Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          jdBE0tSWzlpLDpYweElUA6B+ebhNFBTA/lVJShf2OVc=
Subject key identifier:   E6:B3:F4:B2:CA:A1:CA:2F:1E:ED:FC:33:E6:3D:D9:F7:BB:E1:20:0A
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       2832A79944F609F0A5802EABBD56633BB7130979
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0146
Signing time:             Wed 14 May 2025 08:49:08 +0000
Manifest this update:     Wed 14 May 2025 08:44:08 +0000
Manifest next update:     Thu 15 May 2025 11:45:08 +0000
Files and hashes:         1: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          2: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
                          3: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
                          4: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: yg+ZQctskDoLik5NlUr6/9XYGLyqgNWrTF7c8/uo5DY=)
                          5: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          6: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          7: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:a7:99:44:f6:09:f0:a5:80:2e:ab:bd:56:63:3b:b7:13:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: May 14 08:44:08 2025 GMT
            Not After : May 15 11:45:08 2025 GMT
        Subject: CN=E6B3F4B2CAA1CA2F1EEDFC33E63DD9F7BBE1200A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:17:e6:4c:61:45:59:4a:c8:0d:36:87:8a:
                    ba:64:2e:5a:c4:f8:32:24:3a:3d:49:4b:22:91:ac:
                    13:e9:7c:e9:88:d3:82:f7:68:b5:84:d2:7b:e9:77:
                    db:a1:12:a5:72:1b:47:85:9d:63:cb:99:9d:10:10:
                    1f:2d:b4:78:07:e1:ab:1b:c5:64:43:c1:f4:40:bc:
                    4b:51:0f:85:b3:2a:f0:47:d4:d4:99:4d:eb:c0:d4:
                    82:ee:da:45:24:47:be:c9:93:b0:a6:4f:89:ca:20:
                    d3:b9:51:dd:3e:a1:04:09:64:8e:2f:a9:46:22:b1:
                    28:e9:56:51:4f:46:ce:3d:b2:f9:07:a4:ff:bf:05:
                    3b:05:8b:a3:6a:4f:4b:1f:87:af:b5:ac:96:d9:08:
                    e5:37:cb:44:22:29:58:10:ff:73:15:8a:76:27:cb:
                    fc:b3:a6:7b:66:ed:a9:7c:ce:95:f9:84:ff:2a:56:
                    ce:ba:20:b1:64:0e:97:03:14:2a:13:af:94:b8:4a:
                    fa:29:ea:33:9a:90:29:98:c2:51:96:03:d1:ea:ae:
                    bd:d7:d1:c9:cb:90:d3:09:83:bf:81:fd:67:09:1e:
                    fe:51:6e:55:ee:8e:4d:8c:82:19:9d:61:ed:a5:f7:
                    11:67:88:ef:ac:8f:b9:64:3e:8a:6e:e6:aa:7a:ac:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:F4:B2:CA:A1:CA:2F:1E:ED:FC:33:E6:3D:D9:F7:BB:E1:20:0A
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:40:ea:37:8d:16:ad:ac:03:c6:77:3f:17:d8:65:4b:3e:b5:
         7e:63:9c:9f:d7:6c:4a:34:7b:c4:1b:44:a4:8d:c0:a4:bc:3e:
         eb:d0:1e:06:c4:db:4a:f1:ee:48:d6:7b:65:5c:16:f9:55:73:
         25:07:a5:15:83:cc:01:88:67:ed:5c:7b:81:57:44:2b:19:4a:
         bf:d5:45:e8:37:e7:7c:7f:b1:8b:f2:5a:95:57:76:eb:bf:46:
         ec:3a:c9:b2:d3:cd:33:23:7e:51:00:23:c2:03:72:b4:0c:91:
         d1:c3:c4:e7:4b:54:67:db:a8:f9:fe:06:6b:37:ba:15:1b:2d:
         3d:97:d9:3d:23:90:2a:9e:24:72:41:ee:df:1e:f9:b6:af:39:
         4c:aa:02:2b:1e:09:dc:a2:1e:31:ba:ee:02:4c:6b:f8:d7:91:
         a9:ef:6a:7a:2c:57:fe:90:1f:a5:b6:e2:61:3d:ba:71:39:a9:
         bf:6d:97:70:22:72:67:17:f1:44:39:6c:08:60:23:14:f5:b8:
         34:a7:64:87:2d:c0:5a:c6:53:e3:be:3d:86:78:eb:05:95:3b:
         c8:f4:a2:ed:46:98:65:19:97:32:16:62:46:be:e6:fb:a8:ab:
         39:26:ad:45:a2:0f:16:6b:9f:90:a2:c9:1a:0a:51:c7:f9:5f:
         7b:f1:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:06:51 2025 by rpki-client