Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft
File:                     BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft (raw, json)
Hash identifier:          c/ehdIXpuCr0jwdm2wTrNVY7GGOuF3QkbCYy85/5zYE=
Subject key identifier:   E6:8B:14:31:58:AC:E4:D1:25:71:B8:B9:C9:20:C9:6F:61:A1:7B:77
Authority key identifier: BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41
Certificate issuer:       /CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741
Certificate serial:       0577AAC6EB41DE91C82177BDB141134CA5D03D1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft
Manifest number:          0203
Signing time:             Fri 25 Apr 2025 18:10:00 +0000
Manifest this update:     Fri 25 Apr 2025 18:05:00 +0000
Manifest next update:     Sat 26 Apr 2025 21:47:00 +0000
Files and hashes:         1: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (hash: UiXjDidkD0nAk2B9x3CihHP/bHAmAf6Pe10O64bz2Pk=)
                          2: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl (hash: W3KvLc/wG9ZEyR8pppGt6m83n1yRRe+YN7cv0LHEe+A=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl
                          rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 21:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:77:aa:c6:eb:41:de:91:c8:21:77:bd:b1:41:13:4c:a5:d0:3d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741
        Validity
            Not Before: Apr 25 18:05:00 2025 GMT
            Not After : Apr 26 21:47:00 2025 GMT
        Subject: CN=E68B143158ACE4D12571B8B9C920C96F61A17B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:fe:f6:58:51:17:6e:83:dc:eb:77:4e:b7:
                    b2:de:1f:11:c0:64:2a:f8:17:f8:13:d7:b4:3b:8e:
                    3a:c2:9a:77:de:5c:16:f2:96:4a:c8:76:ea:ec:d1:
                    27:5a:e8:32:58:db:61:77:c5:c2:f6:a8:ed:7c:b2:
                    6c:d8:8a:db:53:c8:2a:6e:8a:e6:e7:c1:25:f2:34:
                    00:eb:01:7e:11:fb:c2:4b:d6:0f:92:f3:ca:e7:a7:
                    2d:77:18:a6:d6:3c:27:3e:90:77:90:6b:bb:7f:e6:
                    6b:33:89:e8:e6:26:f4:36:d9:b1:1d:a0:ac:eb:cf:
                    ce:40:78:14:39:08:40:5f:8c:53:e5:93:68:d7:a9:
                    62:e4:f7:ab:d7:15:02:f2:82:2b:4c:ff:0c:96:43:
                    3b:e0:55:49:a2:d2:e2:6a:50:e9:e4:fe:64:4a:8c:
                    13:d6:cb:9d:f3:5f:de:60:c9:73:13:eb:11:a0:ce:
                    95:25:80:dc:dc:f8:ea:a3:04:55:83:6a:35:4b:33:
                    05:33:ae:69:57:7d:b9:f1:64:cc:23:58:76:54:c5:
                    bb:aa:64:44:59:11:74:f4:4d:a0:35:c7:63:59:11:
                    80:36:6e:e2:24:c2:e9:8c:ff:ec:69:06:12:42:f7:
                    52:c9:46:88:cc:74:c5:6f:c3:1a:37:e8:42:0a:e4:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:14:31:58:AC:E4:D1:25:71:B8:B9:C9:20:C9:6F:61:A1:7B:77
            X509v3 Authority Key Identifier:
                keyid:BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:94:25:94:54:6e:b9:f6:31:db:ea:2d:c3:bc:23:29:d3:
         f6:43:88:ca:75:b6:da:7d:f5:5a:b1:40:9a:91:67:45:ba:c9:
         b0:1b:4e:ab:73:4f:9b:be:c0:dd:7c:43:a9:13:55:46:62:cd:
         a3:39:29:97:b1:7e:95:cb:f4:d6:7c:72:2c:e9:da:b2:00:80:
         78:6d:67:35:7e:b2:32:be:91:f8:3d:7d:69:58:0e:b8:c2:13:
         f5:dc:7c:ba:09:de:b0:ce:19:fd:e7:e9:18:26:81:05:99:1c:
         a1:e6:7e:04:32:87:e2:b8:f8:a7:83:3a:9c:38:15:8d:4f:bb:
         5f:08:c3:1f:d1:6c:11:4a:60:27:3a:86:fb:4d:8b:5d:2c:8c:
         25:fe:3f:4e:86:96:86:12:85:d9:79:43:45:23:18:1c:8c:f0:
         57:1d:55:5b:ae:54:b3:97:b4:33:6b:b2:d4:2a:a0:49:cd:d4:
         10:93:ec:32:3a:e1:2b:56:de:74:dc:45:95:6e:0f:48:33:f5:
         4c:7c:66:61:ee:03:68:01:09:da:b0:a0:4a:12:8a:0b:2e:61:
         d0:f4:15:f6:ba:3c:9c:7c:be:b7:c4:b9:ad:35:09:80:59:5a:
         f5:f5:6d:f1:43:0f:a0:a9:01:a0:4e:82:59:78:7d:64:59:62:
         78:43:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:40 2025 by rpki-client on console.sobornost.net