Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File:                     968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier:          mw3nqDwlGdF8eGF4KaYKZ9BC0NVDsjBbO2NqdbQsshg=
Subject key identifier:   C7:AB:DF:B4:59:FD:94:BF:94:AC:A9:F6:02:3A:8F:97:2E:79:33:55
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       06FD9CA4B849DDBBE4908B7FFCCF2FB68AAEF079
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number:          01CF
Signing time:             Thu 24 Apr 2025 11:12:20 +0000
Manifest this update:     Thu 24 Apr 2025 11:07:20 +0000
Manifest next update:     Fri 25 Apr 2025 11:41:20 +0000
Files and hashes:         1: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: KXUZqQdV0NiuXnQfwlKO9KEf9ReLWB0t167GugqP9FI=)
                          2: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: euHAp7+9vRWrpVJOCBtQMlM0mKiy4FhOArKfKYePGc4=)
                          3: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: XohZhw/qfHKZPzmoxfjStIrmnl3pqxRNfLqhu9QyNn0=)
                          4: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: fG8mMWmzrS7pxGB0+b9dBFu9DpydOy3tC0sVdHradZo=)
                          5: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: H7O0RgQD2YQmmg/zd/Dw8LRIlxXUh+E2tsnun3K5MkM=)
                          6: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: 4RWdX36bZMJLXgoSRSa1Ymc4At0rCJL3dL7BLqRu0LE=)
                          7: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: ZWKOFtJRLdp2SLpB4KN+ZC/34+ue9ju+E35hP3Fz4ZI=)
                          8: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: WFK9vVbvbaNItGOj9yAHpg0Lex1molJvSsx4QYXbxsw=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 11:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:9c:a4:b8:49:dd:bb:e4:90:8b:7f:fc:cf:2f:b6:8a:ae:f0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Apr 24 11:07:20 2025 GMT
            Not After : Apr 25 11:41:20 2025 GMT
        Subject: CN=C7ABDFB459FD94BF94ACA9F6023A8F972E793355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:b2:d7:d0:5f:a5:57:0e:75:5b:08:26:f8:
                    55:28:c5:b8:f3:c5:4e:e1:26:f2:90:9c:ba:53:33:
                    9d:af:f8:28:84:6e:65:bd:5d:d3:c0:c7:ad:e7:2d:
                    42:5c:5f:b4:b9:df:15:7e:84:4d:8f:53:58:71:15:
                    7a:0c:f0:d4:7f:71:73:6e:37:b2:69:a6:91:5b:9f:
                    dd:7c:1e:7b:b6:fd:54:b3:31:0b:62:24:35:d8:1b:
                    af:78:61:eb:c8:7d:0b:9e:15:81:25:1f:18:dd:96:
                    a7:35:5a:34:72:7f:d4:b8:32:b3:e5:08:0e:56:1d:
                    e5:4e:a4:9f:f3:20:89:1d:76:ff:45:d8:be:3c:cd:
                    41:66:3f:fb:59:a0:b7:e7:ff:45:64:d8:44:5f:70:
                    8b:bb:a8:4e:0b:59:a4:ec:b1:81:ca:d5:de:54:c6:
                    be:29:76:c0:3a:2a:ad:55:7a:60:f5:83:fa:4e:3c:
                    7b:52:33:ac:80:dd:10:8b:60:dc:45:7c:60:8e:40:
                    70:01:3b:0f:12:c9:6f:c0:06:c1:58:fe:cd:93:07:
                    2b:f6:2b:50:cb:80:46:0a:58:c4:fd:92:1c:8b:22:
                    3d:0b:6b:81:ec:2a:e1:c9:e2:bd:4a:6b:b4:d6:6b:
                    b7:b6:b5:99:fa:81:ec:47:0d:b5:e3:0c:4d:9e:73:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AB:DF:B4:59:FD:94:BF:94:AC:A9:F6:02:3A:8F:97:2E:79:33:55
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:34:27:b5:da:32:46:cd:d7:52:33:a8:8c:1b:6b:d4:aa:
         53:be:1c:44:4e:80:df:ef:e6:53:f7:bd:45:2b:8e:95:38:eb:
         b5:bb:8e:61:bb:98:53:58:fa:e6:f4:7d:6e:9d:e4:a9:ac:cb:
         3c:3a:22:d5:19:49:5b:a8:c6:f3:1c:4d:39:3d:e1:5c:9d:19:
         e0:9a:03:db:93:06:d3:5e:92:8d:a8:73:74:d7:c4:b4:d3:fd:
         89:69:c0:36:25:ee:b6:48:92:e7:60:5c:ec:d5:d4:59:e0:1b:
         30:78:54:04:b5:b4:c6:60:52:20:06:40:1e:c5:52:c9:b1:f0:
         ea:c0:89:a3:d4:8a:e4:32:48:81:e8:4e:6a:93:7f:7e:4b:33:
         6f:85:84:82:af:26:9f:95:42:d9:0d:8d:61:ca:f2:e0:38:a2:
         d9:82:bb:3f:f1:f5:fc:78:c6:8a:9d:d9:68:5f:c2:7a:af:ce:
         17:24:3c:47:ff:7d:74:1c:33:ca:f4:57:48:01:3a:0b:08:e5:
         6e:35:15:80:54:c1:c9:75:e2:84:c2:e5:ff:ab:0f:71:38:04:
         56:1e:d6:ce:ca:a0:6a:70:6d:c1:85:82:d7:73:04:3e:83:fe:
         fb:f2:a7:15:b2:b1:f1:21:5c:00:36:6f:2f:eb:f8:a5:32:a7:
         0d:5e:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:18 2025 by rpki-client on console.sobornost.net