Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
File:                     BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json)
Hash identifier:          cnA6s1+pQR+taklPzr4ciJIpEI3uj1goaDt+W2jrH/A=
Subject key identifier:   9B:AB:55:D4:6A:6F:5F:9C:37:7E:B4:27:55:64:9D:AB:E5:9A:7D:EA
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Certificate issuer:       /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial:       25A68363155BA6DC4610F55FBD0E409E800B1BB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
Manifest number:          017A
Signing time:             Sat 26 Apr 2025 23:57:29 +0000
Manifest this update:     Sat 26 Apr 2025 23:52:29 +0000
Manifest next update:     Sun 27 Apr 2025 23:57:29 +0000
Files and hashes:         1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: PhSvUFOtyem38XA06XIswRn6adHdtpNnhNXfMJ/M2Hc=)
                          2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: NDp9eJe+42eDm6yXHvEdf9HcdpGANCOWFpMiqcNAZv8=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 23:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:83:63:15:5b:a6:dc:46:10:f5:5f:bd:0e:40:9e:80:0b:1b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Validity
            Not Before: Apr 26 23:52:29 2025 GMT
            Not After : Apr 27 23:57:29 2025 GMT
        Subject: CN=9BAB55D46A6F5F9C377EB42755649DABE59A7DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:75:f9:96:f7:8d:b1:2e:ad:77:0a:84:0d:
                    f4:a8:9b:66:cb:aa:1f:71:76:15:df:b1:c5:6f:04:
                    80:e4:cc:08:1b:20:f4:77:b1:d1:65:39:ef:cf:52:
                    a5:62:b9:a2:72:71:7e:49:1e:d6:d3:08:8d:a8:c2:
                    35:f7:05:2e:ec:a0:53:47:0b:e7:ac:e0:66:bc:39:
                    bc:6b:a2:e9:21:10:fd:be:86:41:50:09:da:c9:ca:
                    0a:77:8c:67:87:df:05:3f:44:50:cc:e5:6a:3b:fe:
                    f8:bb:01:95:c6:ed:18:7c:d0:f7:8f:88:8c:7c:d6:
                    b3:4e:ec:92:e9:8b:9b:f3:7e:aa:e0:19:96:aa:61:
                    8e:5f:c3:c5:58:3c:9a:fd:62:89:a9:ed:0f:2c:cc:
                    9c:64:2e:5c:62:93:e5:c4:c5:d2:e1:6e:ad:6b:a8:
                    33:59:5e:d3:fe:39:e4:b7:0a:97:b3:7c:99:06:06:
                    91:08:45:0b:38:b9:b1:a0:7d:38:b4:5f:7b:13:b2:
                    cf:8a:07:e1:c6:06:ae:00:44:3a:8d:9a:02:16:05:
                    fd:f7:58:ef:9c:dd:56:42:ea:39:81:fb:68:9e:f4:
                    48:b7:7f:15:e0:b4:ae:9b:f1:f9:ff:1c:6b:1f:64:
                    9a:ed:e2:bf:9c:99:74:78:b8:a8:b2:12:05:b3:80:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:55:D4:6A:6F:5F:9C:37:7E:B4:27:55:64:9D:AB:E5:9A:7D:EA
            X509v3 Authority Key Identifier:
                keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:55:6c:f2:34:3f:ec:8c:a6:6b:18:7e:51:73:5c:e6:38:
         4a:ce:82:15:81:17:60:5c:dd:01:b4:49:db:5b:2c:ac:da:90:
         7f:79:df:b7:55:cd:ae:5b:45:40:95:51:92:ca:62:7a:3c:ee:
         16:3d:09:d0:de:56:68:40:e9:2e:b4:b5:e9:a5:52:7c:7b:36:
         c3:14:35:62:90:cb:b0:99:65:c4:16:28:94:dd:e4:e8:cd:98:
         29:84:fb:6a:75:80:0e:62:94:e8:57:ac:f9:e7:24:36:85:b8:
         b5:78:dc:fd:1c:0d:ce:c3:12:74:90:07:1f:85:ee:16:82:7c:
         80:61:49:3f:51:cb:d6:3d:f0:dd:11:3e:38:18:d0:88:75:94:
         e3:82:92:07:1d:dd:86:c9:77:0c:dc:0d:20:51:35:f8:bf:46:
         8a:38:86:82:9d:e6:f4:f1:46:7e:1a:7c:21:b5:be:b5:64:c5:
         35:4a:8e:52:66:e1:3d:86:e8:07:82:ad:63:d8:e4:93:3c:01:
         67:69:df:90:1f:30:da:85:c6:7e:00:2e:9e:e0:c1:b0:f5:cc:
         58:00:3c:3f:f1:fc:91:51:f3:a2:9b:c4:e5:13:81:3d:f6:c7:
         13:1f:41:6d:5b:4f:92:da:cd:14:5a:de:3a:91:d8:ce:2e:82:
         06:f9:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:16 2025 by rpki-client on console.sobornost.net