Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
File:                     D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json)
Hash identifier:          GC7ENQR+1nYQSG1zFL+y/Owg9N1bBAbEBugrmSC/jH4=
Subject key identifier:   D2:51:00:E8:3D:9D:31:F3:7D:73:5F:3F:DC:9A:01:74:5E:23:D4:35
Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5
Certificate issuer:       /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
Certificate serial:       54F4CBCA4F92B7E95C0E4D6158AFC27BD567E8BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
Manifest number:          5B
Signing time:             Mon 23 Jun 2025 02:44:00 +0000
Manifest this update:     Mon 23 Jun 2025 02:38:59 +0000
Manifest next update:     Tue 24 Jun 2025 05:38:59 +0000
Files and hashes:         1: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=)
                          2: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: 8HsTw0tK4bWNrbUc0i32fdDj0efT4vJHbQxPSRxKrzI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl
                          rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 05:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:cb:ca:4f:92:b7:e9:5c:0e:4d:61:58:af:c2:7b:d5:67:e8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5
        Validity
            Not Before: Jun 23 02:38:59 2025 GMT
            Not After : Jun 24 05:38:59 2025 GMT
        Subject: CN=D25100E83D9D31F37D735F3FDC9A01745E23D435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:bc:74:1f:af:65:81:80:cd:54:9e:65:70:
                    db:54:2a:37:6d:b9:a7:8c:52:09:85:11:1a:d1:9b:
                    01:3e:bf:56:cb:18:fd:16:62:3f:16:b0:c4:79:cc:
                    f2:99:74:2c:9d:fc:62:5f:05:fd:1c:56:d5:7d:6c:
                    00:e3:14:7e:f8:b2:ac:06:a1:d2:3d:98:33:0d:89:
                    6b:6c:94:54:98:5e:a6:a2:e6:2e:98:87:e2:c1:8f:
                    eb:ab:c3:70:8f:0c:b9:a7:b4:f7:b0:63:d6:e5:ab:
                    ec:d2:bf:2e:de:6b:32:13:90:01:a8:7c:ba:5b:2c:
                    d4:93:42:78:bb:8d:0f:8d:17:f4:3a:28:7f:2d:70:
                    45:41:de:0b:9e:af:1e:02:a2:ab:87:79:0c:2f:6e:
                    f4:1c:e9:31:d5:2d:60:a9:48:f5:b2:9a:40:8b:af:
                    d8:e9:a0:24:35:2e:c9:be:59:30:0c:81:83:2c:5e:
                    d8:dc:59:10:fa:73:cb:89:da:8f:86:db:07:54:10:
                    e8:d9:f3:64:d9:c7:0a:34:2c:37:f8:5f:f1:85:75:
                    4a:75:ea:8a:99:15:19:35:52:25:cd:7c:02:a0:13:
                    bf:e6:ae:db:a7:cd:ee:1b:ce:ee:8d:ee:5c:4c:d6:
                    f2:04:38:ba:7f:0a:12:9d:6d:81:71:4c:e5:f6:fe:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:00:E8:3D:9D:31:F3:7D:73:5F:3F:DC:9A:01:74:5E:23:D4:35
            X509v3 Authority Key Identifier:
                keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:2f:34:c5:bc:18:f0:e4:9f:ff:4b:74:64:3f:ec:50:fb:
         4e:75:8a:c8:bd:e1:28:5f:71:89:0b:69:f9:bc:35:50:38:10:
         ae:7e:a2:a6:9c:3b:fb:85:53:b0:13:f2:c2:6f:c9:81:42:c8:
         f0:23:6c:46:07:37:e0:94:48:fa:d2:50:cb:8d:a4:3c:54:84:
         7d:bb:d5:4a:56:14:da:43:09:80:88:b9:2f:2c:1e:4c:cd:20:
         f8:e7:29:d8:a8:71:99:60:f6:b5:4f:db:73:f2:a2:b0:5d:21:
         71:1a:f1:85:84:5c:5c:0b:f3:68:62:4a:52:19:63:80:92:6a:
         2b:7a:74:47:a0:de:7e:14:0b:2c:6c:cb:e9:a3:84:2a:d0:c7:
         f1:49:42:bd:28:9d:6d:7c:e4:bd:51:4f:b3:52:eb:5e:b8:86:
         2d:7c:e8:5d:c0:ed:19:ff:0a:bf:f8:02:56:79:5a:4e:2d:82:
         94:b4:fe:ab:b7:2d:d9:cf:bd:f6:5b:99:e8:41:43:a2:67:d0:
         31:fa:a4:b9:cf:71:f9:fc:0d:b2:f9:18:c0:2f:e5:fc:84:6f:
         70:fd:c4:dd:5a:ca:8d:fa:d9:8e:25:75:c1:14:6a:ec:59:c8:
         62:dd:6e:b4:44:c8:78:d9:d2:0d:c8:1c:22:99:bc:33:3a:1b:
         3a:c1:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 11:21:34 2025 by rpki-client