Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft
File:                     0D43F36140A4C38AD745FB2C264948998A60F421.mft (raw, json)
Hash identifier:          XmbVzSMFVxnw46+7AQUxg2DwVT95m4gdANWrAX/gIsI=
Subject key identifier:   9C:CF:17:D1:A8:0E:CD:F3:32:57:82:A3:FD:D0:FB:2C:96:30:37:3C
Authority key identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
Certificate issuer:       /CN=0D43F36140A4C38AD745FB2C264948998A60F421
Certificate serial:       28D96CC1C6525162EE2DF8C9F92EC1323BEA2006
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft
Manifest number:          8C
Signing time:             Sat 10 May 2025 22:10:36 +0000
Manifest this update:     Sat 10 May 2025 22:05:36 +0000
Manifest next update:     Mon 12 May 2025 00:52:36 +0000
Files and hashes:         1: 3137372e3232332e3134322e302f32342d3234203d3e20323731323039.roa (hash: PPonc0qfeGpSUzjH+VSBE4gIUWyHrLXslNxR0NN1SpQ=)
                          2: 3137372e3232332e3134302e302f32342d3234203d3e20323731323039.roa (hash: 5zIEjBaTEPPsfvC2W5CtlPoOWCi2Ol5aHTOhgB+ylII=)
                          3: 323830343a373766303a3a2f33322d3332203d3e20323731323039.roa (hash: gg7el4I586LwRBHkr/pqYtWdjkEvh0vwFtIdz3Rb/aQ=)
                          4: 3137372e3232332e3134312e302f32342d3234203d3e20323731323039.roa (hash: JvRq4qyDZLDPKlIjoIn+ZY4Cx98iyFrAR0HWx//lztw=)
                          5: 0D43F36140A4C38AD745FB2C264948998A60F421.crl (hash: wrM+krAT1WZUf60x/C5n3KX2L4DEDMxXX0SDXL0tGOk=)
                          6: 3137372e3232332e3134332e302f32342d3234203d3e20323731323039.roa (hash: brZKxqoY+A28jmnDeBS9tjOaImMKzD03J8KuSWCbXWI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.crl
                          rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:6c:c1:c6:52:51:62:ee:2d:f8:c9:f9:2e:c1:32:3b:ea:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D43F36140A4C38AD745FB2C264948998A60F421
        Validity
            Not Before: May 10 22:05:36 2025 GMT
            Not After : May 12 00:52:36 2025 GMT
        Subject: CN=9CCF17D1A80ECDF3325782A3FDD0FB2C9630373C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:38:48:90:e6:0a:19:a1:ed:9b:b9:ca:8b:8e:
                    b1:03:fb:b7:13:2c:7c:52:b0:95:02:1c:8b:81:b0:
                    ce:ff:a6:e5:ef:13:26:00:4b:7f:5b:34:0b:95:a5:
                    9e:05:e0:a2:25:f4:d5:fe:fb:b5:4b:15:ca:c2:c7:
                    5e:68:a1:4d:28:c5:06:47:04:26:ae:9e:04:d0:1c:
                    bb:c4:1e:ee:24:12:ea:74:15:2d:d6:4f:0f:74:57:
                    5b:e0:b9:94:f8:f4:56:10:3b:00:76:92:b6:04:09:
                    1e:03:71:4f:75:bc:04:80:8e:29:ab:41:24:7b:c6:
                    a9:1f:ae:61:0d:a7:21:17:d3:a4:84:17:a9:17:85:
                    b0:78:21:5d:05:26:ed:7f:eb:90:63:3d:76:91:ae:
                    4d:ac:2e:59:e4:4d:1c:1a:83:e1:5e:6e:e0:17:e8:
                    38:2a:72:6b:2f:5a:bf:86:dd:39:da:87:e3:a3:93:
                    45:ea:5f:fb:97:50:50:29:53:b6:56:98:b4:88:50:
                    20:cc:ae:18:86:f0:f2:c4:c0:c8:03:64:2a:fa:e8:
                    8e:9c:88:86:c8:d2:c1:c1:56:62:5d:db:e1:61:b3:
                    a0:a2:12:d4:f7:cb:b1:ce:96:f7:d3:0e:e2:be:52:
                    f2:8c:ba:93:be:8e:96:15:87:2c:95:62:5f:0e:c3:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CF:17:D1:A8:0E:CD:F3:32:57:82:A3:FD:D0:FB:2C:96:30:37:3C
            X509v3 Authority Key Identifier:
                keyid:0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:45:78:da:34:b0:01:e0:01:17:60:40:f8:72:4a:25:43:
         61:64:ce:ce:8b:36:fe:5a:10:21:b3:b0:c0:8d:1c:c9:a6:e4:
         8a:eb:45:44:a2:46:20:f1:b3:b0:f9:d4:24:bc:b1:76:f5:1d:
         5a:b3:3a:67:4c:7a:c6:b8:2b:3a:5a:fb:9a:c1:22:a2:be:21:
         56:35:33:95:1a:ac:71:78:a0:40:82:29:ee:fc:56:1b:d6:2e:
         a7:1e:b6:c2:fd:7b:c8:83:0c:95:79:de:b4:86:07:97:35:ba:
         f7:2f:c3:c9:47:2a:0a:46:ce:94:0e:db:0b:23:e4:c2:40:e0:
         67:a1:03:44:56:aa:d9:be:04:ae:2a:79:95:eb:d9:81:07:63:
         f0:10:c2:40:fd:0e:94:cb:31:3b:6e:9f:3a:85:51:00:68:59:
         f1:57:89:a3:42:62:e8:e5:ee:d7:93:a7:b1:76:ee:9c:4f:c0:
         52:05:0a:e1:61:ad:d7:43:5f:a2:dc:f7:7e:49:fd:54:fb:be:
         19:1d:ff:04:56:3b:33:39:ec:43:b4:1b:2d:1c:05:3f:99:24:
         3c:34:98:03:92:fa:cf:f2:7a:49:ca:e5:e0:69:dc:91:9a:7c:
         69:68:f0:24:11:e4:3f:bd:65:0b:5b:79:f3:10:1a:ec:2c:0f:
         36:61:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:46:42 2025 by rpki-client