Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
File:                     C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft (raw, json)
Hash identifier:          6YuHy3wtcZvDEk7kFl/ZwWQfvvDnY5/hNOJjfRD4LQw=
Subject key identifier:   69:D0:93:AA:4E:A7:1F:79:09:D6:DB:22:71:EF:52:B4:DC:EC:25:7B
Authority key identifier: C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E
Certificate issuer:       /CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
Certificate serial:       390AA054BA0FFE8CAE18ECEC38635243713F7239
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
Manifest number:          017D
Signing time:             Mon 28 Apr 2025 20:57:02 +0000
Manifest this update:     Mon 28 Apr 2025 20:52:02 +0000
Manifest next update:     Tue 29 Apr 2025 21:49:02 +0000
Files and hashes:         1: 323830343a363834633a3a2f33322d313238203d3e20323639363833.roa (hash: DANdwiH7INF5QTUWfxp0lX1OoqOTITlDvxBoSV9B2sM=)
                          2: C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl (hash: JjN+rJgyTBp47eK6VO6ovOm1KrJgY//uIcCJVHILqP4=)
                          3: 34352e3139312e3137322e302f32322d3332203d3e20323639363833.roa (hash: iU9+5pNTDDqu5+5+A2waCBIXYCF4PShi8ad9KskBJrY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl
                          rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:a0:54:ba:0f:fe:8c:ae:18:ec:ec:38:63:52:43:71:3f:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C896D3E514DEA0EE3CC97EA356050AE859BEAB4E
        Validity
            Not Before: Apr 28 20:52:02 2025 GMT
            Not After : Apr 29 21:49:02 2025 GMT
        Subject: CN=69D093AA4EA71F7909D6DB2271EF52B4DCEC257B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:9c:b4:c2:6d:44:9e:e8:93:94:0b:12:00:
                    33:0a:1c:25:7a:51:29:b8:72:79:43:e5:b6:4e:d9:
                    4c:da:0b:6a:52:6f:8c:3d:00:a3:33:94:6d:3e:11:
                    a0:07:da:67:c9:da:d5:61:88:57:c0:51:ac:b2:33:
                    cb:9f:ba:db:92:28:92:ba:17:b3:e6:c7:42:a8:c7:
                    c3:78:18:de:ea:e6:e9:17:87:2b:8c:bd:8a:53:03:
                    23:0b:8e:86:7b:1c:51:c4:fd:52:39:7c:4c:09:ed:
                    fc:27:6b:27:47:79:37:82:4f:74:14:6a:16:4d:f3:
                    ad:4f:32:72:43:e7:ca:78:3a:47:2e:11:d9:0d:36:
                    b4:03:c7:8e:aa:c2:22:1e:39:cc:b0:93:ef:d7:01:
                    e9:26:b7:3c:40:45:f2:93:5f:74:75:6b:4e:31:01:
                    98:82:d4:95:e7:1e:e1:23:11:0e:b8:9b:10:27:57:
                    61:cf:3a:73:5a:4d:7d:39:ed:d7:b3:5e:ea:2c:a2:
                    33:51:62:6d:ab:03:f4:26:bd:05:98:94:0f:43:6d:
                    fa:e2:e9:bc:d3:7b:df:19:eb:82:84:7f:ba:7e:fa:
                    10:a2:d2:b3:92:0f:c6:48:86:bf:21:ff:c2:3c:c2:
                    3f:98:95:4b:b7:af:38:9f:e0:d4:fa:33:9f:fd:29:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:93:AA:4E:A7:1F:79:09:D6:DB:22:71:EF:52:B4:DC:EC:25:7B
            X509v3 Authority Key Identifier:
