Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
File:                     76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft (raw, json)
Hash identifier:          pPP5NzOCjjYXTW8lja2ynZVA2VUvwEy0+k3kUTqwpGk=
Subject key identifier:   F6:8F:F0:72:5D:C1:85:68:A0:0C:24:AF:85:5A:85:B0:05:EA:52:43
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       3D898E743997C0E2685F6CD7E583F927B7FF9AB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
Manifest number:          01DB
Signing time:             Mon 28 Apr 2025 18:06:15 +0000
Manifest this update:     Mon 28 Apr 2025 18:01:15 +0000
Manifest next update:     Tue 29 Apr 2025 19:14:15 +0000
Files and hashes:         1: 3138312e3139312e3234322e302f32342d3234203d3e20323637343536.roa (hash: JffcJ9ieoQpPc2ULXpz4+CtNmLvpYqs5UiKpJvHE1k4=)
                          2: 3138312e3139312e3234302e302f32342d3234203d3e20323637343536.roa (hash: 2DQLF88JDTdJWWvQrh91PjyVFdpt4Fb/ygNaZBxkc9Q=)
                          3: 3138312e3139312e3234332e302f32342d3234203d3e20323637343536.roa (hash: m9ZyK5dndmntduqlxNXDcL6a+cWetz+B0i4mCgq1x30=)
                          4: 323830343a343163383a383030303a3a2f33342d3334203d3e20323637343536.roa (hash: H5qc4vjhlB5SIxoanw9Lpv95DtPQQpK8V4/+L90nRw8=)
                          5: 323830343a343163383a3a2f33332d3333203d3e20323637343536.roa (hash: NPx7h8hiqIWWLWYATCx3mqXi3sxJUJilwLjW+zwC6aY=)
                          6: 3138312e3139312e3234302e302f32332d3233203d3e20323637343536.roa (hash: lmH57o8cq8PUXyOx70J/p6rOG9Y9u6Xg09svyU1xtu8=)
                          7: 323830343a343163383a3a2f33322d3332203d3e20323637343536.roa (hash: iikMfavPHJL++SRu9qNjS/ffLzw8hgGmWsqHDWuopaY=)
                          8: 76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl (hash: cvH+tJ4puqD6nWIK8/v6u4G8VcPhukDPNrNB4tFBtR8=)
                          9: 3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa (hash: +XMievcqlvi3wTgS4tyRS4k7Rl8q7W2cl80/wY4PpkY=)
                          10: 323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa (hash: PaYpd8pb3Db7SUMnXwmQPrO4mnRAEFwaX3AlA9uG7Oo=)
                          11: 3138312e3139312e3234312e302f32342d3234203d3e20323637343536.roa (hash: AefXo+4KqknwLVwUNPBWHGrgB/k7tKI7wvA5h7r/O1A=)
                          12: 3138312e3139312e3234322e302f32332d3233203d3e20323637343536.roa (hash: Gr5zFlZw+ly165HtjgIkO/qdSt0YIpy/jxtrpa9mquQ=)
                          13: 323830343a343163383a383030303a3a2f33332d3333203d3e20323637343536.roa (hash: FTE+LZCpdiCJomD6mcUTZFlfLuLwhqC1jHUIHgg1uoc=)
                          14: 323830343a343163383a3a2f33342d3334203d3e20323637343536.roa (hash: Oh+wHqFjns1hsFTAU3t+zAVMOaAoUezxk+zzLQjI0Rg=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:89:8e:74:39:97:c0:e2:68:5f:6c:d7:e5:83:f9:27:b7:ff:9a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Apr 28 18:01:15 2025 GMT
            Not After : Apr 29 19:14:15 2025 GMT
        Subject: CN=F68FF0725DC18568A00C24AF855A85B005EA5243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:b1:dd:cd:b0:be:d0:1c:a4:c9:cb:4b:22:
                    e9:46:36:fe:20:45:2c:23:e4:3b:98:81:02:d1:02:
                    1c:f2:5a:f2:b6:12:4a:fc:83:42:f0:f7:ff:65:e2:
                    fa:39:ef:80:16:c9:73:38:54:40:69:65:98:82:80:
                    0a:7b:44:4a:69:ab:f3:bc:c5:ab:3f:d6:51:35:01:
                    56:87:3e:84:34:72:ab:af:6d:e2:77:44:bd:84:d4:
                    af:47:35:4a:9a:2e:73:d2:fd:c3:ff:0f:04:47:41:
                    ce:ab:13:4c:47:9d:75:12:ba:1f:d1:f6:2e:fe:62:
                    7b:9c:f2:27:4f:a8:cb:b7:f1:bf:3c:44:9e:e3:7b:
                    66:f9:39:32:ac:e9:02:aa:3a:33:12:7d:36:ad:24:
                    e7:aa:4c:fd:bb:c9:21:49:22:db:cb:47:35:63:41:
                    6e:49:7f:3a:63:bd:ad:e0:28:5d:f3:72:6c:c1:2d:
                    28:92:74:30:e5:c2:5c:1c:bd:a7:01:95:60:25:0a:
                    e8:09:86:dd:56:ab:61:c4:ed:5b:a1:08:27:70:84:
                    1f:c0:40:fc:29:43:ed:35:af:91:e1:60:f2:eb:c5:
                    60:e7:2f:34:c5:29:c3:e5:dc:8a:66:35:f4:26:50:
                    b5:1a:62:d9:81:34:c5:c1:6b:e9:81:ac:58:d0:9d:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8F:F0:72:5D:C1:85:68:A0:0C:24:AF:85:5A:85:B0:05:EA:52:43
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:5a:ce:0d:82:e6:20:66:34:19:ed:6b:98:8d:5f:63:4e:
         89:d7:06:39:e4:d5:39:73:f6:fe:d1:5f:40:9d:42:12:33:a3:
         2d:5b:3d:6e:fe:8d:c9:db:b5:0c:c7:95:61:e3:5e:6e:1f:5c:
         76:72:b1:26:34:96:e6:6d:d4:a5:6f:fe:16:5a:11:55:3c:a2:
         d2:1b:1c:e0:bc:f0:1c:19:54:e3:b1:3f:c1:98:54:b8:8a:e6:
         82:7b:a8:bf:dd:f8:41:3a:6c:c7:0d:32:f7:5b:ab:38:5d:d5:
         a0:6c:c1:4d:cf:73:7a:0a:40:ff:97:2e:1c:45:13:d2:9e:cc:
         2e:cf:79:30:59:e5:ae:f5:00:fa:41:f5:79:1d:cb:12:3c:98:
         fb:2b:0e:71:1a:74:0c:c2:f1:f3:7e:8d:16:5b:fd:17:fb:5b:
         3b:13:7f:c4:99:4a:03:36:ef:af:e1:fb:d8:c7:91:d7:c9:dc:
         4d:5b:02:71:f2:6a:50:98:69:75:4f:59:af:94:bd:7c:13:a3:
         1f:99:2a:1f:67:ff:d3:1c:e1:6b:52:58:fb:f0:72:4b:d0:be:
         f3:57:61:84:5e:49:38:e0:1b:02:9f:42:97:1c:d2:0e:5e:ca:
         84:9b:55:53:f0:6f:f2:cf:0f:27:4a:f4:0f:48:b6:17:5b:c2:
         85:8f:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:41 2025 by rpki-client on console.sobornost.net