Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
File:                     DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft (raw, json)
Hash identifier:          io4/ak4hQZ6Voi7dMxX/hIy8+2dtIIXbXCdMmMeiHb8=
Subject key identifier:   71:B0:FC:5D:EA:18:08:ED:B7:5F:47:A7:ED:CD:EE:AC:39:53:47:4D
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Certificate issuer:       /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial:       16ED46E99E87FC1971D448AA24D1047905138491
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
Manifest number:          0211
Signing time:             Mon 28 Apr 2025 14:42:54 +0000
Manifest this update:     Mon 28 Apr 2025 14:37:54 +0000
Manifest next update:     Tue 29 Apr 2025 17:17:54 +0000
Files and hashes:         1: 34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (hash: F0iJJLK+qtzIFyRLpy0EyTtly0FRV+JWkpb8raqK7Ug=)
                          2: 323830343a353464633a3a2f33322d3332203d3e20323638363734.roa (hash: 8CgHQ9irKPqyXd+/nfsUIZVpQRSUaHbclbp+QT/EMhI=)
                          3: DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl (hash: hFYA2c0ycDzUR/rIx5X/ef3BWwJ4Fz1dHXOMj1QUVdQ=)
                          4: 34352e3136352e39362e302f32332d3233203d3e20323638363734.roa (hash: G96u8Es8rAMxBgadnJF1aLhiy1bc5gUbAouK+dNgJs4=)
                          5: 34352e3136352e39362e302f32342d3234203d3e20323638363734.roa (hash: kZRi7uRivoMGOiN59xVkAkEoXGpFdo2o8Nzgqo/+u/g=)
                          6: 34352e3136352e39382e302f32342d3234203d3e20323638363734.roa (hash: 9+i7sCc+fn6JzBJIPO9Mu7IMOuYn28ht0HhNneZTgdg=)
                          7: 323830343a353464633a3a2f33332d3333203d3e20323638363734.roa (hash: 9vPzg3Epdrtk4V/Ppm9P+Msv6bbSb1T5JX6NqowAsPc=)
                          8: 323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa (hash: 3Ivye6BWBG3HzbEMq9Yk4n5e7wScURhO70Azx2lduEs=)
                          9: 34352e3136352e39382e302f32332d3233203d3e20323638363734.roa (hash: BLQT2gF1gWMxdlnLjR1JMe+tccC2tXTIs0mN6yyKaOg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ed:46:e9:9e:87:fc:19:71:d4:48:aa:24:d1:04:79:05:13:84:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
        Validity
            Not Before: Apr 28 14:37:54 2025 GMT
            Not After : Apr 29 17:17:54 2025 GMT
        Subject: CN=71B0FC5DEA1808EDB75F47A7EDCDEEAC3953474D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:5b:6f:78:68:b8:e0:54:f2:34:a3:8b:43:
                    d6:95:e0:78:6f:a2:f9:de:ae:63:26:fb:65:2a:33:
                    b8:41:f5:18:85:a2:68:56:ef:bd:27:58:5a:36:2d:
                    e5:38:fa:e6:a2:d7:db:44:3e:b9:53:b7:3a:dd:a3:
                    7c:fc:c7:05:42:2b:ec:cd:2d:c9:e4:36:69:51:c1:
                    3f:4f:c1:7b:57:32:45:f9:31:13:f2:21:7c:d9:ba:
                    ad:fc:24:78:25:0f:f7:df:11:8a:97:6f:1c:87:90:
                    32:75:83:b8:82:e1:15:21:ed:be:f3:c2:ed:7c:2a:
                    aa:82:b4:40:ee:8d:03:23:e9:5c:17:86:b7:ca:40:
                    97:52:51:74:dd:4e:98:6c:91:ad:fd:f6:15:19:b3:
                    d6:31:6c:28:c7:5a:39:74:e8:4d:f7:51:f9:18:09:
                    43:0a:8f:7c:76:07:4f:44:97:78:68:36:0d:72:a3:
                    f9:96:46:fa:c0:5f:64:d8:8d:78:b8:37:16:dd:e0:
                    9d:ad:64:6c:df:cf:c4:2d:d6:3a:97:85:b1:9c:5f:
                    52:e8:a8:4e:da:d2:97:92:ce:b2:b6:99:12:c9:7a:
                    40:92:11:d0:3d:ec:7e:4e:90:38:76:4e:a2:75:7e:
                    6a:b9:d5:1b:8a:9c:80:ea:b4:55:28:b3:aa:2b:26:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:FC:5D:EA:18:08:ED:B7:5F:47:A7:ED:CD:EE:AC:39:53:47:4D
            X509v3 Authority Key Identifier:
                keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d3:ea:14:2a:44:5b:3a:d5:f0:ac:e1:da:3f:7a:8b:93:a9:
         9e:60:0e:00:1e:96:4a:7a:76:b6:c7:82:d4:38:ed:34:4b:a2:
         87:ad:03:a5:2e:0a:64:59:79:d0:60:20:6a:d7:56:df:ca:44:
         63:43:b5:05:c4:59:a9:5a:a2:fc:6b:e4:fd:55:b9:8d:2e:ba:
         00:01:7c:b8:91:a1:8d:64:df:cb:9f:4a:39:5a:e3:88:86:16:
         5f:d8:68:91:15:22:71:5a:ab:a5:37:63:ba:66:9c:d6:b9:8c:
         55:9c:fc:b0:bb:1e:76:22:b6:61:74:e5:d1:ac:f4:c4:20:cc:
         af:32:63:27:d6:72:86:da:db:2f:c1:6c:54:52:89:f2:b8:c7:
         b9:25:d9:33:39:c9:ee:62:d3:18:61:dd:d1:0a:e8:ee:41:c5:
         08:cf:56:e2:b2:2f:08:6b:da:ab:0b:c9:66:02:b4:20:8d:d8:
         f7:26:fd:70:63:be:d9:e7:51:07:f3:ef:a3:12:d3:be:f7:56:
         c3:93:9a:11:d1:2c:78:92:45:10:4c:52:d7:70:85:b6:a3:b3:
         82:86:be:b9:f9:62:b0:fb:64:df:0d:c5:c2:75:8d:c4:31:76:
         a5:43:fc:5f:02:f4:c4:05:73:46:63:f1:d6:6b:4c:cc:18:0f:
         b1:ad:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:56 2025 by rpki-client on console.sobornost.net