Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
File:                     4F91864780E3C640327E24B527D2248C0C5CAD25.mft (raw, json)
Hash identifier:          5UeIPqkm8nPw31VMa0nmu39VTSMTK9n4S4KuzQyMKgU=
Subject key identifier:   F5:55:26:3D:A7:7D:72:C3:CD:43:BF:08:0A:80:73:73:F9:0F:51:34
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       0166A880348350503B1640C2BCA7F3F5C70315AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
Manifest number:          014A
Signing time:             Sun 11 May 2025 16:37:31 +0000
Manifest this update:     Sun 11 May 2025 16:32:31 +0000
Manifest next update:     Mon 12 May 2025 17:36:31 +0000
Files and hashes:         1: 3230312e3134382e3231362e302f32322d3332203d3e20323632393532.roa (hash: YYY5LHvNiOIXLbX8zsHtfkroVpvH3VRV3a53S1TPPwQ=)
                          2: 3137302e3234342e3130342e302f32322d3332203d3e20323632393532.roa (hash: oIY8cu4MSFQA4pfSIZovPTQO+XuAB9GW8kNvyVfbGV4=)
                          3: 3138372e36312e3132302e302f32312d3332203d3e20323632393532.roa (hash: 3pHLTuvc6iKvbcHIu6jieiq2SLDCM3LtykLZmHBrpi4=)
                          4: 323830343a6536343a3a2f33322d313238203d3e20323632393532.roa (hash: DjYnIWQIw5ct6/Q5BjqK7pUqh/AOseFi5Fy+pr/COxQ=)
                          5: 3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa (hash: AJsOfr5wHT9YKSPMXmdoewYRPP7AYppI/d0nQRjAylg=)
                          6: 3133382e3132322e3136382e302f32322d3332203d3e20323632393532.roa (hash: d1rdYw+WohHTeJoQmV+Wst0zHDJ4n0we8oJb4iuXRyQ=)
                          7: 4F91864780E3C640327E24B527D2248C0C5CAD25.crl (hash: 0Doa9c4yQ1KhB0gpZNssXFHpVbEgEX8tApRMz7oWJHE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 17:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:66:a8:80:34:83:50:50:3b:16:40:c2:bc:a7:f3:f5:c7:03:15:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: May 11 16:32:31 2025 GMT
            Not After : May 12 17:36:31 2025 GMT
        Subject: CN=F555263DA77D72C3CD43BF080A807373F90F5134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:aa:2d:29:cd:58:19:42:00:a4:bd:3d:1e:
                    d2:db:0b:eb:b1:0f:6c:0a:85:4a:c6:05:10:3a:07:
                    3d:4d:dd:9a:fe:ac:0b:15:1d:d3:4a:78:11:22:7c:
                    c5:e2:aa:bf:b8:92:ab:1d:61:1b:d8:fa:8a:0f:b8:
                    65:13:b7:a0:79:c2:0b:3d:7b:3f:81:14:e1:de:b2:
                    bc:a6:24:42:46:69:2e:38:33:30:9a:b6:c7:41:de:
                    34:c4:b0:6d:b5:93:7a:64:29:88:00:d3:69:66:60:
                    f8:c1:5b:4e:7d:d8:ad:e9:e6:50:98:b3:de:11:f2:
                    80:2b:ef:b1:19:bc:0f:7d:9f:83:1d:3c:74:7d:31:
                    de:fb:c9:a0:cf:94:7b:5c:c4:f5:4f:34:f7:3b:37:
                    43:a2:9c:fb:75:e7:e2:67:c5:88:7a:87:3f:fe:56:
                    7c:dc:af:a6:5d:99:f4:e8:23:70:73:4f:d0:1c:3f:
                    83:1c:e0:d7:aa:47:dc:e4:89:14:0e:c2:34:76:36:
                    a5:c3:5d:78:69:0b:61:22:93:05:93:30:63:15:55:
                    85:3a:2f:51:84:18:2f:e8:db:12:80:e0:03:de:f2:
                    85:85:e4:87:91:68:d8:99:27:93:31:2a:2b:5b:eb:
                    e2:e1:ad:74:e8:38:6c:ef:89:ed:c8:c1:86:13:54:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:26:3D:A7:7D:72:C3:CD:43:BF:08:0A:80:73:73:F9:0F:51:34
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5c:aa:48:ec:9f:04:1a:d9:fa:e0:f2:c5:c5:5b:11:6e:13:
         37:6b:04:ae:09:c7:e6:32:8e:ac:49:fb:6a:78:0d:63:6e:3b:
         98:3b:cc:88:a5:92:00:90:a2:53:af:29:96:18:d8:5d:9e:27:
         40:13:d0:0d:6d:46:49:66:6a:41:12:2c:9e:e4:ba:7f:af:3c:
         a8:27:5b:28:8c:35:68:9f:d2:1a:8c:06:0d:55:ee:d0:ca:53:
         d2:3c:bd:86:16:1b:5e:32:3c:7d:f8:54:a3:2c:55:65:3e:2d:
         10:5b:7c:f9:69:47:86:02:5e:95:e6:15:53:43:3b:50:c6:1c:
         6f:ff:82:e7:1a:6e:22:9b:a9:c5:95:ad:f0:98:eb:cc:99:75:
         01:aa:25:6b:33:85:f9:f8:4a:1e:51:4f:76:5a:95:ed:8f:64:
         b1:fb:14:d3:2f:4c:86:76:eb:3a:fa:ac:fb:71:59:ae:54:57:
         bd:61:33:fd:e3:b2:7f:9d:71:3e:03:44:46:f0:23:31:28:a3:
         37:56:50:3a:de:91:a9:cf:28:e4:a5:4f:61:26:6c:0c:42:52:
         7c:f6:bc:b5:12:b4:7c:02:47:d6:a9:57:81:1d:1d:27:e0:f4:
         5d:6a:2d:c9:e4:16:4d:a9:58:a5:03:40:ec:2e:a3:29:7a:87:
         5d:3f:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:40:20 2025 by rpki-client