Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          ZoE8aRo8DysWJtcB7/VJ6YakQkVMoGxND7Yjwp8b4O8=
Subject key identifier:   1B:7D:F7:D1:5E:59:5C:52:B9:02:0C:24:35:6B:51:A2:7C:95:19:8A
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       111E7504BDE8778152A78264E9789593C4A057E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          24
Signing time:             Tue 13 May 2025 05:11:36 +0000
Manifest this update:     Tue 13 May 2025 05:06:36 +0000
Manifest next update:     Wed 14 May 2025 05:50:36 +0000
Files and hashes:         1: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: nPvlApQHq682NNJsbh8dkSCIG7wF3PneEPHVSQXHVHs=)
                          2: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=)
                          3: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: SalagO4BMzv1/knGQHz2yAYQVYHEcDvMZE/ItLwvu20=)
                          4: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: F+mot+FSQP0fE+UXpORQq/D2rcEErdSMSnaWMURftDk=)
                          5: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=)
                          6: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: 7pFJZg33ygAxlXjIYUNjCPDcdVIiaggt4kaSJ8atORw=)
                          7: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: d6bjcWueih5cXiY8FVnN2uUnYin5RNMFFnSQj2zrQpI=)
                          8: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: z12jWJsYAgf4Q8uXIp9romFVhEVrF2GPUQ954Q/vCIg=)
                          9: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: pVYTDtKIwEPErOqEGAxTC17UiiZyOr8zRm73AdHH6KE=)
                          10: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: lUtz7MKekr+hul63UNYZ6gl3ng1S5V5Tq0UmFue47Dc=)
                          11: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: 19y9suZg81aWvWRGbanLF5MDE0/A6R29ASgcaolBFdk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1e:75:04:bd:e8:77:81:52:a7:82:64:e9:78:95:93:c4:a0:57:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: May 13 05:06:36 2025 GMT
            Not After : May 14 05:50:36 2025 GMT
        Subject: CN=1B7DF7D15E595C52B9020C24356B51A27C95198A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:91:29:01:29:6b:91:cc:f4:be:f1:fe:ea:
                    59:3e:dc:b8:c0:e6:54:5a:ea:1c:ce:4e:79:2e:ba:
                    0b:93:2b:b7:30:5f:e6:2a:fa:5e:0f:27:ac:a0:7e:
                    ef:71:a1:79:9b:63:5c:9b:83:94:f2:ea:9c:b8:6f:
                    40:6d:71:68:cc:31:34:5e:c1:a7:e9:56:70:4f:04:
                    20:3c:11:8a:5a:54:64:1b:21:f0:03:55:b3:3d:8f:
                    38:15:60:29:fd:65:4c:c3:2a:e8:a5:f1:f5:66:77:
                    68:45:e4:f7:7c:b3:83:00:31:ba:2d:03:8f:21:7c:
                    70:f0:95:5d:8b:cd:38:d6:ba:32:b0:73:f3:f0:82:
                    d6:f8:49:93:82:f0:7e:37:ce:99:c4:c2:b4:42:92:
                    3b:04:19:60:2e:d7:0c:f0:bb:8e:12:84:70:c6:7e:
                    e0:01:0e:45:5e:4d:8b:c0:a7:b3:0e:91:12:19:16:
                    10:87:08:83:0b:1e:f8:af:90:bb:06:d9:6a:08:23:
                    2b:98:92:af:51:63:63:8a:37:45:e9:af:f8:1a:a9:
                    a5:2e:07:81:07:a0:bd:5c:59:e1:b5:b6:14:7a:8c:
                    d3:ce:32:56:44:40:22:b4:b2:78:d2:1e:0c:1b:6d:
                    87:89:df:65:4d:c8:5a:56:40:2f:92:e5:0e:45:e6:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7D:F7:D1:5E:59:5C:52:B9:02:0C:24:35:6B:51:A2:7C:95:19:8A
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:19:9a:2a:b6:28:50:44:bf:40:e4:dd:4e:78:9a:79:2e:d7:
         e0:50:9b:73:ed:2f:75:8d:c5:e0:cd:b0:8b:15:aa:3b:cd:6d:
         80:dd:8d:f1:7e:0f:83:a4:8c:7d:98:a0:b6:49:ea:98:dc:53:
         84:63:16:f2:d3:53:ea:bc:8d:fe:b8:12:e9:89:8d:a1:8f:11:
         20:3a:24:dd:98:3b:9f:12:f8:e8:a5:f3:57:d3:49:26:93:b1:
         0a:29:7b:c3:a1:36:d1:2a:91:60:59:a0:0b:ed:c4:f6:0d:3c:
         e6:4f:9d:cd:45:60:97:34:6a:94:2c:23:08:3f:1c:d7:4e:7f:
         7a:b3:dd:15:78:97:b1:bc:4d:57:b1:f0:27:14:2e:91:29:00:
         89:39:25:6c:22:49:3f:72:2b:7f:83:76:68:04:45:b1:06:9f:
         96:8b:e5:9c:30:33:ec:29:a8:7d:8a:1c:fc:7a:39:68:2e:ad:
         04:7f:7a:bd:ca:0f:66:30:04:df:89:f6:f8:90:ff:1b:ad:ec:
         3d:e6:44:5d:14:59:fd:21:3c:87:75:32:6e:13:2f:f1:73:2e:
         8a:92:cc:43:0a:34:d3:ba:e0:52:7a:bb:35:ff:dd:25:de:46:
         2a:19:75:27:17:28:fc:a2:28:d6:f3:5d:a7:08:5b:93:56:e6:
         f3:96:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:52:24 2025 by rpki-client