Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          73V9kagWfxINza8ioPHOg0+ag2C6sQnW6pAIzANc7rQ=
Subject key identifier:   55:20:E9:C4:CA:25:91:D5:82:E9:3F:D3:BD:C3:FC:E1:D8:53:4B:A4
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       72792CE648A155D35CABE933275AAE0374FFDC53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 11:09:25 +0000
Manifest this update:     Mon 28 Apr 2025 11:04:25 +0000
Manifest next update:     Tue 29 Apr 2025 12:00:25 +0000
Files and hashes:         1: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: 1qApqT8c98HJfSZVdIpkogEpxPHVsWJrpgIqGByb4/4=)
                          2: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: 4YxHt0fdPUOGY0UpTF8bcbiFkVDKKGCFU6HOOXAO4Us=)
                          3: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: rsttPPyFpbKLJ/HEcFMY7LdhPPdzjhskDdtJkGJQnVk=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:79:2c:e6:48:a1:55:d3:5c:ab:e9:33:27:5a:ae:03:74:ff:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Apr 28 11:04:25 2025 GMT
            Not After : Apr 29 12:00:25 2025 GMT
        Subject: CN=5520E9C4CA2591D582E93FD3BDC3FCE1D8534BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:0c:1d:44:16:0f:b6:24:46:a7:a0:80:40:
                    cb:c3:0c:0f:45:dd:15:fa:98:f6:0c:e7:f0:4b:1f:
                    a7:f8:c9:26:c4:e9:59:bb:0b:61:47:44:04:55:b2:
                    e5:c7:ff:64:68:3f:b8:c3:10:1b:bb:94:59:af:ef:
                    d8:de:2a:a0:11:8b:26:1e:97:00:6f:4c:24:97:0e:
                    32:fd:e5:3c:e0:08:dd:9b:e0:81:8d:1a:2b:76:2f:
                    ef:2e:d4:de:fd:8f:e9:74:57:fd:b4:e0:d1:fb:a4:
                    dd:32:5d:c1:e6:a9:12:a1:00:c9:9e:a7:2e:5e:20:
                    ac:5d:12:74:71:2b:b4:8b:35:b3:94:4b:81:4f:ed:
                    69:92:ad:f8:e6:82:9c:af:be:84:55:53:31:79:80:
                    7c:14:a5:71:3b:b9:9a:25:c0:25:b8:bd:aa:f7:44:
                    6f:92:ba:13:ca:9a:bf:11:0e:38:c3:d9:23:80:3b:
                    4b:b9:d9:68:52:e5:84:9a:12:a7:23:49:77:51:04:
                    ba:e9:b3:af:65:84:5c:24:80:f8:90:5a:c8:34:3d:
                    e8:c0:7b:cc:89:7b:38:83:e8:5a:cc:31:fd:38:c9:
                    73:b5:2f:d5:3d:e2:2f:e0:7a:93:21:1f:40:78:b5:
                    d1:4f:5a:3b:fe:d9:58:1b:f6:35:05:2b:96:91:74:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:E9:C4:CA:25:91:D5:82:E9:3F:D3:BD:C3:FC:E1:D8:53:4B:A4
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:b6:e1:25:6f:9c:f4:8b:c2:e4:36:4c:62:79:ca:f5:73:
         e9:42:3f:be:f1:f5:d8:3b:1b:53:3c:d6:e1:de:f4:c0:36:0c:
         2c:d7:68:13:e3:a9:c5:c9:ba:d9:a8:62:43:51:04:d3:c4:dc:
         9a:c4:2f:0a:2e:d0:26:bb:7f:3f:e7:80:b9:9a:27:b3:ac:80:
         d4:47:fa:fc:03:9e:ea:02:aa:cb:01:e7:1d:31:fa:30:8b:f6:
         21:91:4c:51:a8:dd:da:4a:1b:88:c7:5e:b5:2a:05:35:2c:3e:
         90:4d:44:c3:50:64:ec:f9:91:f4:8d:78:54:04:4d:c7:5f:6b:
         ff:c7:4a:60:cc:39:3f:8a:93:41:da:62:a1:fa:75:5b:be:88:
         6a:50:40:a1:b6:2b:00:d2:f7:fe:a4:08:77:4d:c8:ea:08:7d:
         b4:7e:c8:02:f2:e5:78:fe:fa:fb:bf:bf:d2:9d:e2:83:e1:0b:
         95:0b:37:45:5e:9d:bc:75:32:69:be:38:bf:12:9e:91:ee:3b:
         88:a3:dd:a5:96:86:f9:35:e9:65:89:2f:4a:a3:21:6b:5e:ca:
         57:f3:44:d9:1c:3f:be:0f:a3:31:43:ae:d6:46:ac:a9:c2:48:
         44:8c:5b:32:2b:6c:2e:c1:44:50:5c:af:c3:98:f9:29:ba:7c:
         c7:9b:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:59 2025 by rpki-client on console.sobornost.net