Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
File:                     D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json)
Hash identifier:          QtRYEVKBRUW+5IjQVa7o5PHwhzZXefJ7nTkyiMRbW3U=
Subject key identifier:   4F:B1:C5:4A:0C:7A:0D:58:0A:95:22:B1:D1:38:41:35:93:01:F5:27
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Certificate issuer:       /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial:       50F935839FE01A983170481B0B22E10FC99707E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
Manifest number:          021C
Signing time:             Mon 12 May 2025 18:22:11 +0000
Manifest this update:     Mon 12 May 2025 18:17:11 +0000
Manifest next update:     Tue 13 May 2025 21:14:11 +0000
Files and hashes:         1: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=)
                          2: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=)
                          3: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: IswJEngdtzHBdVDXyNSoBfHwmX3W5ugVmo1GGBWQwe0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
                          rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 21:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f9:35:83:9f:e0:1a:98:31:70:48:1b:0b:22:e1:0f:c9:97:07:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
        Validity
            Not Before: May 12 18:17:11 2025 GMT
            Not After : May 13 21:14:11 2025 GMT
        Subject: CN=4FB1C54A0C7A0D580A9522B1D13841359301F527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:96:96:97:31:12:3f:b7:e0:91:57:2c:d5:
                    3c:43:88:d8:9d:e7:f9:7e:c1:19:52:22:ff:19:76:
                    7b:b5:4a:f9:64:c6:ff:72:4d:94:56:12:a9:b0:fe:
                    a4:cd:62:51:c7:0e:9f:ba:10:05:ff:4e:a3:b1:e8:
                    03:d1:39:fe:fc:9f:91:fc:d0:a7:79:15:ff:a4:b0:
                    f0:24:1f:55:ce:07:58:84:e9:a8:50:fd:c9:13:ff:
                    40:32:a0:ae:a2:da:7b:c6:14:e5:97:7a:b7:2c:b7:
                    88:f0:d5:1d:bb:19:bd:f4:b9:d0:e3:3b:be:1f:74:
                    8c:09:8a:7b:83:58:ec:60:ec:ac:fd:f1:54:17:ef:
                    91:6c:39:a5:53:76:e2:47:a8:c0:8c:a2:f8:83:9f:
                    c5:20:f1:21:38:7d:40:83:c5:31:51:9d:43:18:67:
                    a7:e0:e3:8e:e7:17:24:ed:bf:a0:38:6e:50:ab:8d:
                    f4:39:85:0a:db:d9:94:10:77:2d:02:74:2b:98:fd:
                    13:85:8b:37:e6:ce:45:6e:9f:80:a8:05:71:6b:40:
                    ba:f6:d8:9c:54:78:2b:fe:55:35:35:af:dc:50:ec:
                    95:1f:fe:5f:b1:da:7d:b5:93:31:07:2b:4a:c7:f9:
                    53:97:dc:2f:f1:a5:61:b4:2c:d8:b1:26:e9:65:c1:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:C5:4A:0C:7A:0D:58:0A:95:22:B1:D1:38:41:35:93:01:F5:27
            X509v3 Authority Key Identifier:
                keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:da:b0:27:b1:17:8e:23:d7:e5:74:2d:b1:b9:5a:82:eb:0c:
         92:57:22:ce:ed:ee:8f:69:23:2f:b6:f1:59:a6:72:7d:dd:4a:
         d1:34:58:52:ce:14:8b:14:e5:2d:50:ba:30:50:a3:95:9a:49:
         13:02:58:8f:45:7f:39:7c:49:4a:25:aa:ce:c9:50:7c:cd:46:
         50:14:17:6f:f2:4e:7a:44:fc:d8:fe:e3:ba:16:f7:0a:10:ec:
         7c:2b:4e:3e:98:dc:08:c7:19:02:34:35:c2:64:5b:a1:9a:99:
         59:3f:c1:30:36:dd:65:0a:88:2b:33:39:30:2d:5d:bf:09:01:
         8a:1f:7d:0b:42:14:fa:ce:a4:25:a0:60:4c:8d:ed:00:f7:77:
         5a:03:33:8f:4b:d5:ec:e6:04:bd:d8:98:7a:c9:7d:35:ef:2d:
         da:b3:11:82:7e:c1:d3:21:c0:92:e2:a4:ed:2a:1f:6c:1f:b2:
         24:8c:25:dc:37:66:e8:b8:3e:6e:b5:ca:99:48:c6:52:34:c6:
         b5:9d:70:24:7d:c8:fd:49:f5:8e:82:01:6e:34:d0:be:a8:91:
         82:15:46:90:2a:0b:b7:37:9f:6e:5a:1c:ca:22:82:d0:89:03:
         43:1f:15:3e:a1:82:38:ed:7c:f1:13:91:c8:1e:b5:c5:fa:fe:
         87:56:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:58:04 2025 by rpki-client