Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          QbfSLf8iSXG7qI9T8oLGNRrQQ/mN7OgcoJIZ/HOgKZg=
Subject key identifier:   09:06:10:42:9F:83:36:B9:E2:35:0A:94:5E:93:06:C6:66:53:EB:A0
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       20020F2B8A8B383CDA1FDFDF3714DD68D88271E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          0218
Signing time:             Sun 11 May 2025 11:58:41 +0000
Manifest this update:     Sun 11 May 2025 11:53:41 +0000
Manifest next update:     Mon 12 May 2025 15:06:41 +0000
Files and hashes:         1: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          2: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          3: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          4: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          5: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          6: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          7: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          8: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          9: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
                          10: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          11: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: 1mxhiDQwBYr+0voIvPmWqloynEcSm5ClArNEkp6aR/U=)
                          12: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          13: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          14: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          15: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          16: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          17: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 15:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:0f:2b:8a:8b:38:3c:da:1f:df:df:37:14:dd:68:d8:82:71:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: May 11 11:53:41 2025 GMT
            Not After : May 12 15:06:41 2025 GMT
        Subject: CN=090610429F8336B9E2350A945E9306C66653EBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:66:25:6f:0b:84:41:96:2c:cc:62:95:1c:b2:
                    00:72:c2:3a:c5:74:c2:f7:2c:f0:3d:2f:5b:b3:5c:
                    e0:12:3c:ed:23:44:c6:d5:30:a7:68:a1:30:55:ec:
                    50:9b:79:a7:5d:98:14:d0:3b:9d:73:b5:93:e5:00:
                    83:fa:96:a9:ce:8d:e9:7c:71:aa:8a:a3:86:85:1c:
                    95:21:89:40:12:e3:a2:eb:97:4d:9e:77:3b:33:85:
                    0e:1d:a7:1c:5d:df:19:63:6b:7d:fa:76:c1:1d:c4:
                    d0:63:f1:c7:3a:b0:a5:30:fe:db:03:ce:32:3f:70:
                    49:53:8a:64:a0:cd:e8:62:ed:7d:11:2d:e2:fa:2a:
                    40:ae:e9:b4:56:67:6c:72:24:25:a1:8e:a2:b4:bd:
                    82:a2:21:ed:28:c3:c8:f6:78:14:fa:1b:49:59:37:
                    34:35:69:b4:64:c0:60:31:27:80:67:d9:5f:50:f7:
                    88:ef:34:ac:e5:7d:41:67:a3:2e:bc:8d:ac:86:e0:
                    2c:27:e1:74:64:55:2e:24:af:3a:68:4d:81:0b:0b:
                    de:3d:7f:ee:70:bf:f1:de:f2:2b:e7:3c:f7:85:78:
                    83:d3:0c:d9:e5:31:d6:38:fc:be:cc:f7:e7:00:46:
                    41:c5:46:5e:8f:77:c3:0e:2d:c4:c9:65:13:87:e1:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:10:42:9F:83:36:B9:E2:35:0A:94:5E:93:06:C6:66:53:EB:A0
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:22:34:b2:a0:21:c6:c4:d1:15:1f:29:2c:40:05:18:40:3c:
         3b:c8:18:48:ef:80:36:c9:57:f9:fd:35:79:31:ca:4d:cb:89:
         19:6e:2b:8a:d9:39:99:35:cc:01:a5:2e:d3:b5:b8:4f:d2:d6:
         3f:2d:06:7b:1a:d7:17:9f:c2:2f:52:fa:28:55:bb:d0:f0:c2:
         21:9a:9f:15:e3:cb:4c:1b:80:b8:04:d3:94:2d:79:58:ac:a3:
         06:04:d3:f7:76:55:91:f8:b6:ff:78:a2:1c:87:71:61:97:9f:
         01:e7:97:15:ba:85:a9:ce:83:b2:e9:2f:7f:61:d4:18:78:57:
         ba:ee:be:2b:5b:22:07:18:0f:3d:cd:f3:5e:af:8f:bf:5e:da:
         a3:65:7a:22:b4:85:25:8f:8a:cb:ed:03:52:3a:0f:74:7c:19:
         29:52:5c:b8:77:ef:97:15:68:50:ca:9f:ef:64:5e:4b:c8:59:
         d0:b4:75:a4:79:b9:01:cf:65:df:c6:7f:85:db:82:2b:91:99:
         d3:e1:0c:8d:8e:5d:54:35:84:d9:ec:72:b1:31:fe:c2:63:8a:
         dc:eb:16:1b:3a:a0:93:e8:e5:20:eb:5d:08:a2:b6:5d:d8:10:
         1a:91:6c:f7:7b:25:0f:71:a3:11:6d:2f:41:37:2d:e4:bc:04:
         0a:c4:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:14:42 2025 by rpki-client