Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          caT5Ci44nRN/WFEmu+WJQfKG4YOUHxWyvgsEDsS2zcU=
Subject key identifier:   B9:84:C5:6E:9A:67:95:C9:42:17:50:46:DD:E9:FE:B1:8A:C8:F5:6C
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       2A7C83A0E868DE3C4F88401375C12B72428B6A98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          0191
Signing time:             Fri 25 Apr 2025 10:44:00 +0000
Manifest this update:     Fri 25 Apr 2025 10:39:00 +0000
Manifest next update:     Sat 26 Apr 2025 13:53:00 +0000
Files and hashes:         1: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: lJ5j06lTr1oQXhrs/QWQ7nLgHYdd726t2dPQvtvsBeM=)
                          2: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: oWFkLM93NWDbXjW2QG1T+UE4IbGchdy6D4wybVFoHP4=)
                          3: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: 42fbfI/mYSyed1AE3QkjiinEOseG8jtE+TqzSalK9FY=)
                          4: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: VlLW/dq6Wvsot8mOawcbg0Poo1eLpVJL+gDEbmozf2Y=)
                          5: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: VJzecU48ioa3iAVVf/f2xHbHXBr8u/4DSSwkheRhY3M=)
                          6: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: 2CQKBGiLfQ+Am4jAhbTnE/gBsHU9315HpmbXTQn1ol0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:83:a0:e8:68:de:3c:4f:88:40:13:75:c1:2b:72:42:8b:6a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Apr 25 10:39:00 2025 GMT
            Not After : Apr 26 13:53:00 2025 GMT
        Subject: CN=B984C56E9A6795C942175046DDE9FEB18AC8F56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:b3:e5:21:e4:f5:1a:cd:93:65:13:7b:eb:
                    01:93:12:cf:83:fa:ff:fe:29:20:10:0a:5b:83:34:
                    03:47:c2:ce:2c:43:0e:13:17:99:6b:ce:cd:81:1c:
                    9a:6d:09:8e:f6:86:fe:36:4e:88:fc:87:60:52:0d:
                    80:1d:5a:ed:82:6f:d6:5f:20:cd:6d:59:59:7f:3d:
                    8e:6c:0c:a9:41:85:ae:ec:a3:b8:b1:a0:1a:c5:3b:
                    bf:0c:b2:dd:69:b0:16:91:3c:ec:ea:07:12:8a:35:
                    08:46:4f:49:6a:2a:b5:1f:0d:01:cf:44:3b:b8:f5:
                    20:2a:5d:1d:28:0b:86:41:96:1f:d1:2e:ea:44:c1:
                    f9:52:a9:5e:f2:53:25:73:f1:1f:1f:97:c6:e2:a6:
                    53:23:6b:47:33:de:e2:6d:86:b3:65:c5:6b:3a:d5:
                    3d:e8:a6:fd:87:c6:8b:0b:fe:2f:3b:4c:db:4f:00:
                    27:e7:04:96:a9:3e:e4:33:d9:a2:05:3c:0e:ca:15:
                    33:ec:d3:66:08:1a:58:f3:ad:43:e5:56:5b:b0:80:
                    ac:44:f0:eb:3f:f5:30:68:3e:74:79:b7:20:18:93:
                    61:1b:4a:c6:a4:e2:6d:9d:f9:0b:c5:3d:ef:d2:34:
                    81:0f:41:b3:da:b8:cb:b9:9c:c0:98:b8:62:e9:41:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:C5:6E:9A:67:95:C9:42:17:50:46:DD:E9:FE:B1:8A:C8:F5:6C
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:d3:93:a6:10:91:ac:85:2c:93:62:90:97:3e:6a:d2:a5:
         09:38:ce:cc:f1:67:f1:c3:c0:5b:13:a5:3e:9d:f5:ad:7a:25:
         6b:21:d7:bc:8e:dd:b5:cb:ad:48:f1:56:92:93:d6:77:d0:d0:
         98:b7:56:ca:4e:e4:52:bc:cf:7e:c1:02:05:5c:ea:fc:ed:76:
         4c:9e:ff:bd:9f:cf:0e:6f:55:b9:6a:71:43:a4:e4:a1:5e:e9:
         bd:a8:92:b5:8e:0d:0c:46:38:3e:a6:c2:66:b2:9e:63:bc:eb:
         93:2a:92:63:4e:0c:1b:20:76:9f:b4:64:f0:62:79:41:7f:b0:
         f5:5e:4e:23:0e:b1:7b:83:00:82:85:5d:9c:d3:0b:bf:2b:21:
         d7:79:71:db:11:8d:1e:2d:c4:61:96:ef:ea:74:57:ea:e2:07:
         7a:59:95:10:61:1e:fa:42:32:a2:ab:03:41:c6:1a:37:5b:95:
         73:01:a8:e4:91:fb:de:b5:f9:71:e5:86:26:14:34:fe:af:7d:
         fd:65:12:8f:e7:a3:5d:0f:b5:06:84:85:c0:1d:b4:86:4c:43:
         75:10:8a:bf:7a:65:d5:ed:8c:79:02:52:59:64:be:43:77:aa:
         69:9e:41:00:79:0e:82:ce:9f:5d:d2:2d:6a:e5:fd:04:71:d2:
         33:92:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:29 2025 by rpki-client on console.sobornost.net