Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
File:                     FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json)
Hash identifier:          /xHjnmi+kZc4YAqiXjczlIaOjW/hdspSO+og/utJnjI=
Subject key identifier:   2D:4D:E0:2E:C2:8E:A5:D1:5F:DD:55:F3:21:4A:78:0D:CC:9B:EC:A6
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       65B721A3A107D8A0E0A6C4BB0B1EF5A3314D7D81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
Manifest number:          0124
Signing time:             Mon 28 Apr 2025 04:22:43 +0000
Manifest this update:     Mon 28 Apr 2025 04:17:43 +0000
Manifest next update:     Tue 29 Apr 2025 06:43:43 +0000
Files and hashes:         1: 323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa (hash: aW9uaehjih4wwoJLQLP0XCZT/2SOubhbVOn/u1JiU2A=)
                          2: 34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa (hash: mBBLHsNiDUScfZPZBF00pbGRuH04ZIxsjMo8MGTbJmI=)
                          3: 34352e3136322e3231322e302f32342d3234203d3e20323638353634.roa (hash: tYOjK0sXHTiSWXNgAQWa+66CiOU1BtW50fMpjtKZyvY=)
                          4: 323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa (hash: ul1f4ky2oH9XDlmsg8j4yfF2vAfY9xt2eDDbzd/HFQc=)
                          5: 34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa (hash: +9XBEjPsIIoxE8uENyyLxxiTfY3NG/2OI2CUiWOC51A=)
                          6: 323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa (hash: M/puXfyJzNXJpRhYFbtIItEv17SXy2VTE6vhWjiX8NE=)
                          7: 34352e3136322e3231332e302f32342d3234203d3e20323638353634.roa (hash: NLblclHoco9pkN9CeEgGgAp/RFhGKNDTxSs45xtltk8=)
                          8: 34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa (hash: 5VeR1GKl23ZFisvTumvPLJTwnuN3vj3euo1Cfr1yHL0=)
                          9: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: 0KcEyg0al6cP1Jd9FT82H2ADwEHucehv8x62x3KRok0=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b7:21:a3:a1:07:d8:a0:e0:a6:c4:bb:0b:1e:f5:a3:31:4d:7d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Apr 28 04:17:43 2025 GMT
            Not After : Apr 29 06:43:43 2025 GMT
        Subject: CN=2D4DE02EC28EA5D15FDD55F3214A780DCC9BECA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:1a:56:99:01:be:84:00:5e:1c:86:07:25:
                    f1:68:ff:90:d9:ea:0d:d7:00:85:8b:59:e8:0e:d6:
                    61:c0:9f:f8:55:97:c2:79:4f:b8:1b:fb:77:b9:58:
                    3d:04:66:24:24:e7:87:7d:dc:87:24:ba:a0:b1:1e:
                    cc:32:d9:e1:70:91:4c:40:53:09:58:28:66:9e:d7:
                    74:67:76:52:49:61:c1:42:3d:7a:e1:21:c6:a1:fd:
                    58:3c:07:7b:be:69:19:76:93:93:ca:c7:68:c9:fd:
                    0f:2e:2d:3a:8f:89:b8:c8:57:28:04:63:12:38:0a:
                    7c:52:42:3d:98:0a:b1:dd:4f:e5:81:e0:86:61:43:
                    a5:06:df:9a:65:c2:eb:95:82:f7:6f:f3:26:8b:da:
                    11:40:02:11:73:08:d2:f8:42:39:f8:fd:62:b6:03:
                    65:8a:1b:06:4a:86:d3:f7:32:65:00:af:0e:eb:c6:
                    95:ed:40:70:07:3f:61:91:88:d1:b9:86:d0:aa:fa:
                    31:e9:45:82:75:f1:27:b5:da:cb:c4:56:86:29:85:
                    fb:cd:11:a1:75:6e:08:84:f2:c1:2a:bd:dd:bd:3e:
                    96:02:2f:f0:81:11:d9:71:a7:c3:e2:6b:21:40:25:
                    90:7f:60:24:57:1b:59:24:f0:0b:4b:22:d7:0e:9e:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:E0:2E:C2:8E:A5:D1:5F:DD:55:F3:21:4A:78:0D:CC:9B:EC:A6
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:72:cf:b8:44:ba:db:75:a7:04:01:f3:1f:61:0d:69:75:05:
         8d:a8:45:3f:93:7c:4f:5e:a3:ef:03:60:ee:9c:1d:7a:46:cb:
         5b:89:2b:7b:b4:08:c2:3a:0e:21:e0:d6:c1:1f:44:16:8a:2f:
         a8:90:7c:d3:56:f2:29:ea:59:f8:58:c7:94:6b:60:25:fa:d2:
         cd:33:8b:31:8c:de:2c:9d:e4:1e:24:9a:7e:62:73:47:c4:f1:
         3d:81:53:8e:9a:62:af:55:bd:2a:82:1a:53:1b:98:3b:ed:5a:
         29:75:77:98:ac:9c:c4:06:7c:24:e0:09:e3:3c:d8:8e:df:c8:
         03:b4:17:50:9b:6b:9c:e1:4f:63:70:3e:0c:0d:e5:3d:f3:65:
         e7:1c:e1:c8:af:15:8c:8e:27:23:d2:62:e3:55:c8:37:ee:c6:
         bc:b4:20:00:f8:3b:19:0c:2d:ab:f4:9f:7c:d2:63:69:18:59:
         33:88:3b:99:3d:d6:ba:39:0a:74:a6:64:8c:91:03:27:5a:9b:
         c7:83:6b:d3:66:49:ad:40:dc:42:8b:86:b8:07:9d:21:18:a7:
         2b:b4:44:ad:e4:07:0f:56:fa:7e:c0:64:d2:dd:49:7e:62:74:
         d4:86:3c:e6:75:f2:4e:97:30:4b:16:fa:a3:0d:09:92:34:0f:
         20:a4:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:46 2025 by rpki-client on console.sobornost.net