Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
File:                     2114B3B965382FA7393E772A6837B5B8D7173834.mft (raw, json)
Hash identifier:          ZT7eGy6c7pkBXILX+JR23AuAOCawrChoRj0Wf8ZJ82k=
Subject key identifier:   38:CB:5F:57:5C:59:EC:6A:AB:30:02:D5:AA:C1:E3:F2:B4:7E:B6:56
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       1D998FA45234A1B5BC03DE72B70A14D83EAD7288
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
Manifest number:          1C
Signing time:             Mon 12 May 2025 01:29:24 +0000
Manifest this update:     Mon 12 May 2025 01:24:24 +0000
Manifest next update:     Tue 13 May 2025 05:15:24 +0000
Files and hashes:         1: 323830343a376566343a3a2f33322d3332203d3e20323731363537.roa (hash: KCj7i0SbaiZmnGWJWoZjNJmUeRbdrtNqTMdFqA+76ms=)
                          2: 323830343a376566343a383030303a3a2f33332d3333203d3e20323731363537.roa (hash: q1S2ykZO+DLBq9BpmaiHto7G6DLecprh2FdgxsuvaaE=)
                          3: 2114B3B965382FA7393E772A6837B5B8D7173834.crl (hash: x2BH+DlYGDLPAN6rGcK7kgjzzmSLFaJSbLsocFMVIp0=)
                          4: 34352e3232352e3131322e302f32332d3233203d3e20323731363537.roa (hash: I0wTwOgo+o93PLDko6tHdmou1P08/w07N7HZjLY3sTc=)
                          5: 34352e3232352e3131322e302f32322d3232203d3e20323731363537.roa (hash: L4K8MASRL2tmJzfi+7Lf6ycvlhitXjBy6mqdiKUQnHA=)
                          6: 34352e3232352e3131332e302f32342d3234203d3e20323731363537.roa (hash: vWaE3uUVXyv4ruycSWQrz9Gd9ys30WRYxS2Czop0Grk=)
                          7: 34352e3232352e3131342e302f32332d3233203d3e20323731363537.roa (hash: wfLh4GCuxMujYLzoFw6keFFMCF1W9FtsovtArrXh0Co=)
                          8: 34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa (hash: UWtLfp68Rzi6LML2YroqQNe9Ib2jl6xz7IuH2d8Pimw=)
                          9: 323830343a376566343a3a2f33332d3333203d3e20323731363537.roa (hash: 8JHAW9uOzddL2vFNjSWUupqQ/iIH8FhgH75dCW1eYhc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:8f:a4:52:34:a1:b5:bc:03:de:72:b7:0a:14:d8:3e:ad:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: May 12 01:24:24 2025 GMT
            Not After : May 13 05:15:24 2025 GMT
        Subject: CN=38CB5F575C59EC6AAB3002D5AAC1E3F2B47EB656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:54:6f:67:8a:a6:ba:b1:56:68:2f:7e:33:
                    fd:b5:3a:fd:18:d5:6b:e8:b6:b3:a2:b8:ed:70:b8:
                    67:06:aa:a1:38:7d:36:19:0a:61:b0:d6:7d:9a:d8:
                    d8:94:aa:7a:ef:4e:5f:84:49:61:68:41:e7:25:53:
                    08:da:55:f9:0f:7f:e8:87:96:7c:f5:5e:7d:3e:8e:
                    9c:6c:a7:e1:64:fd:68:c1:91:8f:cd:bf:20:1c:76:
                    1c:22:ef:8b:45:a5:b5:f0:28:99:67:ec:b8:d8:e8:
                    f9:71:cb:4c:07:ef:41:32:c9:86:83:29:f5:2f:fb:
                    51:33:40:bb:89:a3:69:83:bc:04:df:43:37:4a:1f:
                    c1:34:f4:13:67:c5:a0:ee:9d:02:2d:22:ae:93:c5:
                    ad:d9:f4:15:0a:30:f0:97:02:34:17:de:de:f1:ca:
                    98:61:16:df:2a:76:09:ce:a8:8a:b4:a6:bc:76:9c:
                    52:23:a0:e9:99:8e:e8:0b:2d:af:7d:48:1f:b6:3b:
                    15:3b:05:7d:a7:25:50:a0:a1:9d:fb:6e:e2:57:db:
                    bc:3e:9b:be:61:d5:ce:86:a6:fd:d2:be:dd:8f:cd:
                    e2:92:ff:ae:4d:a7:8c:11:a2:5b:99:56:b8:84:86:
                    86:2f:bb:c0:f1:12:18:bc:bf:1d:93:9b:85:3d:32:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:5F:57:5C:59:EC:6A:AB:30:02:D5:AA:C1:E3:F2:B4:7E:B6:56
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:25:30:53:73:35:72:98:ce:c2:7f:f0:56:1d:7d:a2:f5:
         15:84:90:0a:bd:e4:8a:67:50:e3:cf:8b:02:d2:e6:f3:e3:4d:
         35:79:78:83:91:9d:fe:4e:f4:57:e9:98:23:b9:40:d6:98:ec:
         f0:8e:aa:ca:4b:f5:7f:c6:6e:ec:61:c3:6a:46:4c:e7:69:ee:
         68:82:65:66:79:82:34:ae:3d:b1:e5:9b:7f:36:03:44:e5:8a:
         7e:98:52:88:f3:e0:62:29:81:96:3c:f0:07:f1:44:14:ae:4a:
         77:83:93:7b:18:91:1e:27:70:33:78:fa:29:21:ef:a3:f6:ef:
         f7:44:ba:58:59:7a:58:0d:08:71:4c:16:70:2d:93:fd:bc:b3:
         5f:8b:0e:c5:0b:24:69:df:17:39:6d:65:a0:b0:ba:19:fa:fb:
         4b:49:a7:43:77:a0:c6:d6:20:e3:1a:f3:45:2e:28:b3:1b:57:
         16:5a:3c:b8:d9:80:ba:46:ab:d7:14:84:84:fa:49:60:41:a3:
         a4:19:e0:bf:71:6e:26:3a:87:af:5b:09:42:92:f0:3a:85:87:
         48:b2:b3:47:a7:d8:ef:4d:65:e4:63:64:68:d3:e1:66:bb:38:
         23:c5:74:aa:2b:1c:25:08:39:1a:2f:3f:3b:56:2f:f7:66:0e:
         5e:77:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:49:32 2025 by rpki-client