Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          p8Yscpi9mREgzJYQBu0j8V50yzTQsAEhx3biZkOIYGk=
Subject key identifier:   58:78:7B:37:66:D1:51:B4:67:05:CF:99:84:70:1C:25:B0:17:1A:85
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       1B7809FAC7D555714AC3FC3256C463A3AB13BF5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          0224
Signing time:             Wed 14 May 2025 07:18:33 +0000
Manifest this update:     Wed 14 May 2025 07:13:33 +0000
Manifest next update:     Thu 15 May 2025 10:25:33 +0000
Files and hashes:         1: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: Dw5AssA1HgxByRJyZF+pm59eguv/pTJItHP30N+8988=)
                          2: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=)
                          3: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: zAMTmLC4WZfoe2M0Wu6wK3iaa8mmiwf2SqxgNYCF040=)
                          4: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=)
                          5: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: Ul7gq9CrRCwHaFK/u17aTOhNwaf2ziJyjPRRtidqANw=)
                          6: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: I8gegaDlfSoPVJB4JicAvO6ZERf+vifvuI3FclW4DgI=)
                          7: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=)
                          8: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: znQ29/F/objr0euUlBY0uJRdCE6oa+Zv0kHjU1/kQ5E=)
                          9: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=)
                          10: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=)
                          11: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: LZs8UJxd25+oAoU0PN8Wb4clhACrCQakXa1FWzEA8gQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 10:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:09:fa:c7:d5:55:71:4a:c3:fc:32:56:c4:63:a3:ab:13:bf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: May 14 07:13:33 2025 GMT
            Not After : May 15 10:25:33 2025 GMT
        Subject: CN=58787B3766D151B46705CF9984701C25B0171A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:c8:0d:c6:77:5f:3e:e8:31:e2:0f:58:e3:
                    bf:c9:5d:b7:12:34:99:85:91:61:96:ad:92:5a:8c:
                    dd:dc:e1:24:a9:e3:ed:8f:78:f2:a1:66:e2:93:28:
                    54:3f:d7:4d:cf:92:6c:13:d5:0e:c9:49:81:c6:e8:
                    f9:60:5f:63:0e:c8:d7:5d:9b:fd:ca:e9:83:3c:d5:
                    1b:f3:32:f4:77:63:dd:20:c9:81:2c:50:b3:d1:b8:
                    dd:34:79:10:76:a4:b1:f7:e4:b9:62:0f:49:28:e3:
                    d0:24:fd:53:5f:71:0d:ab:ea:1d:ec:72:93:64:25:
                    4a:70:a3:19:75:b7:93:6f:72:ef:56:ae:68:d8:48:
                    0f:39:02:f2:af:5b:1e:2e:52:b0:b7:11:fa:73:b7:
                    c1:05:0b:42:be:fd:d4:cb:5c:16:8f:68:2c:46:58:
                    ae:fc:37:46:01:36:42:9b:64:d3:be:9c:f2:5f:b4:
                    c8:f2:ff:a7:60:76:34:d2:35:1f:cf:58:46:fb:5b:
                    cb:31:e7:86:4f:f0:a9:ee:c7:5b:43:db:ba:d4:12:
                    53:d0:ff:42:fb:c6:e0:3a:42:c0:a8:fd:ec:63:29:
                    e2:95:01:cb:7f:17:d8:13:28:4c:94:24:0f:6c:b7:
                    f1:67:43:f7:b4:30:a5:12:28:53:a5:af:cc:e7:b3:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:7B:37:66:D1:51:B4:67:05:CF:99:84:70:1C:25:B0:17:1A:85
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:55:fa:14:e7:84:ce:a8:ae:0b:cf:4c:0e:09:f5:4b:d5:17:
         16:0f:60:86:0d:b5:2b:77:8f:ce:1c:d3:fb:33:3e:2c:10:33:
         04:4b:73:20:ec:e2:d6:27:65:95:35:0e:a3:b8:7a:61:1a:86:
         78:90:44:c9:65:c7:7c:8f:67:06:2a:34:dc:bf:57:ea:db:a5:
         f5:93:bd:ba:db:d6:4d:3e:9d:52:85:18:2f:99:e6:e4:99:75:
         e2:56:5e:57:67:7c:3a:7d:24:59:6f:4b:af:ba:cf:73:84:39:
         18:96:3b:7e:23:3e:c5:55:bb:70:8a:5a:e9:6c:04:21:1b:e9:
         b1:a3:1d:77:2f:08:9a:31:f2:31:95:65:e5:42:20:ca:07:fc:
         9e:50:0d:fd:09:d9:0e:4e:7e:6c:38:15:f6:db:1a:f5:6a:a6:
         37:eb:62:2a:39:59:b8:32:87:2b:4b:23:85:e1:6d:89:d6:fc:
         08:d3:4b:5e:79:b6:cb:29:ba:0a:d8:83:ec:3a:4d:18:26:55:
         f3:d3:f0:be:03:eb:85:81:9b:00:58:39:df:c1:0e:3b:d2:ca:
         01:4a:a4:0e:47:5a:46:67:da:a2:8f:c3:41:35:42:2a:1d:3b:
         4f:14:3e:1d:da:54:5f:af:60:54:f1:b3:04:9e:65:f4:cc:30:
         ad:ee:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:41:55 2025 by rpki-client