Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
File:                     EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft (raw, json)
Hash identifier:          9NlBT2J7oRKuhH9eawv90bTyu7wlfedb92WSpevkFYU=
Subject key identifier:   3A:79:CF:FA:14:52:86:04:E0:77:52:70:0F:20:A1:3F:03:B7:02:8A
Authority key identifier: EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Certificate issuer:       /CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
Certificate serial:       1F8EB5AB0CD9C22C107762BE4300910E523671F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
Manifest number:          37
Signing time:             Sun 27 Apr 2025 00:26:06 +0000
Manifest this update:     Sun 27 Apr 2025 00:21:06 +0000
Manifest next update:     Mon 28 Apr 2025 00:58:06 +0000
Files and hashes:         1: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: eI9IlZl/tRp7/siSUwrP+jwi6ppBfWhGBwwz7vclWQQ=)
                          2: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: LpKH0E9Fiqy6p2z7JZlCFoKYg86XuaBmNFMxvxFaUnk=)
                          3: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: PPekn/TbiAwZrUnUTvoGIR/C6CK1xTfX/AL5sBGZ0T4=)
                          4: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: Ogv+aWRVYaq/m3tuVWrvpV5SQrW6nzj0FCPiU5vnQgE=)
                          5: EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl (hash: bbCk+dM/x/gMTb9P/LrLUSCuwEoKmXc1F4qixlXU1fU=)
                          6: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: +y1vilBwLAReV6zpa5/MYexJEeDB2IAxzkPlUoJxrsY=)
                          7: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: fp71B+OVFduQtnUnUeQM1x6QOqtaPdWFpcDtAkCRBM4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 00:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8e:b5:ab:0c:d9:c2:2c:10:77:62:be:43:00:91:0e:52:36:71:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Validity
            Not Before: Apr 27 00:21:06 2025 GMT
            Not After : Apr 28 00:58:06 2025 GMT
        Subject: CN=3A79CFFA14528604E07752700F20A13F03B7028A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:af:3c:22:e8:ef:57:af:a6:89:fb:0e:79:
                    65:29:8d:f2:dd:94:72:f6:c1:f7:61:1a:21:11:f2:
                    b8:4e:f2:14:d8:d6:8c:bc:b8:ee:3f:6f:25:81:f8:
                    3d:d8:6e:79:9f:d8:0f:d7:04:d4:fd:8c:47:84:16:
                    12:2f:fc:08:63:e8:32:ae:8a:00:c1:ce:4b:09:cf:
                    df:42:21:4e:9b:3f:56:21:62:8e:d5:55:cf:8d:93:
                    0e:6e:84:9b:dd:23:22:bb:5f:3b:bf:93:a8:72:84:
                    6e:d9:85:a9:b4:7f:68:58:8d:c6:4d:65:c6:88:07:
                    8d:4a:7f:02:00:b7:9b:b2:80:85:4f:96:75:3f:46:
                    f5:f3:12:bd:32:46:8e:1a:d8:25:35:1d:48:dd:fc:
                    54:98:41:2f:37:b3:59:09:69:cc:3b:2c:b4:ce:f9:
                    4f:ec:60:e3:05:b8:55:12:bc:b9:02:5e:af:02:56:
                    3b:96:b7:46:7d:e1:e6:1a:13:1d:d2:5b:c2:7c:61:
                    2c:34:98:49:88:39:be:fe:87:48:d7:67:59:e0:b6:
                    b4:50:57:5c:0d:82:62:42:90:80:22:52:16:7f:55:
                    7a:52:a8:f9:0c:75:d7:6c:05:9e:73:d9:2e:81:a5:
                    8e:03:d0:07:fc:8c:71:e3:0c:bf:d1:ab:e5:48:6f:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:CF:FA:14:52:86:04:E0:77:52:70:0F:20:A1:3F:03:B7:02:8A
            X509v3 Authority Key Identifier:
                keyid:EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:68:ba:5e:52:78:6a:30:93:57:a8:e1:83:55:62:ed:1a:d6:
         cd:d7:dc:0a:06:8b:92:dc:87:f8:c9:ea:ee:d6:a2:80:66:5c:
         8a:35:a2:d5:d2:ea:e1:bb:f6:66:9f:ed:2f:72:b3:51:b2:02:
         77:2d:e5:38:a2:f3:ea:64:c5:3b:24:47:6f:51:d9:51:f6:b3:
         74:28:61:18:2e:ae:f1:4c:74:e1:cd:67:9a:46:c2:ae:1f:2d:
         f9:c2:43:ea:64:b8:33:ab:b1:d9:e8:f9:05:95:a7:1d:70:ad:
         98:c1:51:6f:fe:f0:12:90:0a:74:4c:66:7e:63:06:3c:7b:e4:
         c5:f2:6b:97:2a:14:90:10:50:eb:bf:94:9d:76:e3:08:02:a6:
         62:93:f4:18:24:1a:84:58:e2:70:b9:b1:76:92:bc:37:f7:8e:
         e0:63:40:1d:c5:cd:71:60:b5:93:a1:fb:63:00:d6:6a:60:2a:
         53:f3:30:75:7e:96:78:16:a5:1a:79:2b:1c:58:ef:03:ff:b4:
         dc:e2:be:45:5c:95:e7:bf:09:56:cf:96:62:01:76:66:84:67:
         e2:29:7d:d1:a3:e2:bd:4f:c3:3c:1b:ca:c4:af:6a:e9:0a:c0:
         c8:e5:a3:88:7a:3b:da:4e:37:29:75:5c:87:89:88:86:34:e2:
         4a:e5:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:52 2025 by rpki-client on console.sobornost.net