Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft
File:                     72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft (raw, json)
Hash identifier:          mXlbNuD6XIpCqT5Su8vEjiMnMZXpy1MTQLiP8ptrAJs=
Subject key identifier:   C3:FF:20:F2:63:E0:68:05:83:0F:0A:77:19:34:A0:00:AF:11:15:23
Authority key identifier: 72:FF:2C:75:A3:49:44:05:E4:B5:03:68:9E:7D:DD:15:48:2E:3D:3E
Certificate issuer:       /CN=72FF2C75A3494405E4B503689E7DDD15482E3D3E
Certificate serial:       0FFEDC98A86804E00F7B7B8E5331D74DEF206D3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FF2C75A3494405E4B503689E7DDD15482E3D3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft
Manifest number:          04
Signing time:             Sun 27 Apr 2025 11:51:05 +0000
Manifest this update:     Sun 27 Apr 2025 11:46:05 +0000
Manifest next update:     Mon 28 Apr 2025 12:58:05 +0000
Files and hashes:         1: 323830343a363339633a3a2f33332d3333203d3e20323639333732.roa (hash: eGEW/hC0qURA4WYQJ1ZusuUfhYWHkgeP/VqolU+cfew=)
                          2: 323830343a363339633a383030303a3a2f33342d3334203d3e20323639333732.roa (hash: djdz+Cx4ymT68OZL3fMcIK+1vGpeUGLLIn1JmVN8ULI=)
                          3: 34352e3138352e39392e302f32342d3234203d3e20323639333732.roa (hash: hvoNP6CLfRbDGljxxzg38chi9ZBwm9ZQ08nSMMHZ8lI=)
                          4: 34352e3138352e39362e302f32332d3233203d3e20323639333732.roa (hash: RcqosUDUHONnDM3JuLNgBwVwOD5s9Wcn3ZH0CASTwzs=)
                          5: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (hash: IJJ4nGzcR30uRuWJos4PmjTJGIx1dLeCt3TTayAnFgA=)
                          6: 72FF2C75A3494405E4B503689E7DDD15482E3D3E.crl (hash: +PARsUqXGbs5ysEMSCuHtnr6TvsZ8t4nCaUNkn04u1c=)
                          7: 34352e3138352e39362e302f32342d3234203d3e20323639333732.roa (hash: LzyduasOZlWkCH/5RJef8PXah2Oqg64bXHi1uF43eEs=)
                          8: 323830343a363339633a633030303a3a2f33342d3334203d3e20323639333732.roa (hash: UDalN61Wc7kujDhJDQOsyT9hw80afa5K3SJXj9aLOxQ=)
                          9: 34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (hash: S9b0zEMGevCvGjtVyXmd12Ko1aKUVkYTBLWDZECTNgA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.crl
                          rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FF2C75A3494405E4B503689E7DDD15482E3D3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fe:dc:98:a8:68:04:e0:0f:7b:7b:8e:53:31:d7:4d:ef:20:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FF2C75A3494405E4B503689E7DDD15482E3D3E
        Validity
            Not Before: Apr 27 11:46:05 2025 GMT
            Not After : Apr 28 12:58:05 2025 GMT
        Subject: CN=C3FF20F263E06805830F0A771934A000AF111523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:ca:8f:12:36:82:e1:90:4a:d0:40:88:2f:
                    ba:83:d9:69:2b:a4:ac:4a:68:d7:26:e5:9c:2c:c6:
                    48:91:b5:12:e8:dc:2a:2a:d4:6b:24:3e:be:67:45:
                    1a:73:2c:70:8f:50:9b:d3:5c:c0:6f:d8:d1:ea:48:
                    46:cb:35:39:4b:6b:f9:f6:25:52:07:0d:bd:83:94:
                    20:d2:bd:c9:c2:ab:f2:32:f2:4a:00:23:47:56:9b:
                    bb:29:e8:a2:bf:14:8c:8a:c2:77:80:c8:87:cd:7c:
                    9c:4c:9c:5e:1f:d5:e2:bf:dc:b3:51:18:bd:bb:86:
                    e6:c7:ca:1a:fc:19:6c:b2:6a:66:2f:49:f0:6b:b8:
                    7f:5a:74:5a:d5:6a:e5:dc:06:a7:30:e1:4d:cc:57:
                    bf:4d:7a:a3:f1:f2:e2:50:43:ef:ae:3a:20:5e:11:
                    eb:5c:6a:6e:17:fc:c9:b3:83:b6:5f:77:64:78:d1:
                    44:3d:a1:dd:0e:a4:ef:fc:2b:39:20:c8:95:fc:8e:
                    ba:c7:51:26:ef:dc:5e:d4:68:b8:28:da:b1:c1:00:
                    83:4f:f6:db:f5:6a:66:96:d9:1c:a6:e7:ff:a0:e8:
                    5d:ba:cf:78:22:a2:48:51:ed:de:03:1d:ea:f5:e4:
                    75:40:fe:0f:fb:1f:8e:3c:ee:56:f8:e1:68:83:dd:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:20:F2:63:E0:68:05:83:0F:0A:77:19:34:A0:00:AF:11:15:23
            X509v3 Authority Key Identifier:
                keyid:72:FF:2C:75:A3:49:44:05:E4:B5:03:68:9E:7D:DD:15:48:2E:3D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FF2C75A3494405E4B503689E7DDD15482E3D3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:70:c3:81:7a:15:1b:8d:81:1b:30:62:af:c7:5d:df:5f:
         35:f3:4d:ff:85:de:98:62:90:ce:f6:6a:9f:fd:c4:b4:99:be:
         9f:12:1d:2f:0b:b3:aa:dc:ee:41:53:72:21:f6:f3:a8:61:85:
         24:32:13:f3:94:82:61:25:a0:a6:ac:70:86:b7:48:55:0c:f8:
         79:27:83:f1:3d:0a:f2:7e:c7:d3:7b:00:c9:65:33:ed:bf:a9:
         1b:ce:59:77:d3:c7:5a:d1:ab:53:19:4a:95:ec:90:04:39:aa:
         01:b9:8d:4a:6a:be:1f:55:d4:66:87:fc:d1:77:29:9a:0f:d4:
         e2:67:b9:1b:1e:5a:76:0c:3c:da:91:04:4e:95:8a:c3:44:ac:
         5c:08:04:0a:c6:23:f9:f3:57:bf:8b:89:37:58:58:c0:77:1f:
         f0:69:9b:98:5a:db:de:58:02:db:fc:20:c7:a0:4a:8e:5e:fe:
         25:61:1f:cb:57:ed:e8:d1:5c:e8:f5:de:c2:1a:87:7e:e9:56:
         08:14:8e:8d:3b:b7:80:51:24:40:23:9b:b9:2b:77:14:78:50:
         db:8e:e6:13:cc:dc:a0:48:48:42:ab:04:85:e4:3b:66:ea:e9:
         8a:82:7e:c8:cd:46:17:43:d3:2e:e5:74:09:52:72:a8:74:24:
         a3:44:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:48 2025 by rpki-client on console.sobornost.net