Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File:                     DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier:          zd04ptVLd0cxZRlBuWA0m8uVSZ9njuRlUo+LVrcgcAg=
Subject key identifier:   28:6E:D6:48:B4:D7:B8:3D:C4:32:B9:79:BA:7D:38:D7:8C:25:07:59
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer:       /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial:       71B3850095ADD58FC237A11AE7A3C82C697B5C3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number:          0207
Signing time:             Mon 28 Apr 2025 08:28:28 +0000
Manifest this update:     Mon 28 Apr 2025 08:23:28 +0000
Manifest next update:     Tue 29 Apr 2025 09:50:28 +0000
Files and hashes:         1: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=)
                          2: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=)
                          3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: 8cSF7lKwzs4+LkfP7c5oXZYpxnA+a5F2u1n9VP4/4Dw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
                          rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b3:85:00:95:ad:d5:8f:c2:37:a1:1a:e7:a3:c8:2c:69:7b:5c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Validity
            Not Before: Apr 28 08:23:28 2025 GMT
            Not After : Apr 29 09:50:28 2025 GMT
        Subject: CN=286ED648B4D7B83DC432B979BA7D38D78C250759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:dc:4a:0f:7d:87:7e:94:99:46:5c:01:6d:
                    00:51:e5:3e:08:ef:ad:a7:66:c0:8c:8f:8e:81:3a:
                    32:a5:e0:20:62:46:f9:de:af:b4:68:8a:09:16:be:
                    d7:42:fe:fc:35:0b:8e:2d:ea:05:5b:54:71:81:3b:
                    ff:f1:10:3f:77:94:a0:44:45:ef:ca:1d:3f:5f:88:
                    52:6c:0e:79:cd:ac:4d:d7:cd:26:d4:3e:ed:c1:1a:
                    87:78:47:6d:25:16:3a:40:40:d8:7d:60:00:9e:36:
                    2c:82:5b:37:d7:68:a8:6c:52:5b:45:b0:99:7b:47:
                    03:9c:de:11:98:a7:96:f8:03:70:41:06:9a:57:79:
                    24:db:0b:da:7d:5e:bf:03:eb:9b:6c:da:95:6f:47:
                    d7:62:5e:91:07:a0:0a:a2:14:b1:82:28:48:e0:6a:
                    8f:1a:00:d0:ca:0b:eb:eb:a6:0d:46:be:d3:96:c3:
                    8c:9a:a8:14:71:78:46:66:12:e7:af:f4:52:93:dd:
                    92:be:d7:cb:9c:5a:58:75:21:2d:a3:9f:e5:14:87:
                    8f:a3:d5:76:d6:ef:2a:8c:25:57:f4:79:dc:fe:50:
                    85:92:de:c1:53:a1:96:26:8b:11:a5:01:b8:45:79:
                    26:ad:67:e5:a7:91:c2:65:0d:44:c1:75:69:3c:4b:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6E:D6:48:B4:D7:B8:3D:C4:32:B9:79:BA:7D:38:D7:8C:25:07:59
            X509v3 Authority Key Identifier:
                keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:10:3e:4d:05:3e:cf:3e:c1:16:90:db:31:63:c5:c4:e8:
         ee:56:1d:07:7b:c6:5b:01:d0:2b:f2:44:86:6c:4c:06:9f:96:
         f7:5f:9f:73:07:da:ab:96:0c:1b:00:8a:97:53:d0:f9:66:34:
         36:bc:bf:22:6c:70:03:1d:27:8c:f5:75:f8:a7:e1:29:98:cd:
         07:14:4f:03:d2:61:90:fc:fc:fa:f9:42:33:3e:8f:11:35:8c:
         04:72:96:93:32:09:0b:71:06:99:39:55:93:89:d5:c3:ec:f0:
         a9:4d:ef:09:f1:c4:43:2a:26:fa:ab:44:19:8d:e3:7c:cd:07:
         d3:f3:87:c4:1e:23:8c:0b:83:03:6b:ed:a7:ef:aa:af:d5:6a:
         35:f0:7b:ff:47:1a:e0:97:5a:70:8f:45:c1:a6:fc:58:e9:ff:
         1b:49:93:89:02:5c:c9:15:ac:f7:2a:be:7c:5c:29:46:db:2b:
         bc:4f:21:19:ce:00:58:69:6e:35:05:07:95:38:5e:5f:22:4b:
         4c:fa:a9:e2:54:f1:29:d3:48:ac:02:4d:6d:09:3b:73:bd:af:
         ca:b6:e9:05:ec:2d:89:72:84:01:64:52:ff:df:4b:65:4d:bd:
         85:69:5f:14:73:44:50:0a:aa:47:43:6f:98:fc:a3:1e:7b:b2:
         02:14:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net