Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
File:                     48EA1B42F1661A0EB03B245D47205E5220A51B65.mft (raw, json)
Hash identifier:          kJalDMH15P6d/wzbKAoOn73UHViDxdKDmR427WOmB+k=
Subject key identifier:   1B:69:46:49:1F:80:FB:25:27:CC:BB:6B:BA:B1:CE:33:83:CD:F9:94
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       3385478EDEC934B7389376E9303FF451F934BE78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
Manifest number:          0208
Signing time:             Sun 27 Apr 2025 05:16:12 +0000
Manifest this update:     Sun 27 Apr 2025 05:11:12 +0000
Manifest next update:     Mon 28 Apr 2025 06:29:12 +0000
Files and hashes:         1: 34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (hash: Rvm1w1armD++tAGP5GPkw65sDPRSkUrlDk6lNd5Fyxg=)
                          2: 34352e3233362e3139372e302f32342d3234203d3e20323638323631.roa (hash: n2hE1ZVY/SDKn8ACdrz2QAjlCDN2dySIRTTHiLBohmY=)
                          3: 323830343a346537303a643030303a3a2f33362d3438203d3e20323638323631.roa (hash: O6lbwXIPIzWlIRRs4cXVDmlPXwH0crRAzVYGwUxQukM=)
                          4: 34352e3233362e3139362e302f32322d3232203d3e20323638323631.roa (hash: 2dNTrSwsZ9d7H4jKw9HBWIPfGyIPqt4dbtbz1jE2xs0=)
                          5: 34352e3233362e3139382e302f32342d3234203d3e20323638323631.roa (hash: Tb/TbO3gsRPJ9qIQuAEQONr/MD3iSMx/6JnEkvMuwLk=)
                          6: 323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (hash: 6dWB0b/B1jQIvC/4Pdn49jnqaYs8ucqoeSwYD4+UR7c=)
                          7: 323830343a346537303a3a2f33332d3333203d3e20323638323631.roa (hash: /kAedHYVopNdZLn9e++mUNkwEtanf+bihA2mw/xxoCQ=)
                          8: 323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (hash: sgMs6VQ8NhXu8ZKvO8nAPlHdE75qxhCT/pJkCVG/3BA=)
                          9: 323830343a346537303a3a2f33322d3332203d3e20323638323631.roa (hash: 1HFJ22vOTZCc0CuMaoirvuNgZ0bpJXaOrWfGr58dVCE=)
                          10: 34352e3233362e3139362e302f32342d3234203d3e20323638323631.roa (hash: zpSX2oamKcSxoqwwx82EraMWBtUNWpQ8FtFA7rsbNeY=)
                          11: 48EA1B42F1661A0EB03B245D47205E5220A51B65.crl (hash: 0Q9h0ZLJWEjDAzmAP4VvCvxslpgcnZDKotSJjhySWMg=)
                          12: 34352e3233362e3139392e302f32342d3234203d3e20323638323631.roa (hash: 3q9PCdKnm/Ofwk3u94cZTw5R3/iHSq6cF6V9t9kmfV4=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:85:47:8e:de:c9:34:b7:38:93:76:e9:30:3f:f4:51:f9:34:be:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr 27 05:11:12 2025 GMT
            Not After : Apr 28 06:29:12 2025 GMT
        Subject: CN=1B6946491F80FB2527CCBB6BBAB1CE3383CDF994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:6b:a9:05:4c:09:1e:28:37:ff:80:12:b0:
                    5a:66:71:28:a5:b2:2e:da:1e:91:9f:97:36:9c:48:
                    f8:95:63:48:39:ee:3c:4d:cf:d7:e7:60:ed:64:bf:
                    bb:58:ea:23:48:52:0c:b0:a9:58:45:99:1b:75:26:
                    71:c1:b5:e8:ab:37:68:aa:68:ff:36:2f:71:71:1a:
                    47:b0:86:d8:50:28:69:8c:09:fb:51:e6:92:45:39:
                    64:5b:e2:7d:45:a7:73:b4:a4:d4:b1:11:05:81:e0:
                    a9:68:e2:16:da:2c:a5:37:01:a4:84:7c:22:c2:63:
                    06:5d:6c:d2:25:a6:e0:08:dc:5f:59:e6:82:3a:90:
                    2d:a6:78:f5:e9:9e:7d:e2:c2:4c:bd:c0:94:26:33:
                    72:aa:b3:37:42:f2:ea:5f:2f:8d:a5:59:10:a2:11:
                    94:29:18:ed:74:c6:45:77:51:18:f1:d8:c8:4e:f8:
                    86:17:cb:78:1e:17:7a:1a:3d:bf:57:f4:5f:01:dd:
                    d0:a1:89:53:0b:0a:a0:fe:90:55:5f:dc:8f:88:53:
                    27:2a:43:23:b4:55:3b:ee:02:6c:c8:5e:d3:bd:90:
                    60:cf:c0:8f:36:9e:09:2d:79:cf:e9:c0:84:c6:e4:
                    a1:d5:97:7f:45:07:88:16:f2:25:91:7d:10:4b:3f:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:46:49:1F:80:FB:25:27:CC:BB:6B:BA:B1:CE:33:83:CD:F9:94
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:35:36:20:66:1f:94:06:75:7e:b6:86:d8:14:4c:6c:89:55:
         b6:a7:85:5a:95:3d:22:aa:5d:81:31:f4:a8:92:a3:ff:aa:36:
         84:88:f3:21:50:4c:ed:f0:cb:04:9c:c3:b1:34:9a:4f:b2:87:
         1b:ff:6a:48:d9:79:17:08:0b:40:6b:33:c3:4e:12:f9:e9:39:
         54:bd:11:6c:a8:c2:06:51:b1:53:1a:a1:da:f2:68:0b:85:c3:
         fd:32:e4:1d:b9:53:6d:56:9c:7b:4e:83:62:40:f7:3d:1f:e7:
         3f:05:1b:e8:b5:dd:0a:c1:e4:a7:07:fc:b8:75:64:74:44:89:
         f5:7c:4f:66:47:a4:49:e4:64:3d:bb:b0:60:4a:6d:3e:86:d3:
         c5:98:18:bd:6f:d3:9e:2e:27:92:17:2a:b8:d4:8b:dd:a1:3a:
         2a:e2:12:95:6e:4b:77:00:25:b4:a6:04:cb:09:62:06:16:b2:
         87:6b:7d:f8:28:98:33:98:e1:71:4b:2c:f3:5d:77:4e:bf:f4:
         e8:24:82:6b:d5:00:c9:ac:e3:d7:31:f2:70:c5:45:e7:6d:37:
         75:da:31:9d:1f:83:6d:7c:1b:bd:27:9b:bb:9c:3c:6a:b4:df:
         ae:ee:7b:ca:aa:6e:6c:e5:3e:0d:60:dc:ee:15:8b:fb:e8:f4:
         7a:95:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:15 2025 by rpki-client on console.sobornost.net