Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
File:                     697580E8392CC653843C7008AA3115A37A09736A.mft (raw, json)
Hash identifier:          WHQ2n6q3P6pLOnVjHcn0PEL4MVAZqdL+51yBjP6mOSY=
Subject key identifier:   5D:70:37:5E:C1:C1:66:50:C0:7E:C8:1F:5E:9D:D1:62:9D:36:34:DF
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       4749D1DA4294D6BD223616BFB6B8AF3E8584C8AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
Manifest number:          0219
Signing time:             Sat 10 May 2025 18:57:09 +0000
Manifest this update:     Sat 10 May 2025 18:52:09 +0000
Manifest next update:     Sun 11 May 2025 21:29:09 +0000
Files and hashes:         1: 34352e3136372e35302e302f32342d3234203d3e20323637393935.roa (hash: xQH6NhD0Vl157CGy1qeo5VoYUvlf3yInwJrgKOGY1hc=)
                          2: 323830343a353636343a3a2f33322d3332203d3e20323637393935.roa (hash: 4E3fjuabivmcn8dLQn+O7YyTrGGpuPwSa/pAP6nPuPA=)
                          3: 697580E8392CC653843C7008AA3115A37A09736A.crl (hash: Pp14brM292qyfyJ96m/G/JQUccmw18PZE+s1YlmgFys=)
                          4: 323830343a353636343a633030303a3a2f33342d3334203d3e20323637393935.roa (hash: yiQWJkfj5DxzjJtdEL12X3V+AauZiuWCNkPdEAVaH6w=)
                          5: 34352e3136372e34382e302f32342d3234203d3e20323637393935.roa (hash: Kab6C8A4HYCis/i+y6V8ZcxndCqcs5ki+6sviugE5tw=)
                          6: 34352e3136372e34392e302f32342d3234203d3e20323637393935.roa (hash: 1zg9/SQqyhNBnUwF6WzjCyPAerUH5IrSFQy+BKpmStM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 21:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:d1:da:42:94:d6:bd:22:36:16:bf:b6:b8:af:3e:85:84:c8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: May 10 18:52:09 2025 GMT
            Not After : May 11 21:29:09 2025 GMT
        Subject: CN=5D70375EC1C16650C07EC81F5E9DD1629D3634DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:9a:c0:f0:8a:8f:1a:19:dc:91:4d:01:f3:
                    9e:78:ff:cb:9b:a3:91:46:f2:a2:d2:ea:42:97:81:
                    57:80:fa:50:c2:d2:21:bc:34:9a:c5:0a:24:6c:fe:
                    a0:67:58:a3:ce:09:70:74:86:a3:96:9d:bd:1a:3b:
                    e2:b6:46:dd:5a:4d:78:d0:53:56:fe:44:bc:77:b5:
                    91:2c:af:5d:ce:8c:e7:4d:f7:32:6f:3a:99:3c:e2:
                    e9:15:20:92:45:08:2a:85:87:f8:8e:46:53:41:10:
                    e1:88:83:a2:89:ba:c4:a3:ea:14:4a:fa:cd:c3:9e:
                    a4:9d:c2:ee:20:82:65:4e:01:ef:02:08:bb:6d:52:
                    f5:09:92:85:bd:5f:e0:41:3a:c5:e4:66:2e:e9:87:
                    47:c2:16:a8:9a:f4:c6:08:28:a8:2b:37:05:94:63:
                    b1:1f:e0:7a:75:8c:0e:6e:bc:de:1c:5d:02:18:df:
                    0d:f8:41:09:3a:60:31:a5:dc:db:61:ad:a3:09:06:
                    40:55:d1:07:0c:f0:46:3e:a2:e6:f2:97:d6:2b:26:
                    d1:66:f1:ac:48:20:21:1b:8a:a9:3e:c6:2e:2a:85:
                    4c:4d:fd:e9:b0:0b:6b:fe:9c:ef:8c:ab:ba:3b:77:
                    9e:12:6b:99:87:b2:3a:f5:66:2b:24:cd:92:03:32:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:37:5E:C1:C1:66:50:C0:7E:C8:1F:5E:9D:D1:62:9D:36:34:DF
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:4a:ad:1c:44:56:f3:51:5d:56:f9:24:4f:e4:10:80:55:
         8d:86:33:f2:3a:a8:5d:12:f3:21:6d:c7:df:99:ae:11:1d:00:
         ac:8d:be:69:bf:51:b7:74:f4:3d:ec:f2:29:9a:27:dd:8a:75:
         a0:7e:6c:a2:5f:b5:ca:37:6b:46:71:dd:66:55:d3:21:cc:00:
         67:c5:b1:f6:f4:91:9d:98:fa:a1:13:c1:bf:a4:45:50:ab:89:
         97:44:cc:99:b7:d9:f3:8f:4d:b9:2a:af:0f:dc:fc:32:f9:1f:
         f6:62:c1:36:09:dc:1c:08:25:f5:53:dd:ed:e9:79:76:c8:02:
         d7:7e:2d:ba:17:f9:3e:3c:e7:cb:ff:4a:78:9a:2d:56:68:0b:
         95:94:79:24:9d:dd:4f:d6:7e:22:b0:5f:5c:f7:15:23:bc:41:
         49:d1:4f:9e:18:47:35:7e:98:a8:c0:c1:11:65:ee:12:2e:ba:
         42:e7:a6:d7:2f:c0:26:16:53:df:03:2e:ee:d8:46:11:1a:42:
         93:f5:e2:79:99:14:b6:e1:28:b0:c1:e0:8b:45:24:0e:47:66:
         b5:cf:a7:8b:c5:b7:47:d4:dd:58:6c:bf:01:0a:5a:01:eb:fe:
         f0:76:1e:52:fe:2b:72:32:be:02:8d:05:c0:67:10:60:0d:b3:
         24:c2:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:48 2025 by rpki-client