Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
File:                     B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft (raw, json)
Hash identifier:          mOkJILPkwWTY3Tl3OpjUnCBj5unuDEv95o7Ohl4+Vqg=
Subject key identifier:   5D:62:6C:4E:F1:E0:D5:9A:A5:A7:3B:D8:82:EE:59:55:10:5D:47:2C
Authority key identifier: B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E
Certificate issuer:       /CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
Certificate serial:       3DAE9AD298F9B28A58D14CCCB8E40E644DCC945C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
Manifest number:          0217
Signing time:             Sat 10 May 2025 19:58:12 +0000
Manifest this update:     Sat 10 May 2025 19:53:12 +0000
Manifest next update:     Sun 11 May 2025 22:33:12 +0000
Files and hashes:         1: 3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (hash: aB+2rSKt/jC71WyWUluyEniYl5JPgwwuVWaxjoRosJc=)
                          2: 3134332e302e3234302e302f32342d3234203d3e20323731323137.roa (hash: Zw+N3pk/85VEezvEmpqNf65u7jR5ZJPRWyo9O0h5k5o=)
                          3: B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl (hash: iRHgYMFgvoAK+vgfH3euQrFqW1fWpLePcTkCn43c5sQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 22:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:9a:d2:98:f9:b2:8a:58:d1:4c:cc:b8:e4:0e:64:4d:cc:94:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
        Validity
            Not Before: May 10 19:53:12 2025 GMT
            Not After : May 11 22:33:12 2025 GMT
        Subject: CN=5D626C4EF1E0D59AA5A73BD882EE5955105D472C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:72:23:cf:fc:25:07:51:90:b1:53:ab:3c:
                    39:a7:f4:63:f6:a7:81:b7:6e:55:6f:c0:af:d9:92:
                    ef:df:7e:55:4a:e2:a8:eb:0f:8f:d8:fc:fe:ff:ea:
                    db:f7:f5:74:dd:88:d4:28:9e:9b:52:7f:5d:e8:03:
                    86:d0:c5:ae:47:e7:83:98:f8:d8:45:9b:a2:c5:0b:
                    c6:37:10:26:b3:88:e8:3f:14:e2:10:cb:e4:4b:38:
                    01:6c:fa:1f:8f:0c:55:cb:6d:b8:b1:38:32:c3:c2:
                    f9:b9:3a:eb:fa:42:22:65:91:8b:7a:7f:9d:9c:0f:
                    a9:36:ad:ea:af:fc:60:99:e1:e3:71:cb:14:7d:ad:
                    ec:82:af:ea:e7:29:fd:e6:e9:a9:43:86:1c:d8:33:
                    4b:f3:90:a7:fb:aa:69:f7:81:cb:80:6a:03:e9:d7:
                    21:d9:f6:3f:72:87:ce:bf:fe:74:e7:1e:4b:5d:de:
                    34:9e:59:cd:be:c8:9c:56:78:8f:e2:3c:69:71:d7:
                    0f:00:1b:be:b2:c3:34:fd:77:c8:23:39:37:37:f7:
                    c5:f1:c1:00:b5:75:5e:aa:9d:7a:5d:19:30:7b:d3:
                    22:06:46:89:92:15:93:da:45:ca:af:4a:7f:0f:39:
                    eb:78:31:bd:58:19:ae:0f:39:0a:64:59:6b:07:4a:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:6C:4E:F1:E0:D5:9A:A5:A7:3B:D8:82:EE:59:55:10:5D:47:2C
            X509v3 Authority Key Identifier:
                keyid:B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:e2:0c:ab:a1:18:aa:0e:b8:c3:45:dd:67:5f:46:49:ed:
         2f:2d:05:f8:b0:69:a8:ba:46:ea:54:e6:53:b0:07:d9:39:ac:
         29:4a:29:e5:96:4c:e6:92:88:95:ae:a0:cd:ed:5d:b7:1d:47:
         83:d6:2d:7d:4c:ee:88:3d:12:ae:f4:93:dd:cf:90:83:a2:70:
         34:2a:d9:5d:43:7f:fb:bb:10:5f:f3:58:76:9a:4a:f2:0f:ea:
         7c:3f:da:31:94:c0:91:a4:69:9e:30:64:cd:ec:a5:dc:0c:52:
         87:ab:01:21:d8:3e:71:c9:2e:5f:57:28:20:2e:ec:7f:6a:6b:
         c6:c5:4f:f0:0e:ee:14:27:e4:b0:01:7f:b7:fd:ac:78:0e:a3:
         d7:c6:6f:0c:a0:0e:d4:f4:41:92:25:a6:bd:3c:f4:81:19:37:
         df:de:77:1d:f9:2a:76:f6:f2:37:04:02:0a:59:79:95:b9:4d:
         ef:43:03:f6:c0:df:77:e0:01:33:a1:de:0a:86:5f:ac:91:0f:
         2f:5c:ea:b2:f7:67:8d:db:1c:a9:fe:a9:f2:5b:ee:52:97:40:
         69:26:4f:5e:bb:8d:47:70:f9:c3:9a:4c:d6:ed:7d:86:6c:17:
         11:7e:b7:6b:65:a0:dc:80:b2:32:05:5a:6d:a4:0b:93:0e:2f:
         67:75:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:15:45 2025 by rpki-client