Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
File:                     0CEEA1DDF076523B39CF76E704244FA173114D8F.mft (raw, json)
Hash identifier:          4vD6dxcrao0r4YOOccrasMzeXwxD2+52h+cNj+k6bRQ=
Subject key identifier:   38:00:1F:7C:48:9D:49:ED:19:3D:C6:1C:66:60:7D:80:3F:69:A6:7A
Authority key identifier: 0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Certificate issuer:       /CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
Certificate serial:       62250145AE6EE7EC2CEAAF13A57F2AF84D87DFF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
Manifest number:          0203
Signing time:             Thu 24 Apr 2025 11:10:55 +0000
Manifest this update:     Thu 24 Apr 2025 11:05:55 +0000
Manifest next update:     Fri 25 Apr 2025 14:04:55 +0000
Files and hashes:         1: 34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (hash: QK7M7Hn95eoxyqK+R5yWsmr5Y3VALC5NN9+0lKedKxY=)
                          2: 0CEEA1DDF076523B39CF76E704244FA173114D8F.crl (hash: JiJBxeCeh9ZMbyDa9YR1Z5SZ50BJ3mlF29A0X43KqGU=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 14:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:25:01:45:ae:6e:e7:ec:2c:ea:af:13:a5:7f:2a:f8:4d:87:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Validity
            Not Before: Apr 24 11:05:55 2025 GMT
            Not After : Apr 25 14:04:55 2025 GMT
        Subject: CN=38001F7C489D49ED193DC61C66607D803F69A67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:89:55:ee:b7:77:84:23:0b:ac:ee:d0:5f:
                    f9:57:b7:ab:36:60:96:f5:37:25:9d:05:d0:5c:25:
                    5e:c7:5f:6c:95:1d:14:2a:b3:5a:b4:0e:92:b3:d2:
                    e4:b1:ac:b8:87:e6:b8:23:34:76:a4:c2:5a:83:18:
                    33:02:42:4f:35:a7:46:d7:61:be:3c:bc:cf:f6:7b:
                    2c:65:f1:88:2a:8e:7d:96:c3:c9:90:ba:ed:01:f7:
                    dc:57:68:cf:c9:f2:4c:d7:86:93:df:43:bb:26:ee:
                    2e:a1:03:5a:df:3c:13:fb:b1:66:35:6e:b6:2e:7c:
                    a5:fd:c6:50:b8:27:0c:06:04:f4:eb:c9:14:83:29:
                    b3:95:e1:a9:82:95:ae:4c:98:16:bb:d1:4c:f1:28:
                    35:5c:38:de:f7:6a:a0:75:ab:13:03:a1:03:bf:d2:
                    07:a1:a5:54:fc:a7:8a:23:7b:f0:b0:78:48:c7:7a:
                    e5:4c:9f:5a:4f:95:03:00:2c:16:8a:cc:40:5c:e5:
                    92:9c:c4:87:ad:eb:5c:bc:84:c7:33:b9:0b:e1:f3:
                    d9:3d:06:52:74:f5:5c:62:46:46:3b:77:21:a0:0c:
                    c4:0e:8a:24:ad:16:38:1a:eb:30:7e:bc:8b:f1:43:
                    80:51:58:4b:12:2d:84:13:82:0c:66:1e:44:5b:5d:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:1F:7C:48:9D:49:ED:19:3D:C6:1C:66:60:7D:80:3F:69:A6:7A
            X509v3 Authority Key Identifier:
