Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
File:                     296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json)
Hash identifier:          9orzhJIIi0gEvsgOG6USZ+18s/rIWIT2Akj3L8IfuWc=
Subject key identifier:   2D:0F:89:FB:40:7A:BB:4E:2D:43:6A:08:64:A5:8D:3D:6B:40:A9:2A
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       5EFFC747A9352BB939A7CE48162377B3970C597B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
Manifest number:          2A
Signing time:             Wed 14 May 2025 12:58:58 +0000
Manifest this update:     Wed 14 May 2025 12:53:58 +0000
Manifest next update:     Thu 15 May 2025 13:21:58 +0000
Files and hashes:         1: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=)
                          2: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: XDRl4Crn4+/FMXT7hWL4rgia1sfJkghmcOzda5m9yFY=)
                          3: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=)
                          4: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=)
                          5: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=)
                          6: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=)
                          7: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=)
                          8: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=)
                          9: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=)
                          10: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=)
                          11: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ff:c7:47:a9:35:2b:b9:39:a7:ce:48:16:23:77:b3:97:0c:59:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: May 14 12:53:58 2025 GMT
            Not After : May 15 13:21:58 2025 GMT
        Subject: CN=2D0F89FB407ABB4E2D436A0864A58D3D6B40A92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:6c:11:20:60:e9:16:37:8c:ea:94:6b:cb:
                    28:ff:8d:65:16:a2:29:1c:c9:24:e6:6b:bd:d3:37:
                    1a:45:b4:2d:4c:d6:75:fb:0d:63:88:6c:54:33:99:
                    78:3a:6a:90:16:a9:a4:1c:ae:d8:67:8f:10:ba:81:
                    76:5d:c0:53:15:70:a6:f3:f5:fb:ca:81:02:90:c6:
                    ce:58:8d:f1:a9:75:4e:8f:3f:2c:28:ec:74:76:0b:
                    71:ec:0d:b1:e3:3d:a5:6a:7a:a6:a3:dc:90:39:29:
                    5f:a5:51:c4:79:a0:a9:85:25:b0:b7:bb:5c:2d:9d:
                    9e:41:bf:cc:df:e5:a8:e1:cd:16:0e:52:3d:8f:25:
                    98:78:50:fc:cc:bf:6f:d8:ea:45:24:d9:2b:7f:d8:
                    4d:01:33:35:e4:ae:4b:b4:cd:5f:42:c5:95:7c:d3:
                    09:50:ad:ac:43:bf:50:2b:d8:5b:2c:67:ed:0d:84:
                    59:d3:00:3e:35:5b:7e:86:d4:f9:36:e6:1a:f1:3e:
                    9f:70:e3:10:c1:f4:4d:ae:75:69:6e:c2:00:51:6a:
                    2a:4f:38:79:57:36:e0:89:74:37:d8:59:66:b5:6f:
                    4e:a7:03:ea:6c:5a:24:7c:92:61:d4:f8:30:0c:15:
                    7b:ab:b9:ea:c2:2c:de:21:6d:1a:9b:2c:77:3c:02:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0F:89:FB:40:7A:BB:4E:2D:43:6A:08:64:A5:8D:3D:6B:40:A9:2A
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:73:86:14:0e:d9:fd:e8:63:dd:36:25:0d:9d:7d:de:85:
         8d:51:f3:da:aa:ec:51:87:b2:d0:9b:b4:2d:1d:b2:02:47:6e:
         15:23:57:2e:75:b4:a6:39:17:6f:c5:cd:00:d6:db:0a:2c:b3:
         57:ca:9f:06:e5:2c:21:35:f2:d7:00:ee:08:1b:99:37:fb:11:
         da:4f:34:45:74:60:17:0f:0c:ee:63:e2:8e:9e:5b:29:0b:88:
         2e:50:43:af:f5:04:14:1c:b5:ba:23:e8:1c:f4:fb:3c:68:b8:
         2c:1e:e8:cc:b2:7a:91:1f:77:00:6a:66:3b:25:af:77:49:83:
         bf:fe:86:6d:85:2b:71:f0:1b:8a:f4:12:a6:c2:7c:e1:ba:1c:
         aa:9a:15:e3:99:11:fe:6b:bb:43:10:b7:f8:6a:a5:95:1a:a3:
         76:e6:a6:8e:96:ce:59:a7:51:72:18:cb:72:b4:34:51:ee:b2:
         e5:9a:7a:8b:66:6d:2c:c3:bf:da:4b:69:3e:93:80:ec:b7:aa:
         d7:2f:be:4c:a6:e1:d1:fc:1b:89:d1:dc:d4:cf:9c:33:5a:dd:
         3d:f6:f7:7c:a6:12:b1:51:26:68:0f:70:bd:ab:17:e2:e2:cc:
         46:d8:b5:78:c0:29:a6:ad:34:c9:8a:c8:a1:69:e0:ba:0c:fa:
         9a:00:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:27:27 2025 by rpki-client