Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.mft
File:                     832B06F1B7DDB99E413147B2D786DA7B38425995.mft (raw, json)
Hash identifier:          vqQHd2kvAIr/kbE+Kre9TEhRKJ03kLDngJTHONOkVBI=
Subject key identifier:   83:7F:48:D0:78:39:AC:FD:58:8E:ED:E8:A7:F4:E1:E6:50:B6:E1:7F
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Certificate issuer:       /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial:       201EED3E13589189843390C277CD8C057BBCA090
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.mft
Manifest number:          04
Signing time:             Thu 24 Apr 2025 19:21:48 +0000
Manifest this update:     Thu 24 Apr 2025 19:16:48 +0000
Manifest next update:     Fri 25 Apr 2025 21:19:48 +0000
Files and hashes:         1: 832B06F1B7DDB99E413147B2D786DA7B38425995.crl (hash: hpgH8wjTwBbtATBMx3T8sAy+ihLBUajzQhsUTC7b+sY=)
                          2: 323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (hash: /VRYpkDTI4TSc6bUEqEP2I2X3qUMsUl/VsM5gTe6J6E=)
                          3: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (hash: tg1TCUA36kG4u6oJAO6vaCAFOuZff2K8gsq3ZmBL1zA=)
                          4: 323830343a346632383a633030303a3a2f33342d3334203d3e20323638333038.roa (hash: hJTr0WuVlugEFZLl9uF3TUtLYuCZsArMKnlRydNlufs=)
                          5: 34352e3233382e342e302f32332d3233203d3e20323638333038.roa (hash: 5Ve8oQzJ7p35sMiaN/+Zw41+yfa1uiJsKEA46pR+kTI=)
                          6: 323830343a346632383a343030303a3a2f33342d3334203d3e20323638333038.roa (hash: 0KiNdCPgaHmmLBadpqRBBB1JXZRCsUoplerrZ7/EdG0=)
                          7: 34352e3233382e362e302f32332d3233203d3e20323638333038.roa (hash: Dn+J9AGP6rJFBVdrXvm5JZWn5xVM+3DQE+c3IJ7tt+M=)
                          8: 34352e3233382e352e302f32342d3234203d3e20323638333038.roa (hash: g04PjtaY9iB1ORZzVmgcA/EBHgU+diQrfzvSfohLDRw=)
                          9: 34352e3233382e372e302f32342d3234203d3e20323638333038.roa (hash: iUpmT+Gw+IEFsk/E51vQW6W/d4ABueJPWyHiYusVP40=)
                          10: 34352e3233382e362e302f32342d3234203d3e20323638333038.roa (hash: DiREgQX4MIgy+VsVFcFC8htKBY64JbYXf5NktUdfq9Q=)
                          11: 323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (hash: 9gTmmfVH5j1gZnVf3E3tWR3sNPk875mQkPhY8SdYVI8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1e:ed:3e:13:58:91:89:84:33:90:c2:77:cd:8c:05:7b:bc:a0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
        Validity
            Not Before: Apr 24 19:16:48 2025 GMT
            Not After : Apr 25 21:19:48 2025 GMT
        Subject: CN=837F48D07839ACFD588EEDE8A7F4E1E650B6E17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:58:52:ac:75:7f:9d:64:fc:98:8c:eb:f7:
                    49:12:51:a0:cc:13:98:28:60:1f:3e:dd:1e:80:c1:
                    2a:97:82:66:6e:fd:9c:fc:56:81:a1:8f:77:be:da:
                    72:0c:7f:fe:f0:20:f5:02:9d:11:4e:2e:19:d9:0f:
                    ba:ae:73:3a:4b:c2:82:45:86:d1:fc:23:86:fd:6a:
                    bd:bd:fc:0c:58:f1:5e:f6:1e:fd:c5:24:13:71:46:
                    bf:2e:59:69:c5:37:b5:ce:74:df:f0:91:b4:34:78:
                    42:5c:6f:90:44:64:e9:f1:7e:16:57:b8:99:dc:b8:
                    cb:05:f3:a4:95:bc:42:ed:c6:81:40:30:5c:98:ae:
                    ad:2e:bd:db:27:a6:69:78:69:3d:c9:df:ed:dd:bf:
                    0f:9f:b0:5c:20:c6:63:d2:47:aa:38:61:57:21:44:
                    16:94:d4:4c:56:64:50:1c:1e:58:6b:66:63:72:89:
                    25:21:02:4a:14:4b:99:c4:5f:28:12:94:c4:39:46:
                    45:96:02:da:2b:25:a5:60:57:3f:a0:21:ab:66:90:
                    e2:16:45:9c:cc:a6:3c:9d:84:46:4f:98:84:50:8e:
                    9b:bb:e5:00:f0:e8:dc:8e:94:35:59:fc:fc:95:2e:
                    7d:a6:f4:0e:c1:c8:8e:eb:6b:b7:8a:0c:d7:2d:c2:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:48:D0:78:39:AC:FD:58:8E:ED:E8:A7:F4:E1:E6:50:B6:E1:7F
            X509v3 Authority Key Identifier:
                keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:24:b9:48:9a:13:ed:34:01:02:68:e0:53:18:81:3f:a9:
         c0:01:98:eb:af:22:a6:eb:1d:f6:02:e0:b1:26:e5:d8:d9:9d:
         f9:53:e8:e4:bb:57:a9:30:04:9c:0d:c4:a4:bb:b2:d7:f1:89:
         5e:bd:ee:fc:a4:76:74:ac:e3:78:8a:e9:c4:95:53:87:42:19:
         57:4d:14:5a:b6:51:e4:2d:b6:63:eb:ca:88:f5:c5:d7:0f:1c:
         2e:9e:72:5b:40:03:5e:ec:11:28:1c:3b:cd:48:f2:21:71:b7:
         7b:f9:b8:9c:b0:b8:cc:e1:40:6d:ac:eb:c0:b5:dd:b7:08:71:
         10:1b:d3:87:a3:13:cc:54:65:95:e8:f4:53:c1:8a:d6:d4:48:
         48:e3:22:f0:38:ae:dd:de:27:9c:32:d5:7c:c1:db:fc:cf:3d:
         7c:be:1d:d8:a4:a7:ed:61:87:51:7a:cc:e0:cf:b9:bb:f0:18:
         6a:1a:7a:ec:99:87:87:4f:6d:7e:6a:1b:52:47:79:4e:65:b5:
         99:04:07:3c:e2:a0:21:f2:23:3c:2c:05:bf:d0:fe:9d:58:15:
         40:56:e7:e6:ad:47:a6:81:42:4b:c1:3c:03:d8:0f:2b:f2:62:
         59:8b:48:0a:15:72:f9:88:87:c4:be:8c:41:93:33:83:09:dc:
         54:4a:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:43 2025 by rpki-client on console.sobornost.net