Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
File:                     CBED8B77145C146C6E2002637F70D52E41B65B78.mft (raw, json)
Hash identifier:          REFHZsv0zcSERvfWVQvpTlqGjW6QhUZ38+AbIHAYRes=
Subject key identifier:   DB:13:89:0E:EF:4D:45:5C:D4:11:DE:B5:71:33:F5:DF:79:BF:8F:DB
Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
Certificate issuer:       /CN=CBED8B77145C146C6E2002637F70D52E41B65B78
Certificate serial:       77F125186DCAC5B7DB139CB10EB67FB92589E01A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
Manifest number:          020A
Signing time:             Mon 28 Apr 2025 16:59:05 +0000
Manifest this update:     Mon 28 Apr 2025 16:54:05 +0000
Manifest next update:     Tue 29 Apr 2025 20:06:05 +0000
Files and hashes:         1: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: u3QX0Sw01r5zWK9SI7e/zZteNQlDp6bzw/sy4KdIv84=)
                          2: CBED8B77145C146C6E2002637F70D52E41B65B78.crl (hash: MLaiM0SUyFRJFDSm9679+S06kn3HyzsOQBYzdM5LE+s=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl
                          rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f1:25:18:6d:ca:c5:b7:db:13:9c:b1:0e:b6:7f:b9:25:89:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78
        Validity
            Not Before: Apr 28 16:54:05 2025 GMT
            Not After : Apr 29 20:06:05 2025 GMT
        Subject: CN=DB13890EEF4D455CD411DEB57133F5DF79BF8FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:3e:76:31:81:8c:76:c6:8c:bd:62:d8:fc:
                    40:b9:1b:82:6f:63:93:9b:a8:0c:98:11:83:f6:f6:
                    d1:33:9b:4c:43:66:6c:cc:b7:b4:f0:40:5f:9a:7f:
                    06:d6:87:d3:c9:b0:c7:e8:d1:1c:7d:7b:7d:be:35:
                    0f:21:dc:41:cf:89:35:34:6e:10:7a:65:01:a7:30:
                    00:01:0c:18:2d:4b:4a:de:76:e2:81:af:fd:8d:54:
                    6b:0d:aa:14:93:3a:ec:21:b8:f3:7c:1b:d8:91:24:
                    0c:68:50:51:3d:40:3a:ae:f4:64:94:08:70:0d:01:
                    45:b1:6d:12:25:e5:82:45:96:d6:dd:ab:86:46:2f:
                    b4:db:bb:63:ae:3a:33:be:3e:76:b2:c2:97:b7:80:
                    2b:52:e5:0c:00:37:d1:3b:0c:b1:e2:e8:9c:f1:c9:
                    e4:5e:f1:02:16:b0:5f:ba:76:14:36:01:24:12:0b:
                    74:c2:dd:88:37:06:8f:21:96:dc:fc:1c:54:4b:f3:
                    24:30:3e:15:f9:db:81:27:0c:b9:68:bb:67:c8:a3:
                    ba:b2:fa:4d:89:68:d8:c2:86:35:aa:12:06:73:95:
                    75:f9:28:1c:ca:91:61:06:3f:b0:c8:8f:9e:c6:28:
                    37:5a:38:f4:52:68:c0:cf:90:ec:ba:91:e1:4d:7d:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:89:0E:EF:4D:45:5C:D4:11:DE:B5:71:33:F5:DF:79:BF:8F:DB
            X509v3 Authority Key Identifier:
                keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:78:3a:84:cc:e1:e3:02:1d:10:00:3d:60:0b:fa:bc:9c:
         64:3c:cd:5b:f7:7c:b4:e5:fb:49:fa:1e:02:22:04:47:18:33:
         01:05:ef:15:21:0a:64:73:ca:6d:9c:f8:23:09:ac:5c:7c:99:
         9f:f2:9a:ee:3a:a4:3e:d9:b8:d4:34:e7:26:64:14:ea:e4:a7:
         b3:38:54:18:06:51:e5:c0:ff:78:b2:91:c6:f0:ea:71:eb:5e:
         bc:ea:2d:b1:c1:1e:86:e1:3b:fa:21:37:ed:62:50:0e:0d:ac:
         d7:47:c5:f1:08:18:aa:63:b3:59:05:a5:88:13:32:97:d1:8d:
         53:07:81:45:d2:7b:f6:5e:24:24:01:8f:f0:66:b8:44:28:2e:
         22:33:31:08:6a:7c:c1:a8:53:1b:c4:91:f7:54:9c:b3:1d:7a:
         1f:6a:11:b2:f5:24:52:d9:a7:ab:97:22:11:a8:f0:f8:06:4f:
         f5:a5:d1:a6:e8:36:d8:c1:4b:36:85:d7:47:4c:f2:07:36:e6:
         93:eb:14:45:db:89:12:fe:dc:c6:73:7b:db:59:8a:b6:d0:db:
         83:34:6e:fa:a9:40:c4:c4:c2:39:cf:75:68:49:e0:7f:a4:e3:
         b5:a8:21:8a:c6:88:cb:55:19:a8:0c:da:35:8c:c0:e8:e8:ec:
         29:a4:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:45 2025 by rpki-client on console.sobornost.net