Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
File:                     A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft (raw, json)
Hash identifier:          bf6ELKJV/AX+I+/lcVPsPMMyNOJGCU+LW3bZJ2HPEi8=
Subject key identifier:   1A:C6:F2:00:B3:1F:17:14:49:0A:FB:39:3B:C2:EB:83:3F:DB:D0:67
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       058678EFFA314ED33C45EFFE1735DD902F01AC54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
Manifest number:          021D
Signing time:             Thu 15 May 2025 07:16:09 +0000
Manifest this update:     Thu 15 May 2025 07:11:09 +0000
Manifest next update:     Fri 16 May 2025 07:41:09 +0000
Files and hashes:         1: 34352e3232362e39322e302f32322d3234203d3e20323636393932.roa (hash: TYHM8MeiLYoNx9puk1hCwSEoFg2WJiBv7HQHSlTGSyk=)
                          2: 323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (hash: OOhZRSwm2hV4PpWU3fQqmsExv7PexpjxW2TE9xJY0RE=)
                          3: A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl (hash: UcUfsY5nO77qHLT/+iksPSXQrbVZElve9rb0hSov/30=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:78:ef:fa:31:4e:d3:3c:45:ef:fe:17:35:dd:90:2f:01:ac:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: May 15 07:11:09 2025 GMT
            Not After : May 16 07:41:09 2025 GMT
        Subject: CN=1AC6F200B31F1714490AFB393BC2EB833FDBD067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:d1:bd:29:ea:e5:db:6f:e8:19:a7:7a:0d:
                    75:b2:51:ee:c1:cd:c7:b4:48:76:20:6c:fa:b5:50:
                    82:75:2f:8b:c3:f5:9a:04:4d:55:dc:38:9e:97:99:
                    f2:bb:1d:13:e8:90:6f:8c:7f:2a:e5:e5:6e:66:45:
                    57:4d:d0:32:f0:e7:2f:cf:02:41:97:e9:12:8a:95:
                    d8:7f:ba:aa:80:55:8d:07:79:10:46:43:83:29:a2:
                    0c:92:00:c0:6f:91:0c:c2:2e:12:6f:b1:00:80:1e:
                    39:30:ea:78:bd:0d:a7:07:10:fb:2f:f8:95:a8:de:
                    f4:c9:79:80:07:49:c2:95:e4:90:92:db:17:74:78:
                    55:7a:be:fd:3d:4d:fc:05:e5:ca:09:88:22:4e:56:
                    b7:44:c1:ab:15:8e:a0:29:be:9c:5e:2a:34:75:f0:
                    2c:e5:2f:93:64:b7:0a:7d:76:34:66:d2:77:01:e5:
                    d4:fc:16:16:00:23:f1:fb:c5:03:c4:1c:b6:02:8a:
                    e6:69:f0:d6:24:0f:66:d0:7a:1f:15:d5:df:99:87:
                    7f:f4:ec:a0:75:ee:f9:41:0f:f0:34:a4:bf:30:a7:
                    f7:47:e8:71:02:3b:84:55:c0:61:a3:49:60:df:d7:
                    55:63:92:7c:96:02:21:6a:c4:b4:9d:ab:b5:0f:3c:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C6:F2:00:B3:1F:17:14:49:0A:FB:39:3B:C2:EB:83:3F:DB:D0:67
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:71:43:69:c0:ff:14:b7:10:fa:da:b3:88:b6:c8:53:87:
         a3:ce:5c:65:f1:2c:57:1f:b8:80:dd:95:fb:37:08:82:12:d6:
         33:79:92:4b:81:0b:e3:4a:cd:02:c7:04:c6:a1:bc:8f:7b:58:
         24:25:f8:8e:ab:f8:4d:52:db:7d:94:db:d6:72:50:19:b8:10:
         a3:45:95:26:e1:dc:99:55:8c:c5:bc:12:2b:7e:23:13:95:78:
         96:4f:a9:94:a3:5c:ac:72:e6:0c:fa:63:8d:fd:6d:ac:c7:78:
         f1:e5:46:5a:95:f1:59:14:c6:fd:1f:73:3c:86:47:b0:77:76:
         c5:2e:14:54:5c:8d:d1:c6:9b:b3:f4:a3:a6:ab:09:fe:7f:4a:
         f8:bf:e8:3c:b3:ac:e9:a3:e6:c2:ce:e5:4a:1b:fe:26:f3:30:
         92:69:d0:e5:40:49:1c:f4:52:34:e7:49:37:fd:8d:53:ee:b3:
         fe:94:ca:ab:10:be:ea:02:94:05:0d:b8:b6:d6:12:3f:f7:03:
         51:05:ae:60:4c:c9:9e:ba:50:8c:bb:cd:45:ff:01:00:54:0c:
         29:b9:aa:97:6e:44:1e:2e:15:c3:62:0a:5d:4a:ae:e7:a7:ce:
         4a:7b:2b:bf:db:fc:ce:e1:c2:8f:29:d0:a3:e4:8f:7c:e9:56:
         3a:d9:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:15:28 2025 by rpki-client