Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
File:                     DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft (raw, json)
Hash identifier:          jDoI4u03GDua4Yn23YsvnaG/Lsf/cvn0zvLjHeALcMk=
Subject key identifier:   A4:6B:13:A7:6A:5A:CB:0C:32:36:F7:E7:ED:3D:0E:6A:B8:25:03:4E
Authority key identifier: DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
Certificate issuer:       /CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
Certificate serial:       0995F1213E7469EB538CBF112C5CCC9A09A88147
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
Manifest number:          0208
Signing time:             Mon 28 Apr 2025 08:26:51 +0000
Manifest this update:     Mon 28 Apr 2025 08:21:51 +0000
Manifest next update:     Tue 29 Apr 2025 09:41:51 +0000
Files and hashes:         1: 323830343a313964633a3a2f33322d3634203d3e203631383233.roa (hash: 00rU6OQB5I9F9dXAHDpMSZ4PQLjKwVh8Q74BazgzVRo=)
                          2: DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl (hash: Ks3fg00L2egcLVMIYjPUGk74CvgYkKyKtMK4MOhpHrU=)
                          3: 3230312e3232322e32342e302f32322d3234203d3e203631383233.roa (hash: DlhO81qrtCCI/SSq45yNREtrfu+6rSWUa6Wffp2kUEE=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:95:f1:21:3e:74:69:eb:53:8c:bf:11:2c:5c:cc:9a:09:a8:81:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
        Validity
            Not Before: Apr 28 08:21:51 2025 GMT
            Not After : Apr 29 09:41:51 2025 GMT
        Subject: CN=A46B13A76A5ACB0C3236F7E7ED3D0E6AB825034E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:7e:bb:6b:c8:bc:55:e1:0d:50:77:79:4e:
                    e3:46:df:e7:33:40:0a:1b:99:d4:63:4b:fb:03:f6:
                    50:f1:2b:fa:54:aa:19:f8:7f:1c:8f:f3:dc:8a:d2:
                    18:3e:38:e4:bc:ff:ff:92:d8:7f:08:94:a4:82:11:
                    78:70:03:90:d4:85:3b:21:4f:b8:f6:23:6d:0b:c1:
                    b8:85:99:c4:7a:20:be:94:6e:ae:05:be:fc:13:cc:
                    be:88:7d:a2:29:3b:4f:8a:86:10:b5:37:86:cb:9c:
                    b6:5b:23:f5:87:f6:d4:19:88:a4:9e:3a:07:c8:48:
                    16:f1:33:08:9b:7c:24:2c:2e:5b:9d:1d:db:fb:c5:
                    9f:09:3a:6a:0f:21:1a:fb:09:c5:35:11:32:6e:d2:
                    a8:6a:ec:33:9d:ce:0b:f9:62:fd:de:c3:d4:88:5a:
                    01:05:e6:d3:23:0d:b6:59:d7:9c:8d:cd:12:93:0d:
                    5d:05:85:b5:10:aa:1e:c8:1d:24:38:48:53:64:ef:
                    0c:d0:75:6c:70:85:10:21:a4:8a:59:ac:56:c4:51:
                    68:9c:57:cd:ed:37:b5:33:2a:c6:7b:96:1e:76:99:
                    56:a4:fa:76:06:f4:bd:d3:8e:63:fb:bc:59:21:fa:
                    c8:23:03:4d:26:a8:b6:5f:ee:02:b5:93:c9:95:c9:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:13:A7:6A:5A:CB:0C:32:36:F7:E7:ED:3D:0E:6A:B8:25:03:4E
            X509v3 Authority Key Identifier:
                keyid:DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:39:eb:4c:a3:bb:20:a7:6c:fa:5d:60:84:8a:9f:73:b2:ff:
         bc:03:4f:d5:fd:d0:bb:a0:f9:de:d0:a6:26:df:90:f6:3a:df:
         41:80:32:82:25:fb:cf:ad:7c:28:04:18:7f:34:bf:6b:7e:d4:
         d8:02:de:ec:cd:45:5b:4d:1b:33:5f:08:d8:eb:ff:bc:a2:dd:
         40:b3:10:87:d7:a1:1c:d5:6b:09:41:ad:6c:99:ae:b3:8e:87:
         88:bb:9d:d2:b5:3e:97:9d:bc:0c:bc:7d:5f:9d:9f:ed:2c:27:
         b8:db:f4:a2:1a:d9:4d:ad:30:62:91:81:15:f5:93:fa:85:70:
         50:4f:8c:b7:60:83:32:ed:74:ad:25:50:72:24:70:d2:03:5e:
         24:5c:83:43:ec:7b:fc:86:ad:d3:db:60:fa:7e:57:a3:fe:c6:
         83:55:1f:0d:55:97:3f:b9:dc:ca:1a:f9:75:05:d9:d1:20:7b:
         cc:d8:ca:03:7a:79:ab:dc:5c:6e:57:86:60:18:ed:c8:8d:47:
         1a:40:fa:cc:27:98:59:28:a8:f9:79:36:7c:9b:5c:56:9d:48:
         d4:24:81:f1:ed:90:20:c5:dd:fc:0e:e8:dc:6f:68:57:05:f9:
         54:4f:75:4d:21:97:72:1b:6d:d3:d1:4e:69:94:33:31:f3:17:
         a3:36:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:32 2025 by rpki-client on console.sobornost.net