Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
File:                     294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json)
Hash identifier:          0aq1ae4A3ikdNTKDsUPpqa1udA5SxYeVu2ySvplHS+Q=
Subject key identifier:   B3:77:42:91:F4:06:CC:B5:BC:AF:97:A8:60:63:81:49:0A:54:43:CC
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       27836775A1BFB48ECF5BBEC0128A11547992C044
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
Manifest number:          0224
Signing time:             Mon 12 May 2025 18:35:30 +0000
Manifest this update:     Mon 12 May 2025 18:30:30 +0000
Manifest next update:     Tue 13 May 2025 22:04:30 +0000
Files and hashes:         1: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=)
                          2: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=)
                          3: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=)
                          4: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: lz2Vmuln0S66aNRKeVJQJC8iw4p71bPfeKvdJr9zNsk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 22:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:83:67:75:a1:bf:b4:8e:cf:5b:be:c0:12:8a:11:54:79:92:c0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: May 12 18:30:30 2025 GMT
            Not After : May 13 22:04:30 2025 GMT
        Subject: CN=B3774291F406CCB5BCAF97A8606381490A5443CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:f8:17:de:9c:c2:87:3b:90:5a:37:2f:71:
                    da:da:8c:46:2b:1e:48:00:70:c5:91:bb:da:c7:96:
                    ac:13:d5:56:93:84:31:a1:9f:b2:9c:12:de:35:f9:
                    9b:dd:d0:64:4f:76:c7:cf:59:14:95:39:fe:94:a8:
                    b2:e3:b5:cb:a5:ec:a2:13:c9:42:48:f4:db:9d:a8:
                    e0:84:f6:bc:1a:4c:b8:d5:27:1a:9a:8f:ed:01:02:
                    29:a9:1b:bf:07:a8:da:4c:78:a9:19:ad:37:81:14:
                    ec:32:1f:60:de:aa:9b:12:0d:53:f2:9a:3e:b6:77:
                    ac:a4:69:9c:9e:c8:1a:f4:35:31:7f:5a:ea:68:40:
                    a5:c0:c5:6e:b5:c4:a2:58:a9:46:67:dd:23:6e:a4:
                    32:5e:b0:d5:41:e6:53:17:85:a4:b7:bc:6e:38:4a:
                    6d:8f:c9:17:c5:ea:01:14:23:41:e9:0f:bd:c5:08:
                    bc:fa:47:c7:85:0b:10:e1:ff:5a:a9:a2:ac:47:c8:
                    c6:f3:03:a9:c1:2f:90:e2:47:3a:59:5d:00:c1:e8:
                    fd:fd:fe:93:bd:90:4d:f3:81:84:4b:38:a9:18:55:
                    f6:d9:8f:2d:67:22:78:69:26:f0:4e:7d:4e:1c:c3:
                    cd:18:bf:17:e6:f0:4a:e2:a2:c6:06:80:44:96:6d:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:42:91:F4:06:CC:B5:BC:AF:97:A8:60:63:81:49:0A:54:43:CC
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:07:7e:23:0d:45:04:25:84:a8:02:40:c5:3b:08:d8:ee:
         ad:e9:af:64:b6:f2:97:27:f0:03:fa:70:37:6d:40:d0:7b:12:
         1b:71:f6:92:35:c2:f5:2c:f8:8c:15:dd:aa:60:ec:e2:fc:b1:
         f4:e0:36:e7:98:9d:65:6b:03:b3:14:db:cd:97:b4:74:2b:4e:
         5e:23:7a:b1:8c:24:5d:ff:6a:e7:5c:a7:50:65:8c:c2:30:ba:
         34:56:8f:af:16:12:7b:3e:43:6e:b5:12:3d:83:5c:4f:34:b1:
         9c:86:ce:a4:33:fb:12:75:8c:7a:41:d2:b8:c2:9d:95:3c:29:
         52:4d:bc:8d:0e:cf:25:30:f3:6b:a6:b3:c7:48:4e:64:06:43:
         7b:a9:75:3f:14:a9:9e:37:26:a6:59:27:5c:32:90:cc:60:4f:
         7e:3f:c1:19:02:1c:79:60:10:32:0f:ab:28:cb:e5:21:80:2c:
         3e:76:7d:34:57:43:48:51:42:9a:06:e3:0b:85:a5:63:97:82:
         6a:42:20:3a:82:3a:43:d2:6d:e3:39:86:15:3c:dc:8b:19:32:
         b0:c0:a6:13:f3:e1:39:9b:c9:36:57:a6:72:a2:14:59:14:36:
         24:c2:87:b6:1b:e7:27:66:e1:bb:54:d2:7c:c1:4d:50:d2:49:
         8c:7e:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:14:36 2025 by rpki-client