                keyid:0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:cf:06:17:8d:50:ef:79:e4:38:12:03:b7:9c:8e:c6:98:
         09:c5:61:18:2f:c9:f7:27:b9:48:79:69:78:eb:b1:36:a8:8a:
         c2:87:a2:a8:f7:76:b1:7d:e3:86:45:54:82:c0:04:3d:84:7a:
         64:8e:82:73:5b:ea:a8:25:74:fe:bb:26:c8:0e:9f:29:34:c5:
         00:ab:b3:22:7a:33:3e:f8:38:87:39:b9:0e:a3:0a:da:d4:fa:
         73:e4:6e:0b:93:f8:d6:7b:7f:b0:21:25:ec:48:c8:51:d8:21:
         76:f0:5b:d7:9c:9c:82:b7:f8:6b:a6:4b:1b:bc:87:30:8d:89:
         d3:b5:7e:fd:3b:58:54:52:52:cb:61:25:6e:2d:50:1b:a4:84:
         66:3d:ce:22:ee:24:65:fa:bf:8a:f0:d8:0b:44:66:9c:af:50:
         1e:60:3d:92:04:a9:15:c0:56:2a:70:c3:01:1d:37:e9:9f:29:
         e9:ac:fd:15:86:42:ef:ee:d9:18:a3:2f:c1:f9:fb:e2:6c:1d:
         3b:73:86:a1:99:49:93:d0:ec:e4:ac:17:05:8f:b8:c0:f7:36:
         34:2c:75:e1:80:80:c4:5b:b3:af:75:f5:27:19:51:90:ed:93:
         e0:9b:56:3e:e7:ca:da:cc:a0:69:d7:4d:c7:de:57:dc:88:d7:
         9d:9d:76:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYiUBRa5u5+ws6q8TpX8q+E2H3/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENFRUExRERGMDc2NTIzQjM5Q0Y3NkU3MDQyNDRGQTE3
MzExNEQ4RjAeFw0yNTA0MjQxMTA1NTVaFw0yNTA0MjUxNDA0NTVaMDMxMTAvBgNV
BAMTKDM4MDAxRjdDNDg5RDQ5RUQxOTNEQzYxQzY2NjA3RDgwM0Y2OUE2N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9olV7rd3hCMLrO7QX/lXt6s2
YJb1NyWdBdBcJV7HX2yVHRQqs1q0DpKz0uSxrLiH5rgjNHakwlqDGDMCQk81p0bX
Yb48vM/2eyxl8Ygqjn2Ww8mQuu0B99xXaM/J8kzXhpPfQ7sm7i6hA1rfPBP7sWY1
brYufKX9xlC4JwwGBPTryRSDKbOV4amCla5MmBa70UzxKDVcON73aqB1qxMDoQO/
0gehpVT8p4oje/CweEjHeuVMn1pPlQMALBaKzEBc5ZKcxIet61y8hMczuQvh89k9
BlJ09VxiRkY7dyGgDMQOiiStFjga6zB+vIvxQ4BRWEsSLYQTggxmHkRbXUpNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOAAffEidSe0ZPcYcZmB9gD9ppnowHwYDVR0j
BBgwFoAUDO6h3fB2Ujs5z3bnBCRPoXMRTY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTN1dUF0aUYzaVpya1NLSG1lWWN5d2NCWmhxVU15Y0c5dnB4c3FDanlN
TnovMS8wQ0VFQTFEREYwNzY1MjNCMzlDRjc2RTcwNDI0NEZBMTczMTE0RDhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRUVBMURERjA3NjUyM0Iz
OUNGNzZFNzA0MjQ0RkExNzMxMTREOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTN1dUF0aUYzaVpya1NLSG1lWWN5d2NCWmhxVU15Y0c5dnB4c3FDanlNTnovMS8w
Q0VFQTFEREYwNzY1MjNCMzlDRjc2RTcwNDI0NEZBMTczMTE0RDhGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOI7PBheNUO955DgSA7ecjsaYCcVhGC/J9ye5SHlpeOuxNqiKwoeiqPd2sX3j
hkVUgsAEPYR6ZI6Cc1vqqCV0/rsmyA6fKTTFAKuzInozPvg4hzm5DqMK2tT6c+Ru
C5P41nt/sCEl7EjIUdghdvBb15ycgrf4a6ZLG7yHMI2J07V+/TtYVFJSy2Elbi1Q
G6SEZj3OIu4kZfq/ivDYC0RmnK9QHmA9kgSpFcBWKnDDAR036Z8p6az9FYZC7+7Z
GKMvwfn74mwdO3OGoZlJk9Ds5KwXBY+4wPc2NCx14YCAxFuzr3X1JxlRkO2T4JtW
PufK2sygaddNx95X3IjXnZ121A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:16 2025 by rpki-client on console.sobornost.net