Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft
File:                     FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft (raw, json)
Hash identifier:          TuebhEXCJLTy1d2eITBpH+oomTkaP8doqhn8s+HmtQA=
Subject key identifier:   87:A8:E5:B9:54:DF:BB:16:38:C6:3B:1A:85:75:05:C6:C4:70:93:93
Authority key identifier: FC:93:D5:F2:3F:5E:93:35:31:8D:BE:C8:ED:80:F7:DE:50:8D:A5:BD
Certificate issuer:       /CN=FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD
Certificate serial:       0C4DFC7572FC504304B2487454B536ACE76ABC2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft
Manifest number:          D9
Signing time:             Mon 28 Apr 2025 13:26:06 +0000
Manifest this update:     Mon 28 Apr 2025 13:21:03 +0000
Manifest next update:     Tue 29 Apr 2025 13:29:03 +0000
Files and hashes:         1: 323830343a333039343a3a2f33322d313238203d3e20323634393632.roa (hash: SLv2EU4r29OupaVVlLKm6Jtf1vwSHQvKfH2AAwcW6os=)
                          2: FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.crl (hash: cLrE/lbuLhwn8opGMFzihsyGkxCE1B0RxOE0tpHccqE=)
                          3: 3136382e3233322e3234342e302f32322d3332203d3e20323634393632.roa (hash: lCYvONR2j3wyMcGKTDvjcE3aaGHOyskW7uBwuVIbV+Q=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.crl
                          rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:fc:75:72:fc:50:43:04:b2:48:74:54:b5:36:ac:e7:6a:bc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD
        Validity
            Not Before: Apr 28 13:21:03 2025 GMT
            Not After : Apr 29 13:29:03 2025 GMT
        Subject: CN=87A8E5B954DFBB1638C63B1A857505C6C4709393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:ff:95:8f:6a:66:a7:71:ec:fb:b2:5b:26:
                    ce:b4:56:da:1d:7c:6f:07:f1:c8:35:fa:bd:4e:00:
                    26:75:fb:05:71:79:dd:c1:e4:93:ce:8a:44:2d:4f:
                    5b:13:62:c4:b3:72:b0:5a:64:d4:b5:10:b0:14:52:
                    3c:f8:56:1c:0c:5d:e5:e9:3c:44:50:b4:0a:eb:ca:
                    fb:b6:60:a6:fc:a5:12:8b:4c:d6:84:72:54:50:9e:
                    e0:82:f6:e5:c1:39:0b:70:3e:11:85:a6:a1:59:26:
                    e2:43:b1:c6:bd:c0:4e:ef:29:9d:1a:b2:05:5f:19:
                    7b:75:a4:62:1e:e6:e3:02:29:78:3c:7c:54:45:3c:
                    01:2d:48:dd:de:84:1a:f1:fa:93:4f:34:62:59:cf:
                    d7:b7:f6:1d:a7:f4:5d:6a:65:b8:f9:dd:69:89:a0:
                    ae:75:4c:3e:65:71:4c:f3:c0:da:68:c2:eb:f2:59:
                    cc:5e:b5:9e:db:cf:a9:6a:1f:4d:cd:85:06:da:a9:
                    4d:ab:d2:69:89:a7:48:bf:56:e1:1a:ac:74:b3:7b:
                    f5:44:e6:9f:6e:82:9b:91:2e:7c:ce:0d:cb:cd:7b:
                    57:a1:0e:fa:1e:bf:26:b5:6d:7e:4b:66:c3:a3:43:
                    54:70:84:ca:f4:01:ae:3e:81:47:e2:7d:40:29:c7:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:E5:B9:54:DF:BB:16:38:C6:3B:1A:85:75:05:C6:C4:70:93:93
            X509v3 Authority Key Identifier:
                keyid:FC:93:D5:F2:3F:5E:93:35:31:8D:BE:C8:ED:80:F7:DE:50:8D:A5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:92:8a:32:7e:b1:bd:3f:6a:49:44:13:b7:e1:0c:98:f5:
         98:4b:3f:bd:21:bc:c5:3b:22:57:de:48:a3:86:a0:d7:53:f8:
         0f:05:33:4d:bb:15:78:f5:65:1b:86:6d:87:ff:27:65:c4:ac:
         62:51:0f:ce:56:f4:33:78:f7:8d:0a:96:60:5e:0e:93:34:b6:
         65:e5:f4:34:16:68:78:28:4f:d7:ec:7c:69:67:31:7d:46:38:
         59:8c:57:ef:de:f7:05:1d:52:6e:15:54:54:f9:a0:ae:12:b2:
         a4:ef:65:81:ba:6f:9a:0b:54:cd:2b:6f:e9:10:6a:87:43:9d:
         12:1b:58:75:30:1e:99:60:bc:7b:73:e1:db:d2:55:49:80:88:
         3e:ad:3c:f1:bf:fa:9c:dd:a8:10:59:35:82:11:cd:5d:61:c6:
         b7:1e:1c:7f:7d:0b:a2:63:59:77:22:12:c8:25:7f:57:ad:de:
         2b:e2:1f:5c:53:b6:8d:b0:3c:db:1e:37:81:5f:0b:ba:ad:94:
         65:2c:46:27:59:fd:5f:4a:7f:7c:dc:97:b6:ad:17:d2:08:01:
         d7:9c:8b:be:41:6f:5f:49:31:15:83:a0:e6:8c:4c:73:99:c1:
         f3:14:f6:38:d5:5f:58:9a:fc:39:40:6e:62:c1:5c:02:1a:76:
         c4:a0:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:09 2025 by rpki-client on console.sobornost.net