Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
File:                     D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft (raw, json)
Hash identifier:          /iaz55sT7mwsJa3j4XMAGAJgIYpntLRPDjRswVivDMg=
Subject key identifier:   46:9F:62:A3:C1:0E:7E:7F:95:AF:D0:94:89:5F:40:0E:61:27:03:7F
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       53F46EAE36A445B6F098BE1A07C8DF21AB45E322
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
Manifest number:          021B
Signing time:             Sun 11 May 2025 02:37:33 +0000
Manifest this update:     Sun 11 May 2025 02:32:33 +0000
Manifest next update:     Mon 12 May 2025 02:41:33 +0000
Files and hashes:         1: 323830343a313863303a343030303a3a2f33342d3334203d3e203631393531.roa (hash: rXac4ABd9S5y6J0DKAZUxOoG33M/+n9AjeW49FPhukg=)
                          2: 3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa (hash: M3LpnQa0aELcVPIFqZ1rZmy3lVhEa7SJp9z9yUkEyu4=)
                          3: 3230312e3231392e3234382e302f32322d3232203d3e203631393531.roa (hash: rB8xF/UPIO0lwkXC+djpUmgJjPOWXUSpwLhN4rx8gnY=)
                          4: 323830343a313863303a383030303a3a2f33342d3334203d3e203631393531.roa (hash: zOa30SdHXip1DeosvrqxA6OOcXkWWLvwtGaFyUO3JxA=)
                          5: 3230312e3231392e3235302e302f32342d3234203d3e203631393531.roa (hash: kfuWE8AuVcDeAbCs/hVfLS7NkbF1+7SOt7k1FM3y00w=)
                          6: 323830343a313863303a313930303a3a2f34302d3430203d3e203631393531.roa (hash: ofI/b0hMC6IK5nc5oWosQZ0Oz6dvqzCe+qLNGzmDQgg=)
                          7: 3230312e3231392e3234382e302f32342d3234203d3e203631393531.roa (hash: mxf06dr/b2ZP54j7/OAiWl1r4UTLhadVsqM38KRrtOs=)
                          8: 323830343a313863303a3a2f33342d3334203d3e203631393531.roa (hash: SkZscgXpohKVuk9+a2tjVGVaj/ibd/I4KDs3eRnSHw0=)
                          9: D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl (hash: 9Xk9A1J1KLSkPA4yiCF/Q1Qw3smxVsmPiviggAu6ZgI=)
                          10: 323830343a313863303a313030303a3a2f34302d3430203d3e203631393531.roa (hash: CVz+//6A8sAauDD4wDL4Fg7B8J4+9RgT+ZuDFZFXht8=)
                          11: 3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa (hash: JihrjILPGyR5AbSQjQsdoNmooRaPsIqxoa4IplcrTbU=)
                          12: 323830343a313863303a3a2f33322d3332203d3e203631393531.roa (hash: fqKM2W9QTFPawn7WEvz4wlQq7FzuUort9aVpJ1COXB4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f4:6e:ae:36:a4:45:b6:f0:98:be:1a:07:c8:df:21:ab:45:e3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: May 11 02:32:33 2025 GMT
            Not After : May 12 02:41:33 2025 GMT
        Subject: CN=469F62A3C10E7E7F95AFD094895F400E6127037F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:75:9e:9d:84:8d:40:6a:9e:01:7f:14:06:
                    09:f7:6a:9f:8a:8e:11:ef:e9:62:e1:9b:db:dc:c6:
                    df:a7:25:bd:44:68:53:f5:f8:d4:e4:d2:0b:c2:88:
                    ab:7d:60:48:2b:62:b6:77:2f:c0:07:13:04:74:13:
                    ae:36:60:d8:c3:78:ca:95:00:da:64:22:c8:50:d4:
                    53:b2:0d:6d:f8:4d:c7:03:3a:fb:a4:a9:c6:74:84:
                    ca:98:37:bd:3c:96:07:af:92:58:19:90:e6:5a:30:
                    22:7f:e2:50:c3:3b:e2:d7:6c:8d:22:c3:f8:a7:3f:
                    f4:9f:11:38:97:49:cf:95:bd:0b:64:be:f2:90:12:
                    fb:cb:53:bf:69:96:f0:a1:13:dd:9f:55:8f:8c:06:
                    94:84:6f:71:02:fe:f9:6b:39:44:4c:98:d1:31:4a:
                    3d:cf:a2:cb:36:fc:ba:16:37:62:c6:2f:21:58:99:
                    b6:65:0e:3b:68:8f:81:10:cf:df:f1:17:da:4f:38:
                    66:37:3e:4b:03:d3:6c:cc:33:de:19:fe:db:d4:2f:
                    24:3a:58:75:50:60:44:c9:1c:94:a4:86:98:f7:34:
                    29:85:77:4f:63:0b:70:3f:f5:56:d4:94:40:74:b8:
                    8c:2b:a9:fd:18:72:07:cb:ba:2d:1b:93:30:8b:da:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9F:62:A3:C1:0E:7E:7F:95:AF:D0:94:89:5F:40:0E:61:27:03:7F
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:4f:df:70:72:3c:91:a8:44:26:17:bf:52:97:9e:6b:51:
         34:67:ee:c0:0c:af:ed:be:30:5e:65:06:0d:7c:fb:43:d6:a6:
         5b:da:0f:3f:55:31:1b:06:fb:b1:78:d8:3d:bd:f5:cf:07:c6:
         f1:34:ce:41:f6:cc:90:e6:60:10:53:8b:61:b3:cc:1f:7b:8e:
         2b:4f:ee:c3:bb:3c:3c:a2:29:9a:e9:b4:1f:16:04:ca:c2:f1:
         4e:f2:76:ab:ff:f2:c4:9f:a0:8f:6f:53:f0:a8:f9:93:49:66:
         a8:1a:4d:1a:70:b8:a9:c0:b9:13:4f:b8:1d:d6:55:bc:9f:e2:
         9c:d4:0d:34:34:dc:97:2d:d4:45:fa:04:14:a1:d8:9f:41:04:
         df:99:76:89:cd:1b:fd:a9:bf:c6:86:5a:34:09:02:e5:ca:6d:
         7c:33:75:16:5b:e2:64:76:0a:8b:58:b7:f7:e0:73:60:18:f3:
         bb:07:1b:15:76:41:b3:6c:ea:8c:03:d8:05:a8:72:9b:af:90:
         ca:6a:ff:bd:c6:cf:e2:15:74:d7:62:98:d6:e4:ca:84:bc:a8:
         07:87:0e:98:b0:89:26:85:37:cb:e6:8c:57:8e:44:04:09:d8:
         5c:e8:54:1a:65:84:e9:fa:59:da:7b:26:35:f4:d0:f6:c7:68:
         29:e7:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:06:28 2025 by rpki-client