Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
File:                     2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft (raw, json)
Hash identifier:          jbt+H01KjiEZr2mGP2gnJwENRobgNoZdGnjoEvrNcOQ=
Subject key identifier:   4A:2E:93:7C:D5:4A:77:9A:0B:01:72:92:53:06:48:55:DC:3C:BA:74
Authority key identifier: 2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D
Certificate issuer:       /CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
Certificate serial:       3A89D7FE1E82BADEDFBA53DF906F6EA210957823
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
Manifest number:          26
Signing time:             Thu 24 Apr 2025 11:31:30 +0000
Manifest this update:     Thu 24 Apr 2025 11:26:30 +0000
Manifest next update:     Fri 25 Apr 2025 13:57:30 +0000
Files and hashes:         1: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (hash: oDlwzoC0zIt57AbbkE8OesG195+/GwvNJGcag+iX+6U=)
                          2: 3137302e3234352e3234382e302f32332d3233203d3e20323636303332.roa (hash: uG8j/9gUljrzf1kcqe/hNIsJoFsNH6phGtvhRgJU5/A=)
                          3: 2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl (hash: HEO6MvZzrC6CzrSeJozcv+7l/eBOpiYVBNPvLJGOskw=)
                          4: 3137302e3234352e3234382e302f32342d3234203d3e20323636303332.roa (hash: 7Gy/2zxvP1q9dA5l4/POwRKUVYyaHmlKAN9UzceULUw=)
                          5: 3137302e3234352e3234392e302f32342d3234203d3e20323636303332.roa (hash: r5CKH6P+AymtNLDL1hf4xEqFlnjWLMpJ3zPHUKUBfDI=)
                          6: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (hash: 7qIAFmbSAJx6Q5LRAcGAZH+JrMm6xqCHS4nj7QQ8lMM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl
                          rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 13:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:89:d7:fe:1e:82:ba:de:df:ba:53:df:90:6f:6e:a2:10:95:78:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4F416AD9F06A19B21E0483772F76BBAA08379D
        Validity
            Not Before: Apr 24 11:26:30 2025 GMT
            Not After : Apr 25 13:57:30 2025 GMT
        Subject: CN=4A2E937CD54A779A0B01729253064855DC3CBA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:a1:21:93:f4:fe:61:8f:1b:2a:e4:a3:ff:
                    75:ab:e7:9e:f0:2f:92:f6:df:33:30:37:c1:cb:11:
                    83:f2:6d:aa:d4:b2:a4:1b:91:be:8c:62:f5:b1:6d:
                    2a:56:6a:68:8f:cf:c7:e1:97:8c:39:9e:82:3c:b2:
                    19:4f:bd:8f:f5:cf:4e:52:6d:17:65:b1:4f:f5:df:
                    62:01:d5:a1:88:11:72:dd:c7:10:e9:8b:1a:c3:cc:
                    c1:25:f2:36:90:ec:49:75:31:aa:b2:d2:70:ca:5a:
                    bd:f7:0c:24:33:44:d7:c4:92:88:b8:a4:52:18:02:
                    65:db:bb:73:b5:22:98:b1:aa:4e:26:e0:c1:28:11:
                    ed:96:e6:4f:b1:99:15:01:9d:15:61:76:d9:a9:cf:
                    97:21:50:c8:bf:f7:ba:56:63:fd:8b:da:54:fd:bb:
                    f4:2e:82:51:7b:a1:c6:4e:14:f0:6d:4e:63:fd:12:
                    65:56:c6:b6:27:6b:a9:b8:a2:ca:a5:4b:be:a4:5b:
                    21:a7:c7:9e:66:33:ab:ec:73:a8:7d:37:c9:69:28:
                    f2:59:7e:ee:4c:ad:7b:a4:b7:cb:10:25:c6:0e:1a:
                    c2:58:50:c1:1c:11:3b:66:c1:93:79:a8:4f:30:55:
                    ea:71:2c:e5:61:c6:a5:35:3b:c2:6e:41:e8:44:76:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:93:7C:D5:4A:77:9A:0B:01:72:92:53:06:48:55:DC:3C:BA:74
            X509v3 Authority Key Identifier:
                keyid:2C:4F:41:6A:D9:F0:6A:19:B2:1E:04:83:77:2F:76:BB:AA:08:37:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C4F416AD9F06A19B21E0483772F76BBAA08379D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/2C4F416AD9F06A19B21E0483772F76BBAA08379D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:4e:51:1b:c4:9b:03:7e:2f:00:22:da:0e:41:8b:09:a7:
         22:8a:d7:2d:e5:14:37:9d:ec:64:92:31:c7:c0:5a:e9:44:39:
         02:9d:4e:50:77:3e:08:ec:6e:2e:d8:01:e4:b8:e8:68:10:84:
         8f:9c:99:48:29:2d:e3:79:65:b8:ef:64:6f:ee:73:84:64:6b:
         a5:90:41:9b:35:a1:d1:e3:b4:ac:ae:5c:85:47:d7:69:02:29:
         d6:80:c2:d4:a8:f7:d7:f4:46:60:54:ca:c3:db:38:b4:23:c8:
         18:cd:a4:39:8d:b8:53:06:3c:d8:98:ea:ac:72:05:ad:27:67:
         d0:83:9a:4a:0d:31:a9:c4:00:98:67:d9:62:28:27:9b:18:70:
         7f:59:d7:9f:c0:d9:b2:0a:cc:e7:8a:25:b5:72:e4:1a:8c:ca:
         83:55:de:71:33:1b:d5:0e:82:55:4e:2a:4f:c3:03:60:10:cf:
         99:24:fd:0e:5e:da:1e:b5:66:b5:84:70:23:50:d5:ec:c8:77:
         e7:06:3f:5f:c2:8d:75:bd:c8:3d:b4:06:a5:07:fe:bf:d3:6c:
         36:c2:41:cf:a7:a1:12:22:17:5b:36:43:88:bd:a7:7c:e9:1c:
         f5:81:df:67:73:e5:8d:7b:a2:85:9f:ae:05:6f:8f:08:2e:ef:
         3e:24:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:19 2025 by rpki-client on console.sobornost.net