Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
File:                     95D5107C3F975DC279B2EE7748B02AB010470E6D.mft (raw, json)
Hash identifier:          iUDKqiS9qQ0SUa5LLu+dQMm7ObdRjlzFlbxjLMR0LcQ=
Subject key identifier:   5C:C6:F5:88:1C:1B:9F:17:F7:05:34:E2:F7:4F:10:93:A8:25:F5:76
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       6DC6C2249FE0C8ACDB18C8925E71A8821257E85F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
Manifest number:          3E
Signing time:             Sat 26 Apr 2025 14:50:39 +0000
Manifest this update:     Sat 26 Apr 2025 14:45:39 +0000
Manifest next update:     Sun 27 Apr 2025 18:01:39 +0000
Files and hashes:         1: 34352e3138312e3131302e302f32332d3233203d3e20323639313833.roa (hash: uKdxelQt98Vs1PoAKC2B4qE1EDJe2rK9A4tKa24yDPE=)
                          2: 34352e3138312e3130382e302f32332d3233203d3e20323639313833.roa (hash: b3lyoHK7cnMfZlfwSyMTUao3pgodLMS9LB2LB4y6Fh0=)
                          3: 323830343a363061633a3a2f33332d3333203d3e20323639313833.roa (hash: wmRMlBGuiWklE1mcV8iNPrjxS56x/h7/Nn/MquFZ2xg=)
                          4: 323830343a363061633a3a2f33322d3332203d3e20323639313833.roa (hash: d7AP0FNhvj8K+DqXMurkXvTIzIygU4GoA0/tJ3J/QMo=)
                          5: 34352e3138312e3130392e302f32342d3234203d3e20323639313833.roa (hash: 2UGsByCjqNONdWF47omBh/Tu11PTgI4ZLCXcjDQe5tM=)
                          6: 34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa (hash: arERRLe6F4UNLeiKcviJ8dp0FmnMd1FyTwtTYQJmSUQ=)
                          7: 323830343a363061633a383030303a3a2f33332d3333203d3e20323639313833.roa (hash: HKyHdXv7bZXJaz6Qv0tYPXqwlzh4afu3ZGCIBugzwy4=)
                          8: 95D5107C3F975DC279B2EE7748B02AB010470E6D.crl (hash: X6e3AErpMcgG8Rd616VBFhddW3WQmrK1LeKqsTA0YFE=)
                          9: 34352e3138312e3131302e302f32342d3234203d3e20323639313833.roa (hash: CsySUJ5Ith9S5iKoal54iWjTpuAM1N8M1O1IQbgABOE=)
                          10: 34352e3138312e3130382e302f32342d3234203d3e20323639313833.roa (hash: jaF0baPD1Ok/xHVOop7Av0nXsb4KJmfxT+rOXk74ehs=)
                          11: 34352e3138312e3130382e302f32322d3232203d3e20323639313833.roa (hash: GL81dEJlRKChuOE0S8509jFD8OV3S20mmiTLF0fC9So=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 18:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c6:c2:24:9f:e0:c8:ac:db:18:c8:92:5e:71:a8:82:12:57:e8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Apr 26 14:45:39 2025 GMT
            Not After : Apr 27 18:01:39 2025 GMT
        Subject: CN=5CC6F5881C1B9F17F70534E2F74F1093A825F576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:13:d4:ec:88:ee:e2:78:ce:87:d3:08:2f:bf:
                    39:79:59:2b:13:08:8d:39:c8:65:e9:34:7b:83:4c:
                    5f:db:fb:12:9e:a5:10:8d:89:48:ae:33:d6:54:89:
                    74:53:37:4e:54:d4:5b:52:e1:04:ea:cf:7d:9b:aa:
                    6f:9f:fd:e9:d0:39:40:46:26:36:d3:b2:b6:5b:34:
                    dc:63:bb:e5:62:e9:05:3c:be:d1:df:8f:0b:28:48:
                    47:a2:c1:f7:30:cc:39:a7:f9:40:56:35:9a:7e:95:
                    cd:d2:ff:f3:a8:04:51:f6:16:b2:89:d7:d2:c7:dd:
                    7f:ce:1d:3d:38:80:a2:c7:b5:d2:3d:da:76:4a:25:
                    07:fb:b8:83:62:f9:7d:ce:21:f9:14:9d:11:35:da:
                    44:0f:2b:34:e1:97:5c:ab:12:69:84:98:6c:45:9b:
                    58:09:0b:6c:84:0c:86:4f:d6:21:df:9a:b7:c7:c5:
                    26:42:68:b4:70:44:f2:25:9f:a4:01:30:b1:21:b8:
                    0e:ea:37:9d:f9:d1:7c:9b:cf:86:2a:ed:4b:ab:c0:
                    13:3a:77:9c:d9:b8:fc:6f:db:04:72:ee:5d:22:74:
                    92:ec:68:66:c7:d9:07:1e:b9:4b:ed:22:68:ab:77:
                    9e:f9:0d:68:98:7b:05:10:db:ac:f6:be:79:fa:fd:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:F5:88:1C:1B:9F:17:F7:05:34:E2:F7:4F:10:93:A8:25:F5:76
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:47:bb:b0:3d:29:12:fb:10:ab:b8:b6:1a:47:3b:35:b7:70:
         05:91:d4:bc:1e:f9:2f:52:81:e0:49:e5:43:c3:85:94:7b:fc:
         e2:93:14:ff:e1:f1:e0:6a:c5:10:05:ad:d9:e8:f2:27:1c:96:
         30:b9:aa:96:e9:34:ec:e8:4d:8f:63:6d:46:4a:f7:65:b4:a8:
         7d:c2:f3:bf:6c:62:a2:59:2d:2d:76:9b:3d:c8:29:af:fe:54:
         5f:2c:d9:c6:06:6c:95:2f:a1:a5:37:5c:5b:35:5f:2d:b3:9e:
         b5:3d:48:ed:97:d7:d4:0c:95:0b:0e:25:b5:25:f2:84:fa:54:
         c0:a9:a8:43:64:10:5a:76:ed:8f:68:a6:99:08:c8:2e:be:db:
         0a:d6:a4:7e:5b:8b:97:f2:be:ac:5c:6e:7b:9e:54:a7:47:7a:
         aa:ae:53:95:b9:d1:e2:b7:40:2a:85:53:d8:87:79:9b:dd:01:
         cb:6b:85:23:44:fc:42:66:a9:a2:4b:be:6e:e5:36:43:35:41:
         5a:9e:66:ef:7d:71:21:41:41:53:44:a2:67:86:a9:80:26:f6:
         d2:03:a6:e2:69:cb:10:e7:9c:d3:1e:91:93:c6:40:6d:9e:7b:
         c0:cb:d4:ab:74:55:5f:7a:40:07:42:36:0a:e3:10:27:3c:f2:
         5b:e0:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:12 2025 by rpki-client on console.sobornost.net