Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
File:                     3D90D603749AF57040F7092DF1F2D266672E47E7.mft (raw, json)
Hash identifier:          EZSPmOSFL44lRGq/0kYG0RVwCXauN6N9WtwmC2n7L54=
Subject key identifier:   2B:2E:4C:10:E4:54:40:54:CD:19:94:05:46:3A:6B:CE:42:73:84:A8
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       0FCA4A19324DCF045E44A2C2B38D1F525242EAE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
Manifest number:          0201
Signing time:             Fri 16 May 2025 01:15:25 +0000
Manifest this update:     Fri 16 May 2025 01:10:25 +0000
Manifest next update:     Sat 17 May 2025 04:55:25 +0000
Files and hashes:         1: 323830343a353932383a383030303a3a2f33342d3334203d3e20323638313732.roa (hash: s/Dzas3b/CiEthW5pNgsCINM/TOf1BTjxzklaPZkiqU=)
                          2: 34352e3137302e3230312e302f32342d3234203d3e20323638313732.roa (hash: NeUmSNP+xMBTSqa6obu2JEiq7R+IPcYDSkkVKHKYUv8=)
                          3: 34352e3137302e3230302e302f32332d3234203d3e20323638313732.roa (hash: nvT42yV9iGFlUfoudSF7MMxzIS+GJktTRJMKLR66vik=)
                          4: 323830343a353932383a383030303a3a2f33332d3333203d3e20323638313732.roa (hash: XSejfCFrWL3gcfIQ0j2fq4XmW75vcbPYBnrt3/2XyzA=)
                          5: 3D90D603749AF57040F7092DF1F2D266672E47E7.crl (hash: NsoOl8ztsEp8roSMJlUpBugp79/YgcjwZr9xcj5+cn8=)
                          6: 34352e3137302e3230332e302f32342d3234203d3e20323638313732.roa (hash: UjjVSxbQwwFjuD/fQCQCSTb0RobDemnCwxLi4/ZSCaY=)
                          7: 323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa (hash: gVn5u3HaVB45E4NkqkMQDhuzj1onjpxsMvwMlKReGxE=)
                          8: 34352e3137302e3230322e302f32332d3233203d3e20323638313732.roa (hash: JXFNIC78T/6UsNqEvAZtb2RYl/jpSCRDkzU8UvMK0h8=)
                          9: 34352e3137302e3230322e302f32342d3234203d3e20323638313732.roa (hash: uYN7DIjdrRXL6uD6QikTTaEZvsnywR2iUX+XTQJnB5U=)
                          10: 323830343a353932383a343030303a3a2f33342d3334203d3e20323638313732.roa (hash: frfbE4sDyT5OlLh70pfzbzhyLnXT4LUyQZLjRdNOa1o=)
                          11: 323830343a353932383a3a2f33322d3332203d3e20323638313732.roa (hash: oOsvNKxW4JPWr+3R2gdvlw/SjCmV7wLG5C/tp0iTVB0=)
                          12: 34352e3137302e3230302e302f32342d3234203d3e20323638313738.roa (hash: IE6+PC02Z3lpsierznU3Q0QAfPfXk3+rPz91wRHPmlg=)
                          13: 323830343a353932383a3a2f33332d3333203d3e20323638313732.roa (hash: u2ysZbSD+EXmkgUh8ykWO2aMQQhxkyTLIikT+5PLONo=)
                          14: 323830343a353932383a3a2f33342d3334203d3e20323638313732.roa (hash: s6Ub/Q8UIuC3Br2zqrYcNexnz14Ky4PbuNMJS3zv7Cw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 04:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:4a:19:32:4d:cf:04:5e:44:a2:c2:b3:8d:1f:52:52:42:ea:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: May 16 01:10:25 2025 GMT
            Not After : May 17 04:55:25 2025 GMT
        Subject: CN=2B2E4C10E4544054CD199405463A6BCE427384A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:a9:f8:39:e6:8f:17:a9:53:36:4c:4e:4e:
                    bd:66:58:f3:93:d6:77:c5:fc:3b:7e:fa:a4:a3:b3:
                    3c:4f:bf:78:0a:10:9d:c3:99:c2:6f:88:01:d7:f0:
                    3c:c4:d4:53:76:06:2d:f2:57:9e:81:78:25:c0:b9:
                    37:76:34:f2:68:d2:ca:86:a8:72:85:f6:48:65:17:
                    bf:88:aa:60:4a:73:79:e4:11:11:5f:34:61:d4:bc:
                    2a:ac:e3:a5:07:37:2d:d4:02:5c:83:2d:a7:2a:91:
                    53:24:e6:4e:92:9a:82:8a:8a:67:96:d4:74:04:bd:
                    22:bc:25:06:ac:30:91:be:33:cd:ff:1f:0a:82:88:
                    9e:6f:47:6d:ce:2b:40:32:69:ab:48:47:17:35:21:
                    f0:6e:e2:3e:9e:62:64:7f:4e:af:77:ed:56:ce:fa:
                    da:0f:75:ff:99:68:2f:bc:3e:29:7c:55:6a:76:60:
                    b5:1b:ef:e7:fb:24:f0:2e:e0:ea:41:fc:57:fa:07:
                    ec:7b:5e:f4:31:34:83:bb:4c:78:3b:03:8b:e7:c3:
                    39:86:36:ae:2e:3f:e7:29:7a:59:0d:c4:d9:77:8d:
                    2c:7b:6b:ab:81:71:f3:2c:fc:d5:ba:fb:55:7a:81:
                    69:3e:f7:9f:02:6e:11:8c:c1:3f:1b:58:df:14:58:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:4C:10:E4:54:40:54:CD:19:94:05:46:3A:6B:CE:42:73:84:A8
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f4:34:a5:f8:ea:55:ee:14:e2:cd:92:cb:a6:69:df:87:c3:
         1b:4a:c7:bd:06:07:1d:70:af:ed:09:e4:d3:3d:51:14:0c:b2:
         85:b8:4b:4d:03:75:d8:cf:98:86:36:1c:52:1c:b4:ee:cd:e8:
         1a:40:2a:e6:13:9b:a7:7a:37:0e:83:a0:5e:8a:c8:9a:45:37:
         3a:2f:a8:33:a0:bf:a7:77:1d:0f:fc:a0:93:c2:89:80:d8:8f:
         ab:7d:63:13:40:c4:8e:81:1a:61:03:f1:b7:ab:1e:1d:e7:15:
         d2:1d:2c:d7:71:da:35:12:f9:7a:aa:90:15:37:9f:35:fd:b5:
         2e:27:2b:dc:de:32:06:61:75:d9:e6:a3:0f:1e:bb:42:2d:7c:
         31:b5:0c:b9:8c:42:18:dd:01:f5:22:c9:fe:a6:2a:27:c0:da:
         de:26:3f:24:22:35:38:61:ec:95:d4:1b:3b:a5:74:5e:3a:ce:
         dc:a0:22:32:f1:20:6e:02:f5:8d:62:fe:28:16:ff:b4:27:c6:
         7e:2e:1b:4f:30:87:d2:e0:1d:4b:f4:38:4a:d2:0e:47:42:0d:
         1d:b2:6d:41:59:48:a9:f3:7c:98:e6:1a:c2:2d:00:2b:c2:fa:
         30:a6:5e:93:2b:56:21:32:04:92:43:6d:67:b7:44:28:12:93:
         b8:e6:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:20:21 2025 by rpki-client