Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          uWedP7vhm1nl2IkA+s3/ZSo9Kx2rhRB+X7peMoF+kiI=
Subject key identifier:   60:45:EB:E6:18:85:C1:2B:B9:ED:2D:74:D5:4B:96:B8:FD:C4:30:7D
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       14735883358A4B28D1D5558F9FECB5CBB066370C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          0219
Signing time:             Mon 12 May 2025 05:40:23 +0000
Manifest this update:     Mon 12 May 2025 05:35:23 +0000
Manifest next update:     Tue 13 May 2025 08:05:23 +0000
Files and hashes:         1: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: o/aOBYWzoNM2ezTPVUmL9FfbjqSHXnYykvoAEekZKlg=)
                          2: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=)
                          3: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: MszXxChKZIxqO1H76aI8EC2vVoyHxziN2kG99kubgms=)
                          4: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=)
                          5: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: CfOnRF4j6DfohH6BFHRKC5zu5+rSa0Rfv661CHSNmXE=)
                          6: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: jhkpyCGOiFoaKho/F9VSBfkFrUgfmttqVKiUPpsPEuM=)
                          7: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: jQAlRmhMsxVC/mweh2ZmaXMbR4LwzcfbwukRtmFP6+s=)
                          8: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: rSPI8oEusC7WuxESqvOdBN/aubwtRxI6CeNya94CYSg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 08:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:73:58:83:35:8a:4b:28:d1:d5:55:8f:9f:ec:b5:cb:b0:66:37:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: May 12 05:35:23 2025 GMT
            Not After : May 13 08:05:23 2025 GMT
        Subject: CN=6045EBE61885C12BB9ED2D74D54B96B8FDC4307D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:c1:37:ee:43:5c:b8:93:93:6c:b0:ab:51:
                    aa:1a:78:1d:da:b0:e5:34:29:38:12:8b:61:ed:6b:
                    c3:a0:14:28:f7:93:30:57:0c:84:2d:bf:12:33:77:
                    a8:4d:d3:7e:aa:d3:39:b7:ad:fe:3b:ae:d2:16:e2:
                    2d:09:42:57:3d:d1:4d:ad:e8:03:03:89:82:71:88:
                    4b:1e:4d:03:09:c7:91:7a:20:57:6b:00:3f:65:99:
                    c6:7a:1a:b7:fe:ba:4a:06:66:fb:3c:24:3d:5c:4a:
                    d5:13:72:9e:04:e5:29:4b:0e:d3:ce:a4:19:34:2a:
                    82:b0:57:5e:b4:40:e1:0e:91:94:e6:e6:41:22:ff:
                    21:d4:42:c2:9e:83:ca:bb:2f:90:35:85:db:ac:d0:
                    16:3a:46:ac:fa:cf:7a:aa:67:36:33:f7:d2:92:d7:
                    b3:29:7a:39:48:74:72:f0:64:f5:8a:7d:20:17:ec:
                    c6:b3:0a:00:2c:06:47:88:f6:9e:53:87:eb:c0:a6:
                    c7:bf:ea:23:56:93:3c:02:b6:47:d8:b6:9e:bb:91:
                    b2:a7:a2:de:eb:2f:cf:49:1c:52:21:07:82:53:03:
                    4c:a8:80:0b:20:ca:01:d7:20:ae:20:62:26:a6:21:
                    5b:b2:db:f1:ea:9a:9c:2a:35:50:2f:01:f2:2d:ee:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:45:EB:E6:18:85:C1:2B:B9:ED:2D:74:D5:4B:96:B8:FD:C4:30:7D
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:40:75:f2:65:09:1a:98:ec:e9:35:b2:05:7e:ed:2f:04:
         c5:3f:f5:36:02:d3:cf:90:2b:f6:be:78:0d:80:a3:0c:0b:15:
         e6:22:ed:ae:7b:a8:a7:11:d2:55:96:a2:a5:90:2b:48:90:91:
         b5:ba:ae:bd:4e:52:9b:f7:fd:ed:c8:4c:d1:3b:c3:fd:22:56:
         2a:52:9f:d9:1d:52:a1:06:7a:15:5f:3d:5d:39:fc:b5:16:ca:
         d5:5c:ee:0b:0d:59:e5:06:46:93:c2:6e:a8:db:93:f6:fd:ec:
         d1:ff:9a:11:d0:e1:d5:ad:94:12:16:41:60:c0:e2:09:49:aa:
         9a:a6:05:e6:cd:c7:1a:d6:0b:aa:ca:6a:6c:e8:ea:f8:57:91:
         57:b8:5d:c9:4b:52:96:75:ad:08:ca:9b:9e:e9:7b:3c:d9:3e:
         06:b8:b0:f4:66:9e:91:dc:46:b2:09:29:25:d2:e2:7f:31:1f:
         bb:0b:68:81:50:de:f1:30:5e:09:ad:dc:14:d9:c3:d5:e5:b8:
         b3:d4:73:3b:e6:6f:ff:53:57:06:00:18:90:87:3f:a1:5c:b3:
         a9:45:d8:22:80:aa:d3:44:6a:03:d1:5f:0e:23:38:ca:35:8b:
         20:4c:54:3e:25:3a:69:4d:8c:69:2d:f4:79:fb:38:15:4f:af:
         bf:dd:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:53:49 2025 by rpki-client