Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft
File:                     EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft (raw, json)
Hash identifier:          aRrHv0FVruFMGvTVzxoLD2UX+a8Kspk2Hu21f4zmjeM=
Subject key identifier:   A8:C1:0F:09:68:99:2C:4A:93:E9:08:F1:E2:66:F7:28:3F:B7:84:CB
Authority key identifier: EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF
Certificate issuer:       /CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
Certificate serial:       5BAE671F786DBB61EB548A74FC677EB0C467C0F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 14:01:04 +0000
Manifest this update:     Mon 28 Apr 2025 13:56:04 +0000
Manifest next update:     Tue 29 Apr 2025 14:02:04 +0000
Files and hashes:         1: 323830343a333230633a3a2f33322d3438203d3e20323635303533.roa (hash: BSHpetzE73VN4rKm0R4De8h6dC9dNXwbuyB7iq5IYy4=)
                          2: EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl (hash: kPy147qfOVgNm1KLfWk2E+bZFSwC0FHTEsOBtDRlo4E=)
                          3: 3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa (hash: EOgwtNBBilmt1ZX709JnCShQA9MyJrp20Et/adECCZc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl
                          rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 14:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:67:1f:78:6d:bb:61:eb:54:8a:74:fc:67:7e:b0:c4:67:c0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
        Validity
            Not Before: Apr 28 13:56:04 2025 GMT
            Not After : Apr 29 14:02:04 2025 GMT
        Subject: CN=A8C10F0968992C4A93E908F1E266F7283FB784CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:ba:f3:43:15:ee:b3:79:03:0b:72:8e:11:
                    be:8e:d7:8f:61:92:82:8e:80:f9:fc:33:23:99:85:
                    ec:b2:91:9d:1b:5a:b1:14:a5:7b:15:e0:00:81:bf:
                    23:5d:e2:a9:b3:08:99:1e:2b:db:cc:4b:19:95:c2:
                    b3:42:29:b2:6e:0b:09:5a:09:c9:69:c1:2c:6b:3f:
                    1c:68:19:26:ab:4b:e4:8a:52:6e:e0:c0:d6:ee:41:
                    4a:84:3b:43:88:56:64:7d:9f:4a:f2:e0:cb:03:80:
                    f2:52:aa:52:fa:19:cb:e3:33:09:3a:2c:dc:a5:1d:
                    a8:78:58:9b:98:b8:53:04:d2:d7:e6:5c:39:76:72:
                    26:f1:94:73:40:e1:f8:62:85:11:c2:d4:41:26:36:
                    52:38:f0:15:d5:87:dd:e8:56:b7:b8:4a:f1:55:8f:
                    ed:bd:ff:e1:dd:04:29:21:f9:c2:8e:7c:71:7f:a9:
                    1a:49:df:35:13:7e:99:eb:f7:0f:a8:46:53:8f:a7:
                    5b:1d:86:c9:fc:b0:19:92:2c:a9:3a:c7:bc:2a:a1:
                    2f:7b:46:d1:aa:e2:00:c3:22:26:4b:a6:fe:32:14:
                    ad:f8:60:5f:bc:a6:63:f7:5b:69:da:c3:66:fe:1f:
                    42:17:d7:f3:c9:9c:ca:0d:88:ed:cd:17:7b:15:15:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:0F:09:68:99:2C:4A:93:E9:08:F1:E2:66:F7:28:3F:B7:84:CB
