Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
File:                     19DB591368FFC9C033D175BED1136000D4C84821.mft (raw, json)
Hash identifier:          R2fsCEzryIu9GPHI9bgjnwfvQd+goBjV8Tvk7kgDCkY=
Subject key identifier:   3A:3C:62:58:5F:84:78:F8:2E:61:6C:52:A7:F7:86:DF:D4:48:71:46
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       0B50CBF7554BE38B5DCABD4A23317E64D84A6A48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
Manifest number:          0209
Signing time:             Mon 28 Apr 2025 18:10:01 +0000
Manifest this update:     Mon 28 Apr 2025 18:05:01 +0000
Manifest next update:     Tue 29 Apr 2025 19:09:01 +0000
Files and hashes:         1: 323830343a363063633a383030303a3a2f33332d3333203d3e20323639313932.roa (hash: zeD6lwrVyJKe6SLDV683PErDsvg5/fN0Gc62TgmROzc=)
                          2: 34352e3138312e3134382e302f32322d3232203d3e20323639313932.roa (hash: ZPpiSekRw5OJhNkheFvoaxwNIMeR5hT41Dsqi3GNc0Q=)
                          3: 34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa (hash: cyCOcgKoUcqy9VvfsU4nwUVcaZ9XbKSOHIdwbeyZShk=)
                          4: 19DB591368FFC9C033D175BED1136000D4C84821.crl (hash: Qev+j9YRWQ7clZa7EjA4HshJq0dA/j6XcLq1xs4Pobw=)
                          5: 323830343a363063633a3a2f33332d3333203d3e20323639313932.roa (hash: 7lA5J8ymcC5L7FfUMlV/3vhcoJVDBn9KizQUwCWk9rU=)
                          6: 34352e3138312e3134382e302f32342d3234203d3e20323639313932.roa (hash: 8Js4xpPqBCEmC1dV5Lwwo824K0xGuv7lTxs1vJn2DEs=)
                          7: 34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa (hash: doFZycdK74IAch35EEoQ9Wd/wGNFT0zHxIpbI/Z5hD0=)
                          8: 34352e3138312e3135312e302f32342d3234203d3e20323639313932.roa (hash: gCkfhJr65NVSxR4ytaypkFMx461m7Rfa6fPj+hTbQJI=)
                          9: 323830343a363063633a3a2f33322d3332203d3e20323639313932.roa (hash: c80jzCef/Uhq3OV1PPKNrWErfWWq31+M2pplihZp2gY=)
                          10: 34352e3138312e3135302e302f32342d3234203d3e20323639313932.roa (hash: XcYRnUA3ecclniz0nBtg7w07y3lx9wiNWDXdcQ9YpNY=)
                          11: 34352e3138312e3135302e302f32332d3233203d3e20323639313932.roa (hash: Oad844YrW5/ePRWa5+n0ko/bfIEeC7JV8YDPj/Q0DJ8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:50:cb:f7:55:4b:e3:8b:5d:ca:bd:4a:23:31:7e:64:d8:4a:6a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Apr 28 18:05:01 2025 GMT
            Not After : Apr 29 19:09:01 2025 GMT
        Subject: CN=3A3C62585F8478F82E616C52A7F786DFD4487146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:04:41:f7:d3:33:a0:74:59:06:b5:6c:5e:
                    dd:c0:3f:1f:a2:c4:8e:3c:47:d2:ca:1c:e1:5a:82:
                    ae:68:49:d4:44:2f:1c:a2:4e:77:5a:4d:d6:cf:43:
                    20:57:54:bc:1d:d9:8c:f2:bd:de:91:ec:48:e6:a8:
                    49:09:d6:bf:a1:37:e5:a1:ef:e3:6a:8f:d7:8d:cc:
                    2f:40:aa:6d:dd:4b:c7:65:fb:65:c1:36:3f:ae:fa:
                    6f:2a:86:d9:03:c1:e3:e8:6c:26:f6:69:ea:18:ec:
                    12:b0:35:48:7a:07:d6:30:0d:ec:4f:f9:8d:e8:e5:
                    e8:cd:27:9f:74:e3:12:c8:ce:0e:c3:ad:13:df:7c:
                    94:0c:5e:85:9d:7f:a3:86:3c:cd:39:45:3b:a2:65:
                    3e:e2:42:ad:8f:2c:e4:62:f4:7d:81:24:f1:ec:af:
                    a7:72:25:aa:55:95:39:56:3c:3e:99:d0:d0:35:89:
                    e9:05:4a:d0:47:99:bd:55:72:7f:e9:5b:7c:0a:79:
                    c9:b7:57:8d:3e:86:8a:5e:2f:62:f9:7f:6f:90:c2:
                    ca:bc:75:60:17:b2:b7:2a:da:6d:19:67:96:76:68:
                    2e:10:10:ca:ec:b5:1a:e9:bd:19:cc:bd:11:bd:b7:
                    64:4e:56:65:53:c3:93:2b:ad:ab:da:b5:4c:44:30:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:62:58:5F:84:78:F8:2E:61:6C:52:A7:F7:86:DF:D4:48:71:46
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:4d:e1:71:61:67:8e:8a:e8:8e:76:eb:05:66:d4:0e:53:
         16:2e:fd:7d:b9:97:3e:de:50:a9:c9:45:f8:73:ce:f5:c1:9d:
         77:2c:d1:95:ea:c9:e8:a1:45:73:d9:c6:e0:ea:93:5a:a1:e4:
         d1:d8:36:35:08:b9:9d:a6:5a:ce:d4:da:0e:44:72:a4:22:12:
         c1:02:31:92:2b:2e:dc:9f:84:7b:fa:67:e4:58:9c:2e:f0:cf:
         ed:bb:4b:2e:2d:1b:76:65:6f:a3:44:95:30:2f:0c:7c:f6:a0:
         33:1e:8f:96:bc:3f:9c:43:2d:f0:f0:15:50:85:57:48:d5:b1:
         f6:19:f3:38:c5:47:53:4a:fb:f8:de:7b:c4:32:8f:ae:a6:cf:
         5d:b1:ae:0f:c6:ab:16:49:c5:87:1a:c0:22:96:a5:4d:13:fc:
         3a:16:76:d5:9e:c4:89:d6:4a:20:c4:2d:3f:2c:5a:67:2d:e6:
         bf:55:9c:ee:f4:eb:40:30:70:22:9b:de:7a:0b:82:71:5d:a3:
         27:fd:03:c2:15:b1:80:b5:72:8d:96:f7:e1:9d:48:fc:84:69:
         e2:89:46:8c:02:38:d3:fc:60:e6:3f:77:82:5d:f3:53:d9:e3:
         1e:49:64:7b:5e:9b:e8:48:e2:fc:77:a3:5a:78:0e:4f:4c:34:
         37:c4:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net