Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
File:                     1673423E2B1CFB67A429872716AC44E11E27EBE3.mft (raw, json)
Hash identifier:          YYTwCDyJ8I4yLS7By6jJ0+COJoyLhiUizUMsHn6RTXw=
Subject key identifier:   1D:C9:47:35:F8:00:69:E8:A8:C7:AF:D1:E5:DC:71:BD:4A:2A:BA:DF
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       32EDFDE47FAD2B95E81C62502E8DA22E2E345F73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
Manifest number:          0221
Signing time:             Thu 15 May 2025 23:16:18 +0000
Manifest this update:     Thu 15 May 2025 23:11:18 +0000
Manifest next update:     Sat 17 May 2025 01:54:18 +0000
Files and hashes:         1: 3139302e38392e3233322e302f32342d3234203d3e20323730333937.roa (hash: Cn3oUW5wSEOYZKqTZr+kBoQXzLVZ97Z2pUANKM8zaeQ=)
                          2: 3139302e38392e3233332e302f32342d3234203d3e20323730333937.roa (hash: V7KjljiE0NyGKsRxkI+O2Z2EI7hVZOBo/8nJ6OzFYvs=)
                          3: 3139302e38392e3233352e302f32342d3234203d3e20323730333937.roa (hash: 8S0BWDVTzuW24enNNkVGECX9K9O4DJGaIBjl66ZPgbY=)
                          4: 3139302e38392e3233342e302f32342d3234203d3e20323730333937.roa (hash: AXVqrTiPFOmMsleJX3ZFBIf2L9UQxtqcmKMZYUr5YwI=)
                          5: 323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa (hash: vwzJkkqIXNHsMNY7xR5+NAk30DSwz7cyDZikDx3Jsh8=)
                          6: 323830343a366236343a3a2f33322d3332203d3e20323730333937.roa (hash: v91QV+IAIIVY659D3CMIW14tvVVwnxPfKYnoLugmAAM=)
                          7: 1673423E2B1CFB67A429872716AC44E11E27EBE3.crl (hash: 8gX1bSTdLsbQitVxAK/r4JMvMxMZtez96zzMfsCRTgk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 00:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ed:fd:e4:7f:ad:2b:95:e8:1c:62:50:2e:8d:a2:2e:2e:34:5f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: May 15 23:11:18 2025 GMT
            Not After : May 17 01:54:18 2025 GMT
        Subject: CN=1DC94735F80069E8A8C7AFD1E5DC71BD4A2ABADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:7d:ab:ff:76:3b:7c:7a:de:73:b6:68:a9:
                    0c:5b:0b:22:8b:b3:90:54:7d:38:28:9b:71:de:d8:
                    b8:a0:db:62:2c:2a:33:b2:50:fa:15:ad:c8:72:5a:
                    da:b3:ed:5e:51:c3:d4:7a:3a:0c:bf:97:4c:0d:19:
                    c7:54:8e:90:20:24:60:af:28:7b:6d:61:ea:3b:10:
                    ff:29:01:cd:69:d1:0f:26:c1:5d:1e:40:2b:37:c6:
                    29:73:ba:bf:ad:62:20:67:ea:7d:91:39:a6:f2:e6:
                    9e:4b:90:56:c7:24:80:09:56:8c:8c:e7:20:10:7d:
                    d4:dc:f9:2f:dd:b9:5e:de:da:5e:1c:73:d1:c6:a3:
                    06:71:c3:9d:8b:dd:ca:a1:3a:81:3d:e7:25:41:3c:
                    38:3e:8f:72:2b:01:62:68:f6:78:3d:24:d3:1e:8f:
                    4c:e5:d9:8e:21:0a:56:de:35:38:6a:88:eb:41:25:
                    48:89:ee:69:e4:61:2c:4e:4c:91:2c:fa:82:f1:b7:
                    03:86:c3:4a:00:ad:a3:30:d9:6f:66:f1:0e:39:63:
                    68:3b:f9:e6:9d:27:b7:6a:69:70:8e:3b:9d:fc:0f:
                    81:80:af:97:83:e1:ee:07:84:69:15:93:ad:b5:58:
                    ed:92:de:72:72:2c:f9:38:61:a9:46:08:17:55:e9:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C9:47:35:F8:00:69:E8:A8:C7:AF:D1:E5:DC:71:BD:4A:2A:BA:DF
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:a2:a7:09:de:0b:ef:78:12:d2:83:49:28:12:05:b3:ba:
         90:ef:b9:90:42:f6:2d:d8:58:51:ad:e9:57:6b:96:9b:49:40:
         8d:24:15:c1:b0:29:14:2c:c4:9f:bb:d3:51:69:f4:63:3d:da:
         48:0b:ec:bd:c6:99:6c:9f:d1:67:54:4e:e5:25:ba:de:66:f2:
         ec:50:a6:f1:6a:b2:ac:be:80:af:ac:da:71:c2:a5:de:c9:3e:
         92:2a:97:d0:6a:44:ef:a1:5b:c7:f3:a6:3a:1e:41:ab:89:bd:
         88:46:03:3e:82:a3:f6:4f:d7:6e:c4:85:6f:df:42:de:38:15:
         a6:cc:de:f2:b5:92:89:08:e8:82:2b:f4:35:7c:e6:aa:83:98:
         f3:66:35:0b:6e:7b:16:c4:78:a4:c9:4c:24:63:9f:9a:7b:a2:
         5d:e1:c0:7d:12:9a:66:36:db:ab:24:84:8a:23:a6:ef:cb:55:
         1e:51:d3:6d:5b:99:06:14:63:f8:b4:16:3a:d2:8a:ad:26:fd:
         88:74:21:cf:06:e0:86:b6:2e:52:8a:94:1d:18:85:3d:65:d7:
         5b:b1:f5:56:c0:7c:a6:fa:c3:64:3e:29:d5:ae:fa:b0:95:3c:
         8f:75:52:07:0e:e5:f2:73:50:49:19:b1:a7:4d:02:ee:a2:f8:
         6d:60:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:19:25 2025 by rpki-client