Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
File:                     B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json)
Hash identifier:          SEo0jHyUJP8qaQTkSAnzwyTycUoLUsWO9wiN4g0xpcU=
Subject key identifier:   01:17:E8:98:21:7E:34:95:26:47:CF:E3:DD:B9:9B:3F:B0:BD:FC:1A
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       71751EF0B991A2E66AC2E866F2523421C3CC81D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 09:30:00 +0000
Manifest this update:     Mon 28 Apr 2025 09:25:00 +0000
Manifest next update:     Tue 29 Apr 2025 12:32:00 +0000
Files and hashes:         1: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: hthaHQ1W4Hhi7UR8B+WN+HOaWbENvNu2yu6xV3d/KEc=)
                          2: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: 2u8vB0M6kPEDbmjRXDB6W0q1vtN3Sx+UVGNZHzwtfgQ=)
                          3: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 8clL3fZ/UcUBet/ByyqI0tz/CBKDL/m9LuvOyhWETW0=)
                          4: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=)
                          5: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: kmPbp9SIMWkNQPWpAWYgRGrTVxQTvYRtPinUblfqjEI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:75:1e:f0:b9:91:a2:e6:6a:c2:e8:66:f2:52:34:21:c3:cc:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Apr 28 09:25:00 2025 GMT
            Not After : Apr 29 12:32:00 2025 GMT
        Subject: CN=0117E898217E34952647CFE3DDB99B3FB0BDFC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:f1:c5:46:7e:f3:81:9a:26:34:9e:bd:6a:
                    36:88:8d:a3:56:2c:3f:c5:d4:0d:d7:fe:3c:24:5b:
                    85:0c:ba:91:7f:7d:66:24:15:81:e5:e7:e5:0e:a3:
                    e7:b3:0c:8e:46:fe:46:55:62:75:8d:01:42:fa:47:
                    4d:18:39:fb:a9:27:58:f8:bc:7c:d0:10:9f:b5:de:
                    57:81:e3:91:5d:9d:57:89:5c:63:1a:1d:95:b2:82:
                    77:22:6f:7e:60:31:4e:d3:e4:ac:55:b0:75:ea:11:
                    eb:4a:fe:2f:57:ec:e4:12:8c:ca:d3:c3:95:d0:c5:
                    be:b4:73:2f:13:ae:51:64:ae:cd:60:61:81:8e:e5:
                    bd:90:df:dd:8a:50:68:59:52:ae:66:27:9b:64:ea:
                    8e:fb:2e:9a:cc:80:51:36:30:61:10:22:fb:ae:a8:
                    52:fe:49:ad:25:69:ac:b4:52:d5:2e:78:db:61:b7:
                    cb:ab:9d:b8:e2:f4:ae:3e:82:61:02:77:0b:25:40:
                    22:69:05:6a:42:3a:4c:bc:71:83:2e:ba:cc:5a:8b:
                    19:2d:cc:30:32:0e:ae:b0:96:99:1d:16:7d:5d:8d:
                    99:c1:c2:9b:35:20:aa:1d:15:b4:12:41:e2:c8:68:
                    8e:05:b6:04:f8:85:1e:42:01:08:be:62:ce:bf:eb:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:E8:98:21:7E:34:95:26:47:CF:E3:DD:B9:9B:3F:B0:BD:FC:1A
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:16:7c:b4:1c:fe:8b:c7:0c:b0:cf:b7:2b:f9:3c:ef:ff:
         77:c3:4f:da:f3:3a:6a:a9:de:1c:39:b1:11:a5:25:6e:3e:77:
         02:97:53:6e:32:39:cd:e2:d7:e2:7e:6e:02:0a:cc:c9:e0:70:
         4c:29:05:a3:f2:03:c3:b7:3f:e5:a5:4e:5f:a4:e3:10:3c:7b:
         ca:54:3b:06:7a:ab:af:72:c4:37:ae:6a:2f:04:3a:36:85:0a:
         52:55:b7:40:f5:50:b9:b3:06:93:13:cf:60:7e:07:56:2d:aa:
         fe:9e:97:ca:5f:fe:6a:b4:4d:36:76:a7:ba:58:25:04:ac:64:
         a0:c0:fc:70:e1:3b:87:a7:21:0b:df:83:85:16:55:ff:7c:64:
         8f:db:d4:d6:d1:60:35:20:92:53:30:ca:82:31:64:b6:22:de:
         85:1c:c5:81:7d:1c:71:7d:59:eb:9a:26:0f:95:a4:b3:2a:a0:
         e3:48:2d:9d:0c:9a:03:19:c7:f7:2b:9b:83:d9:d7:b9:56:a1:
         dd:c8:6c:35:a4:48:5d:eb:17:40:a6:a0:ee:c9:dc:c4:23:0d:
         d5:c0:57:da:31:8a:ff:97:8f:01:ca:62:ee:39:ba:82:95:e1:
         4a:ec:d5:39:24:88:20:76:33:f7:7f:84:89:8f:e4:d3:24:36:
         19:d6:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:00 2025 by rpki-client on console.sobornost.net