Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
File:                     DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft (raw, json)
Hash identifier:          ZrKY1vutdbrh2DndZAazlTnTpAyTwQi2n4xoa0g1oN4=
Subject key identifier:   63:EB:F3:98:8B:15:A7:6D:DF:17:7B:E5:35:20:75:8A:18:04:3A:49
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       334233C68955ED58871E0DC12F8024B459008862
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
Manifest number:          0204
Signing time:             Mon 28 Apr 2025 13:25:29 +0000
Manifest this update:     Mon 28 Apr 2025 13:20:29 +0000
Manifest next update:     Tue 29 Apr 2025 14:14:29 +0000
Files and hashes:         1: 34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (hash: oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=)
                          2: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (hash: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=)
                          3: 323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (hash: ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=)
                          4: 323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (hash: 0NBW+l9oQvgut+Wpp8Bb1HAjDdw9+mIwXXr8N5HctTA=)
                          5: 323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (hash: DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=)
                          6: 323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (hash: JmbvOjVKbR/XYJut5SHfgiOn1lqjtci9jd0EVLJXXL0=)
                          7: 34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (hash: Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=)
                          8: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl (hash: eNI263pYS1AbomtvVxCSGsCUfLmeuU8T/fnyLAkKyV0=)
                          9: 34352e3232372e3131322e302f32342d3234203d3e20323637303234.roa (hash: NbuMp6zwIPF0O7p39k96W67CEvlo0InSX/oh1MCa9MM=)
                          10: 323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (hash: 7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=)
                          11: 323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (hash: L9M53YB4o7JNc7dDg3XjTGRgx6YePRqEVkPp8+b2wk4=)
                          12: 323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (hash: GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:42:33:c6:89:55:ed:58:87:1e:0d:c1:2f:80:24:b4:59:00:88:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Apr 28 13:20:29 2025 GMT
            Not After : Apr 29 14:14:29 2025 GMT
        Subject: CN=63EBF3988B15A76DDF177BE53520758A18043A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:3a:a0:fa:b4:d7:44:0c:30:1e:15:50:7b:
                    7d:87:8c:27:c2:8a:7a:03:79:fb:e0:cf:29:ce:98:
                    f2:c6:a5:0b:8e:db:b5:1c:53:ec:09:0c:19:a1:ad:
                    8e:2d:a1:72:2c:cb:0f:7f:fc:10:fa:dd:28:d3:54:
                    41:9b:05:37:c6:3c:5b:c9:09:4c:cb:fa:5d:d4:25:
                    9e:69:38:c9:87:27:ad:f1:de:70:74:87:03:8b:cb:
                    4d:cc:1a:ad:4b:26:a5:2e:b0:6b:4c:8d:60:c7:77:
                    ee:6b:e7:7c:b5:6f:df:f7:89:5c:b2:7a:02:15:ac:
                    04:1a:ba:02:ef:81:4c:9b:62:45:77:74:10:3d:5c:
                    03:d9:bf:20:0d:0b:51:bc:33:63:6b:6c:9e:6c:38:
                    53:4d:05:6a:e9:71:c5:ed:bc:6d:7f:b1:cd:b4:f9:
                    cb:17:da:12:ab:85:3c:6a:a5:cb:97:61:75:21:89:
                    9c:a1:9c:74:26:0b:c1:27:a8:ce:e4:3f:72:b9:cd:
                    9b:44:4e:64:a8:75:24:7d:49:68:62:92:18:1d:a7:
                    6e:62:b3:13:c9:27:80:44:e0:1d:ec:63:d6:c4:80:
                    3d:f5:48:93:2f:ba:24:23:80:d9:19:ac:4d:7b:ba:
                    e5:59:1f:d9:6b:a5:9f:03:3f:ae:fc:c9:62:53:26:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:F3:98:8B:15:A7:6D:DF:17:7B:E5:35:20:75:8A:18:04:3A:49
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:50:f2:84:14:33:f1:df:d8:2c:aa:9d:ae:a5:f8:23:10:
         9c:2a:bf:c9:ed:fa:5e:65:7a:9e:f9:84:9f:3c:a6:18:2c:23:
         f1:8f:ca:f7:eb:32:00:69:94:f0:05:b8:88:47:fb:bd:9e:f6:
         1a:ea:e2:9f:35:38:a4:79:3f:6e:f9:ad:75:48:76:f5:cc:c4:
         e3:ad:55:6b:0c:3c:c9:46:34:4e:23:fd:da:ce:2b:98:6b:f5:
         1b:29:08:97:ad:49:33:d6:f7:89:4e:0a:f9:eb:82:03:1e:d1:
         b7:cf:93:06:44:0d:24:af:fc:27:dd:84:14:22:a6:66:8b:17:
         3e:0a:23:e3:59:23:83:81:ab:e3:b1:ca:17:fa:22:81:8f:7b:
         e9:3c:0e:b6:a5:16:94:63:30:78:f7:b3:f1:a6:4b:62:e0:18:
         f9:22:0e:cf:54:48:ea:d8:9f:7a:21:17:1d:43:36:10:93:88:
         55:76:c5:eb:ca:0b:a0:d5:3b:7f:ea:60:e7:67:cb:e5:07:f0:
         64:75:95:37:b4:80:8f:e6:c7:23:60:3d:22:ea:02:81:4e:f3:
         ae:1e:ef:38:67:ea:bb:cb:0b:b6:da:00:2f:40:28:d8:fc:87:
         46:45:90:8e:3d:21:4f:3f:24:9c:2f:50:93:69:25:7e:5e:e8:
         5b:e4:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:07 2025 by rpki-client on console.sobornost.net