            X509v3 Authority Key Identifier:
                keyid:EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:88:9c:17:f2:6d:a1:e7:9d:52:fd:0f:68:03:4d:dc:7b:d2:
         b0:99:37:6c:a6:96:8b:1c:0f:f1:50:dd:d4:70:2e:45:c6:5d:
         93:b0:b6:06:30:f1:ea:6f:aa:7f:12:3f:ca:fe:25:ce:46:37:
         cb:a0:e3:e5:bc:8b:3d:5d:59:47:ae:4a:dc:19:24:b9:d8:47:
         5f:8e:5c:69:4d:b7:ce:59:56:9e:70:bd:00:13:b0:ce:4d:a3:
         98:1a:b0:9a:7e:50:64:b0:f5:6c:f5:13:fe:4e:09:64:06:c4:
         21:50:4e:5c:8f:79:3f:b0:83:f6:33:f5:23:40:9b:0f:d8:d1:
         11:54:fa:58:c8:09:ca:a9:d1:81:2c:9f:b5:ce:fb:40:45:fb:
         81:6f:3c:19:80:40:5a:d1:e2:3c:b4:9b:70:fc:89:3a:ff:19:
         87:bf:c9:54:d0:1d:1b:2b:f0:4b:9c:19:59:fc:bb:5a:4e:b0:
         34:0b:a4:25:a1:24:ee:97:75:89:7c:0a:57:e1:b3:3c:13:ab:
         e9:c9:fc:33:ad:9e:bb:c5:92:ba:f0:31:b3:dc:33:44:66:85:
         c7:7a:33:dd:0c:ab:7e:ba:25:95:99:af:96:3f:5c:eb:d5:59:
         34:04:3d:47:6e:04:4d:8f:38:dd:ec:b0:1b:88:a9:1f:91:14:
         ea:6b:ad:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW65nH3htu2HrVIp0/Gd+sMRnwPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCOTUxQjU3RkNEQjRGQ0IxNjJGRTVDQkE2NTU0RDIy
Q0FENEJCRjAeFw0yNTA0MjgxMzU2MDRaFw0yNTA0MjkxNDAyMDRaMDMxMTAvBgNV
BAMTKEE4QzEwRjA5Njg5OTJDNEE5M0U5MDhGMUUyNjZGNzI4M0ZCNzg0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+LrzQxXus3kDC3KOEb6O149h
koKOgPn8MyOZheyykZ0bWrEUpXsV4ACBvyNd4qmzCJkeK9vMSxmVwrNCKbJuCwla
CclpwSxrPxxoGSarS+SKUm7gwNbuQUqEO0OIVmR9n0ry4MsDgPJSqlL6GcvjMwk6
LNylHah4WJuYuFME0tfmXDl2cibxlHNA4fhihRHC1EEmNlI48BXVh93oVre4SvFV
j+29/+HdBCkh+cKOfHF/qRpJ3zUTfpnr9w+oRlOPp1sdhsn8sBmSLKk6x7wqoS97
RtGq4gDDIiZLpv4yFK34YF+8pmP3W2naw2b+H0IX1/PJnMoNiO3NF3sVFWI9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqMEPCWiZLEqT6Qjx4mb3KD+3hMswHwYDVR0j
BBgwFoAU67lRtX/NtPyxYv5cumVU0iytS78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhOc0dZaEVGMXVuUDhFNE5nb2hQRWNmbXdjdUNrTThiSkJWNnNmYzRS
bnQvMS9FQkI5NTFCNTdGQ0RCNEZDQjE2MkZFNUNCQTY1NTREMjJDQUQ0QkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCQjk1MUI1N0ZDREI0RkNC
MTYyRkU1Q0JBNjU1NEQyMkNBRDRCQkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhOc0dZaEVGMXVuUDhFNE5nb2hQRWNmbXdjdUNrTThiSkJWNnNmYzRSbnQvMS9F
QkI5NTFCNTdGQ0RCNEZDQjE2MkZFNUNCQTY1NTREMjJDQUQ0QkJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc4icF/JtoeedUv0PaANN3HvSsJk3bKaWixwP8VDd1HAuRcZdk7C2BjDx6m+q
fxI/yv4lzkY3y6Dj5byLPV1ZR65K3BkkudhHX45caU23zllWnnC9ABOwzk2jmBqw
mn5QZLD1bPUT/k4JZAbEIVBOXI95P7CD9jP1I0CbD9jREVT6WMgJyqnRgSyftc77
QEX7gW88GYBAWtHiPLSbcPyJOv8Zh7/JVNAdGyvwS5wZWfy7Wk6wNAukJaEk7pd1
iXwKV+GzPBOr6cn8M62eu8WSuvAxs9wzRGaFx3oz3QyrfrollZmvlj9c69VZNAQ9
R24ETY843eywG4ipH5EU6mutBA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:14 2025 by rpki-client on console.sobornost.net