Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
File:                     2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft (raw, json)
Hash identifier:          GnKObMT/FqPpo1j0xhOTK/BEaqAJk94ub9vH6qRrqbQ=
Subject key identifier:   99:24:1A:BC:C8:DF:92:37:FB:9A:94:7B:DC:DA:F0:70:5F:07:57:D5
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Certificate issuer:       /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial:       4E075CD2D1FC88990B27D45FC504799D59C8F576
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
Manifest number:          23
Signing time:             Fri 25 Apr 2025 18:59:44 +0000
Manifest this update:     Fri 25 Apr 2025 18:54:44 +0000
Manifest next update:     Sat 26 Apr 2025 22:34:44 +0000
Files and hashes:         1: 34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (hash: PaAf6dbPKpSc1oNUTLWDquOzA8hHyoSm8cfYfORzNgQ=)
                          2: 34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (hash: H3h45nprQy9gOWNY0tht2Ha1WTkBtxPzW4uwro7AW6I=)
                          3: 2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl (hash: xElC4SWspk49/5iJafDEWRMZbTf5NVGEo3BZ4PCkXE8=)
                          4: 34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (hash: Y5K1r5CF+tQf/1gLx3G7GXhfmEu4UGA0sI9DzjM2ZSw=)
                          5: 323830343a336436343a3a2f33322d3332203d3e20323636353238.roa (hash: KFfQqKxGmhIbf0hlZhBvx5lA5ysC4bOUzq/BSguaOpk=)
                          6: 323830343a336436343a3a2f34382d3438203d3e20323636353238.roa (hash: IGDvzu7QMwJ8m2x4mP8PjJJlq6Ebqs/QSUenFEWQuH8=)
                          7: 34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (hash: kckAr7b9SV3SYv935Wl6Du3jL7ZexxGpWjOhh9UcIPA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl
                          rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:07:5c:d2:d1:fc:88:99:0b:27:d4:5f:c5:04:79:9d:59:c8:f5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
        Validity
            Not Before: Apr 25 18:54:44 2025 GMT
            Not After : Apr 26 22:34:44 2025 GMT
        Subject: CN=99241ABCC8DF9237FB9A947BDCDAF0705F0757D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:7f:bd:de:c4:f5:8d:fc:c2:3f:bf:39:de:
                    ed:76:95:6c:5f:d9:02:53:ea:f9:d9:1b:84:d5:68:
                    98:0b:a9:a7:5b:f3:fa:2b:63:37:0e:bd:93:05:76:
                    75:a0:07:fc:e0:1c:e7:4f:d2:77:fc:a1:f9:ca:81:
                    02:e6:47:8f:4f:28:08:20:a2:a4:ed:50:1b:c3:20:
                    6e:f9:ee:3e:99:a5:69:82:a5:f0:dc:b0:35:ac:5b:
                    14:bb:77:5e:cc:21:b0:79:7e:0c:8f:87:94:83:0d:
                    58:4d:98:9b:16:4c:21:2d:aa:c2:b6:09:d9:81:8f:
                    e6:2a:37:72:7b:a0:86:5c:a3:7e:eb:9a:7b:ea:bd:
                    c5:fa:58:cd:85:c7:fd:8f:7e:62:8b:1e:2a:5a:53:
                    6d:06:9d:70:25:4e:11:0f:a3:f0:ea:bf:1d:bb:8b:
                    b6:9b:c6:84:42:9d:eb:ea:cb:47:98:cf:28:c5:27:
                    d8:5c:6a:0a:2e:e5:62:d4:96:93:7a:4d:80:0c:33:
                    d9:44:db:d4:9a:9b:5b:ee:a1:87:90:30:ed:12:c0:
                    fb:b9:e6:d7:32:8e:27:69:3e:25:9b:3c:60:80:95:
                    a3:28:47:1f:49:aa:f7:25:6d:83:ac:ed:d9:a9:bb:
                    d5:35:a0:b3:81:91:54:f7:4c:60:71:6c:78:13:5b:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:1A:BC:C8:DF:92:37:FB:9A:94:7B:DC:DA:F0:70:5F:07:57:D5
            X509v3 Authority Key Identifier:
                keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:67:b8:15:50:9c:92:95:01:b1:32:c7:b4:96:8d:62:3b:45:
         67:3a:91:82:b6:a2:9e:fb:71:89:db:5b:d5:12:5f:18:04:d2:
         05:9a:82:88:f7:7f:7b:83:af:da:60:c5:ba:de:24:eb:8f:85:
         c7:15:af:fa:ed:53:49:a0:d1:f7:4b:9e:1f:ca:74:a9:c2:62:
         07:0f:7a:8f:36:63:64:ae:13:8f:bd:28:9e:24:65:bf:94:e8:
         94:d0:7e:94:16:63:b9:9d:1a:22:3e:86:22:38:6b:e8:a2:97:
         9f:de:c7:fe:bb:1f:28:53:a3:b0:44:15:59:ee:d7:16:bb:3b:
         60:f2:b3:b1:df:a6:0a:ca:e3:4a:cc:75:40:6b:90:1f:73:b5:
         ab:f3:d5:4a:cd:a8:ce:5c:f6:54:00:09:01:63:fe:85:f6:d2:
         ea:49:d7:89:d8:75:66:ac:4f:14:f7:77:ac:2a:f7:0e:79:b6:
         59:3b:17:74:ea:95:41:4c:17:64:46:93:85:84:28:42:5c:aa:
         b1:a7:01:4a:09:63:e1:1c:d3:23:90:c9:86:19:0b:6f:96:51:
         b6:a9:68:b5:18:6c:fd:25:db:ae:5c:15:ed:1c:1d:33:b8:2b:
         66:84:01:49:52:1f:48:95:b3:85:ca:64:25:69:1f:22:c0:04:
         06:87:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:39 2025 by rpki-client on console.sobornost.net