Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft (raw, json)
Hash identifier:          O26gjsNMZgg5Xz2ic//3+hKCN/21+t1ldpaDee0PEQE=
Subject key identifier:   4A:57:6E:13:B5:A3:31:B1:F2:B3:18:FF:C5:3C:B9:85:3B:CC:CD:6A
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       0ED33C95C2D0A818EF2C7FF8D261C5ED47C3BAFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
Manifest number:          0211
Signing time:             Thu 24 Apr 2025 16:04:02 +0000
Manifest this update:     Thu 24 Apr 2025 15:59:02 +0000
Manifest next update:     Fri 25 Apr 2025 18:10:02 +0000
Files and hashes:         1: 3137302e3234372e38302e302f32322d3234203d3e203631383035.roa (hash: EK0lcP3FeDZFtDdrNoJ3xZT28rkUI4v8gSA6k8aytAg=)
                          2: 323830343a313939383a3a2f33322d3438203d3e203631383035.roa (hash: N4ADG7fUbE73Yy1iJF1t0Ipc+fixM5DRtuZLL/FXr4o=)
                          3: 3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (hash: 7djXiz8NjJOw50ed99k51mS1HJ+0xG36GsVajF3RGQs=)
                          4: 3137302e3234362e33322e302f32322d3234203d3e203631383035.roa (hash: WnVJTcCQumCE9fQ7Vws90QAt2HsWCykqOp9Cx81XI8M=)
                          5: 34352e3233392e3232342e302f32322d3234203d3e203631383035.roa (hash: dCwgks9kz+PtKonoUYMuaJ/xBVsseEIveXSK48b+vek=)
                          6: 3133312e3136312e3135362e302f32322d3234203d3e203631383035.roa (hash: vICwpsDgzmHAq6d4aB9nm8j21S6Qzk2xwhEfVV+wbW0=)
                          7: FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl (hash: Rs6DgbZS40kPepeo+/cL0r6HyO5Un+zu8kj2k/Acf4g=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d3:3c:95:c2:d0:a8:18:ef:2c:7f:f8:d2:61:c5:ed:47:c3:ba:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Apr 24 15:59:02 2025 GMT
            Not After : Apr 25 18:10:02 2025 GMT
        Subject: CN=4A576E13B5A331B1F2B318FFC53CB9853BCCCD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:06:91:96:a8:57:e7:55:ea:e9:1d:20:ff:
                    84:d6:a5:b9:56:17:60:d3:d4:65:9c:30:af:de:b1:
                    d3:81:5a:5c:b9:78:4e:21:1b:b6:4b:62:74:69:5b:
                    40:54:7d:58:c6:bc:d1:ff:62:5e:d5:18:f3:b1:32:
                    4a:f6:7e:c9:37:1c:a5:5e:61:47:1d:26:9a:ce:8d:
                    3e:22:0a:08:8c:17:96:61:60:cc:79:14:45:40:f3:
                    a8:d5:67:bd:f4:d6:2a:09:9e:7f:e2:c0:c9:69:17:
                    57:b8:ef:ea:36:2a:0d:9e:20:b0:8a:5c:6b:dd:87:
                    78:23:e0:7c:0d:0c:a6:6f:e7:86:be:84:d5:a4:0c:
                    87:68:57:ab:62:4a:c1:71:ba:f4:3c:1a:90:24:1e:
                    72:0c:29:9f:79:57:67:23:0e:b9:9d:0a:f8:9c:a1:
                    c5:dc:95:b1:e8:3d:43:fc:a9:0a:cf:44:c7:3b:27:
                    67:22:92:3a:18:4c:0e:5f:6e:39:3b:43:27:3c:2f:
                    35:2f:53:2e:91:af:3e:a9:7b:6f:64:9d:6f:5a:4e:
                    57:98:47:d9:38:cb:5f:f8:21:7d:eb:ab:bd:08:f3:
                    3b:78:da:9a:77:f5:bc:05:58:36:ae:a8:3e:d3:e8:
                    06:1e:5c:54:b0:74:39:e2:dc:6e:0b:c7:7b:37:4f:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:57:6E:13:B5:A3:31:B1:F2:B3:18:FF:C5:3C:B9:85:3B:CC:CD:6A
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:ff:0d:34:46:4b:2a:cf:a8:0f:8c:16:eb:58:db:72:9c:
         3d:35:82:48:c9:ca:29:b7:63:7a:26:6c:39:49:fc:b1:58:38:
         ad:75:ce:88:2f:88:23:9b:0b:6e:44:2e:f0:ad:fc:a2:d2:3e:
         8c:81:61:e9:16:49:85:60:3d:50:7a:d0:bb:c2:ce:22:98:fc:
         aa:33:a8:ff:20:02:28:ad:c6:38:04:6a:11:86:fb:7d:0b:ba:
         51:b1:e4:d4:22:17:7b:12:d8:3b:68:48:f3:cf:93:46:2c:8a:
         9a:eb:7a:03:86:aa:da:f5:d9:c6:d3:36:32:ec:58:5a:bc:2a:
         36:1c:60:28:e3:1a:5a:0a:80:eb:6b:58:f3:91:18:93:e2:73:
         35:72:4d:f6:50:88:5b:18:ed:d5:c3:bb:35:52:16:35:ee:0a:
         2b:1a:39:14:b6:1c:65:9c:5e:76:98:b2:f7:8b:5d:0c:68:2f:
         6f:cb:12:16:81:0b:d8:ae:08:a3:4c:a1:a6:fa:3e:dd:4d:89:
         0e:76:56:90:1b:2d:2a:04:82:03:8e:4c:09:ac:62:5f:f8:1a:
         27:0f:63:10:10:50:fa:60:41:0a:93:13:32:c2:70:d8:38:5d:
         a6:96:cc:51:39:9a:6a:ba:42:c9:33:35:1c:5c:6a:7c:22:f1:
         e8:f3:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net