Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
File:                     8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft (raw, json)
Hash identifier:          /rRwbTQdInEf+CfdzWAumrGOylryE984bScKVn9Z2NY=
Subject key identifier:   D0:63:4F:A7:A9:0E:C3:F9:9D:F9:25:86:81:9B:5F:EC:2C:C6:4F:FC
Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
Certificate issuer:       /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
Certificate serial:       7804554196C0492D7283D56781EE074EC34CEC9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
Manifest number:          014C
Signing time:             Mon 28 Apr 2025 11:30:24 +0000
Manifest this update:     Mon 28 Apr 2025 11:25:24 +0000
Manifest next update:     Tue 29 Apr 2025 14:09:24 +0000
Files and hashes:         1: 323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (hash: Ol+F4/QiSr5GVGNCjefMDXBFA0hXacRJumxsitns0N4=)
                          2: 3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (hash: bv5i02QwDLZaBnogCf7XcclLvRRNE0ftQ+PtlGoQUwg=)
                          3: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl (hash: F0OImZTovl2sO7krcS9+4I+oDsTh+isckZz7t3Oy0ww=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl
                          rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:04:55:41:96:c0:49:2d:72:83:d5:67:81:ee:07:4e:c3:4c:ec:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
        Validity
            Not Before: Apr 28 11:25:24 2025 GMT
            Not After : Apr 29 14:09:24 2025 GMT
        Subject: CN=D0634FA7A90EC3F99DF92586819B5FEC2CC64FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:ed:79:76:96:cb:86:86:06:11:53:4a:66:
                    9a:29:97:69:bb:04:65:63:d5:78:36:6a:cf:f2:62:
                    3a:88:c6:67:5e:b0:3d:d5:57:6c:16:42:6f:84:e4:
                    5f:ac:c9:1a:5d:ce:33:9c:8b:f1:c1:29:4e:4c:2e:
                    22:52:a8:39:b6:fb:98:2d:e9:4d:61:61:42:8e:31:
                    b9:54:2b:9e:66:c9:58:59:f5:de:ac:33:0d:23:c2:
                    a4:a4:b5:8f:09:86:6e:11:54:2f:08:7b:cd:b2:f8:
                    9a:c8:f5:03:37:79:48:8e:e0:e5:f5:4d:27:eb:3a:
                    91:1b:5a:9f:e6:ad:cb:8e:aa:2e:2f:eb:a5:e1:f0:
                    44:2a:5e:ee:6f:fe:2c:e2:e3:72:37:1f:3a:cd:ff:
                    be:a1:68:42:5d:ee:d4:06:0f:9a:41:fe:14:9f:e4:
                    7d:90:5a:b2:b9:38:43:c9:5c:f1:34:f6:f5:94:e7:
                    ff:d1:4a:5b:c8:da:1e:de:db:8c:5e:d5:13:f2:b1:
                    be:53:87:10:6f:89:ab:29:14:45:fe:fc:60:9f:b7:
                    c8:96:45:76:19:bc:e0:80:40:ca:09:75:90:bc:89:
                    bb:bf:cb:4b:54:e0:17:40:85:ab:bd:38:0b:e9:64:
                    4d:e7:c8:56:93:69:0b:46:98:60:47:52:c2:63:13:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:4F:A7:A9:0E:C3:F9:9D:F9:25:86:81:9B:5F:EC:2C:C6:4F:FC
            X509v3 Authority Key Identifier:
                keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:06:d4:b9:13:fd:9a:23:e8:19:58:dd:6d:11:89:0c:fa:b1:
         b8:4e:05:6a:3b:10:cb:3e:30:5b:e5:f6:22:7b:ac:aa:ea:4c:
         bf:ea:30:63:31:8a:de:24:77:54:da:05:9b:78:3f:8b:03:7f:
         80:a3:e7:88:fe:df:1c:ec:13:00:10:e0:56:77:e6:23:53:9c:
         53:ce:b8:88:f8:85:0b:26:8a:2a:58:15:08:a6:26:c8:cf:9c:
         fa:1f:88:7b:52:6d:b7:54:42:8a:7c:d1:90:2d:80:36:91:7b:
         4d:64:63:9d:d8:98:3d:9d:de:e4:75:d0:db:40:7f:4f:3a:67:
         2d:bc:0e:17:1a:07:75:97:11:48:a5:14:54:fe:e5:b3:ed:b9:
         9d:76:9c:a1:d9:0f:8d:52:86:8e:31:ee:a4:a8:13:0f:a5:ad:
         1e:01:c7:32:99:6a:8a:fa:93:23:f2:6d:e7:1a:b2:d6:e7:da:
         eb:bf:63:6f:83:e7:e9:76:9d:44:d8:43:67:51:56:0d:cf:cf:
         da:f4:69:d7:db:0a:43:61:3c:39:c7:7c:e4:51:b9:53:33:d9:
         39:69:9d:aa:20:f4:bc:6f:3b:63:22:79:fb:64:20:34:50:65:
         ff:32:42:99:d0:82:07:a0:7c:8e:94:88:f9:d7:37:68:e0:f5:
         9d:52:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:05:02 2025 by rpki-client on console.sobornost.net