Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          HYi2DB29R19kYjpQOuZ9ONfavRwNzavoqSTpIW9GB18=
Subject key identifier:   81:81:3D:93:DC:B2:93:3F:79:99:3E:85:FD:F9:6F:8B:A6:B9:13:8B
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       23CD533B46473767C78A1AFA8AF79A86A61999A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          0219
Signing time:             Sun 11 May 2025 13:30:00 +0000
Manifest this update:     Sun 11 May 2025 13:25:00 +0000
Manifest next update:     Mon 12 May 2025 16:03:00 +0000
Files and hashes:         1: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: +EmvEpwlzci+3qxsGRNVmMt9dMHW0tFOyBr4jcr9pKE=)
                          2: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: EsH33qZ0n5WHemEgPltsCizFjkzBHpHH/BQRdbVjCYU=)
                          3: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=)
                          4: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=)
                          5: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: JVC/u3FRdrND4dm0UTY3BsYwshuc3phA3+UmF203Vjg=)
                          6: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: PqhuJKMxhknh/zSUWtlU58E7lJnTuQM0XRIQnd5fkWs=)
                          7: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: 8sE3+lB4qTVhhtM1NIU4VQWHMQtlI35NvIrHgZOfEwY=)
                          8: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: 51JBSzS1nYmMIHKgdlNA5JQjEGWirJfyWCxKRCqVLsk=)
                          9: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=)
                          10: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: X9NRdaPA/67Q3rg40/uJRlEJG3ESvFv49iLV4v0EXoI=)
                          11: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: ibpKzGLBhdMOnQXrZXah2wzdNkXLRH1QXQLXsrxUGUI=)
                          12: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: 4cwBoGO5u7hU98/s5wTNDyZ1Fsf/hsPwm87bc/KCyUw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cd:53:3b:46:47:37:67:c7:8a:1a:fa:8a:f7:9a:86:a6:19:99:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: May 11 13:25:00 2025 GMT
            Not After : May 12 16:03:00 2025 GMT
        Subject: CN=81813D93DCB2933F79993E85FDF96F8BA6B9138B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:3c:82:06:5c:67:95:68:5a:0f:53:af:e3:
                    a1:13:7d:c8:d0:51:28:03:b0:31:58:61:8b:4b:86:
                    62:41:02:0a:67:88:f8:a1:c8:52:5a:e9:30:ef:ee:
                    44:ae:0c:24:60:e7:89:22:c5:a2:90:1a:0d:65:4c:
                    6e:30:6e:41:8d:d6:fe:46:a6:7f:4f:43:79:8b:6d:
                    9e:d6:19:ff:7f:a9:19:e6:90:0f:0a:8f:81:5d:5b:
                    88:4d:15:a0:17:78:34:66:3a:95:78:3c:d5:47:47:
                    94:1d:f7:7b:a0:4b:c7:d7:f0:d5:c1:54:fb:54:b3:
                    0b:4c:95:7c:88:71:2d:e6:f8:68:47:4b:42:9e:66:
                    f1:ec:c8:6d:ce:11:e2:95:cd:cd:c5:09:86:66:54:
                    b5:fe:74:7b:f4:41:22:4d:a6:d9:52:df:e5:9a:e5:
                    97:71:96:48:0e:f1:62:38:6c:fd:75:b8:78:35:0b:
                    68:a0:56:4d:75:c8:c1:b2:48:fe:33:e2:3f:0a:20:
                    c5:fa:e1:38:dc:4f:1a:c8:8d:ca:52:01:4a:4c:fc:
                    de:a6:73:0e:ab:db:97:c5:aa:b8:1a:66:e1:14:6d:
                    b1:dd:09:b6:c5:d0:20:f4:d2:0c:f6:e7:c0:04:36:
                    31:b4:da:b2:ca:1d:a8:05:96:5d:6d:8c:bd:b9:fe:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:81:3D:93:DC:B2:93:3F:79:99:3E:85:FD:F9:6F:8B:A6:B9:13:8B
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:71:45:6b:46:95:a0:3b:55:87:30:be:7c:ec:58:05:a6:
         71:47:a2:63:45:2c:11:b2:77:a2:55:04:f6:ac:77:0e:a4:68:
         9b:c7:45:e0:5f:de:9a:77:c1:6a:20:53:9d:60:a8:28:e2:bf:
         18:73:14:37:f8:82:46:ae:d0:2a:18:6e:02:a7:b6:08:52:00:
         8f:b3:e5:42:56:0a:f5:7f:a9:04:c6:b8:63:1e:d9:f8:ec:63:
         b2:76:1d:ba:81:a6:54:fa:23:27:3b:bb:3b:88:c8:9f:0c:4d:
         0e:db:f9:d7:12:7f:1f:c7:e0:f0:d3:10:d0:ad:b3:76:94:a1:
         68:d2:b2:a8:42:90:0a:34:fa:d9:0d:01:79:64:81:dc:f5:b2:
         fd:12:9f:91:dc:7e:e2:73:21:f3:62:5e:fc:f9:70:d9:55:7e:
         01:2a:c6:6e:4b:00:8c:03:9f:33:cd:f9:29:38:c0:1a:db:13:
         0f:ef:b8:da:0d:4d:6d:e5:33:18:31:12:69:21:9b:5b:97:a0:
         ca:c8:29:bc:c3:9e:56:ce:05:26:eb:51:9a:27:02:6a:54:1a:
         f8:0a:d4:54:07:5f:81:84:1c:43:d3:e4:87:10:03:98:6b:2c:
         12:5b:60:a3:a2:28:0c:25:47:c1:06:fa:87:4d:df:7b:7f:7d:
         5e:8b:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:51:21 2025 by rpki-client