Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
File:                     F61AA6D04968E2222C81499C46D03813F1070400.mft (raw, json)
Hash identifier:          +NZzF/59C/sDiEUdb/8DrL+ie4cD69INp2EodNv7ytg=
Subject key identifier:   87:18:36:ED:E0:67:75:33:50:DB:71:41:EB:19:90:07:D2:CB:F5:00
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       75F798665F91254C5078B629693E18D6372C5CD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
Manifest number:          010E
Signing time:             Thu 24 Apr 2025 13:26:37 +0000
Manifest this update:     Thu 24 Apr 2025 13:21:37 +0000
Manifest next update:     Fri 25 Apr 2025 17:01:37 +0000
Files and hashes:         1: F61AA6D04968E2222C81499C46D03813F1070400.crl (hash: Mu+UmjEJHHw2oHbGmvpq7Qb9yR54fXMAkqY2h0IwaQU=)
                          2: 3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (hash: 9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=)
                          3: 3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (hash: LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=)
                          4: 3137372e38342e36342e302f32312d3332203d3e203238313731.roa (hash: QGs4i+u1Fp781xTRBZuVf9Sbpy4p+Uveo96HgjsMvDA=)
                          5: 323830343a6438343a3a2f33322d313238203d3e203238313731.roa (hash: fFWlkw4VgGZKIM3JMaVwB2wGQVwKvg1CcuwKadWJSlU=)
                          6: 3137372e3133372e3234302e302f32312d3332203d3e203238313731.roa (hash: C2DRBYLwQ2ccRNhVyPuOjzMp87KdmEZ6vL8rvFgjzj0=)
                          7: 3137392e3130372e3132382e302f31392d3332203d3e203238313731.roa (hash: yhjpZ/3yeOya0YdscNdzwhmDLQucI5LPtbVEA2kspkI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 16:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:98:66:5f:91:25:4c:50:78:b6:29:69:3e:18:d6:37:2c:5c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Apr 24 13:21:37 2025 GMT
            Not After : Apr 25 17:01:37 2025 GMT
        Subject: CN=871836EDE067753350DB7141EB199007D2CBF500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:61:95:13:1f:e9:2d:d0:a9:6c:a4:5a:e3:
                    2f:3d:c3:05:19:ab:77:ed:ce:16:67:72:77:11:6c:
                    d1:69:39:ba:99:94:6e:2b:ad:b9:50:b9:d6:f0:30:
                    66:54:c7:9f:3d:ed:c6:56:89:d3:4a:d2:7d:25:d0:
                    76:fb:97:cf:ef:77:f5:7c:95:de:27:73:08:74:83:
                    b9:f5:06:c2:7b:df:b4:d0:0d:e9:cf:f3:b1:77:7b:
                    7e:0c:0c:50:ae:be:69:d2:33:dd:37:64:8f:7c:13:
                    b1:52:d4:21:a5:87:d4:9b:ac:aa:b0:ad:0e:b2:d1:
                    ac:55:bd:79:fa:a7:39:8e:68:2e:6f:3b:cb:4e:61:
                    6e:b5:d1:71:06:85:87:93:5a:b5:ab:63:d7:e2:bb:
                    6a:db:88:9c:77:2d:31:af:1a:cf:ed:02:c2:93:0e:
                    70:08:5f:1c:c7:b3:93:6f:b4:47:b4:8d:98:67:fd:
                    43:0a:ec:24:e4:35:48:9e:46:e5:de:a4:f5:c4:76:
                    be:c2:10:fd:9a:49:ea:3a:b5:cb:28:93:82:33:64:
                    44:45:2d:77:78:8e:06:4f:d0:9a:e7:1f:75:18:91:
                    71:5e:ee:df:8c:2c:9f:73:6d:66:d6:83:33:15:57:
                    a7:85:72:fb:3e:ab:87:65:8c:d9:90:e6:a3:00:ba:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:36:ED:E0:67:75:33:50:DB:71:41:EB:19:90:07:D2:CB:F5:00
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:af:d6:21:f3:9e:fe:7f:8c:33:e7:fe:7d:99:76:18:3a:
         89:f9:83:8d:14:23:ff:3b:46:3c:6d:9d:f1:43:b8:eb:bd:f6:
         1b:c2:a2:6e:62:39:88:cc:16:2e:a6:47:a7:67:87:d5:55:ee:
         8a:cc:2f:e6:79:c3:7e:60:7a:19:65:ec:5a:46:3b:27:80:87:
         65:c0:1c:ee:e1:8d:63:fc:16:2d:19:03:e3:82:13:94:46:d0:
         bd:c5:b6:a4:33:22:d7:2c:20:c9:bd:d5:ba:f7:c0:e6:50:62:
         6f:76:1c:57:1b:b5:37:0b:39:15:d5:43:8f:48:25:1b:44:19:
         e3:35:d3:33:57:a3:8f:2c:fe:ad:54:05:f2:96:91:84:98:a5:
         72:52:76:cd:c3:3c:37:d2:0f:ab:87:68:c2:fd:de:cd:e0:a1:
         73:6e:d3:b7:f0:65:29:4d:02:11:42:2e:44:cc:91:fd:1b:b9:
         e0:36:e9:24:ad:7b:f0:f2:e9:82:bc:ee:fa:47:f8:8b:e9:40:
         fb:73:84:ee:9a:f8:3f:b2:b6:c1:6b:df:9f:26:06:30:ca:b9:
         39:cd:d9:5b:a2:e2:7a:ff:b6:f1:1f:18:df:0c:ab:8b:d4:4d:
         23:92:d0:47:ec:c8:19:7a:e7:a3:a1:47:61:4f:82:01:ae:60:
         e5:60:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:49 2025 by rpki-client on console.sobornost.net