Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
File:                     117560A27F42885C52E66148007C2989B0339DAD.mft (raw, json)
Hash identifier:          ev2ofPqLZWeeCywWSYAuhfXGJbHp5oR7fdpbTa9ze4c=
Subject key identifier:   FF:61:6B:6A:6C:C8:3C:02:FE:29:AC:7D:C2:38:FD:6C:18:C5:CF:68
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Certificate issuer:       /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial:       30CB63F517D80C5B6EAABFA9179F542EE4C3AF2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
Manifest number:          79
Signing time:             Fri 25 Apr 2025 17:59:19 +0000
Manifest this update:     Fri 25 Apr 2025 17:54:19 +0000
Manifest next update:     Sat 26 Apr 2025 19:03:19 +0000
Files and hashes:         1: 3133312e3130382e3136322e302f32342d3234203d3e203631363735.roa (hash: eaPmTPN0pKkcKOtrEquMUQp+UXQF/ookE75h2R2/ipc=)
                          2: 323830343a316363383a3a2f33322d3332203d3e203631363735.roa (hash: h0sAlKSBteG5e9UspnLUj4TrJvUGL24yn03JgzFpoR0=)
                          3: 3133312e3130382e3136312e302f32342d3234203d3e203631363735.roa (hash: EHaBubJbNTvMDQfi91UInX9N43xy0AaDbLvzR5QAJj4=)
                          4: 3133312e3130382e3136302e302f32342d3234203d3e203631363735.roa (hash: FAmEwKo3j5jFWrWKgpWyWqsqYmyhwf3nFZ/D+5dSzUM=)
                          5: 3133312e3130382e3136302e302f32322d3232203d3e203631363735.roa (hash: lfUAYU5muERMvqqEjkRPAiv8iff9paIqhjH2W5tHNnc=)
                          6: 3133312e3130382e3136332e302f32342d3234203d3e203631363735.roa (hash: TpMe21/y7N0hpatEwrFUwO3jGlX7QHMEgWX4xeJ/TDA=)
                          7: 117560A27F42885C52E66148007C2989B0339DAD.crl (hash: SzDoThrAoaqr/pWtYz93Zq6WZoIeB6Xt/U3h1uThLEY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
                          rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cb:63:f5:17:d8:0c:5b:6e:aa:bf:a9:17:9f:54:2e:e4:c3:af:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
        Validity
            Not Before: Apr 25 17:54:19 2025 GMT
            Not After : Apr 26 19:03:19 2025 GMT
        Subject: CN=FF616B6A6CC83C02FE29AC7DC238FD6C18C5CF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:a6:a7:c3:48:bb:4b:83:00:40:d8:0d:a2:
                    b6:d1:f0:e3:15:29:02:28:26:d0:37:d2:7c:2d:78:
                    95:56:51:38:9e:3a:1c:75:fc:77:6e:09:41:a7:d0:
                    4d:10:de:93:8d:33:52:d1:5c:a9:99:b6:93:04:cb:
                    bc:c3:7f:c2:4c:2c:80:5f:09:f5:22:20:ed:77:ff:
                    af:29:11:e4:e8:82:c6:7f:4d:c0:dd:d3:4f:5f:53:
                    b1:f0:bb:d1:07:d6:33:9d:2a:6b:88:f1:3c:b2:70:
                    2d:af:4e:66:9f:e4:1c:94:df:8d:e2:96:2d:ac:1b:
                    64:7a:a5:82:65:16:3b:8e:9b:9f:50:f8:6e:23:ce:
                    f9:b1:7f:85:15:51:f5:b5:07:3d:db:4c:9c:cf:e7:
                    9a:bd:6a:99:93:13:bf:04:9b:8f:16:57:62:2b:6a:
                    30:64:6d:66:16:2d:8c:91:69:e6:15:54:9a:2f:62:
                    e9:80:e0:ac:8d:76:07:39:c7:b8:8d:8c:8a:1c:85:
                    08:e7:0a:cd:32:7d:66:6d:72:2d:2c:1e:34:92:c2:
                    a7:c9:c1:e6:ac:66:d4:14:52:df:9e:b9:6e:59:66:
                    9e:ff:07:9d:9a:7d:8f:7d:3d:34:3b:0b:29:3b:23:
                    24:ca:2d:e2:44:d5:c2:4b:74:27:68:7f:e4:32:52:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:6B:6A:6C:C8:3C:02:FE:29:AC:7D:C2:38:FD:6C:18:C5:CF:68
            X509v3 Authority Key Identifier:
                keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:06:84:f7:b6:e7:b7:b3:84:d3:89:d1:24:58:77:50:3c:68:
         55:65:16:f4:98:67:63:08:c2:c4:4f:0d:d6:35:43:09:8e:cd:
         9f:64:40:b3:45:35:86:21:c6:8c:ba:4e:aa:df:16:3e:64:4c:
         53:18:d5:ed:d1:56:4e:d8:19:a7:a2:88:3a:e7:cd:a5:b2:ba:
         41:60:cd:56:bf:e1:c2:f3:8b:7e:2c:c1:a1:32:93:75:2c:30:
         2c:59:9c:0e:f7:26:ce:c9:f9:87:3c:30:fc:e8:f7:5e:56:c7:
         f4:a0:72:2f:aa:9a:c9:c2:56:e9:a2:cd:89:e3:df:f3:65:76:
         09:b2:57:76:1a:c1:92:55:75:ac:17:03:ec:98:d6:c2:34:92:
         d9:63:d1:1b:95:2f:16:5f:0c:d2:05:b4:63:f9:ff:ba:3f:5b:
         fa:93:a1:9e:b4:74:65:2e:97:f7:14:6d:f9:a3:b9:2c:cb:63:
         bb:b8:19:72:c8:6f:70:8a:f7:82:24:ff:84:ac:81:66:a0:e8:
         35:c5:b3:83:66:4f:79:1e:43:e1:b4:c9:69:0c:8b:4a:eb:22:
         1e:19:00:58:92:57:7c:a8:a2:e7:5c:d8:8e:f2:4b:4c:da:9f:
         7d:40:10:c1:4c:ad:ed:55:cc:c7:35:cd:04:1d:b0:87:da:c7:
         a3:04:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:41 2025 by rpki-client on console.sobornost.net