Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
File:                     4D3D5BA9F9B5356D2A4244549680670908498017.mft (raw, json)
Hash identifier:          SiEUSVUm+KTCxRNeJFuCLhhnOvQO+AWM9kAS7ddHayU=
Subject key identifier:   29:B5:77:F8:DD:EA:FB:02:81:2E:28:81:83:B6:18:B1:7A:00:A5:C8
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       372927362BDB59BC80E63C6E2333C5CAF2F91F4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
Manifest number:          0221
Signing time:             Fri 16 May 2025 06:28:54 +0000
Manifest this update:     Fri 16 May 2025 06:23:54 +0000
Manifest next update:     Sat 17 May 2025 09:50:54 +0000
Files and hashes:         1: 3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (hash: TULLUDNFvvV2Xk3PWTiUvG4teCxOcZowNTO25kPDUv8=)
                          2: 3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (hash: TOTGiCBbBori5bE3zTGuc8j3dr7AbTF91Cy6fT3UPQM=)
                          3: 3137392e3132342e302e302f32312d3234203d3e203238323634.roa (hash: A4YZyAwxOL2d491yJX67JwHS3VZXIuqeSdGm9jvZ1GM=)
                          4: 323830343a3133303a323030303a3a2f34382d3438203d3e203238323634.roa (hash: xXf529Un2lnZ9Z9GV0BKsrETfJrxC1NhSyhR2EhT9nI=)
                          5: 323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (hash: Hfa6U8M8jSsMyiYGzhB7RhX5GsLqQd1pfDBpM95/H3g=)
                          6: 4D3D5BA9F9B5356D2A4244549680670908498017.crl (hash: +YJuWnEFPWpiAJWagZN1aJbKjV9vUHQ4aWfbG16OpCc=)
                          7: 323830343a3133303a3a2f33322d3333203d3e203238323634.roa (hash: O92aIYrPcEEs4unlKSaHQLbmCUnblrLJBS4+JPp0Q4g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 09:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:29:27:36:2b:db:59:bc:80:e6:3c:6e:23:33:c5:ca:f2:f9:1f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: May 16 06:23:54 2025 GMT
            Not After : May 17 09:50:54 2025 GMT
        Subject: CN=29B577F8DDEAFB02812E288183B618B17A00A5C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:bf:fc:50:91:48:72:9b:d5:88:27:04:be:
                    ba:fc:1d:b4:37:27:cb:5a:6d:1d:7a:43:35:d5:fd:
                    8f:47:2c:b7:dc:df:8f:96:b7:7b:55:4c:63:06:09:
                    13:ee:63:a5:60:6e:19:25:b4:85:c7:be:c9:7f:d0:
                    66:2e:82:7d:03:2e:44:e6:b6:5c:ce:cd:3e:1d:39:
                    6a:14:7b:6d:b7:d0:b3:04:de:ff:9e:53:7b:67:06:
                    6d:2d:5b:e6:65:ab:61:44:f3:af:ac:04:5c:5e:f6:
                    ee:4a:ab:83:02:b7:00:b0:61:b5:a2:f7:85:4e:fa:
                    27:6e:1b:51:db:bc:65:23:80:da:59:33:65:f2:8e:
                    96:66:87:7f:f1:ed:7e:71:f0:10:6f:fe:0f:d8:bf:
                    6c:90:b7:16:78:67:a6:02:b7:3f:02:1c:fb:80:66:
                    dc:2b:fd:66:52:32:f8:d3:8f:84:a3:f5:06:68:7d:
                    26:02:90:1c:63:4f:d0:8b:37:17:63:91:3e:0f:1c:
                    d8:29:ed:58:a5:f7:71:af:70:8d:64:6d:22:6a:22:
                    5c:64:49:dd:6a:4b:61:19:26:64:4c:af:4d:96:e1:
                    cc:dd:c6:fd:20:cb:5f:be:d7:23:8f:35:ff:ae:15:
                    4e:04:28:30:b0:94:43:f7:b3:ca:b6:30:a9:9e:1b:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B5:77:F8:DD:EA:FB:02:81:2E:28:81:83:B6:18:B1:7A:00:A5:C8
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:bd:3d:2a:15:58:c4:48:51:9d:61:19:f4:be:1e:f9:33:
         fc:69:84:91:1c:ac:bb:42:ec:df:1d:00:3c:7b:ff:09:59:b7:
         b9:a1:7e:a4:ff:af:fc:4b:e3:42:8d:52:4b:1c:15:cb:98:25:
         7a:79:ae:93:71:7f:2b:07:40:77:69:15:84:78:55:c3:9a:52:
         f0:60:1d:28:16:6c:c6:50:eb:d4:e8:7c:77:a3:8c:d8:70:5c:
         1d:b0:7c:b9:85:f3:88:9d:aa:0e:0b:d4:86:40:fd:29:89:74:
         b9:9c:7a:d7:08:2a:8a:a5:f6:0d:ef:67:5e:f7:52:3f:37:c5:
         db:41:a4:cb:7b:30:b9:42:fe:67:a9:b5:ea:93:80:36:c8:aa:
         a6:ba:05:78:63:4e:01:1e:e6:29:aa:ce:09:e6:91:f9:99:45:
         53:97:40:07:46:b1:3f:a1:cd:c7:6d:5d:a7:04:bf:a4:ad:15:
         6c:79:6e:de:ed:81:dc:f9:a3:46:8d:90:e9:c7:1b:5e:cf:3c:
         2a:ee:55:02:18:4b:cf:69:e0:fd:d0:2f:a3:51:56:06:61:71:
         0d:f1:75:b7:75:5a:d4:3e:d3:ab:83:da:78:22:77:6a:30:af:
         09:e3:6a:e6:e5:43:54:c5:5e:9c:bd:7e:ce:4a:bd:5c:f8:45:
         55:78:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:05:31 2025 by rpki-client