Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
File:                     3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft (raw, json)
Hash identifier:          MsnSMOFVEs0xAfyzzfO6hWcEV1/KT9qalDS0MGZpQTk=
Subject key identifier:   3F:14:87:65:98:D5:F9:42:20:08:7D:8A:BD:DA:F7:2B:C9:0C:C1:3B
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Certificate issuer:       /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial:       5CEF9BC171B589574A43422E02321A1E7EEA316E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
Manifest number:          021A
Signing time:             Mon 12 May 2025 14:37:32 +0000
Manifest this update:     Mon 12 May 2025 14:32:32 +0000
Manifest next update:     Tue 13 May 2025 17:52:32 +0000
Files and hashes:         1: 34352e3233302e32382e302f32332d3233203d3e20323637313435.roa (hash: u/lhR3CHoa7v3eJgTqrpENVDe1bNzDUZyrTvS8ROing=)
                          2: 323830343a343863633a3a2f33322d3332203d3e20323637313435.roa (hash: HNupAxl8oMElAlMIADjTG2BvnPU5Tc59G7TgMyPX9Ao=)
                          3: 34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (hash: e3gDh30bCFxyxSG6XiET0YR4C4e+fAFmToi+8txavoA=)
                          4: 34352e3233302e33302e302f32332d3233203d3e20323637313435.roa (hash: 8mq7LAyV4zpphQCT6aJXBf9deHUkCKF3FjC0r+TIX70=)
                          5: 323830343a343863633a3a2f33322d3336203d3e20323637313435.roa (hash: NSwKuhbVlfit/GeKv12qgi1Nx7DDA7JtYsEpX7CmB8w=)
                          6: 3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl (hash: tQnChe3xQdqU24fmmaRMQshCJjtLe9JE/sL5AsCyodo=)
                          7: 34352e3233302e32382e302f32322d3232203d3e20323637313435.roa (hash: 58Lh0C2pZjsNmVclMzYtj4STKQIjyU4p9tAosH1A1Vk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ef:9b:c1:71:b5:89:57:4a:43:42:2e:02:32:1a:1e:7e:ea:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
        Validity
            Not Before: May 12 14:32:32 2025 GMT
            Not After : May 13 17:52:32 2025 GMT
        Subject: CN=3F14876598D5F94220087D8ABDDAF72BC90CC13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:72:e1:f2:3e:05:19:53:9d:ce:31:99:00:
                    59:2c:d1:d6:b0:33:00:49:0f:69:ed:b7:ef:be:b9:
                    e2:0b:b5:a3:bb:60:82:9f:78:8d:28:9b:69:21:67:
                    b4:e2:2d:b9:b8:28:dc:b7:d6:72:51:af:dc:a3:29:
                    0e:77:80:4a:91:4d:84:90:4a:c4:ca:ef:34:eb:ce:
                    11:95:ef:8b:08:40:ed:65:42:63:2d:73:7d:0b:6b:
                    ef:99:65:2b:a3:3a:b9:0c:e6:e7:aa:f4:a5:8e:1e:
                    22:40:33:a2:8a:df:62:71:e3:3b:fa:76:14:df:04:
                    88:4a:00:7b:11:89:c0:73:64:b9:05:28:3b:2b:2a:
                    22:f1:63:1f:db:00:4d:19:e5:c3:15:fd:53:b8:6d:
                    45:c1:30:7c:d5:98:e8:34:48:f9:0d:ae:62:95:e9:
                    ff:42:3d:b2:ce:d1:cc:e1:37:16:41:2f:16:d1:f3:
                    e9:d0:02:4b:84:10:0d:39:ba:f0:f1:91:c3:69:1b:
                    b7:c6:ae:d3:9c:a8:9b:06:21:85:5c:8c:a2:43:07:
                    4f:64:43:54:ef:b6:3e:72:fe:ca:9f:d0:c5:d6:b0:
                    6e:a0:ca:63:0b:1b:ef:06:a6:5e:ab:e1:f0:d1:ea:
                    e7:3d:27:73:e5:fa:63:2f:df:b2:7b:ed:0f:eb:23:
                    25:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:87:65:98:D5:F9:42:20:08:7D:8A:BD:DA:F7:2B:C9:0C:C1:3B
            X509v3 Authority Key Identifier:
                keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:93:9e:9f:5e:dc:be:22:b0:6c:b7:c1:73:32:51:4b:4c:
         0e:5b:80:65:cf:52:5c:ff:48:b4:52:48:b5:37:ee:05:ea:f6:
         ba:c4:b9:41:f9:82:01:82:f9:1b:43:40:e4:37:02:8d:bd:12:
         b0:75:0b:17:69:78:28:eb:a7:25:c3:c6:d2:01:dc:b8:ae:06:
         5c:0f:2b:90:9a:0d:5a:cf:44:80:c5:25:fa:4c:a3:35:b0:63:
         1c:6c:59:54:b0:04:9b:35:b3:63:53:60:ba:e8:47:48:84:ab:
         94:1a:8a:c1:f6:b4:29:58:00:2e:17:5d:7c:78:c0:84:90:3c:
         e4:40:0a:28:b9:ae:4e:73:1f:94:e1:87:7a:5a:3f:a0:1c:a4:
         46:49:ac:da:9f:f5:82:17:7c:d5:a7:d2:3d:4f:83:4a:b7:c4:
         3a:8e:a7:74:08:2b:7d:fa:ce:8d:0e:d4:97:65:5e:60:0e:78:
         75:ff:13:96:d6:6e:6e:87:5f:8d:85:71:85:ef:6b:17:47:84:
         1a:e6:12:54:44:d4:a3:da:02:34:51:a9:b8:f6:66:8b:a3:fb:
         57:6a:fd:7d:85:62:af:3e:d4:4c:cc:c7:b1:f5:cd:68:e6:b0:
         e6:e2:a1:bb:19:99:9d:b7:8d:f2:21:80:17:63:a3:ee:21:30:
         ea:a0:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:50:32 2025 by rpki-client