Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          gEySIHwzTLtM0jvv1lC0Z1YcG4NurWWKslpSI5NdlNw=
Subject key identifier:   5D:30:9B:AC:82:5E:C2:3C:57:DB:2F:FD:37:2B:7F:96:0F:0C:DF:F6
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       2C300CA59F17E5447BF70EF2601D9669E2A9FB81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          0201
Signing time:             Thu 24 Apr 2025 08:18:42 +0000
Manifest this update:     Thu 24 Apr 2025 08:13:42 +0000
Manifest next update:     Fri 25 Apr 2025 10:10:42 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: cVz9YECT1J8lHfo8DGcYu+HmR8aDOxQjc2eT5dxAzcg=)
                          2: 323830343a386230303a3a2f33322d3335203d3e20323733373036.roa (hash: 6TL5vKPSaKqQE4gIGwSgvsrJrF+N73V7cP4sGVuVr+A=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:30:0c:a5:9f:17:e5:44:7b:f7:0e:f2:60:1d:96:69:e2:a9:fb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Apr 24 08:13:42 2025 GMT
            Not After : Apr 25 10:10:42 2025 GMT
        Subject: CN=5D309BAC825EC23C57DB2FFD372B7F960F0CDFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:da:23:7e:f4:ad:da:b8:a9:cd:12:da:3f:
                    85:36:98:7a:bb:0e:fe:58:f2:31:c6:31:c7:ad:eb:
                    40:9f:20:8f:e8:bb:37:7f:dd:95:64:fb:9f:4f:a7:
                    4a:cb:0b:1d:cb:96:95:9c:ff:36:0d:76:06:d0:55:
                    42:42:ee:7e:5d:07:8d:8b:25:dd:f0:44:fb:d1:75:
                    c0:10:8a:9e:2f:13:96:0a:7e:b9:78:71:01:74:b9:
                    44:dd:45:9e:24:c7:92:e1:43:5f:95:56:f3:80:fc:
                    79:0f:f1:02:32:f1:26:46:48:14:1a:06:a7:0c:c4:
                    f0:ec:0a:ee:04:3f:70:e1:49:7b:11:3d:ae:34:98:
                    97:6a:d0:7d:4c:43:4d:cc:d3:20:5f:a0:22:33:e7:
                    0b:ce:5b:4a:00:58:bb:7c:d0:5a:72:81:6e:ac:a3:
                    f8:e8:8e:bb:07:79:f8:ad:00:a1:45:8e:51:63:a7:
                    6e:06:e2:20:a8:e4:3d:2c:35:dd:58:76:10:50:fe:
                    31:10:fb:83:a8:7c:0a:93:19:9d:66:ca:74:38:30:
                    55:e2:7b:85:21:93:13:cd:78:01:37:65:81:90:5e:
                    b8:f6:65:28:b9:11:b5:c0:17:f3:90:de:7a:e4:38:
                    08:fd:1e:80:95:0d:8d:25:f5:5b:98:cd:16:2c:04:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:9B:AC:82:5E:C2:3C:57:DB:2F:FD:37:2B:7F:96:0F:0C:DF:F6
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:9b:55:41:da:11:9c:69:29:8b:ad:4a:e9:00:21:c0:c0:
         69:a7:95:9a:84:40:e5:b8:e4:b0:04:75:57:ce:45:a1:fc:1e:
         d6:f9:e1:ce:bc:73:d3:fc:80:cc:19:54:5a:6a:b0:f5:23:aa:
         a0:74:04:ff:5a:60:92:e3:17:fc:6f:7c:53:7f:86:b2:f1:75:
         4b:9a:3e:84:8b:63:c9:d6:11:aa:70:1e:b0:92:89:97:ac:2b:
         9e:62:a5:c1:9e:56:48:94:b5:33:3e:48:2e:7a:23:9a:f9:12:
         1e:1d:17:58:6a:69:90:03:31:3b:76:79:4f:45:15:4a:b7:71:
         11:2c:c6:f9:e7:f6:73:31:fa:08:22:21:6c:0d:75:46:c0:e4:
         59:33:05:f0:85:c2:98:3b:58:e2:4c:10:81:a4:c0:f0:8c:f1:
         fd:2b:4c:e8:4e:dc:13:1f:d6:41:10:09:60:47:1c:70:c3:cf:
         fe:06:e0:bf:69:ed:05:69:85:a1:c7:9f:78:de:88:64:fd:3f:
         f6:8d:09:4c:94:b4:92:71:81:52:b5:53:51:fa:be:3d:34:69:
         9e:3e:87:27:93:ec:eb:6e:2b:59:30:ae:d5:15:52:ee:d6:03:
         4c:58:5c:ed:d4:4d:2b:e9:51:ef:31:2b:57:bc:8d:8f:e9:c4:
         68:f9:40:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULDAMpZ8X5UR79w7yYB2WaeKp+4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZENDIwQkVFRTg2NjU4QzY5QkY3QkYwMjVBQkRFQjM1
RjcyM0IzRDAeFw0yNTA0MjQwODEzNDJaFw0yNTA0MjUxMDEwNDJaMDMxMTAvBgNV
BAMTKDVEMzA5QkFDODI1RUMyM0M1N0RCMkZGRDM3MkI3Rjk2MEYwQ0RGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaV9ojfvSt2ripzRLaP4U2mHq7
Dv5Y8jHGMcet60CfII/ouzd/3ZVk+59Pp0rLCx3LlpWc/zYNdgbQVUJC7n5dB42L
Jd3wRPvRdcAQip4vE5YKfrl4cQF0uUTdRZ4kx5LhQ1+VVvOA/HkP8QIy8SZGSBQa
BqcMxPDsCu4EP3DhSXsRPa40mJdq0H1MQ03M0yBfoCIz5wvOW0oAWLt80FpygW6s
o/jojrsHefitAKFFjlFjp24G4iCo5D0sNd1YdhBQ/jEQ+4OofAqTGZ1mynQ4MFXi
e4UhkxPNeAE3ZYGQXrj2ZSi5EbXAF/OQ3nrkOAj9HoCVDY0l9VuYzRYsBPB3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXTCbrIJewjxX2y/9Nyt/lg8M3/YwHwYDVR0j
BBgwFoAU39Qgvu6GZYxpv3vwJaves19yOz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0
V3YvMS9ERkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRDQyMEJFRUU4NjY1OEM2
OUJGN0JGMDI1QUJERUIzNUY3MjNCM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTR1SnZwQjJLQXJCeWZTUmNyS1Q0SkRXSDFkSkNOemNtbUx1cGR2U3N0V3YvMS9E
RkQ0MjBCRUVFODY2NThDNjlCRjdCRjAyNUFCREVCMzVGNzIzQjNELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv1ubVUHaEZxpKYutSukAIcDAaaeVmoRA5bjksAR1V85Fofwe1vnhzrxz0/yA
zBlUWmqw9SOqoHQE/1pgkuMX/G98U3+GsvF1S5o+hItjydYRqnAesJKJl6wrnmKl
wZ5WSJS1Mz5ILnojmvkSHh0XWGppkAMxO3Z5T0UVSrdxESzG+ef2czH6CCIhbA11
RsDkWTMF8IXCmDtY4kwQgaTA8Izx/StM6E7cEx/WQRAJYEcccMPP/gbgv2ntBWmF
ocefeN6IZP0/9o0JTJS0knGBUrVTUfq+PTRpnj6HJ5Ps624rWTCu1RVS7tYDTFhc
7dRNK+lR7zErV7yNj+nEaPlAQg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:38 2025 by rpki-client on console.sobornost.net