b2:47:20:
                    07:25:d9:0a:ef:8e:cb:59:59:08:67:aa:04:6c:5b:
                    92:5e:ae:30:fa:24:1b:90:90:a7:50:db:ba:7f:da:
                    89:df:c2:2d:e3:a0:82:84:6f:c0:b8:28:9b:18:25:
                    c8:6e:15:e0:f5:61:1c:40:e5:71:a5:84:95:1a:07:
                    d3:f1:c4:b2:98:3b:4d:61:8e:9b:8d:8b:0b:f4:55:
                    37:48:48:58:b4:cf:99:a8:41:78:f4:9f:c2:97:85:
                    bb:3e:c0:a0:b0:a6:aa:20:85:b2:7e:af:d7:66:23:
                    98:45:47:df:1e:86:22:36:b4:d8:43:ce:56:06:c6:
                    3d:c0:8c:e0:55:5b:16:ca:32:57:24:ab:6e:3f:1c:
                    f9:cd:0c:8d:b8:fc:cf:dc:12:81:3a:3c:df:b4:1c:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:F4:F2:0F:74:5B:1C:18:DC:92:50:86:04:C7:AE:93:0F:A4:1F
            X509v3 Authority Key Identifier:
                keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:43:8d:d3:a3:96:ff:4b:b9:12:05:42:a4:5d:8f:39:5b:67:
         00:6f:57:0a:b1:05:5e:11:8c:a5:62:c9:0e:67:32:aa:75:45:
         e1:f8:e3:99:46:e4:50:62:5c:d0:3a:03:19:07:47:3e:b6:5a:
         d4:a0:42:e5:1a:48:83:ad:5e:3d:fc:28:d0:02:37:ad:05:d9:
         96:d8:c4:85:96:7b:92:d1:f1:76:24:c2:bc:3e:c2:02:d4:34:
         bf:52:5d:6e:a1:ea:fb:1b:ec:57:64:04:f2:de:fd:b7:cb:5b:
         e7:58:80:eb:ce:74:6d:7f:b7:44:df:34:99:a8:c8:e2:6d:fd:
         66:ce:9b:a6:39:d8:55:dd:54:0d:67:4a:2f:1d:23:ec:5b:5c:
         ab:a3:85:ea:e9:64:21:cd:94:e7:fc:fb:f8:09:87:83:b8:c9:
         fb:db:49:bd:4f:c6:3c:41:a9:a3:23:b8:ed:0b:c0:44:16:fe:
         90:cf:8f:58:d6:ad:15:38:c0:fd:8b:02:84:c7:e9:87:e4:e7:
         08:d2:51:86:66:7c:21:79:0b:b7:1b:2d:9f:37:cd:7d:16:31:
         24:4c:89:0a:7c:26:a7:ff:6d:55:af:69:66:9e:17:d6:b0:7a:
         65:e9:48:ad:35:b8:db:12:54:84:55:38:d4:f3:2c:94:b8:2e:
         0e:4e:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:08 2025 by rpki-client on console.sobornost.net