Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
File:                     5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft (raw, json)
Hash identifier:          gNeNAw3DjFSPiwFAxIvd9B1D7XeBYjHKefnsjrHopcU=
Subject key identifier:   9A:C2:0E:F4:0B:05:4D:C4:CC:7A:5A:24:49:73:47:C4:B6:6C:C4:2D
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       4794F29679B9CE8660ACF74E035648889927DDBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
Manifest number:          2E
Signing time:             Mon 28 Apr 2025 14:09:13 +0000
Manifest this update:     Mon 28 Apr 2025 14:04:13 +0000
Manifest next update:     Tue 29 Apr 2025 17:56:13 +0000
Files and hashes:         1: 3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (hash: CijY/x6+D8joAqsuz8leADzcy10p8WZ0yiPQhbQPUfE=)
                          2: 323830343a316131343a3a2f33322d3438203d3e203238313533.roa (hash: sICBEbPkhEpTj1NGD/5Ilx722zpX8Op3r4MzgNRxF1o=)
                          3: 3138372e36302e3134342e302f32302d3234203d3e203238313533.roa (hash: 2/hRqsuQ/FHgaSrA97sa0U5IEyEyB8zh1AVYNTassEk=)
                          4: 3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (hash: I3Edz0N7BkPOy03876avlis+79tYwC4DD47mOHaDbCI=)
                          5: 3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa (hash: /sqM7c+yfY3dj6gOKT1QCBbetiEWE4aTZ9+G4l1+RoA=)
                          6: 5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl (hash: xpylFVCpzV2HuO28h+nw1xFyEBfQHRZxvecUhhjmT9w=)
                          7: 3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa (hash: 51n3ayew2h/v7obVWbgYFaLOL9OhzyAWSOIqWxXONuY=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:94:f2:96:79:b9:ce:86:60:ac:f7:4e:03:56:48:88:99:27:dd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Apr 28 14:04:13 2025 GMT
            Not After : Apr 29 17:56:13 2025 GMT
        Subject: CN=9AC20EF40B054DC4CC7A5A24497347C4B66CC42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:55:f6:77:91:32:6d:0c:26:bd:8b:11:cd:
                    ad:37:d6:ac:6a:5f:80:66:e6:1c:3e:ed:65:3c:52:
                    40:6a:41:11:88:c5:d6:09:ae:ff:3c:c8:ad:73:3a:
                    01:ba:62:d0:db:79:ef:5d:6e:13:11:14:b6:18:b8:
                    ff:d2:92:4d:af:74:eb:09:88:ed:f1:c4:8a:ff:5e:
                    dd:f5:92:38:9d:09:38:fa:7d:68:37:5b:65:8f:fe:
                    12:a9:c4:e5:7f:a8:6a:4d:76:ce:7a:27:9c:9d:1d:
                    6b:39:e3:26:0b:a1:a1:65:7e:9d:a4:30:99:4c:cb:
                    cd:71:d9:e4:6c:a1:a0:30:98:dc:ad:e0:eb:30:55:
                    ff:e8:17:e1:01:10:af:37:1f:37:6e:12:6b:fa:d9:
                    02:43:05:10:f4:55:87:3e:b8:c8:62:bc:c8:8f:48:
                    00:2f:f3:42:e2:88:7f:9a:af:53:b8:03:99:ff:07:
                    b5:fd:14:3d:55:07:6a:0e:fa:a2:c4:f8:b4:0f:fd:
                    4c:23:6c:3e:38:97:99:81:e5:92:cd:99:dd:3b:87:
                    90:7e:a1:77:89:4a:5e:0c:07:ce:df:6a:50:49:ee:
                    71:05:14:ff:02:3e:23:78:d4:f0:62:c4:6d:11:39:
                    50:f4:cd:73:0e:d0:67:ad:c2:74:6d:a8:a5:fb:09:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:0E:F4:0B:05:4D:C4:CC:7A:5A:24:49:73:47:C4:B6:6C:C4:2D
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:ca:e2:2b:40:98:24:02:e8:20:44:90:b4:49:cc:54:fd:
         b0:a0:32:28:06:03:33:9e:47:7e:c1:5a:60:02:ff:93:e7:14:
         90:4a:c9:29:59:1d:6e:49:39:70:2f:40:f5:56:d5:66:8e:dd:
         b3:6a:91:2e:65:3e:83:32:b9:d1:7d:ba:90:2f:ed:55:d0:ff:
         cc:0d:bb:bf:10:e3:f0:4c:e0:1e:f5:fc:1e:b2:30:49:b4:bd:
         a9:67:c0:d5:aa:a4:61:f6:b5:ba:d8:96:9a:6a:c5:10:b9:d7:
         87:55:90:af:a1:93:ad:d2:1c:c7:eb:d6:2f:db:b8:5b:7e:26:
         58:74:6b:4c:90:b9:ac:b6:b4:5e:f1:ea:b4:bf:cb:cc:82:bb:
         f4:09:9d:ef:94:c6:f9:c3:a4:8b:35:89:45:3d:a6:94:16:3a:
         e9:47:43:ef:d1:aa:90:95:89:26:88:98:c3:8f:af:25:4a:d6:
         51:3e:7c:1e:e1:5c:ac:6a:c4:4a:b7:20:b3:e9:f7:db:f8:2f:
         d6:50:f0:aa:87:d8:89:3d:cb:72:a9:74:25:bd:13:cf:6a:33:
         8d:cb:c0:66:c6:67:99:35:48:9c:2b:2f:1f:17:96:11:9c:b9:
         17:a5:0d:6d:5b:63:83:ef:99:a8:65:d0:a6:3d:6f:c7:82:51:
         33:1a:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net