Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
File:                     0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft (raw, json)
Hash identifier:          f5HUk1xMAWVgmdRDEuo+vFo040rE1tk+InDKl7bDelw=
Subject key identifier:   0E:1F:6B:84:ED:CF:39:AE:3B:98:D9:2F:01:0E:F6:8D:56:1A:9D:DE
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       4D99C40BB7AFCDE40723942C15F5CD161AB514A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
Manifest number:          020B
Signing time:             Mon 28 Apr 2025 15:10:13 +0000
Manifest this update:     Mon 28 Apr 2025 15:05:13 +0000
Manifest next update:     Tue 29 Apr 2025 17:27:13 +0000
Files and hashes:         1: 0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl (hash: 0KuwluL3uTmZ9il3gDqrL2Q6vxQ3sPCpqy9qvuTlcF8=)
                          2: 3133382e302e3131342e302f32332d3233203d3e20323634353434.roa (hash: ugYRSpFEBSprRmFoDWAOtd//MRzvMD5T8mtOg6tTBQI=)
                          3: 3133382e302e3131322e302f32322d3232203d3e20323634353434.roa (hash: /oGcUS9pBbC1yFVaVOW40Ya+Ysiwkwqadpl5tS5pimM=)
                          4: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (hash: pTFpAJquA7kf9JYG3qg9VdXN/ZtgtmN73uyusDR1O2A=)
                          5: 3133382e302e3131322e302f32332d3233203d3e20323634353434.roa (hash: Zc3emTwNKpcAPeJPUJwtfWIExbrgjg7FchJYEiLE6+g=)
                          6: 3133382e302e3131332e302f32342d3234203d3e20323634353434.roa (hash: 1j6P7sUujhVAsl+GzTpZP6bLqtpgbp/+sx3iMkOVX/U=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:99:c4:0b:b7:af:cd:e4:07:23:94:2c:15:f5:cd:16:1a:b5:14:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Apr 28 15:05:13 2025 GMT
            Not After : Apr 29 17:27:13 2025 GMT
        Subject: CN=0E1F6B84EDCF39AE3B98D92F010EF68D561A9DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:d8:2e:d0:92:bd:4d:76:5d:49:31:e9:9b:
                    bd:f8:34:e4:76:89:1f:13:51:14:2d:7b:50:55:3d:
                    35:80:d8:e9:ce:ed:73:de:8e:91:7f:b3:13:8d:e3:
                    45:5d:52:a8:1a:3d:0b:e5:9f:55:78:58:a3:05:87:
                    f3:52:75:a6:a8:08:dd:88:bc:a3:01:b4:28:3b:31:
                    41:21:07:fb:ec:98:18:5a:d5:ec:39:b2:a3:fc:3f:
                    e2:43:5c:62:cb:9d:d4:a7:d6:42:cd:b9:04:5b:97:
                    88:d1:39:44:d5:87:ee:97:ae:70:2d:55:8d:7d:39:
                    e0:8a:99:f7:21:c5:e5:71:f3:9d:b4:2c:0b:e6:a0:
                    02:75:42:58:6a:64:23:d6:23:2a:5a:e1:3a:1d:bf:
                    89:0e:42:00:54:ee:26:14:9e:11:57:d6:14:0b:a7:
                    4e:6e:dc:d7:f1:41:40:aa:cf:3c:2c:a9:fb:44:58:
                    6f:53:e3:93:48:29:76:5e:5f:f4:cc:9b:e1:32:14:
                    c9:15:ad:6b:67:49:bb:6f:9b:8d:de:d5:ee:1d:7d:
                    98:56:ca:82:60:4a:e0:90:6b:75:ef:59:f4:76:76:
                    bd:c6:00:40:50:28:19:41:5e:1a:52:4d:63:03:8e:
                    65:f4:c6:e3:77:99:5d:41:db:1f:c9:29:59:55:4d:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:6B:84:ED:CF:39:AE:3B:98:D9:2F:01:0E:F6:8D:56:1A:9D:DE
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:68:ac:9d:85:f7:f7:6f:3e:f7:0b:be:41:d4:1e:f5:19:bd:
         da:09:b1:f1:31:f3:8e:46:39:3d:87:3a:f2:41:c6:54:55:13:
         10:0b:b6:a6:d7:06:9a:62:bc:24:0a:c4:9e:6c:79:5a:de:9d:
         26:91:59:54:b5:a8:7d:0b:d3:e4:64:85:1b:f4:d2:ac:24:76:
         49:bc:16:c2:fd:ae:94:af:02:f7:d2:0f:ed:99:78:cf:4c:75:
         25:b0:0c:fe:ae:1c:61:0e:b6:a0:15:1f:48:b0:83:b1:1b:15:
         f0:0c:c1:f4:60:b9:ca:b3:53:22:3d:88:ba:c2:88:25:68:a5:
         3e:2f:d0:f4:d0:e7:cf:b4:ba:a4:94:27:5d:fa:8e:f2:57:53:
         81:1a:be:33:61:5b:f1:8c:c9:d6:ac:e8:97:bc:89:f6:82:68:
         f2:f4:ad:ae:d9:74:61:0e:3c:7b:bd:06:f3:f6:84:00:4f:2f:
         52:8f:6d:72:7d:03:b4:9d:c7:2e:cc:c8:12:c5:ec:a0:c2:0e:
         12:61:ac:19:a6:7b:c1:6c:91:50:c8:53:51:3c:f1:66:1e:98:
         14:27:d8:14:d3:c5:87:91:d3:1a:ac:e2:5e:f8:69:91:d5:70:
         1a:83:b7:70:6e:c3:ad:1a:79:c0:2f:1b:f3:ab:77:95:22:50:
         8b:6f:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:00 2025 by rpki-client on console.sobornost.net