Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
File:                     06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft (raw, json)
Hash identifier:          FT/EUm/xgyd3WHzzjCQ2SOSEy0hN7Sy6v+Hqv4SQNss=
Subject key identifier:   AD:AD:57:62:E5:AA:01:A0:04:38:AE:D3:31:46:A9:63:DD:A3:0D:FA
Authority key identifier: 06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2
Certificate issuer:       /CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
Certificate serial:       7299493367DD9EFBB67A2DB25E40A5F57AB6A4DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
Manifest number:          14
Signing time:             Mon 28 Apr 2025 09:38:30 +0000
Manifest this update:     Mon 28 Apr 2025 09:33:30 +0000
Manifest next update:     Tue 29 Apr 2025 11:56:30 +0000
Files and hashes:         1: 323830343a346632343a383030303a3a2f33332d3333203d3e20323638333037.roa (hash: 6MnbkBjo7czkhYq5sp9gBQAtXAcq+C4fouGkHFK6J2w=)
                          2: 34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (hash: CqLbBj0uT8K12+SQb9CTcXG1+amWQ68DH+TtD05xAIk=)
                          3: 323830343a346632343a3a2f33322d3332203d3e20323638333037.roa (hash: qEzv17rM+XES6/wodcNF76C7jyTtbPZB+LP3WCeG0JA=)
                          4: 34352e3233372e3234302e302f32322d3232203d3e20323638333037.roa (hash: lY/EWRwcSasK752wLlf+0P9S37d6hT9Ev6TDPS9lrXU=)
                          5: 34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (hash: j927LaYZV83yuHe7zoP+Gcpy0fIwCpzgO8deimnVhvg=)
                          6: 06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl (hash: GvY56h33VP8B/u2NFcgx7BI0K8lxiU1ZA8f6yxVMJ10=)
                          7: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (hash: 1e/ZASVitsNt9uijDZpgaaQEjm1GPyXaw2VOWDq218Y=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:49:33:67:dd:9e:fb:b6:7a:2d:b2:5e:40:a5:f5:7a:b6:a4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F66D58259F2CB3C0146BED5F4B1E79A86988F2
        Validity
            Not Before: Apr 28 09:33:30 2025 GMT
            Not After : Apr 29 11:56:30 2025 GMT
        Subject: CN=ADAD5762E5AA01A00438AED33146A963DDA30DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:06:03:e2:bc:62:2a:6e:cd:26:c6:90:52:
                    5e:03:df:5d:be:1c:88:b4:7d:17:08:1b:3a:ce:ce:
                    7c:0e:3e:0f:ea:1f:46:7b:15:2b:b2:5f:f9:52:e6:
                    f3:e3:fe:45:3f:94:49:11:67:d7:b4:65:6e:cd:3b:
                    21:ca:3f:f3:c6:1e:1a:53:a5:7e:23:2d:fd:6f:31:
                    e0:05:b1:a4:dc:22:64:04:16:45:c5:f9:a1:6a:38:
                    66:4c:2c:1b:a1:e4:57:41:35:6b:fc:2b:ba:44:fc:
                    85:ab:d2:11:91:fb:1c:52:a3:1e:8c:c6:d0:e0:a1:
                    5d:8e:7a:44:78:f0:10:d5:58:0f:8e:7d:52:12:da:
                    9c:92:7b:2b:f5:16:27:c5:d7:8b:e3:ec:74:69:a8:
                    bf:a3:3a:f7:c7:d8:67:13:6a:82:9a:07:02:e4:88:
                    b3:f3:58:5c:a3:0b:e1:ab:76:ed:6c:39:9e:25:ca:
                    73:e1:ee:e1:d8:7b:22:20:e6:c2:70:f1:f5:f9:ea:
                    27:43:94:1c:fc:d2:f3:8b:53:67:d5:7f:c8:25:fa:
                    a4:19:13:31:2c:df:ed:3d:13:56:db:3f:41:06:6e:
                    c3:15:22:ca:5d:4c:2e:11:fd:ed:40:d9:5a:78:3d:
                    cd:bf:f9:fe:40:d5:dc:11:77:0c:66:26:11:81:0f:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:57:62:E5:AA:01:A0:04:38:AE:D3:31:46:A9:63:DD:A3:0D:FA
            X509v3 Authority Key Identifier:
                keyid:06:F6:6D:58:25:9F:2C:B3:C0:14:6B:ED:5F:4B:1E:79:A8:69:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/06F66D58259F2CB3C0146BED5F4B1E79A86988F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cf:73:61:a5:0a:86:86:e1:26:dc:10:9d:44:81:5f:b2:14:
         ea:22:fc:00:e9:51:2c:ca:63:58:9d:95:d0:5f:21:2e:5f:a3:
         82:84:3d:aa:d6:0a:85:f4:c9:6e:2d:93:23:3c:e1:b0:a0:0f:
         a6:4f:cf:8c:87:ce:07:86:85:da:5f:20:c6:e8:f2:9d:93:2e:
         01:05:31:ba:67:61:14:c9:41:cd:fe:83:3b:1f:35:3d:1a:80:
         35:7a:37:9c:e8:11:84:4d:5b:86:75:9e:01:1c:81:f3:a3:c4:
         6a:7d:57:4b:10:dc:b4:b1:c8:dd:a1:a8:42:ef:cc:ab:c0:9c:
         13:4e:18:0e:89:2f:44:c7:27:c2:91:b1:8e:92:44:57:9b:d9:
         99:31:5c:da:69:66:1b:75:31:f4:1f:c8:9f:7d:ec:ee:d0:9a:
         9c:53:46:36:97:74:61:3a:2f:4e:e0:17:64:d8:f2:d8:6e:0d:
         2d:40:ca:9a:29:25:f5:98:8c:3e:32:f8:93:7e:ec:72:e7:f5:
         09:7b:a1:cf:5e:a7:c9:40:77:49:00:0a:bc:61:0a:34:1e:53:
         b2:82:5b:62:d9:33:af:07:8f:da:b7:44:0b:0c:fd:d5:9b:7c:
         fe:44:66:e5:c4:cb:e1:9f:13:72:6c:a5:cd:ef:7f:f8:ef:0d:
         14:17:59:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:01 2025 by rpki-client on console.sobornost.net