                keyid:C8:96:D3:E5:14:DE:A0:EE:3C:C9:7E:A3:56:05:0A:E8:59:BE:AB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kvsPX6iuBjDq2gq2afF3QvJWY7zeg3xoZLv6oJQmU4F/0/C896D3E514DEA0EE3CC97EA356050AE859BEAB4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:8a:41:8b:af:98:6a:66:a2:17:2f:eb:4b:e0:c0:73:5e:
         41:39:fa:f8:f5:dd:e2:b7:4e:e8:eb:9f:b7:f3:43:2d:16:e3:
         33:25:32:e5:1a:5f:4e:e4:a8:29:94:41:fc:c1:e0:7b:46:37:
         88:41:ce:0c:34:db:9b:a7:f2:41:c1:21:bf:7a:c3:cb:15:9a:
         1e:7a:26:73:4e:ea:9b:43:42:73:01:84:13:57:f4:e9:12:e7:
         67:4a:62:89:14:97:ad:9b:f3:ce:2b:81:59:b3:2e:7b:65:c7:
         84:f5:51:bf:dc:9f:e4:87:d3:5e:af:9d:61:a0:4a:41:4b:d6:
         b9:bc:77:7e:17:25:ed:f6:d4:c3:c1:34:31:b9:b3:38:cc:e0:
         00:c0:cd:01:99:81:52:e1:c2:ea:c0:7e:74:f1:b5:a0:7c:90:
         8f:1e:02:00:33:7a:13:c0:d1:18:0b:b7:bb:c6:dc:c3:76:87:
         58:ad:36:ba:ff:39:0a:f3:60:37:67:59:9f:6d:8e:9b:0f:e7:
         18:ee:19:06:e7:ce:13:f2:34:2c:6e:f9:fa:58:ce:26:f7:4b:
         89:5b:ee:f0:79:9e:9a:fe:58:aa:c7:82:e6:fc:bc:1b:bb:9a:
         93:eb:ed:4a:96:ec:19:85:a5:8f:82:a8:24:fd:b0:aa:7d:5b:
         f3:23:82:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOQqgVLoP/oyuGOzsOGNSQ3E/cjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5NkQzRTUxNERFQTBFRTNDQzk3RUEzNTYwNTBBRTg1
OUJFQUI0RTAeFw0yNTA0MjgyMDUyMDJaFw0yNTA0MjkyMTQ5MDJaMDMxMTAvBgNV
BAMTKDY5RDA5M0FBNEVBNzFGNzkwOUQ2REIyMjcxRUY1MkI0RENFQzI1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOJy0wm1EnuiTlAsSADMKHCV6
USm4cnlD5bZO2UzaC2pSb4w9AKMzlG0+EaAH2mfJ2tVhiFfAUayyM8ufutuSKJK6
F7Pmx0Kox8N4GN7q5ukXhyuMvYpTAyMLjoZ7HFHE/VI5fEwJ7fwnaydHeTeCT3QU
ahZN861PMnJD58p4OkcuEdkNNrQDx46qwiIeOcywk+/XAekmtzxARfKTX3R1a04x
AZiC1JXnHuEjEQ64mxAnV2HPOnNaTX057dezXuosojNRYm2rA/QmvQWYlA9Dbfri
6bzTe98Z64KEf7p++hCi0rOSD8ZIhr8h/8I8wj+YlUu3rzif4NT6M5/9KSQVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUadCTqk6nH3kJ1tsice9StNzsJXswHwYDVR0j
BBgwFoAUyJbT5RTeoO48yX6jVgUK6Fm+q04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmt2c1BYNml1QmpEcTJncTJhZkYzUXZKV1k3emVnM3hvWkx2Nm9KUW1V
NEYvMC9DODk2RDNFNTE0REVBMEVFM0NDOTdFQTM1NjA1MEFFODU5QkVBQjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OTZEM0U1MTRERUEwRUUz
Q0M5N0VBMzU2MDUwQUU4NTlCRUFCNEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nmt2c1BYNml1QmpEcTJncTJhZkYzUXZKV1k3emVnM3hvWkx2Nm9KUW1VNEYvMC9D
ODk2RDNFNTE0REVBMEVFM0NDOTdFQTM1NjA1MEFFODU5QkVBQjRFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANGqKQYuvmGpmohcv60vgwHNeQTn6+PXd4rdO6Ouft/NDLRbjMyUy5RpfTuSo
KZRB/MHge0Y3iEHODDTbm6fyQcEhv3rDyxWaHnomc07qm0NCcwGEE1f06RLnZ0pi
iRSXrZvzziuBWbMue2XHhPVRv9yf5IfTXq+dYaBKQUvWubx3fhcl7fbUw8E0Mbmz
OMzgAMDNAZmBUuHC6sB+dPG1oHyQjx4CADN6E8DRGAu3u8bcw3aHWK02uv85CvNg
N2dZn22Omw/nGO4ZBufOE/I0LG75+ljOJvdLiVvu8Hmemv5YqseC5vy8G7uak+vt
SpbsGYWlj4KoJP2wqn1b8yOC/A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:57 2025 by rpki-client on console.sobornost.net