Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
File:                     E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft (raw, json)
Hash identifier:          vscmuQJypbpJcGw8ACmjOCmG36eBWfhgjcodmamjIY4=
Subject key identifier:   9B:33:76:B8:8E:16:39:4D:80:B5:10:6A:BC:FC:60:B0:99:50:6C:A2
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       596CBC32EE7E1440018E1060E82A43E5D6EF3AFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
Manifest number:          11
Signing time:             Tue 13 May 2025 00:02:59 +0000
Manifest this update:     Mon 12 May 2025 23:57:59 +0000
Manifest next update:     Wed 14 May 2025 02:49:59 +0000
Files and hashes:         1: E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl (hash: Z4MfqJ9Qlxi1yMguw0nw6n7p4+i3kImf0lXP5XdWEGE=)
                          2: 34352e3136302e3137302e302f32342d3234203d3e20323638343235.roa (hash: YDpgH/4bezLcHcKquy0hO/2IbIOHc/EvOAlJ0sHVWu4=)
                          3: 323830343a353130343a3a2f33332d3333203d3e20323638343235.roa (hash: O5lDJAGa/1XEPXAo82R4hgC3bbIo0b4QsYTQy2riaY8=)
                          4: 34352e3136302e3136392e302f32342d3234203d3e20323638343235.roa (hash: gSnKP9WhOoPdQnm2UThEPqz/xuYFeGKfT5pMDS2CYWQ=)
                          5: 323830343a353130343a376530303a3a2f34302d3430203d3e20323638343235.roa (hash: uLu9gWUq6/BimsV43hOxu+K+0rS7t0/6Njcdq0Bi1g8=)
                          6: 34352e3136302e3137302e302f32332d3233203d3e20323638343235.roa (hash: AJGgQgsxwIk4dVlVq0JfSI7buI/VGzoipoua+psqc2E=)
                          7: 323830343a353130343a3330303a3a2f34302d3430203d3e20323638343235.roa (hash: oTsWtwKr6AsKcKSiIACkui8/r4KI48XlfXRbN5Ph0B0=)
                          8: 34352e3136302e3137312e302f32342d3234203d3e20323638343235.roa (hash: JzBeqihAa+Mkl3GB5cphyq5G6WYEL7Ee5oQRkQFRnTE=)
                          9: 323830343a353130343a333930303a3a2f34302d3430203d3e20323638343235.roa (hash: MxtZ9EJPkyF+YNXZieFUaLFM1OcwrqefDjv8/f86TUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
                          rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:bc:32:ee:7e:14:40:01:8e:10:60:e8:2a:43:e5:d6:ef:3a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: May 12 23:57:59 2025 GMT
            Not After : May 14 02:49:59 2025 GMT
        Subject: CN=9B3376B88E16394D80B5106ABCFC60B099506CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:5d:04:fa:a5:a3:5a:1d:3e:5e:9e:f8:4b:
                    bb:b4:bc:8d:33:7f:5e:75:d4:e8:48:cd:72:d1:e0:
                    c0:60:79:b7:59:38:3e:8a:c4:4a:57:97:98:3e:c9:
                    e6:89:40:6e:23:0a:b6:e0:7b:73:c4:18:59:d1:07:
                    36:73:ae:2d:fb:59:bb:a7:75:66:a4:70:b2:c6:8e:
                    44:ef:42:b2:39:50:c5:ae:25:21:77:5d:95:49:7a:
                    e9:82:56:b7:d1:b6:eb:4e:21:54:98:28:3e:9e:78:
                    1f:96:94:45:fa:c8:ee:d0:64:53:c8:98:fc:73:53:
                    98:8a:97:62:2d:73:b4:ec:bd:cc:55:be:7f:48:33:
                    c6:02:fd:09:76:52:b9:e2:87:95:6e:73:26:35:4d:
                    84:6c:24:34:0c:f2:4e:5f:4a:d3:6b:8f:06:1c:06:
                    bd:2f:11:4f:f9:f9:3c:ba:58:10:67:a0:02:b3:cf:
                    31:07:51:72:28:f4:fe:2a:11:a4:42:6f:7e:10:b4:
                    d8:22:75:f6:c4:a6:65:41:18:4b:83:b5:f4:06:a8:
                    26:5b:ef:27:37:b0:52:a8:c6:d7:23:ab:26:0c:8f:
                    92:08:a4:0a:0c:d4:b7:3f:58:8b:81:29:09:37:f9:
                    67:bc:0a:4b:7b:6d:7b:59:66:f2:27:02:9e:24:7d:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:76:B8:8E:16:39:4D:80:B5:10:6A:BC:FC:60:B0:99:50:6C:A2
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:a6:39:32:1c:f2:e8:65:64:f1:0d:7d:30:7d:31:90:3b:
         e5:17:12:02:cf:17:d2:f6:39:97:41:c9:b2:3f:58:75:6e:fc:
         06:5b:66:3e:09:50:d4:81:68:d5:76:de:30:85:aa:84:84:ba:
         b3:93:1d:74:35:5c:b1:71:67:a8:7e:1d:9c:68:35:b4:95:bf:
         44:5c:6a:81:ce:81:b5:17:2a:d3:71:f6:4a:7f:40:ba:df:36:
         ce:38:d5:6f:a7:53:ac:b2:b6:63:54:aa:97:51:02:82:02:c3:
         af:a6:ff:5f:fb:c9:8d:99:3c:a8:d9:6f:dc:e0:0e:f2:20:56:
         11:ac:88:03:b5:a1:2e:b8:8a:5f:64:2f:82:0f:5e:0a:bf:e4:
         89:fc:1f:bd:6b:de:3f:ea:65:b1:c3:f6:af:51:23:23:af:37:
         5a:12:7b:9b:18:e9:7b:09:b8:b2:20:92:0d:84:3d:10:76:3b:
         94:c2:5c:5e:a4:36:c4:cb:75:a9:7f:4c:47:26:a8:d5:6b:e8:
         79:6e:94:b0:f1:85:bf:6c:8a:c8:d0:40:11:95:71:d3:0b:15:
         51:e3:f1:ed:65:1d:66:bc:71:ca:a9:5a:fa:d7:e0:14:9f:19:
         50:62:c0:98:f4:17:43:47:f9:b2:d0:f3:96:10:7d:0e:96:90:
         d7:84:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:44:21 2025 by rpki-client