Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
File:                     478BC91388C024F294F7E5E2E54CFF21D18A626D.mft (raw, json)
Hash identifier:          dm2oCPLmRt1jFbbWFGWH/AmKT6hIbow4PUg19LV1nnY=
Subject key identifier:   F9:6E:0B:81:1D:11:41:C2:4C:E3:7E:A0:50:09:1F:51:9C:2B:1A:76
Authority key identifier: 47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D
Certificate issuer:       /CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
Certificate serial:       389C3D3725911B3A981683761B24749D59CB3A9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
Manifest number:          0204
Signing time:             Thu 24 Apr 2025 17:22:36 +0000
Manifest this update:     Thu 24 Apr 2025 17:17:36 +0000
Manifest next update:     Fri 25 Apr 2025 17:38:36 +0000
Files and hashes:         1: 478BC91388C024F294F7E5E2E54CFF21D18A626D.crl (hash: M8Z17We32K3ycLspeRi9K8Il+DmGrCdxjik0HeKijuY=)
                          2: 323830343a366133343a3a2f33322d3332203d3e20323730333139.roa (hash: Z5vTJiA9nOIEawtxwkSsLN+folB8EA9Id9A58MsJ52g=)
                          3: 323830343a366133343a383030303a3a2f33332d3333203d3e20323730333139.roa (hash: dC63BFgwbGL0IGvpV5eiKCAMMo7+GrQ0xPxAIG8+r7U=)
                          4: 3139302e38332e302e302f32342d3234203d3e20323730333139.roa (hash: AKshzH9UoKz+8zSND+4+uMCSkyAKQNocsGtnfnkviiA=)
                          5: 3139302e38332e312e302f32342d3234203d3e20323730333139.roa (hash: E3yZQdN0MhCpLy5yMa9Q6NsJewU67VTDazQOY5BPHes=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl
                          rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 17:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9c:3d:37:25:91:1b:3a:98:16:83:76:1b:24:74:9d:59:cb:3a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478BC91388C024F294F7E5E2E54CFF21D18A626D
        Validity
            Not Before: Apr 24 17:17:36 2025 GMT
            Not After : Apr 25 17:38:36 2025 GMT
        Subject: CN=F96E0B811D1141C24CE37EA050091F519C2B1A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:5d:ee:f1:7b:8b:03:66:3d:9e:be:d2:fe:
                    b3:2b:a9:0d:28:da:da:7e:c7:42:00:e8:2c:a7:b9:
                    e3:5f:ea:d3:08:f8:b3:a8:e8:58:04:e1:7e:5a:35:
                    84:5e:53:d6:48:fa:a7:dc:9c:58:92:6d:f5:70:3a:
                    47:45:7b:ec:c5:14:55:a2:58:8c:f4:67:f0:aa:cd:
                    df:a3:b6:6e:e0:c1:e2:f7:32:06:ff:0e:4e:f0:96:
                    60:96:2b:a4:d6:40:21:9e:98:a6:74:c5:8c:20:cd:
                    62:8f:12:9b:3e:e6:e9:fa:51:e3:92:e2:4d:8f:90:
                    d9:38:30:16:a2:c0:23:27:53:03:98:28:43:9d:0f:
                    0f:a2:a2:53:ff:55:d1:92:24:97:15:76:66:4c:64:
                    d5:49:88:bf:7d:65:c8:cd:a7:4a:4a:aa:3a:e9:f8:
                    a1:f3:a8:22:6b:a5:24:c7:f1:de:21:3e:3c:04:f2:
                    fe:5b:e0:2e:e5:9d:72:44:d5:6f:fa:ef:18:d3:ed:
                    ff:4a:21:58:fb:12:07:5a:b4:16:93:77:af:90:56:
                    33:26:c7:6d:ac:93:58:ce:e4:12:ff:36:2a:c8:84:
                    3a:cf:ad:b6:cd:69:11:37:8d:41:48:f8:51:48:ed:
