Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft
File:                     3845FCC306058DF56E24A27FE05C403B0CF9597A.mft (raw, json)
Hash identifier:          piJtImJTCx9kXW8jdouqXxr2citJ6zd/Faiarqo8sOw=
Subject key identifier:   25:E2:04:E7:58:83:7D:DE:FF:5E:1B:9A:33:48:36:11:75:66:15:2B
Authority key identifier: 38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A
Certificate issuer:       /CN=3845FCC306058DF56E24A27FE05C403B0CF9597A
Certificate serial:       28A263CE17E3BF0700E0E17454365B717D574E4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft
Manifest number:          0207
Signing time:             Thu 24 Apr 2025 18:51:04 +0000
Manifest this update:     Thu 24 Apr 2025 18:46:04 +0000
Manifest next update:     Fri 25 Apr 2025 20:29:04 +0000
Files and hashes:         1: 3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (hash: qYbJ+s+v4as8Tkn3cc5BQl3DUNfCUvrZ4/ne27A5SWM=)
                          2: 323830343a313238303a3a2f33322d3438203d3e20323633343830.roa (hash: hSuvKjeqad6bOQr4GenPJdxVrQ60GclVGkNW1bLpnCs=)
                          3: 3845FCC306058DF56E24A27FE05C403B0CF9597A.crl (hash: uK0y2i5AIWXMePI5pgLMjbp9xAkUUokOnUefvPs28tA=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.crl
                          rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a2:63:ce:17:e3:bf:07:00:e0:e1:74:54:36:5b:71:7d:57:4e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3845FCC306058DF56E24A27FE05C403B0CF9597A
        Validity
            Not Before: Apr 24 18:46:04 2025 GMT
            Not After : Apr 25 20:29:04 2025 GMT
        Subject: CN=25E204E758837DDEFF5E1B9A334836117566152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:04:fb:e3:8b:21:69:69:99:db:2e:f7:a3:
                    77:3b:b8:86:47:6b:79:3a:0f:cf:02:2a:8c:df:60:
                    8c:86:dc:f6:ea:3e:cd:69:87:50:b5:2a:be:5a:fb:
                    84:1e:1c:fe:be:68:88:6d:c9:39:ac:a8:67:94:ff:
                    00:49:c1:e6:a2:70:18:8a:45:e4:8a:8b:3b:39:2e:
                    bf:59:8c:95:ef:a5:e3:c1:e1:36:71:75:0b:5e:ab:
                    67:7c:65:89:2f:26:a2:fd:c0:b8:01:5c:5f:e3:f5:
                    ed:6f:5a:22:b9:a8:4f:ec:6d:e5:bd:7f:a5:e8:c9:
                    0b:b3:17:02:f2:9d:22:ee:a4:86:91:2a:ae:90:bf:
                    13:08:d7:36:79:d0:1b:b2:be:51:fe:71:99:e4:e5:
                    ad:93:c0:dd:42:f5:99:78:de:d0:c9:ae:77:e8:a0:
                    a4:08:61:10:bf:3e:2a:12:85:95:d2:f4:dd:f7:ea:
                    db:41:30:70:14:59:8e:03:9a:dc:87:84:4b:0a:31:
                    32:6d:c0:70:6f:44:c8:c4:d5:fb:18:25:de:97:9c:
                    cc:31:e6:9c:45:d0:da:67:b4:6f:41:c5:8c:1c:9c:
                    e8:f5:90:df:64:4c:eb:98:f8:05:43:8a:7d:f0:56:
                    26:c9:5c:fb:aa:cc:6e:f3:99:2a:85:b8:b5:88:6a:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:04:E7:58:83:7D:DE:FF:5E:1B:9A:33:48:36:11:75:66:15:2B
            X509v3 Authority Key Identifier:
                keyid:38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:b7:d2:23:43:4f:18:2c:00:a9:16:2a:93:9c:70:9b:7a:
         c7:11:76:7b:11:62:d5:58:7f:73:ce:61:cc:ee:f8:89:f9:09:
         4f:31:fd:97:f8:4b:6d:48:02:a8:11:a4:d3:9b:f6:2c:e3:ff:
         a8:08:da:b5:a8:07:1c:f8:35:fb:35:a4:63:1f:f2:d6:3a:a0:
         4b:99:50:f5:84:24:cc:6f:f9:14:5b:ba:32:16:67:f3:36:b5:
         47:68:33:b5:61:a1:14:0c:25:9e:56:49:e1:b2:6e:f0:1e:39:
         39:11:24:f3:e1:70:ca:a3:48:5a:c2:5d:2f:a6:07:a3:06:4c:
         0a:4c:1a:3d:c5:07:b5:89:20:09:2c:17:e6:62:96:a3:44:48:
         a1:14:94:0d:64:73:66:7c:42:c8:20:35:f1:ab:7f:04:28:db:
         09:2d:8b:35:98:62:e3:34:c8:63:f9:fd:22:80:3b:d1:ca:e1:
         74:f4:2c:65:88:a3:75:f9:21:6a:15:84:ab:8d:06:1d:7b:1b:
         12:29:b1:6d:81:6b:40:fb:92:ec:4d:cc:45:85:cf:2d:8f:86:
         b7:0c:74:00:35:b3:b1:52:9f:6f:fb:b8:f8:5d:fb:6a:53:c4:
         48:dd:2c:1d:b8:35:6b:cc:85:12:2c:9a:cb:11:46:57:89:d7:
         02:94:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:47 2025 by rpki-client on console.sobornost.net