Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
File:                     E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft (raw, json)
Hash identifier:          bjN8sowKRUGbBMP80duGZkDoIZ70iwznsub10nUTjQI=
Subject key identifier:   04:2B:4D:7C:D9:6F:B2:C6:D4:AF:D6:DB:9F:8B:91:32:0B:9A:09:54
Authority key identifier: E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF
Certificate issuer:       /CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
Certificate serial:       51BFA2440B29834E2097E30BFFE1995062805027
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
Manifest number:          0208
Signing time:             Mon 12 May 2025 10:02:35 +0000
Manifest this update:     Mon 12 May 2025 09:57:35 +0000
Manifest next update:     Tue 13 May 2025 13:57:35 +0000
Files and hashes:         1: E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl (hash: JAYDZcsqVBalLOobkv19j7ycUo0zdu6H4x6KODw/i5c=)
                          2: 323830343a363137303a3a2f33322d313238203d3e20323639323334.roa (hash: h6D+9BexD48ISIugnRM+sSXcxvLgV0d5nLrOB8LY8jY=)
                          3: 34352e3138322e37362e302f32322d3332203d3e20323639323334.roa (hash: A8jVb1tQyc/DXdbQAa6uuALyzyTbs8kJoiLtfsfCcZU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl
                          rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 13:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:a2:44:0b:29:83:4e:20:97:e3:0b:ff:e1:99:50:62:80:50:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF
        Validity
            Not Before: May 12 09:57:35 2025 GMT
            Not After : May 13 13:57:35 2025 GMT
        Subject: CN=042B4D7CD96FB2C6D4AFD6DB9F8B91320B9A0954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:3d:91:bb:54:a3:32:52:7e:a4:5a:30:29:
                    9f:f4:bb:7a:a0:f0:b2:f2:28:a2:57:8d:c1:6c:63:
                    97:26:ff:f8:a7:be:75:c3:dd:70:19:fe:b6:46:f8:
                    6c:3f:09:63:8a:94:27:3a:39:04:05:7f:a4:a3:a3:
                    3d:de:43:e9:59:b7:ed:65:fb:cb:d0:c9:2b:75:38:
                    ee:06:b6:dd:73:58:e4:f5:98:42:ca:de:54:50:b9:
                    c4:57:78:c3:38:63:f5:e6:41:7d:a1:16:49:ff:a1:
                    e9:79:45:6c:9d:d7:d0:40:dc:9b:92:39:e6:f9:d3:
                    14:32:e2:c8:5b:55:40:e0:ae:cf:e5:77:d6:6c:eb:
                    01:da:16:e3:ee:71:c4:86:c6:85:93:a9:15:cb:b5:
                    51:95:74:83:d9:60:73:75:77:79:1e:b5:06:cf:06:
                    18:3d:cf:cc:28:c7:9f:4e:52:13:05:5e:8a:c7:2e:
                    63:0e:f6:0f:f8:ec:53:cf:d2:c0:05:d9:84:d6:e2:
                    cc:e6:3f:6d:1b:15:cf:ef:29:d0:fa:2d:b6:5b:db:
                    37:26:30:19:c8:b3:2f:17:a8:31:81:a1:7c:17:e9:
                    2c:e5:b0:26:07:50:e0:0a:61:d6:9b:3b:23:28:0e:
                    a5:fc:25:a0:99:c1:20:02:42:3b:20:d7:8a:d3:e9:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:4D:7C:D9:6F:B2:C6:D4:AF:D6:DB:9F:8B:91:32:0B:9A:09:54
            X509v3 Authority Key Identifier:
                keyid:E7:B6:FC:B2:A7:49:40:38:5B:FB:79:EA:F3:8C:BA:AF:2F:00:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/E7B6FCB2A74940385BFB79EAF38CBAAF2F008CCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:00:0c:18:bf:c5:c5:00:03:10:9c:f4:b5:df:6c:48:7a:6b:
         22:6e:83:a2:15:f9:34:c7:3a:d6:c8:47:6b:2c:80:a5:24:9a:
         e2:3a:f4:11:f3:ba:68:f4:37:01:86:52:89:b6:9c:49:82:a7:
         c5:af:d9:42:5c:80:61:76:b6:d9:ce:95:81:11:0c:7f:e1:56:
         a0:e1:1c:cc:87:4b:dc:99:7f:fa:1d:44:ad:83:3d:82:08:95:
         47:e4:6f:f2:5b:43:ca:30:c9:6f:ce:fd:58:5a:50:b8:be:15:
         04:b7:70:0f:ae:84:fc:82:bc:4a:2d:cb:c1:ee:62:ed:97:f7:
         cd:68:89:da:cd:13:16:8d:35:52:bb:ad:f8:e8:d5:99:d7:6e:
         b2:fb:ff:de:84:90:4b:4d:ce:d7:40:13:de:03:94:6d:52:8d:
         b6:a2:5e:b9:15:7a:80:d5:18:83:3c:57:ac:e9:b7:46:93:20:
         2c:cd:e9:57:61:24:ff:55:b5:87:ec:25:9e:34:b6:03:56:53:
         62:da:f3:ac:d0:96:4c:ca:ef:20:60:b9:35:26:3a:48:45:4f:
         7f:b4:1b:5e:2c:8d:f3:95:9c:95:fc:04:5b:17:bf:3b:18:f3:
         e1:da:f9:5b:2c:28:6d:bf:55:6c:09:59:0e:0c:ce:df:a2:46:
         d4:3d:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:54:04 2025 by rpki-client