Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
File:                     470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft (raw, json)
Hash identifier:          llpGsZYP6Ta8rSRTdoluxxc2JIlKCbePxHh5ArlzZNg=
Subject key identifier:   73:56:A4:0C:07:53:FC:FF:2E:30:D8:6E:7F:DA:86:D0:FB:40:13:3D
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       0840F77735FF5402CE27D479CA57C2395907F485
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
Manifest number:          02AE
Signing time:             Sun 11 May 2025 09:14:10 +0000
Manifest this update:     Sun 11 May 2025 09:09:10 +0000
Manifest next update:     Mon 12 May 2025 22:17:10 +0000
Files and hashes:         1: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: R5X7TgUXCHd4SY4o06VYZ2ngQGnnUyNflXm6oDMtsxw=)
                          2: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: /gc+Hp8hFYY6cpjhxSaE5ZKs/x/81jP9mgHggoODu6Y=)
                          3: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: EqD3FLMgDqM/N5k54C5xgd9XjW29tzS0P2lCbP0478M=)
                          4: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: OyN30w34v+XEYJuBDNPpHRW8FgoEgFZORPe14ApOCOM=)
                          5: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: Dd0MNbIQ9MHzANoy93/V9XUFZhqzUx1sUtab3MJ5vQQ=)
                          6: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: u4bLjuVXDa9Rq9UR54870oC8J8+TetV0EboyJh9CCTg=)
                          7: 470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl (hash: 6i9N8CLzAWssq7WaMQsUdQp2W0gkm8Uk1W2GotlrZlM=)
                          8: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: SjGEF7jl/SrzMPfuWamc6DOzm/lQD5V2YArTJ1qeZ1E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:f7:77:35:ff:54:02:ce:27:d4:79:ca:57:c2:39:59:07:f4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: May 11 09:09:10 2025 GMT
            Not After : May 12 22:17:10 2025 GMT
        Subject: CN=7356A40C0753FCFF2E30D86E7FDA86D0FB40133D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:66:ab:a2:bf:cf:ec:ee:68:3d:2c:6b:15:
                    16:35:3c:6f:ef:b9:52:fe:98:6c:fa:42:a3:fc:ee:
                    57:3c:d4:0b:86:e9:37:e9:af:52:db:7f:5b:b9:eb:
                    d7:40:47:15:c4:71:16:37:2b:dd:8e:e1:e4:6f:d8:
                    e9:82:17:56:40:0b:c0:ec:d7:e3:50:7a:35:80:3e:
                    18:93:d9:55:fd:a8:c0:5a:2e:5b:08:46:b3:53:0b:
                    79:1c:bc:24:95:af:17:89:39:f9:41:56:fc:2e:49:
                    95:12:48:12:a9:4e:a9:a9:9a:a3:e0:dc:29:d9:34:
                    4a:a3:ca:d2:8d:8d:46:74:32:7e:ec:ea:46:b4:68:
                    7e:6c:5c:a4:e1:0d:89:5b:3c:54:f3:f0:e5:40:b3:
                    43:a1:21:92:13:e3:7d:72:25:da:f6:71:23:33:27:
                    45:01:0b:9a:45:af:a7:46:ad:b1:70:1b:f3:4c:72:
                    c6:12:2d:94:8f:75:e2:a4:2c:7f:67:8b:60:72:38:
                    ad:5e:a4:df:06:22:7f:1e:62:be:97:74:f4:32:2d:
                    4a:cf:ea:7b:1c:f1:b9:00:bb:a0:4a:34:52:d2:e2:
                    fe:a4:53:4b:c9:f6:fd:4e:14:66:fb:8d:21:74:ab:
                    63:24:ca:78:5a:7d:10:8d:02:f7:ae:7b:82:da:6d:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:56:A4:0C:07:53:FC:FF:2E:30:D8:6E:7F:DA:86:D0:FB:40:13:3D
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:a7:3a:3d:96:b1:37:12:48:d4:94:1c:54:7b:06:4c:18:
         94:11:0e:54:ea:3e:a1:42:a3:9c:f3:fa:4f:f1:31:3f:f5:c8:
         bd:23:42:9f:b3:48:4d:38:a6:cc:f7:2c:51:7e:0c:17:b8:4b:
         8c:3d:3f:08:f4:83:10:49:7f:2b:32:58:10:97:db:63:ae:03:
         22:9f:25:8c:59:9e:36:e6:9f:63:c6:ff:5f:2e:06:59:7c:7b:
         94:14:57:d5:07:5c:55:41:de:9d:1b:b4:8a:07:c2:c4:f2:4a:
         14:0a:01:4c:52:29:48:97:af:be:18:ef:ea:b8:ae:8f:31:a5:
         45:15:fa:ef:30:06:5c:1c:6d:9f:10:87:c6:9b:77:4a:b9:f0:
         41:e1:81:bc:ae:14:3a:e4:ef:ff:3c:94:d3:73:86:ce:e9:6d:
         7f:47:dc:13:f3:7f:2e:de:4a:c3:ec:50:98:57:c8:65:93:4c:
         ff:d4:0e:9a:58:03:f3:e7:81:69:75:ff:eb:f6:77:f5:72:6d:
         c7:83:e9:ac:0c:d7:91:44:4b:7b:5d:ce:72:90:40:37:04:ed:
         d9:13:a3:84:b9:39:56:b6:47:7f:c5:0d:7e:46:71:94:06:45:
         ea:3a:12:1b:9a:26:ed:22:29:0e:0d:9c:e8:ea:0f:71:0a:c1:
         e6:45:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:24:38 2025 by rpki-client