Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
File:                     014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft (raw, json)
Hash identifier:          rZ5BnN+QPiQyLaQZcIKUvHDAJMG0TlFuq4BHisgnZfg=
Subject key identifier:   31:B6:E9:46:1F:C1:3A:15:D5:93:3D:05:85:18:6E:E6:29:E8:9B:79
Authority key identifier: 01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C
Certificate issuer:       /CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
Certificate serial:       2A6024E5B96BF602E40730E31098996896A09BE0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
Manifest number:          01C4
Signing time:             Fri 02 May 2025 18:16:22 +0000
Manifest this update:     Fri 02 May 2025 18:11:22 +0000
Manifest next update:     Sat 03 May 2025 19:11:22 +0000
Files and hashes:         1: 323830343a336361303a3a2f33322d313238203d3e203631353939.roa (hash: M7sdwVDwumzMa3UKduOIgcnrrE3NFDghKFrZ2dYur28=)
                          2: 3230302e37312e37362e302f32322d3332203d3e203631353939.roa (hash: huwUv+x3W/k3EosF9/iADjf5pMTpCnThRXBCwSUEpuQ=)
                          3: 014DBFDCD468F68848FADACA4E0EF0702750FA7C.crl (hash: TvNGB2vqqI1BdGfjSYMw/NQwEZutmQfIg8kVD61m7cM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.crl
                          rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:60:24:e5:b9:6b:f6:02:e4:07:30:e3:10:98:99:68:96:a0:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014DBFDCD468F68848FADACA4E0EF0702750FA7C
        Validity
            Not Before: May  2 18:11:22 2025 GMT
            Not After : May  3 19:11:22 2025 GMT
        Subject: CN=31B6E9461FC13A15D5933D0585186EE629E89B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:0e:f2:76:8d:ca:eb:c9:ee:49:2a:5e:5a:
                    6e:ad:7a:d7:09:dc:4d:f0:cb:d0:3e:e3:0d:f3:fb:
                    39:98:0e:5c:68:53:4c:f4:9f:f8:1c:26:a1:a9:87:
                    00:6b:7a:e8:75:16:ee:39:75:93:a1:95:38:ed:ed:
                    53:8e:3f:07:d1:1c:0f:05:60:ee:71:33:30:90:17:
                    ce:cd:3a:31:00:62:1e:b7:90:3b:4b:16:e1:83:da:
                    4c:a7:5b:22:9a:cb:6a:77:13:25:d2:32:4d:fd:58:
                    ef:02:22:1a:52:de:cc:fd:57:f7:3e:cb:26:28:ec:
                    99:13:b3:b2:67:ec:09:9e:1f:80:69:65:2b:00:c8:
                    e7:64:a0:57:e9:9b:6c:15:07:9a:ed:0b:49:29:a0:
                    a2:90:63:13:c2:0b:5f:b4:b6:d9:b0:f3:bd:da:66:
                    d8:2f:44:26:f1:67:42:a0:dd:b6:10:46:4b:d8:55:
                    b3:42:ee:4a:aa:16:80:1e:4d:9e:67:76:87:be:90:
                    3b:4d:55:21:32:62:66:2a:1d:2d:84:3c:65:81:eb:
                    68:cf:24:c5:df:5e:a0:cc:1a:4a:db:d8:2f:06:4b:
                    82:dd:02:bc:b1:22:6b:d5:47:2d:21:84:f7:75:a7:
                    86:5e:5b:c2:e9:bb:d0:19:f3:75:ca:f9:e7:f6:e0:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B6:E9:46:1F:C1:3A:15:D5:93:3D:05:85:18:6E:E6:29:E8:9B:79
            X509v3 Authority Key Identifier:
                keyid:01:4D:BF:DC:D4:68:F6:88:48:FA:DA:CA:4E:0E:F0:70:27:50:FA:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014DBFDCD468F68848FADACA4E0EF0702750FA7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/014DBFDCD468F68848FADACA4E0EF0702750FA7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:c2:84:f2:f3:37:72:7d:cb:12:cc:09:c1:30:c3:d7:f8:
         8f:65:22:92:42:91:3b:fa:0e:f1:f7:8f:2f:1a:7f:fe:ce:e5:
         bd:af:9f:6b:36:90:fb:1c:eb:2d:c2:09:44:33:a9:ae:f2:f2:
         b8:f8:af:75:92:d0:1c:10:e3:d5:24:9b:a5:b4:3b:b2:4e:c3:
         fa:62:b4:f7:0f:f4:7f:3e:6e:6e:b1:0d:26:56:64:09:23:6d:
         6e:40:c2:c3:9a:b3:0f:17:e2:62:a0:30:29:c4:af:02:02:cf:
         61:3d:a4:49:4d:ac:12:e0:41:2e:66:07:a9:da:02:ea:99:3d:
         1b:32:41:1b:da:a9:77:c5:09:fa:9e:5e:46:3f:8c:24:97:b1:
         f1:4a:e6:81:5b:81:c0:d3:34:25:63:9a:fe:53:c4:33:5a:b8:
         64:17:63:9b:29:7e:c3:f3:31:2f:a2:39:1d:2d:01:bb:15:07:
         3f:57:1e:9f:11:13:3b:07:78:bd:55:ad:a3:39:32:6a:86:a0:
         90:bd:a2:95:02:f1:d6:02:7c:6c:e8:1a:b5:2d:d2:c0:e9:32:
         ea:bc:b4:a7:ca:cd:26:4e:a6:f9:90:62:a2:42:f5:4a:9a:28:
         bf:7a:b3:bd:4f:11:1c:bf:aa:57:85:48:8c:3a:07:11:6b:5b:
         2c:a3:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:54:16 2025 by rpki-client