Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
File:                     3496860CED46E82860498DD946601D168147920B.mft (raw, json)
Hash identifier:          kZSWdVd8Wca16U1XTGY/iTB5YslZNA/kL05aZH1LwOM=
Subject key identifier:   AE:A5:F9:E8:D7:BF:CE:23:E7:45:2C:6C:D2:E3:06:42:9C:51:E5:29
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       62A66BEC2165708B0F1D3B998A906712CED86A91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
Manifest number:          0186
Signing time:             Mon 28 Apr 2025 02:30:02 +0000
Manifest this update:     Mon 28 Apr 2025 02:25:02 +0000
Manifest next update:     Tue 29 Apr 2025 05:14:02 +0000
Files and hashes:         1: 323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa (hash: eYUSjxdjtQ1LBcWwQ+fYkCWGT08a39dW/kHEr267a0E=)
                          2: 323830343a313933343a383030303a3a2f33342d3334203d3e203631373738.roa (hash: 3TDf2VP+pvI4yUPgQ3iIBXaKygVm+fN/n4ISckNB9WA=)
                          3: 3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa (hash: 3qtq7icdqa/958L/CMxJ0GEuTz6bRvM2HTuWYOXYfks=)
                          4: 323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa (hash: aPJMF+3Gouw73Om2s6/r7owD+0SPLohgPFzSXT/IzWU=)
                          5: 323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa (hash: c9vtNOAer9TYXNP3Xax6JDFFggy5l60fnLWorOERCDw=)
                          6: 3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa (hash: kA804tfEnBD035EoGN/4G73s2LBA4EUxTQmNS+wL540=)
                          7: 323830343a313933343a3a2f33332d3333203d3e203631373738.roa (hash: BYrafSDWw7cW4dCICVil6yUohrIzkymhPTKzvmZly2c=)
                          8: 3230302e3232392e3230382e302f32332d3233203d3e203631373738.roa (hash: MxZnaA9MLfY1GeEFimXmouwPnA2J6xpri6SRYzPKSEA=)
                          9: 3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa (hash: 3VaNl3cB+psCwl+Gsk22yVys40iepQjOI4lXQT30UDQ=)
                          10: 3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa (hash: F774Iqqqp7kKY1OCOIKYQ5y00+r/sWlfNOcIWKYI/GM=)
                          11: 3496860CED46E82860498DD946601D168147920B.crl (hash: u2MYffR36aFwnWMx+eHRwcBgTfNerv/yIkkIEJEiX2w=)
                          12: 3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa (hash: q3SGmdR0L0IGrGtnMmxlbCuZbcKDDyAoWBrVhqLtnJE=)
                          13: 3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa (hash: RDNHobNehEvrBXUyygntt6BTO81TaxHROlGoWC5/Ge8=)
                          14: 323830343a313933343a3a2f33342d3334203d3e203631373738.roa (hash: QxuaV67XC2reDZTP8BfC37BPFyrFHjrqCGmBs4b/0Ac=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a6:6b:ec:21:65:70:8b:0f:1d:3b:99:8a:90:67:12:ce:d8:6a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Apr 28 02:25:02 2025 GMT
            Not After : Apr 29 05:14:02 2025 GMT
        Subject: CN=AEA5F9E8D7BFCE23E7452C6CD2E306429C51E529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:1e:9d:50:b2:77:ec:7e:d8:b1:2a:c5:c2:
                    6b:1e:7b:aa:51:d0:1e:8f:ca:ca:b6:2d:2e:0c:4f:
                    ee:e1:f9:b6:05:e7:81:c5:87:a4:df:9b:12:89:ab:
                    6b:42:aa:e9:14:33:2b:c0:7a:f6:a1:fa:de:d4:8c:
                    72:6e:aa:84:e6:00:35:a4:b5:59:7d:29:ad:c9:ff:
                    a3:b1:b8:d4:8e:e9:07:86:49:34:38:ec:cb:ad:a9:
                    ae:ff:f4:75:7c:dc:31:05:8f:46:28:95:5d:5a:f2:
                    b4:5a:91:c2:de:13:51:49:f1:78:70:cf:66:78:71:
                    ba:7d:c8:00:c8:0c:8c:63:6f:59:21:0e:38:87:2c:
                    dc:27:e5:d9:f2:88:60:2d:e1:16:e2:7a:ad:8f:97:
                    94:d0:2f:c6:a9:32:2f:2f:68:14:35:eb:d2:aa:db:
                    34:42:ae:27:86:d3:aa:7b:52:b7:a2:67:f3:2f:60:
                    08:cd:46:cb:e9:89:9a:c4:1f:5c:7c:8f:47:99:0e:
                    65:55:99:a5:cc:b1:8a:83:46:b7:4b:bc:5f:42:c2:
                    0b:81:c3:6c:91:86:f3:72:83:a1:7e:59:a1:e4:b4:
                    ec:31:81:54:87:c4:06:b7:fe:d5:79:31:a9:1e:34:
                    8f:d1:90:dd:ff:2e:58:8e:b6:18:df:1d:ee:13:b1:
                    2d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A5:F9:E8:D7:BF:CE:23:E7:45:2C:6C:D2:E3:06:42:9C:51:E5:29
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:b5:a9:e6:97:54:6b:34:28:d5:8d:bb:d1:b7:af:4d:eb:
         c0:93:62:b8:ed:9e:d2:94:00:0a:bb:e5:0b:54:79:18:09:5a:
         7e:54:1f:55:53:c8:4e:da:bb:e3:c1:81:bd:36:33:a3:a6:d5:
         f9:50:41:f1:34:0c:cf:a3:f7:95:8a:2e:56:03:d0:90:94:54:
         34:ae:34:91:c4:ba:23:bf:89:17:63:d7:74:5a:e2:2c:0d:43:
         c3:d5:d2:8f:19:5f:c6:92:d2:3d:19:93:a6:de:2e:25:91:0c:
         e7:3e:b9:a5:d5:89:5a:47:60:fb:a0:d6:85:31:a6:3b:b3:0c:
         bf:0c:86:d5:03:91:55:d5:84:6c:98:d2:59:d7:73:17:2d:b6:
         5b:29:7d:9e:86:6b:1e:18:3e:31:ef:fd:42:20:95:93:b0:32:
         32:3a:a5:42:3f:2d:0a:ee:89:8c:23:b5:c8:61:53:f7:15:89:
         8d:52:65:cf:66:b9:bf:9c:4e:3f:2f:e5:77:2f:bc:69:48:3e:
         0c:57:a0:10:d9:a6:ec:1d:ec:f8:0c:d3:14:da:30:e0:90:38:
         bb:83:0f:bd:5b:c1:22:f3:83:29:78:45:c8:3b:91:b7:2a:aa:
         39:e2:df:4a:c4:08:9c:52:92:75:22:02:92:da:66:b7:df:01:
         fd:71:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net