Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
File:                     9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft (raw, json)
Hash identifier:          BVSC5QMFDKFfotkJqHAZGWivshOmjECkjMZeOf9lg34=
Subject key identifier:   6C:1D:21:1D:42:02:B8:91:D4:39:32:79:6E:3B:77:8C:B9:26:93:D2
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       558C2F95F4D39C1C71C44F38868F3BE5A967831F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
Manifest number:          0161
Signing time:             Sat 26 Apr 2025 00:33:47 +0000
Manifest this update:     Sat 26 Apr 2025 00:28:47 +0000
Manifest next update:     Sun 27 Apr 2025 03:26:47 +0000
Files and hashes:         1: 34352e3232392e3230382e302f32322d3332203d3e203238333237.roa (hash: rGy1ehE/Bn0XuecpILb0jzzs4yEVA5Ng7V6ILLU8ggI=)
                          2: 9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl (hash: VOZz/hvn7j7MBg+zqpLlIjozZA2czlKxAPdJQ0XObuQ=)
                          3: 3138392e35302e38302e302f32302d3332203d3e203238333237.roa (hash: TvH3exT5c42bPXgBcpU9/UOH5PlQVG90khy0o/0uEjA=)
                          4: 3133312e302e32302e302f32322d3332203d3e20313938393439.roa (hash: fTd/5cBG9mlz6n9KlIjz6g6nXkqHzbKoyPgp4g5+LNU=)
                          5: 323830343a343864633a3a2f33322d3430203d3e20313938393439.roa (hash: T5PQk+XSOonG3g2hvRrDdrLKKD/SDyNap/J/IcWp2/E=)
                          6: 34352e3232392e3230382e302f32322d3332203d3e20313938393439.roa (hash: 46RSHOwSye0wh+PL5ysBB7nSfbqmEzYaKYMLvcSziSs=)
                          7: 3138392e35302e38302e302f32302d3332203d3e20313938393439.roa (hash: PULtCWH4amDpwqJMX/vVa/ZBJqkPcmfTwYJzuPne7qM=)
                          8: 3133312e302e32302e302f32322d3332203d3e203238333237.roa (hash: F0HUpNHk43DWNMDUcMLuEBACF8z4ojq+fxQeKcO7VuU=)
                          9: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (hash: E1XoywGDOSssXFy2GAns/rcsG06KGYaYnzhvqTT1kT0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:2f:95:f4:d3:9c:1c:71:c4:4f:38:86:8f:3b:e5:a9:67:83:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Apr 26 00:28:47 2025 GMT
            Not After : Apr 27 03:26:47 2025 GMT
        Subject: CN=6C1D211D4202B891D43932796E3B778CB92693D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:29:db:9a:a6:91:9e:92:ba:a4:a6:98:9d:
                    ac:ab:df:29:ab:33:48:43:42:71:cb:95:f2:e0:18:
                    16:a2:06:e8:fa:b4:ce:b7:c1:41:8c:82:4a:cc:c7:
                    ae:b1:58:20:3f:c7:5e:e2:00:9c:6a:f8:c9:4a:10:
                    ad:e6:96:77:dd:11:23:d4:b7:9a:30:3f:77:46:b8:
                    02:a3:36:6c:9a:3c:02:c5:15:e0:6b:dd:90:db:25:
                    a8:24:df:d4:58:ef:09:72:01:51:de:25:b0:52:59:
                    a6:69:48:0f:08:0b:00:2e:99:04:39:50:32:94:18:
                    ab:64:39:e3:32:fb:b5:88:af:23:34:3d:87:d5:27:
                    55:d4:9f:bc:23:7f:77:fb:25:49:9d:61:ca:3c:a5:
                    cb:36:c9:18:55:59:21:af:a3:7b:c0:d1:d0:89:d7:
                    59:87:0f:74:6d:71:83:9e:96:da:44:aa:d0:48:91:
                    49:32:68:c7:ea:6d:e6:4a:32:8c:0c:da:93:dd:1f:
                    3d:de:bc:64:ba:ee:15:3a:21:fa:b9:12:d9:4e:2c:
                    a1:c6:16:f9:1d:c1:9e:8c:53:c6:78:76:5a:a3:26:
                    5c:cf:42:57:e5:49:e2:53:02:e0:1c:d6:f2:70:f2:
                    83:9e:53:01:eb:ac:5f:89:a4:59:d0:6c:1a:ae:d1:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:21:1D:42:02:B8:91:D4:39:32:79:6E:3B:77:8C:B9:26:93:D2
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:78:74:cf:f2:d4:7c:36:48:e7:72:77:47:aa:8b:bd:81:9d:
         2a:ea:37:f8:ba:27:79:f3:83:8f:ef:31:88:91:f4:8a:1b:d0:
         f0:f2:60:33:c6:d7:d9:2f:eb:82:9b:cf:c7:bb:7c:f0:ed:58:
         d0:cf:0a:47:27:a5:4a:bf:16:7b:f9:31:5b:1d:dd:d3:e8:06:
         d6:9e:9d:af:0f:6f:29:c0:31:2b:25:bc:0a:ef:5e:7d:01:f7:
         a0:57:db:6a:b6:53:eb:8a:52:63:7d:21:0e:36:42:d5:bf:56:
         b7:fc:19:45:78:d8:ed:ed:3e:14:2d:2f:79:e0:c0:c0:37:3c:
         a0:0e:99:c0:f7:d1:1d:f5:a1:66:74:ad:0b:17:0d:90:bb:39:
         bd:cb:cf:2f:d7:fc:f0:59:e0:99:5c:29:2a:b9:bc:99:ee:c9:
         72:a2:b4:d9:40:08:ce:f7:80:cd:79:46:73:72:3a:4d:4d:e3:
         84:58:35:c3:69:c0:85:0a:fd:6f:bb:a3:0b:08:04:9b:0d:8f:
         53:ed:28:12:41:85:fc:7b:76:e9:07:82:31:68:5d:af:ef:9c:
         4a:c8:d9:84:4b:08:ef:c4:39:5a:02:3a:6e:4a:70:1b:d9:e1:
         71:c4:6a:2f:0e:25:2a:1c:4d:ef:6b:c0:14:9e:67:64:87:ed:
         58:2a:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:58 2025 by rpki-client on console.sobornost.net