                    e5:c0:7f:65:6b:97:5d:ed:6d:26:69:a3:11:4a:9e:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6E:0B:81:1D:11:41:C2:4C:E3:7E:A0:50:09:1F:51:9C:2B:1A:76
            X509v3 Authority Key Identifier:
                keyid:47:8B:C9:13:88:C0:24:F2:94:F7:E5:E2:E5:4C:FF:21:D1:8A:62:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/1/478BC91388C024F294F7E5E2E54CFF21D18A626D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:9e:33:e9:6a:ca:e7:bc:90:78:4c:8a:a1:3e:cd:08:53:
         3f:18:2e:5d:ae:9a:e5:fb:05:26:d3:ba:3d:bb:cb:e0:28:d7:
         c2:52:d7:dd:36:f5:61:3e:52:02:85:e4:19:b2:18:62:ee:f8:
         42:98:c1:ab:4d:c8:ad:13:57:29:48:66:49:9e:f8:26:ab:68:
         90:c9:69:68:2e:bb:4e:00:76:52:b3:d3:e3:e0:02:c4:de:26:
         a7:0c:c5:64:78:e6:ba:e0:db:0d:35:04:c9:22:fd:ef:71:15:
         72:2f:2a:10:49:8a:43:03:83:29:bb:af:74:ef:32:4c:53:36:
         14:27:d2:da:45:06:e2:34:fe:57:82:db:f3:b4:ad:bb:fe:da:
         42:c9:10:7f:9a:fc:6d:6d:4a:26:6d:8d:33:a2:46:48:62:67:
         14:d2:6d:8a:45:9a:75:18:fa:d0:d1:a7:38:47:7b:c6:88:33:
         24:8f:d7:d1:f9:7c:8f:d7:ff:d9:04:27:9b:ac:c3:08:b6:60:
         15:88:83:25:01:0c:3e:7e:c4:83:a3:db:5a:eb:ca:eb:f5:e3:
         dd:97:fa:7b:5d:b0:8e:57:29:14:9a:6f:ef:15:1a:f8:89:58:
         91:ad:08:c5:e2:c2:df:00:5a:25:0d:ff:21:a5:fb:a9:9c:d4:
         8e:3a:ad:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOJw9NyWRGzqYFoN2GyR0nVnLOp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc4QkM5MTM4OEMwMjRGMjk0RjdFNUUyRTU0Q0ZGMjFE
MThBNjI2RDAeFw0yNTA0MjQxNzE3MzZaFw0yNTA0MjUxNzM4MzZaMDMxMTAvBgNV
BAMTKEY5NkUwQjgxMUQxMTQxQzI0Q0UzN0VBMDUwMDkxRjUxOUMyQjFBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTl3u8XuLA2Y9nr7S/rMrqQ0o
2tp+x0IA6CynueNf6tMI+LOo6FgE4X5aNYReU9ZI+qfcnFiSbfVwOkdFe+zFFFWi
WIz0Z/Cqzd+jtm7gweL3Mgb/Dk7wlmCWK6TWQCGemKZ0xYwgzWKPEps+5un6UeOS
4k2PkNk4MBaiwCMnUwOYKEOdDw+iolP/VdGSJJcVdmZMZNVJiL99ZcjNp0pKqjrp
+KHzqCJrpSTH8d4hPjwE8v5b4C7lnXJE1W/67xjT7f9KIVj7EgdatBaTd6+QVjMm
x22sk1jO5BL/NirIhDrPrbbNaRE3jUFI+FFI7eXAf2Vrl13tbSZpoxFKngBlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+W4LgR0RQcJM436gUAkfUZwrGnYwHwYDVR0j
BBgwFoAUR4vJE4jAJPKU9+Xi5Uz/IdGKYm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVkdG1Hckd1SGVTZDNEb2oybmN0eEhQZk5hcndUcURSamdYOEU1Wm96
cmEvMS80NzhCQzkxMzg4QzAyNEYyOTRGN0U1RTJFNTRDRkYyMUQxOEE2MjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3OEJDOTEzODhDMDI0RjI5
NEY3RTVFMkU1NENGRjIxRDE4QTYyNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzVkdG1Hckd1SGVTZDNEb2oybmN0eEhQZk5hcndUcURSamdYOEU1Wm96cmEvMS80
NzhCQzkxMzg4QzAyNEYyOTRGN0U1RTJFNTRDRkYyMUQxOEE2MjZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApI2eM+lqyue8kHhMiqE+zQhTPxguXa6a5fsFJtO6PbvL4CjXwlLX3Tb1YT5S
AoXkGbIYYu74QpjBq03IrRNXKUhmSZ74JqtokMlpaC67TgB2UrPT4+ACxN4mpwzF
ZHjmuuDbDTUEySL973EVci8qEEmKQwODKbuvdO8yTFM2FCfS2kUG4jT+V4Lb87St
u/7aQskQf5r8bW1KJm2NM6JGSGJnFNJtikWadRj60NGnOEd7xogzJI/X0fl8j9f/
2QQnm6zDCLZgFYiDJQEMPn7Eg6PbWuvK6/Xj3Zf6e12wjlcpFJpv7xUa+IlYka0I
xeLC3wBaJQ3/IaX7qZzUjjqtSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:39 2025 by rpki-client on console.sobornost.net