Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
File:                     64024652CD71CE0D3988DAA5555337E88EA6AE45.mft (raw, json)
Hash identifier:          WLNTvMQ2o7vCtJCgVTPT5N0QRmr4LDdYeRkztPUQnzU=
Subject key identifier:   28:27:D0:CA:55:1A:90:71:2D:34:D1:13:18:61:F8:B5:A2:CD:20:AB
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Certificate issuer:       /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial:       46644FF6C8E6857244F52CBFB3091D5D1B14B9B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
Manifest number:          8A
Signing time:             Mon 28 Apr 2025 07:10:16 +0000
Manifest this update:     Mon 28 Apr 2025 07:05:16 +0000
Manifest next update:     Tue 29 Apr 2025 10:57:16 +0000
Files and hashes:         1: 3137302e38332e31362e302f32332d3233203d3e20323636343636.roa (hash: x4B1LtPBzgvr/NYNO/kI5y1007Ofw4ErONYM3ld42vo=)
                          2: 323830343a333834343a3a2f33322d3332203d3e20323636343636.roa (hash: t0rtwgxOpgb6MlbIPiAeXwTEQngMIjFEFsCtDkggooo=)
                          3: 323830343a333834343a663030303a3a2f33362d3336203d3e20323636343636.roa (hash: nLJjP2M5cOu26GgeHEgYLTHDPNrCRIafYs2RavRGpe4=)
                          4: 64024652CD71CE0D3988DAA5555337E88EA6AE45.crl (hash: +E6Z4EmQV1y6j5zM+xiYkeKMfsIhy0cO7CAmA4pNu28=)
                          5: 323830343a333834343a3a2f33362d3336203d3e20323636343636.roa (hash: LIejXtAMA4meqYT4RsEo9MbfVHvov+p164/h4Wl8gC0=)
                          6: 3137302e38332e31382e302f32332d3233203d3e20323636343636.roa (hash: nov1lP/vN8JqbFUcdMKbz+ujjCYyRoyVUC/+Q68XOWk=)
                          7: 323830343a333834343a643030303a3a2f33362d3336203d3e20323636343636.roa (hash: EzMQ5o81ok23v0BMBHuKAYIBt+rvaMaVWtIgEpDT+6Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
                          rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:64:4f:f6:c8:e6:85:72:44:f5:2c:bf:b3:09:1d:5d:1b:14:b9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
        Validity
            Not Before: Apr 28 07:05:16 2025 GMT
            Not After : Apr 29 10:57:16 2025 GMT
        Subject: CN=2827D0CA551A90712D34D1131861F8B5A2CD20AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:9e:58:77:c4:00:b7:2a:0e:c7:9e:49:2a:
                    d2:70:b5:ea:4a:23:4d:02:7b:9a:1f:b5:53:36:83:
                    67:ec:c7:0a:74:4b:6a:40:8a:47:f0:a0:3a:19:5d:
                    74:5c:c4:54:ba:f0:2d:30:35:66:77:63:67:e4:73:
                    5b:a4:b5:f4:e4:29:bc:57:9c:96:85:d5:ee:1f:09:
                    62:41:53:d3:61:c1:7f:ae:5a:31:a1:96:e6:83:e0:
                    bf:0f:b8:e0:3c:1a:1a:bd:3c:44:15:76:51:a0:dd:
                    9a:84:73:53:78:60:26:5b:00:2c:b6:3a:0a:e7:f4:
                    c9:60:51:3e:d4:6d:8b:f0:f6:fd:1a:bc:52:e6:09:
                    33:17:0d:21:77:e2:8f:44:d1:6e:0d:19:98:95:3c:
                    2e:60:07:1c:12:47:e7:17:ab:da:34:47:22:77:bc:
                    2c:a6:80:cd:96:8d:0d:89:05:50:7b:d4:0c:fd:c0:
                    9f:3f:c9:b7:b5:ba:4c:29:f6:fe:04:33:2c:51:a1:
                    0b:90:20:59:ab:69:54:84:d5:64:cc:1e:33:16:37:
                    ac:81:e4:1f:cd:2b:43:3f:41:81:44:54:2e:cf:88:
                    b4:fd:f3:91:dc:43:b3:c3:b5:81:6a:61:02:da:d3:
                    f3:75:04:78:dc:39:b7:6e:4a:63:a1:38:37:bb:d0:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:D0:CA:55:1A:90:71:2D:34:D1:13:18:61:F8:B5:A2:CD:20:AB
            X509v3 Authority Key Identifier:
                keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:83:71:15:35:2b:6c:9c:4f:59:2c:87:1e:5f:60:56:03:
         a4:df:1e:b0:37:51:c8:bf:f9:0f:5a:b6:d5:06:9b:8f:9a:07:
         c6:8c:19:ca:4a:0c:72:39:22:87:6f:03:43:28:50:78:a3:7d:
         d4:1f:a2:43:f5:c7:d2:be:2d:de:b0:3a:99:6d:c3:c5:bd:d2:
         a2:90:85:fd:38:27:4c:6a:cb:61:56:9b:17:db:9f:44:f9:60:
         e2:7b:27:27:4c:e7:43:ab:29:f3:0d:a7:7a:fd:f7:0b:37:65:
         0d:49:aa:0a:1d:55:94:d2:ec:cf:eb:a5:1b:7e:97:19:97:a5:
         b9:66:54:ca:8a:fe:6c:8d:19:30:d8:bd:c3:0c:24:3b:ab:48:
         17:27:a4:c1:78:62:e8:a1:b3:83:b4:a1:f9:1f:81:a5:0c:f4:
         1b:19:37:36:85:b8:5c:77:f0:78:f1:77:90:92:5f:db:8d:d5:
         ee:68:03:95:6b:35:49:6e:78:1c:53:c5:2f:e3:90:58:60:25:
         57:62:08:b6:80:44:4b:0e:25:6b:70:b5:28:c8:b0:44:94:2a:
         67:85:cf:bb:21:ef:fc:b0:2f:e1:99:f6:9b:73:e5:fb:bb:d0:
         b8:17:6b:79:57:3b:59:43:34:28:2b:24:cd:37:21:9a:44:18:
         2f:1a:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:24 2025 by rpki-client on console.sobornost.net