Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
File:                     101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft (raw, json)
Hash identifier:          aTLrKZzusBG39C/XcCP7LzvF0tYf+q6q2vfZk4di0k8=
Subject key identifier:   BD:D4:74:79:A1:DD:AE:E8:EC:C7:BF:C1:88:50:45:0A:30:7A:06:50
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       7A5B8001AE4C1EC881315ECDC1C288233569C229
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
Manifest number:          020A
Signing time:             Mon 28 Apr 2025 09:32:11 +0000
Manifest this update:     Mon 28 Apr 2025 09:27:11 +0000
Manifest next update:     Tue 29 Apr 2025 11:54:11 +0000
Files and hashes:         1: 3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa (hash: hG/tJ9dmxGG3i9D88fcDxUlOX9aC5l9HOzfr0a27jeQ=)
                          2: 3137302e38322e3232302e302f32322d3232203d3e20323636343438.roa (hash: 2zslkVGhELzRCKPMOYVfKhCU7Ml3/1nsZpxhG02X8iA=)
                          3: 323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa (hash: s9AzS+2pmOlkn/NV6067H2sXkcJiejwRMjpV5eVSnv8=)
                          4: 101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl (hash: hSYqCvraQcR8NICrrNFyIQ3KY3ZjLTlREzFQ/w1gWR4=)
                          5: 3137302e38322e3232312e302f32342d3234203d3e20323636343438.roa (hash: QBLKNyT/iIiI7CjRCOYS6xkv/QCuiYlsfr7BEePEOkA=)
                          6: 323830343a333766633a3a2f33322d3332203d3e20323636343438.roa (hash: qBfm6szhmQvCpVo7CgJQV0hLx4DkUfBZBZWz1VbJguk=)
                          7: 323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa (hash: 5sPHL7EynEQ/NqIZGJ0RoxgDWqXO5k13HB6Oj6r86f4=)
                          8: 3137302e38322e3232322e302f32342d3234203d3e20323636343438.roa (hash: gata3Kllvj+27YsbLovNVVwyPTgib4L/aDShfOivA8E=)
                          9: 3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa (hash: qLtEUyKCa/qnfXR1siz3cCkL52L+n+z2wIw2bkS9V1s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 11:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5b:80:01:ae:4c:1e:c8:81:31:5e:cd:c1:c2:88:23:35:69:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Apr 28 09:27:11 2025 GMT
            Not After : Apr 29 11:54:11 2025 GMT
        Subject: CN=BDD47479A1DDAEE8ECC7BFC18850450A307A0650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:e1:a5:31:ae:e5:28:88:b1:39:df:a0:42:
                    fe:1d:ca:03:ae:4f:15:8b:07:14:64:8b:05:2e:b3:
                    0e:54:2e:84:b4:5e:eb:6c:1e:ad:1f:bf:f2:99:e4:
                    5f:2a:63:4f:ce:50:1c:d3:4a:80:6a:4b:f6:40:04:
                    cf:ed:0c:b7:c9:7a:5a:1c:46:3d:a0:62:b4:93:1c:
                    11:1a:d8:9e:6b:e7:f3:e1:78:b1:89:0f:91:a7:a4:
                    75:6b:b6:f4:0a:73:26:36:87:6e:01:e5:bb:52:e3:
                    13:70:91:a2:42:ac:ab:d3:27:a1:a9:f1:b8:dc:7e:
                    a9:57:a5:27:4d:96:b3:6e:bd:6b:5b:7f:24:d4:87:
                    5e:99:cc:9f:ec:14:9f:e4:ee:9d:95:8c:80:76:55:
                    54:29:f1:b8:30:12:b3:9a:5c:f9:13:e5:30:66:80:
                    f7:ef:9b:d4:09:d5:03:0f:21:ad:f1:de:e7:4e:9b:
                    cf:77:e9:03:6a:ec:b2:db:38:28:5e:d9:91:9c:3f:
                    97:26:bd:0d:39:59:dd:05:4f:2c:77:b6:aa:2f:12:
                    93:3d:4b:f0:4d:e5:84:54:4b:57:62:74:83:6b:e9:
                    26:1b:c4:1a:c2:58:b6:6d:33:f8:08:1a:61:54:7c:
                    37:5a:c0:19:bf:20:2b:c8:ff:21:d2:9f:64:c1:38:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:74:79:A1:DD:AE:E8:EC:C7:BF:C1:88:50:45:0A:30:7A:06:50
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:ef:f2:cd:33:c3:72:14:44:7c:a2:15:d9:bd:ec:bd:31:
         4b:89:09:e8:72:1f:3b:be:32:c7:b8:a2:56:c9:32:bc:69:a2:
         f2:87:ad:b6:57:e9:3e:be:0e:1c:60:a8:5b:8c:d9:33:62:e2:
         d7:32:fc:90:15:e8:f5:06:3f:81:5a:6a:61:48:57:4a:a4:71:
         a1:1d:9f:38:18:29:db:07:a3:c8:46:27:88:7a:22:f0:39:06:
         78:9a:ea:f8:da:d6:24:86:ac:d6:27:39:fd:e6:e6:58:77:35:
         e6:bf:e5:6b:a6:5e:27:42:e4:df:5a:47:8b:f8:1e:21:9e:0e:
         ac:f3:af:22:27:07:52:98:6c:21:9e:f9:0e:66:59:5a:b1:48:
         16:94:0a:7a:c5:a4:cc:93:bf:50:45:5a:bb:62:cc:59:3d:d8:
         92:01:a1:83:17:b0:30:94:16:3c:b9:e8:9f:fe:35:8c:23:c1:
         cb:34:15:85:15:74:fd:1d:53:21:e1:d3:3d:f4:89:55:49:6b:
         dc:22:86:6b:50:eb:39:9d:ff:29:00:1f:2a:2f:00:dd:24:ba:
         3f:37:76:cf:c4:f7:34:f0:59:f9:78:96:2f:3b:65:f9:ff:c0:
         92:2a:25:6b:58:7d:90:4c:5e:2c:03:4b:67:b7:1d:af:57:0c:
         be:9f:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:02 2025 by rpki-client on console.sobornost.net