Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
File:                     8A93F234754BF521193905D6EAF7AFDBB2811E48.mft (raw, json)
Hash identifier:          n41QcapPjHGTv2x8fJDTasDo72BbZz4misGyL7H08VI=
Subject key identifier:   EB:19:49:41:CA:16:62:6C:84:82:04:1E:AF:73:22:9B:D7:91:F7:4F
Authority key identifier: 8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48
Certificate issuer:       /CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
Certificate serial:       1A0B6C801A16D9A1B029D1B49E5FF60F93A970A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
Manifest number:          013B
Signing time:             Fri 25 Apr 2025 03:37:58 +0000
Manifest this update:     Fri 25 Apr 2025 03:32:58 +0000
Manifest next update:     Sat 26 Apr 2025 04:49:58 +0000
Files and hashes:         1: 3139302e332e3136342e302f32322d3232203d3e20323731363033.roa (hash: Ito++Ux14+zLQmEMNTjUkGax/mjH5GhWzg71hGG4S9Y=)
                          2: 3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (hash: qWXsWMtA6QvMDMjL3UNVbPvudSgEx8XI/NhBNI1pzqw=)
                          3: 3139302e332e3136372e302f32342d3234203d3e20323731363033.roa (hash: iurEa/Ztd0T/FrostFpyfBEnwpUgdoYWADsgV1oHnvk=)
                          4: 323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (hash: PJ5CTK9tgnaXCGNUaKUBmWgmsKVUtdMMCXGuudKgq24=)
                          5: 3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (hash: EAx5Wdm1arllAsPVxI3swxcdfuMy5Oh1aZblIhE/xDY=)
                          6: 8A93F234754BF521193905D6EAF7AFDBB2811E48.crl (hash: 9HmcgF+rPiwZ1KmhPaaTYQqpkm32gKIyIfBzH2G/aao=)
                          7: 3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (hash: msgAyNNvQRPv0l8kE70d7l4v19iKAS+gA38asDPC9WQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0b:6c:80:1a:16:d9:a1:b0:29:d1:b4:9e:5f:f6:0f:93:a9:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
        Validity
            Not Before: Apr 25 03:32:58 2025 GMT
            Not After : Apr 26 04:49:58 2025 GMT
        Subject: CN=EB194941CA16626C8482041EAF73229BD791F74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:bb:8d:91:16:8a:4a:d3:6b:c6:c7:79:25:
                    0d:32:6c:d2:36:28:27:6b:ca:78:ba:60:19:79:9d:
                    b5:a1:0c:dc:34:f0:81:fe:ff:64:ad:48:29:d0:ce:
                    fe:c0:2f:be:b9:05:e6:04:57:09:b4:4d:3b:ae:fc:
                    17:ea:3f:bf:42:f9:bf:f0:ea:58:ad:fc:dd:31:83:
                    fb:4d:bb:26:50:29:81:d9:24:bf:6a:8e:ba:c3:7d:
                    68:28:a6:46:1f:48:da:56:07:ca:8e:10:1a:57:f2:
                    fb:b5:d5:9b:4e:5e:f2:a6:c3:d8:ad:42:89:81:36:
                    5e:32:99:7c:11:62:95:78:f2:81:13:9d:e6:eb:38:
                    eb:59:6e:3b:cb:81:0d:12:1a:85:a5:d3:a8:54:cb:
                    54:d7:9c:3d:71:b2:90:60:73:e6:3e:a1:b7:af:06:
                    b1:d7:3e:d4:69:d7:da:80:6e:90:6a:b5:e9:83:d2:
                    35:74:49:1d:d1:f7:ff:57:0c:bf:49:0b:12:bd:d5:
                    59:bf:76:38:8b:f1:6c:e3:ed:2d:54:70:4a:b7:9e:
                    4a:1b:ce:77:cf:0c:52:60:dd:9d:ed:31:2c:3c:8e:
                    53:23:5a:b7:a2:60:6c:91:07:21:ac:45:5f:49:7f:
                    8a:73:12:88:6e:26:72:60:60:a1:23:f5:92:52:3c:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:19:49:41:CA:16:62:6C:84:82:04:1E:AF:73:22:9B:D7:91:F7:4F
            X509v3 Authority Key Identifier:
                keyid:8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:1c:1c:c9:fa:88:82:3c:f1:5f:ec:a0:bc:5d:6b:bd:5b:
         b7:92:42:a6:05:53:3f:62:a0:d6:d8:67:4c:da:bf:d1:2a:b4:
         a8:ab:c7:9e:ae:bf:00:dd:eb:5b:c5:a1:a8:b3:e6:8b:19:8f:
         5a:48:14:51:7d:94:2e:48:d1:53:f1:9a:78:0b:cd:3a:21:e8:
         c6:bd:ff:f4:60:da:e4:51:22:98:d6:bb:48:4e:fa:4d:0b:84:
         8d:5c:dd:b9:96:ba:49:b2:85:c5:2b:a3:6d:da:21:e3:f7:85:
         41:fe:26:45:30:35:74:0f:bc:10:1a:b0:30:73:b5:9b:ad:a5:
         9e:1f:3f:d7:40:aa:f3:c4:6f:e0:52:c2:04:66:68:b3:6d:1c:
         99:df:e7:7a:fd:4a:b7:75:34:34:3d:86:b7:18:7b:7c:7c:4f:
         b5:c7:45:bd:ad:ea:44:be:e4:b5:fc:0c:91:81:68:f8:c4:61:
         8a:ea:32:17:90:78:f7:c1:04:27:ac:e4:6d:6c:71:8d:3d:1e:
         69:f4:88:ee:66:2f:57:5c:ca:ba:60:6a:10:93:20:c3:28:0b:
         21:38:e7:85:f8:71:46:44:dc:8a:51:3f:ef:ad:70:82:6a:d4:
         cf:b6:d7:c1:00:c8:d9:82:ae:80:ec:33:89:05:2b:b0:4b:22:
         e6:90:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net