Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
File:                     D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft (raw, json)
Hash identifier:          KrEiUZTilNccvzLz+upH8mSADDbKQSk5QgindAq4Lqk=
Subject key identifier:   97:60:29:A0:4B:59:BA:F0:EF:43:5D:67:31:22:DC:95:02:A7:7E:28
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       7DFD577E0D8E1AAFAA57516DD78227A3928F34D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
Manifest number:          0204
Signing time:             Fri 25 Apr 2025 20:00:14 +0000
Manifest this update:     Fri 25 Apr 2025 19:55:14 +0000
Manifest next update:     Sat 26 Apr 2025 22:37:14 +0000
Files and hashes:         1: 323830343a323736633a633030303a3a2f33342d3334203d3e20323633393030.roa (hash: rHMawISW74ABh6Ymr5evosGIJ0yvV173eVcCKVDaJvU=)
                          2: 3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa (hash: Ztn/kRROqYdn3+8z7lQp5IZdec3jfJH0a5FCQh8jPKs=)
                          3: 323830343a323736633a3a2f33342d3334203d3e20323633393030.roa (hash: jNnc27AQTNwKwpdYPVNkCRjhM/ZJOkqdc9wkbjGqmJE=)
                          4: 3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (hash: Ul0edCGJ7qzxUpEzVowkFojJ3qA4ItE2Zej9l0zFMQs=)
                          5: 3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa (hash: dGxluIDvi+exuvbhjX2z6PBSvJnMgeHuG5luPJ0AQVk=)
                          6: 3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (hash: yvPqNt6g1q2bkhgbR4eRQ8aU2xgPY7DrOCd4HvQzFdg=)
                          7: 323830343a323736633a343030303a3a2f33342d3334203d3e20323633393030.roa (hash: dicTN/16HMNWAxhD9KINMXQ8faLHleClER4ouNrfMjE=)
                          8: D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl (hash: Vuj4jT0il8w5sW+0DSyRBjf7Fflqge3Au9sGrfmndHM=)
                          9: 3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (hash: HbZnI1rkXbdtRnD0HvWkpg+AtYU555uTmRmvQ6rrSEI=)
                          10: 3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (hash: u9CUKciMWwvYy39pOrdNuKoErtpPFi/n45NE4c5lres=)
                          11: 3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (hash: j7yJU5jKIT/l61rp/tcbOX+KjvKGg0RiF6ySr60qUNI=)
                          12: 323830343a323736633a383030303a3a2f33342d3334203d3e20323633393030.roa (hash: dk9kTrzyiNv3P7zfiqudO/wTBULnh9Qn7nzSAA6OifQ=)
                          13: 323830343a323736633a3a2f33322d3332203d3e20323633393030.roa (hash: ldP2WJT0H6xfgkesNLGb/LwInyo1ASOLy7gaco6QCEI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fd:57:7e:0d:8e:1a:af:aa:57:51:6d:d7:82:27:a3:92:8f:34:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr 25 19:55:14 2025 GMT
            Not After : Apr 26 22:37:14 2025 GMT
        Subject: CN=976029A04B59BAF0EF435D673122DC9502A77E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:18:a0:ca:90:f1:3b:16:40:96:2f:5a:f5:
                    60:d7:cd:f4:08:29:b9:d3:87:c9:ad:2a:fe:33:41:
                    89:ff:99:9c:3c:13:91:d6:44:5b:ae:47:24:dc:4d:
                    f5:af:80:8e:7d:8a:80:b7:a7:e1:b8:82:4f:e0:12:
                    4d:ce:a9:cb:9e:6c:89:b6:99:47:bb:92:df:37:79:
                    cc:12:cb:67:98:cd:2e:b5:3f:5a:f1:39:4c:7d:b4:
                    5b:ff:65:be:aa:49:dd:8b:a9:1c:34:f6:3f:29:49:
                    a3:00:d2:98:ac:b0:c5:49:2a:96:9c:a5:4e:34:81:
                    e0:d6:72:e4:8b:c6:16:e4:9d:96:6d:78:31:13:fb:
                    05:93:f8:20:ec:6e:2b:60:26:03:e7:00:a9:33:39:
                    61:b7:c1:9c:d8:36:39:9f:71:84:14:71:66:3a:1c:
                    c1:5a:05:5e:e3:c6:b3:dc:c6:7f:02:6e:ff:8f:ab:
                    3a:50:37:05:7d:dd:e5:9a:6e:e0:50:85:56:11:08:
                    08:f7:09:1a:32:c1:89:4b:3a:98:31:99:46:81:e5:
                    6a:d3:a1:f7:d4:26:f8:69:c6:b2:8c:2f:4d:71:77:
                    86:0e:f4:f6:26:67:f2:ac:de:7a:1c:5c:af:c3:42:
                    c3:cb:cb:01:05:2a:7f:28:b5:55:c7:f7:60:fd:84:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:29:A0:4B:59:BA:F0:EF:43:5D:67:31:22:DC:95:02:A7:7E:28
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:7e:5b:9f:fd:e4:ff:7a:a2:a3:21:bd:dc:7c:e0:d1:58:
         5b:15:55:0a:3a:bb:9d:9d:48:7e:57:a7:6d:cc:f4:a6:ad:31:
         89:bd:17:3e:cc:7a:0c:cf:bc:1f:55:a9:63:91:fe:a2:6a:11:
         7c:87:9d:05:00:92:f9:1b:e0:0b:5b:b8:4a:1e:07:c3:fd:59:
         ca:3f:8e:c2:c9:e9:42:8f:ed:b0:1a:b0:a9:51:31:1e:a5:04:
         e2:95:88:b7:c5:74:53:ab:a3:3f:98:2f:72:d1:3f:13:f6:40:
         24:86:20:0a:46:4c:ec:a4:a6:38:97:ef:d2:e0:10:c3:22:12:
         54:ee:aa:6f:c5:ba:fd:95:81:1a:9c:6a:b6:f8:fa:bd:38:41:
         23:7c:00:65:b0:55:c7:90:1f:3a:51:ee:b0:7c:e6:69:1d:00:
         4e:df:fb:63:9c:ec:a5:17:7e:08:eb:1a:fb:9e:cc:6d:e4:0e:
         7f:fe:a7:65:bc:01:19:1b:40:52:17:86:4b:79:1e:7f:7a:97:
         0e:3a:87:e9:71:ef:1b:fa:9d:61:7e:77:fa:61:a3:78:31:ed:
         17:92:8c:d6:43:84:9a:b8:c1:45:da:58:02:c2:9d:5c:3f:6d:
         67:88:c2:77:be:d1:a1:4b:42:05:0d:14:8c:80:d3:36:12:9e:
         dc:7a:ff:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:46 2025 by rpki-client on console.sobornost.net