Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
File:                     91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json)
Hash identifier:          oVeWQy9dDZFx8P2QO4gfMZlhadg8rCSz/VCt/V1U7ow=
Subject key identifier:   3E:DE:58:0C:A2:D5:00:C8:9E:41:19:B2:86:48:A5:BE:10:A0:02:75
Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0
Certificate issuer:       /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
Certificate serial:       1E7FA8CC83C5BEFF73E6BC314ED620097064F87F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
Manifest number:          ED
Signing time:             Wed 02 Jul 2025 00:45:47 +0000
Manifest this update:     Wed 02 Jul 2025 00:40:47 +0000
Manifest next update:     Thu 03 Jul 2025 02:33:47 +0000
Files and hashes:         1: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=)
                          2: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: QR54oYI5CsNZFp1cE8pGOGJDBraDeCjOzTDqPBW+RL4=)
                          3: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=)
                          4: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=)
                          5: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=)
                          6: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=)
                          7: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=)
                          8: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=)
                          9: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl
                          rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 02:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:a8:cc:83:c5:be:ff:73:e6:bc:31:4e:d6:20:09:70:64:f8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0
        Validity
            Not Before: Jul  2 00:40:47 2025 GMT
            Not After : Jul  3 02:33:47 2025 GMT
        Subject: CN=3EDE580CA2D500C89E4119B28648A5BE10A00275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:1e:51:c4:d3:9a:f7:18:d7:ce:cf:2b:13:
                    7e:12:88:c1:c8:32:6f:41:05:57:04:6c:63:e9:a0:
                    7a:ad:63:a5:2e:e5:a5:f6:85:c1:54:e0:b3:81:fd:
                    f2:da:db:0c:d0:53:81:88:ed:19:9d:dc:b4:0d:a8:
                    59:06:e1:81:a9:19:7a:5e:39:a7:5d:2b:2c:06:67:
                    56:0e:06:71:ba:1c:18:e8:58:6c:4d:09:32:e4:04:
                    2c:dc:ef:02:5d:ba:ca:05:d5:ee:5b:3f:1d:41:55:
                    c6:25:01:bf:8d:01:b0:af:48:87:e6:32:95:2a:a9:
                    c7:06:bf:c2:60:ef:20:2c:a3:97:79:56:ed:cf:36:
                    23:42:33:e6:60:cd:98:62:10:e5:df:1a:69:c5:41:
                    d9:cc:0a:55:4c:81:8a:ef:52:13:70:be:b7:0a:49:
                    da:4b:6d:da:f2:92:cd:94:ba:c7:5a:99:9a:18:72:
                    1d:f3:45:42:d5:aa:69:12:98:ab:34:23:b8:a1:bb:
                    be:c2:4d:cf:71:f4:2d:77:2d:41:ca:03:ad:4b:25:
                    57:60:ba:61:de:78:a9:3f:83:5f:e6:e4:17:5c:65:
                    14:07:7c:69:8a:2d:e0:db:4e:be:e3:7e:6e:20:c3:
                    e1:95:bc:00:3d:16:3b:d5:03:6a:58:a4:bc:0a:50:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:58:0C:A2:D5:00:C8:9E:41:19:B2:86:48:A5:BE:10:A0:02:75
            X509v3 Authority Key Identifier:
                keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:e6:2e:18:28:4e:ab:28:94:95:89:1c:58:26:21:51:02:
         f3:29:5e:6f:dc:19:0a:1d:27:ee:0c:a3:75:04:d7:1d:a8:37:
         67:76:90:36:a9:ee:32:b6:f5:ee:da:ee:39:6f:02:d7:c4:b9:
         37:12:6a:9d:c3:bc:54:f0:3f:98:bf:e9:13:df:7d:f1:21:d2:
         ee:70:a6:b0:9a:13:51:27:23:1c:67:c1:cf:b7:f8:f4:c5:95:
         a0:2a:f7:48:9a:c9:3f:0e:91:35:fa:13:bf:5a:44:fa:2f:7d:
         5a:29:3d:11:c5:1b:dd:1b:a8:eb:82:33:d1:37:f5:69:ec:bd:
         55:db:a3:6b:f6:14:0f:a8:6c:54:f6:e8:09:0d:a3:41:24:e0:
         eb:15:13:36:24:3a:f8:0c:c7:2f:48:30:49:ec:96:83:28:e9:
         79:78:db:c0:b1:f4:e8:c8:5d:9d:d1:4a:55:c3:e3:23:56:0e:
         8a:0f:80:52:95:77:99:20:9e:0f:fe:17:8b:bf:a8:1a:6a:9a:
         7a:af:4d:e1:f3:48:24:ec:62:ba:8c:bb:e4:2f:24:cf:f7:90:
         3b:19:24:68:8f:b0:36:c8:24:21:90:f4:0e:e8:4d:87:b9:1c:
         a9:d6:a5:e7:36:c4:cd:ec:f1:ef:cc:d8:0b:1a:4a:a6:48:7d:
         c4:9d:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:10:32 2025 by rpki-client