Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
File:                     3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft (raw, json)
Hash identifier:          7PEuedEOiLwZVwrkS4SwMt98kTOKDksMgwIE5NHA8mQ=
Subject key identifier:   B2:5C:A0:63:4A:4F:9C:6E:4A:98:EE:77:FC:DF:66:FE:C8:2B:B2:DE
Authority key identifier: 3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE
Certificate issuer:       /CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
Certificate serial:       4367F0C90E0ED166A88756AB2A6CCBECC9AC8F16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
Manifest number:          0207
Signing time:             Sun 27 Apr 2025 01:43:52 +0000
Manifest this update:     Sun 27 Apr 2025 01:38:52 +0000
Manifest next update:     Mon 28 Apr 2025 02:27:52 +0000
Files and hashes:         1: 3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl (hash: eJ1qVU7CV+A4ME0B5CQcNwlzsMDxAXEtHxFq004GGnw=)
                          2: 323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (hash: /FOAutYWZzsnbWC4Nqdxqv/tDu+98Wh+rhe0TZEfFrI=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl
                          rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:67:f0:c9:0e:0e:d1:66:a8:87:56:ab:2a:6c:cb:ec:c9:ac:8f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE
        Validity
            Not Before: Apr 27 01:38:52 2025 GMT
            Not After : Apr 28 02:27:52 2025 GMT
        Subject: CN=B25CA0634A4F9C6E4A98EE77FCDF66FEC82BB2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:a4:18:6b:7c:bf:d9:fc:ea:c9:62:e5:c0:
                    5b:62:23:23:90:8b:b4:cc:df:91:a0:4c:67:92:c4:
                    37:37:93:6c:94:5c:27:7b:71:b2:8f:a2:a8:b6:2b:
                    f6:a4:d4:41:a0:c4:40:00:91:e6:a6:f8:ee:95:36:
                    3c:ee:74:1c:e7:49:f5:6e:96:a3:a3:fd:45:5e:c4:
                    bd:32:70:00:4b:05:bf:6d:c9:51:58:4a:c0:56:78:
                    ee:e1:01:ad:ca:dd:d0:94:ad:2a:5d:3d:d0:0d:4b:
                    3f:aa:1e:0d:60:96:89:de:e8:51:e9:bd:43:46:12:
                    f1:14:3b:e6:6b:23:8e:13:c2:5c:20:46:94:cb:d0:
                    1d:b3:9f:1d:ff:0a:e5:32:c0:9b:29:70:1c:5b:02:
                    ab:05:7f:12:f7:86:16:3e:c5:df:cd:63:fe:7f:f9:
                    63:8a:2d:c4:af:07:51:7c:24:51:31:88:c5:ed:db:
                    a9:32:0c:74:9a:6d:46:8d:4a:3c:0c:17:12:91:c9:
                    50:a6:b7:84:ca:73:10:bc:cd:e9:11:11:72:f9:85:
                    d9:85:8c:e8:95:d9:c8:80:ed:d4:4c:2f:48:5d:93:
                    a7:26:06:be:5d:13:1f:a8:42:ee:75:58:35:33:ac:
                    15:2f:d1:7e:50:59:73:f1:1b:98:b0:f2:15:3c:3c:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:A0:63:4A:4F:9C:6E:4A:98:EE:77:FC:DF:66:FE:C8:2B:B2:DE
            X509v3 Authority Key Identifier:
                keyid:3C:0F:B6:F8:3D:6C:A4:9D:A6:6C:B1:CE:15:9A:49:38:5C:83:0F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/1/3C0FB6F83D6CA49DA66CB1CE159A49385C830FFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:2a:74:41:dd:c1:d2:c0:43:81:c0:b5:5a:c3:32:ab:1d:
         9c:d8:25:80:f4:06:29:bb:11:b0:c0:e5:f4:4c:e3:60:e0:49:
         03:10:62:81:b7:6a:50:ab:31:ae:c0:83:c6:df:9a:a8:9d:94:
         91:8a:04:98:d8:68:b8:5d:b6:9a:6d:69:d2:f9:f0:b8:70:29:
         67:fa:c4:36:38:10:14:4b:3b:5a:6b:d1:cc:b1:3d:dc:18:89:
         e0:a1:d4:51:7a:11:a3:c4:7a:23:bf:e0:fe:b9:c7:fe:a7:97:
         9a:ad:4a:03:ae:01:b7:49:62:93:41:4b:96:97:3d:67:44:ec:
         f9:3c:b2:9a:b9:f7:4a:89:14:18:86:6c:c7:18:f4:7b:74:51:
         94:92:d2:50:76:60:f2:03:c5:9b:76:b9:63:a0:f4:7e:32:40:
         0e:e8:c4:17:5d:e3:26:80:eb:41:57:6e:5c:cd:fc:82:5b:8e:
         13:10:33:39:ac:f6:bb:82:21:16:7a:8d:1c:89:33:35:fb:ba:
         c2:31:8f:8c:45:94:ca:30:47:99:bf:4d:79:c0:7f:f0:16:de:
         0e:ec:00:fc:1e:c9:67:f8:2e:f6:e7:6d:f2:f4:fc:32:ac:52:
         53:52:6e:41:be:5b:b7:d0:83:bb:c2:35:4e:11:4d:6a:31:47:
         c3:3a:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:20 2025 by rpki-client on console.sobornost.net