Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft
File:                     25E432BB134D4E238BDA77694201D4BC41974E05.mft (raw, json)
Hash identifier:          rp2NEYWnT7EEgSJL22AupogrAUv10KhZz8hSBXhjG6M=
Subject key identifier:   18:D4:A8:F3:27:4A:BA:2C:00:47:92:6E:C6:21:D1:F5:C6:D2:66:63
Authority key identifier: 25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05
Certificate issuer:       /CN=25E432BB134D4E238BDA77694201D4BC41974E05
Certificate serial:       6422802F074BF7937BE0480A8215334092046D71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft
Manifest number:          81
Signing time:             Mon 08 Jul 2024 07:08:24 +0000
Manifest this update:     Mon 08 Jul 2024 07:03:24 +0000
Manifest next update:     Tue 09 Jul 2024 10:14:24 +0000
Files and hashes:         1: 3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (hash: W9u+WVSMVBeRkR4jCyqMDk3VKdly7uSQiyeYFnxOlf4=)
                          2: 25E432BB134D4E238BDA77694201D4BC41974E05.crl (hash: zguboztbqzj5w0IQbSdZYNtLmQH7noAghoFs6z4goNs=)
                          3: 323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (hash: /f7pZJfP8CFW2eLA3vgWaZp+8hN9x8wizgtPE6q6+eo=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.crl
                          rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jul 2024 10:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:22:80:2f:07:4b:f7:93:7b:e0:48:0a:82:15:33:40:92:04:6d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E432BB134D4E238BDA77694201D4BC41974E05
        Validity
            Not Before: Jul  8 07:03:24 2024 GMT
            Not After : Jul  9 10:14:24 2024 GMT
        Subject: CN=18D4A8F3274ABA2C0047926EC621D1F5C6D26663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:1d:7e:cb:66:c4:ad:85:64:81:0a:55:c3:
                    26:26:29:ff:4e:07:de:fd:94:9e:ac:d2:4d:43:07:
                    b6:3c:24:c4:70:25:39:bc:9e:32:09:3a:af:0e:d7:
                    98:0e:37:7e:5c:a8:36:9f:98:af:b0:40:ca:db:5c:
                    d7:fd:d5:15:44:68:50:3b:d4:f7:28:62:32:a9:b5:
                    fd:10:a6:49:a8:54:b1:cd:02:44:c9:c7:2b:71:d5:
                    20:2d:18:0f:87:46:4d:7f:42:f2:e5:54:2d:13:68:
                    54:35:2d:f1:ee:01:7b:dd:d7:7c:6e:e5:7d:5a:0d:
                    13:2b:53:0e:e5:06:c4:ea:04:39:76:ae:7c:28:55:
                    1f:56:70:62:bf:c0:58:93:63:29:62:ee:e7:04:98:
                    2b:90:d5:79:b4:e7:90:ee:3f:3c:6b:6f:93:e9:d3:
                    a4:1d:c0:08:ff:3c:ba:fe:07:e4:f7:11:be:4e:a4:
                    de:28:76:ee:3b:fc:6a:e4:1e:d2:5e:ae:7b:fc:3a:
                    0a:cb:ac:e3:b9:bf:15:75:f3:9d:58:27:6f:f7:e5:
                    53:08:12:5d:d1:b8:3b:1c:46:56:b5:88:3c:f9:1d:
                    a0:21:32:a2:85:25:e1:74:63:f8:db:74:1d:24:85:
                    57:8e:85:47:86:27:a0:d1:1a:6c:be:93:7d:9b:7b:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D4:A8:F3:27:4A:BA:2C:00:47:92:6E:C6:21:D1:F5:C6:D2:66:63
            X509v3 Authority Key Identifier:
                keyid:25:E4:32:BB:13:4D:4E:23:8B:DA:77:69:42:01:D4:BC:41:97:4E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E432BB134D4E238BDA77694201D4BC41974E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/1/25E432BB134D4E238BDA77694201D4BC41974E05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ee:70:34:85:e9:eb:4f:13:9f:b9:8f:3e:fd:74:da:ae:ec:
         f0:cb:44:b4:e2:63:1a:33:9a:c4:03:ba:c6:ef:2a:74:7f:c8:
         a1:8b:e2:68:ae:e1:90:6d:27:1e:fc:42:5e:0e:55:72:3b:af:
         aa:68:b4:c7:23:f6:0f:65:9d:3b:05:ef:56:42:3c:b8:08:f1:
         a0:d8:ab:e9:a4:e8:6e:91:a5:58:2f:bb:b5:31:07:2c:b6:55:
         9e:53:f0:12:2c:3e:ea:20:07:d2:57:7a:b2:80:14:2a:93:09:
         82:f5:26:8a:0d:f7:c9:85:1a:f6:61:af:a0:ac:af:ca:ca:d2:
         20:63:6b:ba:39:fa:fc:10:b3:3a:dd:da:18:d0:68:17:91:bf:
         0d:ff:d1:66:b1:f2:a5:8d:16:8f:af:02:b6:05:c9:23:0c:48:
         ce:3d:01:82:0c:e2:e0:be:04:2e:01:36:a4:34:f1:cd:a4:39:
         46:e6:10:cf:b5:ef:df:a1:6a:58:29:a8:54:0d:26:ee:33:43:
         db:6c:54:70:e3:1c:59:95:00:85:9d:6e:de:e0:d0:43:22:a9:
         37:2c:c0:8d:ab:4f:2e:19:f1:4f:0b:80:c5:7b:f8:f4:1b:53:
         11:da:bd:ff:67:eb:f8:81:e9:f2:b4:d5:ba:fc:14:ec:32:09:
         a4:f0:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 03:06:46 2024 by rpki-client on console.sobornost.net