Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
File:                     99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft (raw, json)
Hash identifier:          76tVsPxPC6bSHgeqaJe/wNUqjkfsjCjRxGToPi8+sOs=
Subject key identifier:   7F:C9:35:8E:06:16:04:A1:7E:19:83:1F:0E:98:19:42:98:E3:1F:69
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       61F68ED85320A009E49EF528DD547122CAFAF92B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
Manifest number:          0B
Signing time:             Mon 12 May 2025 02:43:48 +0000
Manifest this update:     Mon 12 May 2025 02:38:48 +0000
Manifest next update:     Tue 13 May 2025 03:32:48 +0000
Files and hashes:         1: 34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (hash: sSdszNsj5LdAuJQono7XvT8fX+CRhBSKzEr1izmTPWo=)
                          2: 99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl (hash: oXSKIOLSccmjed5js+B51IswUOEae59oEfiiQJSpjS4=)
                          3: 323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (hash: xVkCGnycg1275ka66QKBHxIg7JyVzi7uEhb77GeL5Fk=)
                          4: 34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (hash: RybKIm09n+uC6UqNkqICDlj4JmOFx0IPjT7aoFVAkC4=)
                          5: 34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (hash: xX4qgXumrJj5i5S2NIzs5FXWb8BuSDDag4c8VSOfKTk=)
                          6: 34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (hash: GGLqXz/euaNygIsaWanKES3oogptKbTI5xpI5DRh5R4=)
                          7: 323830343a356131303a633030303a3a2f33342d3334203d3e20323638373436.roa (hash: uGa8BvVdgNVRCLBg4wR8Pq33J74mOGX8HfRNkiJruKM=)
                          8: 323830343a356131303a3a2f33342d3334203d3e20323638373436.roa (hash: dDLLr/0FcygDJApVdTVU5OYpvfGtXZl1/EN28s5i69E=)
                          9: 323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (hash: 1AIFQRQn2YIWx1cDJzVnTH93/fo7mUQfavz3xD/UG9E=)
                          10: 323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa (hash: xCIb5u3o1Pr29UM8z4X0ZX/mT+dHxp/iScUctDqNt0g=)
                          11: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (hash: eoGQ0w1a3MXM7UJ/txTTdZg9JF4vSTHGXYAVvW3dVVI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f6:8e:d8:53:20:a0:09:e4:9e:f5:28:dd:54:71:22:ca:fa:f9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May 12 02:38:48 2025 GMT
            Not After : May 13 03:32:48 2025 GMT
        Subject: CN=7FC9358E061604A17E19831F0E98194298E31F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:47:75:b0:67:78:5b:ca:b7:ef:41:33:4b:
                    89:a2:19:6d:d2:05:10:2d:2d:5b:4f:f1:32:3b:60:
                    ce:a4:c8:79:e7:b4:fe:c8:73:b6:0a:61:be:82:60:
                    a2:0a:d2:e9:71:2d:79:21:7e:47:b6:30:c7:09:fc:
                    6c:9e:f9:95:75:b0:5e:86:cb:e4:d7:c7:4e:ed:e1:
                    d5:83:c2:f8:85:9e:f8:b0:25:cc:1f:58:84:1c:26:
                    40:40:bf:01:10:44:9e:6a:5e:1b:fc:84:96:bd:70:
                    51:c5:3e:98:de:1f:4a:0b:1b:24:7a:ed:d2:92:e3:
                    25:f5:e0:96:ff:f1:d7:06:7e:e8:be:6b:d5:ae:06:
                    e2:7f:50:e8:e5:5f:e5:7b:a5:92:e6:3c:d9:99:d7:
                    a5:75:02:ef:f9:f9:a3:62:8f:02:0c:a4:ae:7f:8b:
                    aa:a2:31:da:5a:fb:a2:fa:b2:93:dc:18:cf:0f:4c:
                    00:5d:fd:c9:04:aa:bc:f0:19:f0:9a:f0:6d:83:65:
                    59:35:1c:1e:0e:08:5d:51:51:1f:c0:00:74:b3:6b:
                    01:83:09:88:ef:fd:83:ad:c8:f4:96:d8:4c:2a:03:
                    a2:5e:ed:9a:7a:2c:47:0c:1d:93:a6:65:d6:b8:d2:
                    88:b9:3e:90:75:de:af:3c:59:f2:ea:9c:d6:28:24:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:35:8E:06:16:04:A1:7E:19:83:1F:0E:98:19:42:98:E3:1F:69
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:25:10:e1:3b:61:15:3b:35:57:97:26:b9:50:72:a4:9a:
         56:e6:4f:ea:dd:d5:c6:02:ef:b5:d8:14:a9:38:8e:10:48:10:
         55:91:d6:ab:d5:e2:7b:1c:27:28:69:90:b2:14:61:8b:3b:30:
         87:15:93:fd:af:29:26:5a:e5:9f:9e:43:9c:6e:91:24:89:58:
         d3:76:82:e3:34:ee:b0:21:3b:ac:44:34:05:a7:ae:53:fe:c9:
         47:fc:11:74:dd:f3:65:ca:99:c5:2f:f5:eb:d7:c5:65:9a:1a:
         b2:4d:f4:7e:0f:5c:b9:8d:c3:c7:2b:73:43:4c:d4:96:e4:14:
         45:74:15:c6:1f:0b:3c:41:c2:fc:b0:55:b7:8e:69:55:bb:f4:
         6f:61:11:91:e4:0c:8b:bf:8d:a3:91:c8:56:1d:1f:55:79:ad:
         70:56:77:ec:2c:f9:f8:68:41:62:38:9c:8c:a9:b5:09:78:2a:
         e4:a6:06:cb:67:9f:bc:ef:4b:79:00:fb:57:7b:c4:35:ba:b9:
         dc:2b:25:90:d3:36:d5:e1:91:bc:98:c6:35:07:77:d3:ef:22:
         91:51:f1:b5:76:25:54:52:b1:99:ed:ca:77:cc:a1:d6:30:84:
         7a:11:d7:b2:3c:ac:17:fe:53:6a:0c:95:f3:3d:d7:d1:3c:17:
         9c:93:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:19:57 2025 by rpki-client