Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
File:                     23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft (raw, json)
Hash identifier:          0sf4Dns/kktp6QLcskQ5vriRpoHzEH6MZngL3g9if7Q=
Subject key identifier:   1E:87:00:BB:D6:7A:38:32:2F:D5:7D:2D:70:46:97:3C:4C:A2:18:FC
Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD
Certificate issuer:       /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
Certificate serial:       326E7EF029EA470F194839FCA8145D8435B0EBD4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
Manifest number:          4F
Signing time:             Thu 08 May 2025 05:23:10 +0000
Manifest this update:     Thu 08 May 2025 05:18:10 +0000
Manifest next update:     Fri 09 May 2025 06:05:10 +0000
Files and hashes:         1: 3230302e3131352e36342e302f32322d3232203d3e20323730383932.roa (hash: KHCvpOqEBh0zaA89hOOCHX1qItF2kA+N8+QBQ27RH7A=)
                          2: 323830343a373330633a3a2f33332d3333203d3e20323730383932.roa (hash: bZowq/rhPiHimCF5k874pBsH6uezn6+q9HE3ZhLBhxU=)
                          3: 23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl (hash: wjt8CzkkFNDXVPpZUNS2qLsM5P6wJNPeIkS2MTy9ku8=)
                          4: 3230302e3131352e36342e302f32332d3233203d3e20323730383932.roa (hash: TSHKvAX6iKMXPfCJ52PBvaqGnGui1xT/xArg9HsiOT4=)
                          5: 3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa (hash: Umdb+KAs359pFboxUh6CsHAYjGTllGS22gQ9xoOSSdw=)
                          6: 323830343a373330633a383030303a3a2f33332d3333203d3e20323730383932.roa (hash: 5zPpzxVCue9TWwdXtBqAZu17jW1VpPLDw1zg5S0loAc=)
                          7: 323830343a373330633a3a2f33322d3332203d3e20323730383932.roa (hash: SEDWYSxoEjG5LyIWphtGCBwbxzJ+rIAB+gpVEx+rBro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl
                          rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 06:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6e:7e:f0:29:ea:47:0f:19:48:39:fc:a8:14:5d:84:35:b0:eb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
        Validity
            Not Before: May  8 05:18:10 2025 GMT
            Not After : May  9 06:05:10 2025 GMT
        Subject: CN=1E8700BBD67A38322FD57D2D7046973C4CA218FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:c8:3b:b2:58:01:d7:59:f3:bd:de:23:b0:
                    60:8c:55:64:dd:d5:e4:6d:96:74:4b:73:6d:76:1a:
                    0b:69:a3:4c:13:a1:57:f5:e1:f2:1e:30:8a:a6:f0:
                    9c:a3:a1:7c:f6:8e:1f:9a:a7:a1:aa:21:f1:a6:4c:
                    5e:af:80:84:ae:bb:da:50:1e:9e:ab:e4:f2:63:66:
                    4b:5b:a3:44:1c:fc:e1:34:7a:da:58:cc:0c:9a:e0:
                    2a:dd:04:e7:db:3f:9b:9f:ce:4c:a5:c3:98:70:da:
                    16:ad:cf:9e:ac:a6:03:6f:04:14:83:b8:0a:4e:be:
                    0a:65:a9:1c:f2:d4:27:81:2c:8b:0b:f7:e1:2e:88:
                    c4:60:d1:47:7c:25:d8:5d:f7:ce:32:2b:1c:25:0e:
                    78:4b:0f:e3:d3:cd:d9:82:58:2f:32:0d:5b:01:09:
                    56:79:c6:38:62:54:8f:9d:dc:97:af:2e:a8:f0:31:
                    4b:57:8d:20:da:19:bf:06:ad:83:91:19:63:b3:3a:
                    a1:3d:53:25:45:8d:d3:90:56:6c:99:09:5f:ad:3e:
                    0c:28:15:c7:08:ad:9f:7f:61:b6:91:4a:14:de:2f:
                    99:07:74:3d:8e:f5:0f:87:06:49:ae:92:8a:4a:61:
                    80:c3:f9:a1:90:98:91:a2:26:29:e0:da:b6:00:1c:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:00:BB:D6:7A:38:32:2F:D5:7D:2D:70:46:97:3C:4C:A2:18:FC
            X509v3 Authority Key Identifier:
                keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:8d:35:81:f7:39:90:a0:b6:72:a3:7c:d3:0f:78:ec:79:
         08:e4:9e:2b:be:12:62:7c:c9:3d:c0:7a:f9:bb:b0:e0:c5:83:
         6c:87:b7:0e:2f:b9:95:fb:07:19:1f:b3:29:85:64:4e:a8:a1:
         a9:73:b7:84:0f:07:aa:1e:fa:54:66:d4:07:55:eb:53:33:1c:
         ee:2b:8a:b7:7f:51:7e:81:97:13:20:74:88:ea:48:d6:15:ea:
         1b:dc:b3:ce:3c:82:19:0b:e1:0e:08:ea:ce:5f:66:50:11:0b:
         f6:d1:bb:78:4b:f7:c0:6c:9a:fc:3d:7c:3e:10:86:d5:3c:bb:
         b2:0a:0e:ba:7d:14:02:d1:3a:d1:7e:62:bd:ac:d8:d8:04:70:
         b8:8c:af:7e:41:11:cf:65:7d:76:95:da:68:9e:30:de:a7:96:
         47:57:4f:a9:e1:8e:7b:ca:54:77:87:61:12:32:5e:db:a8:a6:
         c6:6c:74:a8:fb:a1:6e:41:70:08:58:4b:11:17:3f:b2:9e:a5:
         7a:ae:5b:f4:35:41:5c:17:3b:a9:5f:33:d9:d3:48:98:79:7c:
         dc:30:2b:93:64:b6:26:5d:a7:31:02:e3:a2:45:a4:96:28:bd:
         b6:95:d4:7f:41:a2:c4:20:b0:c0:e6:90:fa:d0:ef:99:95:c5:
         86:df:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:35:46 2025 by rpki-client