Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.mft
File:                     36C70D54DDACCCE385198B3B82C67FCEE369B6D0.mft (raw, json)
Hash identifier:          ktnPwGafeh+wSjNxhAFbc59RGGTbHixgQNyZFRawpbk=
Subject key identifier:   CA:D2:6A:85:3B:05:27:D9:22:6E:12:8D:1B:79:CF:1B:3F:66:3A:86
Authority key identifier: 36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
Certificate issuer:       /CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Certificate serial:       033E4049D3D551678A45BF9A3D55DF680FD78D21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.mft
Manifest number:          7A
Signing time:             Sun 11 May 2025 17:44:35 +0000
Manifest this update:     Sun 11 May 2025 17:39:35 +0000
Manifest next update:     Mon 12 May 2025 21:19:35 +0000
Files and hashes:         1: 323830343a386434343a3a2f33322d313238203d3e20323733333436.roa (hash: P2bXzTqONjSHP6lNo6Zqey4yDpJ2NrRdZHs0zqAnZxk=)
                          2: 36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl (hash: Q39vAjYtB8fvkGJbxzOdm1C7DXQB55d4vDd4vyr1JIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl
                          rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 20:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3e:40:49:d3:d5:51:67:8a:45:bf:9a:3d:55:df:68:0f:d7:8d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
        Validity
            Not Before: May 11 17:39:35 2025 GMT
            Not After : May 12 21:19:35 2025 GMT
        Subject: CN=CAD26A853B0527D9226E128D1B79CF1B3F663A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:5f:09:a9:3d:89:85:6c:9a:ad:e6:a4:d8:
                    4b:47:ae:44:a0:95:13:6e:3b:27:48:dd:6f:18:0f:
                    a8:73:22:c8:eb:18:40:1e:b2:72:32:b9:4a:be:f8:
                    1f:c0:5c:b8:2f:c3:45:f7:3a:80:ac:c7:87:a1:ef:
                    ba:4b:26:64:06:30:8c:a5:5e:a9:2b:c2:15:52:b3:
                    e5:43:02:0e:4f:cb:41:38:c7:b1:f5:eb:eb:64:0d:
                    c7:c4:51:fb:02:ff:4a:0c:fd:d5:65:6c:1c:35:f0:
                    6a:e0:13:f2:72:51:10:44:d6:b8:7b:a7:ec:31:c2:
                    da:a8:6e:10:ee:11:77:b5:89:0f:72:82:a0:52:6e:
                    3a:11:cd:d7:1b:6c:4c:74:a3:22:3e:0a:c6:aa:a0:
                    40:d1:92:f0:c9:06:b3:d4:b8:85:e5:85:57:be:2b:
                    ae:60:e3:35:69:1c:14:d6:2c:05:a3:06:56:b7:7c:
                    74:1f:dc:2a:8b:60:cd:ea:a8:db:0b:3a:01:d9:8c:
                    df:b8:d3:06:ee:19:50:69:ed:01:2f:d3:7d:9e:cb:
                    4c:6b:3b:3a:bf:57:0a:61:67:c5:95:21:99:09:f1:
                    de:d2:68:dd:60:4b:ec:26:b5:5f:9b:ee:12:2e:c8:
                    bd:b4:91:18:9c:76:09:2e:b3:d1:51:88:1e:b1:79:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:6A:85:3B:05:27:D9:22:6E:12:8D:1B:79:CF:1B:3F:66:3A:86
            X509v3 Authority Key Identifier:
                keyid:36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:65:cd:ab:b2:ec:0b:dc:16:e9:07:b6:80:ef:42:2a:ee:66:
         c1:f3:ac:f3:2c:07:84:2c:bc:75:89:88:97:94:ee:ab:c6:67:
         6c:33:a1:c4:5c:b2:b4:98:cb:22:fa:47:09:ff:a9:52:7f:56:
         33:39:d4:05:9b:b2:c6:95:be:cc:2c:48:4a:86:96:ee:a8:6b:
         a0:11:53:78:8d:ef:ce:ab:47:02:77:17:96:f8:05:05:80:38:
         34:89:80:d6:49:03:6d:c3:e3:b0:d6:bc:bd:fb:22:b9:41:d3:
         57:82:67:e5:e4:ad:8c:3e:12:d3:93:08:a0:07:e0:7b:23:eb:
         71:b9:ba:2d:0c:ba:8d:90:eb:48:03:7b:3f:e5:6a:8f:a5:fb:
         e2:10:56:a1:28:28:09:7a:2f:15:aa:c0:b2:dd:59:e4:c1:07:
         a4:c1:2a:c8:66:8d:64:80:1c:23:a5:85:d1:f6:6f:b7:05:b9:
         47:ee:a4:5e:dc:cf:81:4b:a1:8f:8c:54:c7:eb:1c:68:7a:1e:
         95:9a:39:21:a1:01:b3:e0:df:88:49:79:37:4f:e0:79:26:e5:
         d6:af:dd:5f:9f:f4:9b:48:9d:3f:17:25:f1:69:8f:86:48:cd:
         ac:11:99:2e:22:61:14:66:9b:d5:37:fc:13:e7:bb:02:bf:7a:
         7e:10:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:56:30 2025 by rpki-client