Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
File:                     D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft (raw, json)
Hash identifier:          kqnBGq4z7XMyQ2BnubRh4B5HP/vLJ/Sh11mFzVf07WI=
Subject key identifier:   0D:9D:FC:16:58:83:82:42:38:F5:9F:8F:E3:46:90:61:3F:F6:1B:A8
Authority key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C
Certificate issuer:       /CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
Certificate serial:       34D593FE3E344D80B47A9F49AD1DE76D70A0BB44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
Manifest number:          67
Signing time:             Mon 28 Apr 2025 06:54:41 +0000
Manifest this update:     Mon 28 Apr 2025 06:49:41 +0000
Manifest next update:     Tue 29 Apr 2025 09:39:41 +0000
Files and hashes:         1: 34352e3138322e33322e302f32332d3233203d3e20323639323635.roa (hash: n86hgITupBHGxIN7N7c9CMiz6JlIIIiwvcQmW7FnkIQ=)
                          2: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: njp8sTJR1VMYOBf9BsAYhMAidvhlELiUvgy/Q/9XRog=)
                          3: D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl (hash: q1CXoCqF/QiZlkONSwnOjjG7PicXo32LhjgofNUVQTw=)
                          4: 34352e3138322e33342e302f32332d3233203d3e20323639323635.roa (hash: OpuO2VnO/YlWjK6Ny4U6ctD0aLA3t1BSzz6E/AqpO+I=)
                          5: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: b8STJpsLAVK+105/LwrPEU8i8O/LzpwBiUKVISQEfII=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d5:93:fe:3e:34:4d:80:b4:7a:9f:49:ad:1d:e7:6d:70:a0:bb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C
        Validity
            Not Before: Apr 28 06:49:41 2025 GMT
            Not After : Apr 29 09:39:41 2025 GMT
        Subject: CN=0D9DFC165883824238F59F8FE34690613FF61BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:cd:8f:ff:73:40:11:2b:d5:96:8f:45:4a:
                    b5:10:81:1a:19:47:25:88:28:fe:c0:31:05:49:35:
                    4d:e3:5b:f7:23:85:da:1c:3f:4e:b3:b3:89:b5:07:
                    8b:2b:88:3f:78:0b:46:f3:56:5b:fd:74:82:d9:76:
                    c8:e0:aa:e0:b6:89:97:4f:cd:3d:a7:26:de:c9:0d:
                    b9:54:4d:75:1c:ea:23:f9:0f:28:1d:f3:49:45:e8:
                    80:08:06:c9:93:92:f8:fa:54:2b:ba:61:95:32:41:
                    2f:48:8b:70:a5:3e:ad:15:2a:b2:76:a9:da:81:cf:
                    a8:3a:a8:07:1e:a7:94:5f:22:1c:cb:7b:63:fb:61:
                    b1:df:3a:3e:68:07:f8:27:48:ad:e6:09:88:3b:2e:
                    a4:16:09:a3:9f:d4:83:7c:68:a6:b3:f1:d2:f4:96:
                    ef:ea:a2:58:e5:f4:a1:65:56:ee:86:fe:8c:db:7a:
                    e7:f4:a8:5c:50:02:d2:80:bb:b0:f8:d8:bf:4f:64:
                    1a:d6:7d:36:43:30:2d:42:3e:0a:ae:2d:d5:0a:b8:
                    31:01:ef:62:b4:29:2b:7c:6d:d8:c6:d6:ef:21:4c:
                    0b:d0:78:ac:7a:db:59:64:88:3d:15:08:f8:45:cf:
                    de:29:2b:60:24:57:99:b0:9b:73:a4:1c:85:f4:b3:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:FC:16:58:83:82:42:38:F5:9F:8F:E3:46:90:61:3F:F6:1B:A8
            X509v3 Authority Key Identifier:
                keyid:D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:09:ed:4e:67:8c:9f:f8:62:ae:ad:af:2e:ee:b1:1b:49:
         bc:bd:4b:13:06:f5:28:56:bd:61:ba:7d:f6:b8:5e:6b:0a:0f:
         14:cf:9b:26:ee:de:e9:1a:d3:15:35:3c:75:4b:28:98:62:85:
         94:e2:ff:a9:8c:2a:df:32:d1:37:27:a5:32:79:72:2b:27:ec:
         5f:f7:28:e3:03:34:5d:db:a9:45:b9:c2:99:ec:5f:a8:11:ef:
         db:5c:05:f0:f4:3d:8d:ca:0a:80:7e:85:2e:36:61:d9:3b:65:
         9c:da:d6:14:9f:7b:ef:01:14:bc:8f:e3:bb:b2:b2:51:ca:03:
         60:01:12:d2:b2:65:22:2b:45:ef:73:84:ba:e2:8b:79:49:1c:
         53:1e:a6:8b:d1:45:90:3c:5a:f5:6c:2d:e2:ac:54:d2:a4:16:
         9c:04:32:8e:be:45:ce:9f:49:88:fe:6e:dc:cb:95:12:c3:ee:
         77:dc:f6:b6:32:10:7f:bb:b7:63:ef:e9:0f:bd:be:8a:78:bc:
         b1:87:94:3d:d0:9e:6c:67:7d:41:89:65:ef:53:b9:e8:e7:34:
         98:56:cd:e5:00:ae:45:ed:3a:19:b2:fb:ff:95:ad:fd:93:a3:
         47:f6:8f:45:1e:56:bc:d0:b8:2f:aa:93:87:53:8a:e4:78:8b:
         f6:ba:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:39 2025 by rpki-client on console.sobornost.net