Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft
File:                     83318EF9934F62654EC63A75033AEDCCD1657C52.mft (raw, json)
Hash identifier:          tFuoSMpLG18Mi6LdLtMf/yI2eLjWnmMp2Q6+amCthv4=
Subject key identifier:   B4:86:B0:FA:9F:D6:F8:47:D0:9F:41:E3:20:69:6A:9C:96:D1:11:44
Authority key identifier: 83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52
Certificate issuer:       /CN=83318EF9934F62654EC63A75033AEDCCD1657C52
Certificate serial:       74BFC656FE97FC1ECEC75BA538ADCAD1F1368C22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 08:27:23 +0000
Manifest this update:     Mon 28 Apr 2025 08:22:23 +0000
Manifest next update:     Tue 29 Apr 2025 09:50:23 +0000
Files and hashes:         1: 323830343a353165303a3a2f33322d3430203d3e20323638343832.roa (hash: FowjDxZlba0yw1zJGMBV1QGus0KHtceVbkFTKALf62E=)
                          2: 83318EF9934F62654EC63A75033AEDCCD1657C52.crl (hash: CJH7eBtZT9XziseYrH84mjXUJ/PZNU+cOUAp1LKvj1E=)
                          3: 34352e3233392e3234342e302f32322d3234203d3e20323638343832.roa (hash: c9429k3FXCAawiZcS3lju1Mw4NQGUaSTaKzwmme0vNs=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl
                          rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bf:c6:56:fe:97:fc:1e:ce:c7:5b:a5:38:ad:ca:d1:f1:36:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83318EF9934F62654EC63A75033AEDCCD1657C52
        Validity
            Not Before: Apr 28 08:22:23 2025 GMT
            Not After : Apr 29 09:50:23 2025 GMT
        Subject: CN=B486B0FA9FD6F847D09F41E320696A9C96D11144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:72:1e:81:fd:d3:b7:e9:4f:46:33:00:fb:
                    73:55:15:a5:5b:9b:cd:21:cd:3d:5b:4e:d2:02:d9:
                    c6:4a:65:8d:b8:ea:83:96:4e:2e:34:ce:c9:0f:53:
                    50:e8:21:4c:5f:ac:51:35:80:a6:d3:c1:9e:5f:96:
                    1c:50:65:e6:d9:4d:87:72:3c:74:68:0d:d4:f1:f3:
                    6c:1c:04:5b:6b:3a:ce:db:bd:c8:d8:56:8e:a3:50:
                    1d:0e:d5:4b:ee:e9:fc:fc:0f:37:f7:e1:7f:be:e1:
                    8c:10:3a:9b:72:5b:91:37:83:d7:a7:7e:66:e8:46:
                    7d:6c:e4:0b:0f:61:da:e0:fe:59:0d:ce:a2:af:90:
                    79:5a:9a:e2:7c:a4:18:a5:48:ae:b9:ad:81:87:c7:
                    84:d6:81:4e:ff:fd:b2:fd:e2:35:17:b7:f1:2c:ee:
                    6e:aa:f7:5f:77:18:15:75:c5:83:b7:02:02:a5:09:
                    40:30:98:8e:41:3d:4c:86:9f:7e:ff:93:40:3a:bf:
                    78:57:f9:dd:64:fa:86:e6:18:ed:d5:08:20:32:83:
                    8d:c9:0f:ee:0c:c3:a4:82:53:27:e9:95:74:0d:b8:
                    d2:90:fe:62:9b:33:a4:68:cc:fa:ca:08:33:c1:e5:
                    00:44:ef:fb:71:7e:f2:e1:6a:82:14:1d:a5:b2:61:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:B0:FA:9F:D6:F8:47:D0:9F:41:E3:20:69:6A:9C:96:D1:11:44
            X509v3 Authority Key Identifier:
                keyid:83:31:8E:F9:93:4F:62:65:4E:C6:3A:75:03:3A:ED:CC:D1:65:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83318EF9934F62654EC63A75033AEDCCD1657C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/1/83318EF9934F62654EC63A75033AEDCCD1657C52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3e:f6:d2:8a:ac:49:92:b5:91:fd:b3:58:d5:a7:39:30:21:
         16:ca:4f:ec:a8:39:7c:a7:bc:1f:4e:67:83:60:2c:30:b5:8d:
         8d:9f:7f:4b:c7:b7:19:57:c7:0c:71:48:36:5d:c7:76:d5:3d:
         c0:38:f7:8c:f4:4a:43:bb:c6:ad:b7:81:2b:3a:95:55:fe:ac:
         7c:bd:c3:2d:9c:2a:74:25:f4:f9:09:93:41:f4:f6:22:b1:18:
         d9:00:65:44:e6:d3:38:26:f6:f2:d6:71:d2:8b:c9:55:cb:e4:
         1e:ff:ed:18:90:25:58:1e:9b:6c:2b:f6:b6:12:82:6a:b6:3e:
         ef:1c:fe:c9:fe:b4:bf:98:01:4e:b1:8b:93:9d:1f:1f:00:a6:
         c3:06:19:43:73:82:3b:a3:81:82:ab:74:67:f1:dd:2b:61:60:
         fd:b2:c8:6f:7f:f8:ea:a4:98:de:dc:c9:36:cc:bf:25:f1:09:
         dd:36:5d:a7:5b:13:b4:a0:9e:14:43:18:88:4a:e9:64:43:93:
         2f:72:12:71:5c:8f:b8:c2:02:67:a4:8e:ea:90:ea:5f:bf:b1:
         26:6b:9f:7c:ee:be:ef:5f:e8:db:c2:70:83:d9:c9:c9:9d:26:
         87:99:08:93:6b:69:bb:13:80:db:81:da:f8:f3:27:fb:88:c7:
         7e:28:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net