Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          cFRy6NT1D+aKv4Nj2KQn+JXX7NWyNFSHfxLqTEv2NBc=
Subject key identifier:   CC:C3:68:70:25:61:26:F9:D3:7C:58:B6:21:F2:CC:96:0D:8B:97:7E
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       0633CF7766E5C1E17CB2C595FBBB0CD24BEF5C75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          0209
Signing time:             Sat 26 Apr 2025 12:25:45 +0000
Manifest this update:     Sat 26 Apr 2025 12:20:45 +0000
Manifest next update:     Sun 27 Apr 2025 15:35:45 +0000
Files and hashes:         1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
                          2: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: KbnyJeu16HYOqPzn85eRURMtU+9p1N1CcwA5DuUhg8s=)
                          3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:33:cf:77:66:e5:c1:e1:7c:b2:c5:95:fb:bb:0c:d2:4b:ef:5c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Apr 26 12:20:45 2025 GMT
            Not After : Apr 27 15:35:45 2025 GMT
        Subject: CN=CCC36870256126F9D37C58B621F2CC960D8B977E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:e0:72:8a:36:0f:38:2d:33:6b:e3:c3:d8:
                    0c:fb:df:71:8d:f8:a6:11:d5:e7:b3:13:4e:bd:76:
                    80:ef:8f:5c:a8:6c:b2:4d:96:a8:2a:b8:e9:a4:38:
                    e7:ad:d1:04:f1:56:1b:5b:dc:d6:2c:03:08:71:52:
                    36:ba:9b:71:81:ef:ce:29:ca:f2:eb:33:2f:c7:5d:
                    bb:f7:b6:33:f2:c0:84:63:4e:34:f9:d9:58:2e:2e:
                    af:ef:88:27:71:65:16:ff:1e:c3:76:4c:ea:47:01:
                    a4:03:7e:1e:03:d9:e1:76:4f:70:6e:f0:45:44:4c:
                    e9:88:a8:dc:82:cd:c5:59:35:c9:94:7b:3e:32:87:
                    8e:6d:4d:dc:60:4a:5a:85:56:de:75:5d:f8:b6:f4:
                    0a:48:0c:c5:68:26:01:a9:e5:d3:27:eb:88:1c:68:
                    d9:7d:c9:14:0d:25:70:79:80:57:26:7b:6d:86:ee:
                    8d:52:5b:b1:98:0e:ce:cc:57:3b:68:27:8a:05:a2:
                    fe:2e:84:94:ee:b4:46:92:7e:72:4a:0e:b4:6f:54:
                    7a:6d:f1:1e:04:e9:a5:e6:af:ca:60:05:ea:d2:4c:
                    4f:64:a8:13:c6:b4:06:e0:41:48:1f:e7:39:d6:39:
                    38:bf:7a:aa:c5:c9:52:a7:95:87:d0:8f:c1:c4:55:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:68:70:25:61:26:F9:D3:7C:58:B6:21:F2:CC:96:0D:8B:97:7E
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1b:88:a8:74:e6:8a:f0:8b:c4:4a:af:23:44:0e:23:a5:54:
         ac:85:83:80:e8:f0:60:a8:5a:c2:ff:f7:72:e6:f7:d7:07:7b:
         f9:a8:fd:d6:cd:94:ab:cb:48:50:74:1d:f9:71:63:6e:eb:37:
         2b:15:e4:2b:31:ce:d3:6a:46:02:79:d1:e0:f6:e2:38:d0:4a:
         85:4f:8c:b2:bc:a1:80:d0:0f:ad:60:b8:61:93:7d:0d:e6:a1:
         ff:38:cf:f6:6f:e4:5f:b0:a5:ac:80:20:17:d6:e0:d3:6d:76:
         1a:26:27:5c:a5:a2:b1:ef:2c:8d:77:da:b9:39:3b:38:f8:40:
         c0:8f:75:51:73:6e:81:f0:a6:b0:f1:95:10:aa:84:91:95:cb:
         69:a9:3c:33:55:17:2b:46:ec:ac:84:41:96:3f:9e:81:87:41:
         ca:b2:a7:2e:8b:26:52:8a:03:7d:81:2f:de:6a:af:80:ac:2a:
         9b:fa:f5:61:35:58:27:bb:21:dc:d4:1b:86:c0:17:62:d1:15:
         9b:93:33:93:9d:ed:fe:1d:d4:3c:84:6e:e7:63:c7:d2:f8:a8:
         1c:0b:e2:ba:94:4f:97:4b:a0:cc:02:f6:58:04:8c:de:40:7d:
         85:47:a4:a6:b7:09:f8:f5:9c:d8:99:93:f5:06:af:c8:24:c6:
         84:52:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:16 2025 by rpki-client on console.sobornost.net