Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          bXRXNIo0OQX9attsVFJoqXvPpRPEUuhd3Pe0l7YHu2c=
Subject key identifier:   C3:2B:AF:B0:A4:8D:06:A1:BC:04:D2:1F:AC:0D:18:8A:7E:8B:ED:10
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       60C16533CA7291637F305A600EB874DF54799628
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          90
Signing time:             Sun 11 May 2025 23:21:09 +0000
Manifest this update:     Sun 11 May 2025 23:16:09 +0000
Manifest next update:     Tue 13 May 2025 01:47:09 +0000
Files and hashes:         1: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: bGRuc7hobEBuouaLI3zQfeV5LYNKH0qrfwJJqkmssYw=)
                          2: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=)
                          3: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=)
                          4: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=)
                          5: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=)
                          6: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=)
                          7: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c1:65:33:ca:72:91:63:7f:30:5a:60:0e:b8:74:df:54:79:96:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: May 11 23:16:09 2025 GMT
            Not After : May 13 01:47:09 2025 GMT
        Subject: CN=C32BAFB0A48D06A1BC04D21FAC0D188A7E8BED10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:c2:dc:f4:d8:2a:7c:08:b7:a1:5a:a5:35:
                    a0:6f:b5:b9:f7:72:03:78:3f:fd:ba:c9:97:95:d9:
                    1c:9e:08:d0:1e:1f:ce:64:91:cf:80:77:20:eb:1d:
                    bc:ad:6b:5e:2c:49:da:c1:71:1e:8d:c5:04:43:2d:
                    22:db:39:40:18:c6:fc:6f:f6:45:ff:21:31:c0:0e:
                    fb:5f:cc:59:93:f4:56:62:fb:0a:de:c8:8b:0a:98:
                    df:5f:70:1d:fc:c3:b2:db:19:3c:ef:ac:e1:91:74:
                    3e:11:02:b0:c2:ae:ab:a1:30:2c:d0:d3:b5:0e:80:
                    5a:25:c9:10:d2:68:35:71:5b:53:f5:47:42:ad:ad:
                    0c:bd:a4:c4:cb:bd:37:76:7e:a2:0a:33:fb:8e:2d:
                    8f:6a:f2:69:4f:55:a2:c7:de:44:e9:86:4d:c3:38:
                    ef:1d:f9:85:13:77:c7:4e:ca:3e:8f:43:a6:e9:a3:
                    43:18:95:6b:9a:cb:92:12:8e:25:06:0b:59:5e:c1:
                    40:39:99:3e:78:39:c5:b2:62:eb:94:da:25:31:05:
                    b2:93:92:70:48:5a:94:ff:04:a0:6f:b7:14:c4:e8:
                    11:14:70:cf:e1:52:d9:52:2e:9e:51:81:b9:77:74:
                    68:02:7a:6b:8e:a3:e8:9e:1b:43:e6:80:e9:94:de:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2B:AF:B0:A4:8D:06:A1:BC:04:D2:1F:AC:0D:18:8A:7E:8B:ED:10
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:bc:79:38:9e:39:6e:d1:1a:cd:e1:f9:1b:ab:9c:26:5d:
         41:54:d6:68:27:df:48:f0:a4:5e:cc:7f:ba:97:fa:b3:11:44:
         ff:71:28:a3:f7:0e:10:0c:f5:a6:b1:46:75:20:ea:6e:3e:92:
         4c:95:23:9a:3b:5b:80:76:e7:24:0b:4b:de:90:15:37:22:c9:
         57:a5:d5:9f:27:f7:04:a1:95:b9:3f:8c:fd:32:6a:cc:60:70:
         5f:c1:5e:8a:55:2b:22:38:b7:11:5c:cc:3f:00:53:8d:7d:19:
         1f:05:6e:2d:6a:96:8a:26:15:05:e0:38:7b:ae:42:cf:b0:30:
         27:a8:17:23:69:f3:19:e9:69:5d:62:bf:b4:a0:26:8a:d4:69:
         37:59:f0:92:5b:1c:c7:30:59:bf:e1:b0:f0:d4:b4:80:6b:6d:
         4a:9d:80:72:0b:fd:ca:41:8a:9f:80:ea:c1:f0:1c:85:b6:15:
         18:3c:c2:ca:f4:00:b9:c6:5b:8b:ee:16:19:ef:9a:8a:00:36:
         34:9a:b3:83:77:63:bc:3e:2c:97:78:ed:7a:09:ee:42:8e:bb:
         79:99:7f:9a:b5:b0:80:19:84:cb:d3:f4:13:aa:65:a5:99:4c:
         b2:b2:c6:bb:16:67:36:6e:41:a7:27:51:69:cc:49:e6:74:bc:
         0f:f3:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:06:46 2025 by rpki-client