Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft
File:                     528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft (raw, json)
Hash identifier:          kyI25TQIST2VIZlFMMz7E9Kz8X80ZqrqeSaItb+9Djo=
Subject key identifier:   22:F2:7B:D3:43:E1:AB:26:53:17:C7:F9:0C:6D:5A:A4:1B:18:96:B2
Authority key identifier: 52:8B:51:EB:43:72:AB:42:ED:44:6E:A2:B5:E0:AD:21:A6:C6:96:8B
Certificate issuer:       /CN=528B51EB4372AB42ED446EA2B5E0AD21A6C6968B
Certificate serial:       48A3E0798204C5879DBAF87A016267ED204C1369
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft
Manifest number:          04
Signing time:             Wed 09 Apr 2025 01:30:49 +0000
Manifest this update:     Wed 09 Apr 2025 01:25:49 +0000
Manifest next update:     Thu 10 Apr 2025 04:26:49 +0000
Files and hashes:         1: 34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa (hash: hAKNxGVdYzVVCpHPdxtwxWc7wue7wSrrtP+69hlS7CE=)
                          2: 34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa (hash: hds/he0anli8X8gVWi3FL7DfrDjR2cssJCG8coeP3f4=)
                          3: 528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.crl (hash: vmx4r4f6U7dmfnpWD1PINfbJJitRTctB26oTOjZsKrI=)
                          4: 34352e3232352e3131322e302f32332d3233203d3e20323731363537.roa (hash: ySiEiBg/ZikKaOYG3OATnreKeWCVae2dtTtP/a/lFok=)
                          5: 34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa (hash: NOvYDyO5OmX8myb+7C9sYJnU76BUK4MFu84xsh61B8A=)
                          6: 323830343a376566343a3a2f33322d3332203d3e20323731363537.roa (hash: f1Vmfa0ffKEDBbunhxwc3DtMQyEcRAWiy37/C/RdSxc=)
                          7: 323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa (hash: fig9ERTQgrELkjIDAW+hN2ZH8ZaqYHxO2sgYRwbKOsw=)
                          8: 323830343a376566343a3a2f33332d3333203d3e20323731363537.roa (hash: S77blCleLoyNstcQ8nPWjFkPQwER0dB3Q+1PTyb1yys=)
                          9: 34352e3232352e3131332e302f32342d3234203d3e20323731363537.roa (hash: zR9OvKLtBZ6vkZ15t90kspEH/l1h8IPrvHXknmzsUaE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a3:e0:79:82:04:c5:87:9d:ba:f8:7a:01:62:67:ed:20:4c:13:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528B51EB4372AB42ED446EA2B5E0AD21A6C6968B
        Validity
            Not Before: Apr  9 01:25:49 2025 GMT
            Not After : Apr 10 04:26:49 2025 GMT
        Subject: CN=22F27BD343E1AB265317C7F90C6D5AA41B1896B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:8a:09:7f:ca:2b:37:a9:b4:56:1e:e4:ac:
                    6d:0c:e4:92:51:fc:e9:0e:5e:0c:36:91:f2:c9:82:
                    6f:60:de:12:e5:6a:83:cf:e0:00:d6:0d:f5:0a:38:
                    8c:f1:c2:d0:f6:cb:2b:92:5f:fc:d0:fc:d4:e9:c8:
                    99:97:9b:af:32:f1:6a:b9:b4:8e:fb:8e:e2:27:8d:
                    96:6c:3d:1f:2a:c6:02:78:66:bd:3b:e9:00:ff:19:
                    06:75:a0:af:84:c4:72:f2:86:0d:e4:84:47:b2:08:
                    ff:ae:80:5c:33:ce:83:9a:16:ff:dc:78:77:0e:a0:
                    ee:dd:f3:cb:70:58:cb:ee:e4:c1:ec:74:6f:3e:a5:
                    59:58:d5:39:0e:e1:5b:5b:68:38:57:76:fe:fc:e1:
                    18:a6:93:a0:73:f2:c0:e1:f6:d5:ad:e2:80:5a:d6:
                    aa:e4:34:85:70:d8:a9:01:da:46:69:87:73:be:78:
                    5b:5a:a9:47:67:3d:81:38:76:7f:fd:67:47:26:31:
                    c2:e0:33:92:4d:c7:99:b8:94:e8:27:4d:42:26:7b:
                    79:70:7e:84:b7:cc:7b:cc:ee:67:b7:b7:f9:ac:63:
                    4e:23:dc:bf:e7:4f:85:86:73:b9:c3:72:ac:30:85:
                    eb:75:19:fe:1f:2c:05:de:fa:64:40:4b:a5:ff:20:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:7B:D3:43:E1:AB:26:53:17:C7:F9:0C:6D:5A:A4:1B:18:96:B2
            X509v3 Authority Key Identifier:
                keyid:52:8B:51:EB:43:72:AB:42:ED:44:6E:A2:B5:E0:AD:21:A6:C6:96:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/528B51EB4372AB42ED446EA2B5E0AD21A6C6968B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:93:2c:db:de:85:4a:29:f6:2c:ce:ab:51:52:4b:22:69:35:
         61:6f:f2:04:1a:cd:e8:dc:61:42:b9:65:e4:49:14:ed:7b:4d:
         e4:5e:7e:ee:93:9f:1c:26:f9:2d:d8:fb:bc:ef:ff:89:37:85:
         7a:d0:e0:51:29:09:d8:5b:5d:db:36:56:df:a1:78:30:2f:c2:
         84:94:ae:e6:4d:0e:14:2e:76:aa:99:4f:5e:c6:c0:b4:7d:93:
         12:fd:d8:b0:3c:2e:d3:3e:34:28:3c:76:a2:9f:55:71:76:b6:
         39:cf:e3:7a:9c:c2:6e:43:c4:90:c2:ae:af:28:ae:32:b5:cd:
         17:2d:8a:94:1b:14:33:38:e1:3a:a2:c7:49:64:f5:be:46:47:
         fd:4b:b5:e0:47:02:fa:db:ce:a6:ab:22:46:61:09:b5:b0:db:
         f7:55:fc:6b:5b:9c:dc:d5:d2:ac:ac:88:c2:36:a8:86:2b:50:
         12:0f:61:1c:54:56:09:5e:34:a5:f8:91:d3:11:e4:00:de:a1:
         51:dc:fa:7f:94:45:2f:cd:47:d6:65:a5:9b:84:e3:bc:78:3e:
         c0:ad:b6:1f:4e:e0:25:6f:92:33:53:6d:a6:2a:bd:77:7e:f8:
         a7:27:06:af:d1:ec:cf:bf:df:fe:ba:01:60:69:f5:6a:f6:65:
         6e:a2:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:04:50 2025 by rpki-client on console.sobornost.net