Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
File:                     38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft (raw, json)
Hash identifier:          O4448+n7rgdGYJZiYaiYnx7cSUpJgat9Ht4fZsRzqXc=
Subject key identifier:   C3:DB:62:29:AC:F3:05:AF:28:DA:7D:DA:42:E0:E1:5E:6D:34:A7:18
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       10D92CB0894CEF9FC76ED0D01A3686011F33A13D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
Manifest number:          5A
Signing time:             Sat 03 May 2025 03:26:26 +0000
Manifest this update:     Sat 03 May 2025 03:21:26 +0000
Manifest next update:     Sun 04 May 2025 06:30:26 +0000
Files and hashes:         1: 323830313a38303a313438633a3a2f34382d3438203d3e203131303937.roa (hash: QfvUvKpOc9sqeFiY7Ku0TrUhUjpUh/VZSi9oJMzSMr0=)
                          2: 323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (hash: TY3j/cL94cilqBBnF2a2wywvcEBFRGGDxKoi4dj7htw=)
                          3: 323830313a38303a313431383a3a2f34382d3438203d3e203131303937.roa (hash: /u3KDALfJ9hzHHVLVSjgNQ49MGr81XREWSNWBDyrHiI=)
                          4: 323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (hash: OxiXaJHzz8Byh1GiRDZMJZz0CXZ3wcEdP/xdpxfAPa4=)
                          5: 323830313a38303a313430303a3a2f34302d3430203d3e203131303937.roa (hash: ZU6ILw0lAMoAwCMS6El2NuAxLqUW3seOIsbqFHJzTO8=)
                          6: 3139322e3230372e3139342e302f32342d3234203d3e203131303937.roa (hash: AyxquFiADhGW8WgOgcULBTfzXOJSF2VxeCo2Z8sPKo8=)
                          7: 323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (hash: EH1sfEAZRN9fm6WRJECWgV5XxWGw16lC6YNprsFfCeQ=)
                          8: 38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl (hash: uHoLE/dqyxf1qwXmQXcPkltWcfisS9FQEkoqQKmmcRA=)
                          9: 3230302e302e37302e302f32342d3234203d3e203131303937.roa (hash: h/FIG3T8g1nQhslyZg11d7Sze3jkAlhK9HP9KqI3p7w=)
                          10: 3230302e3230322e3132382e302f31382d3138203d3e203131303937.roa (hash: 7hau0Yz+B789Y4rDJ7JDQj7W56JoQ6kuoY7UiWfsRQA=)
                          11: 323830313a38303a313431343a3a2f34382d3438203d3e203131303937.roa (hash: 2KCnxX+3b49C2Go7b8r+7usSFcuNvUcR7UEs7+i7HSQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 06:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:2c:b0:89:4c:ef:9f:c7:6e:d0:d0:1a:36:86:01:1f:33:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: May  3 03:21:26 2025 GMT
            Not After : May  4 06:30:26 2025 GMT
        Subject: CN=C3DB6229ACF305AF28DA7DDA42E0E15E6D34A718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:db:48:24:94:c1:eb:c6:57:2d:e7:bf:c2:
                    59:5f:ae:37:55:87:7c:5e:34:f4:8c:d2:31:99:20:
                    8b:66:cc:f6:28:51:da:46:94:5f:5c:66:57:52:68:
                    c1:cb:b7:57:18:09:3f:9a:71:a3:41:5b:9d:30:5e:
                    af:55:3b:33:42:b7:21:a5:ef:29:a6:51:76:f8:67:
                    34:16:93:44:49:e2:10:50:4b:91:aa:fc:88:e0:ae:
                    fa:8b:38:1e:41:c6:ab:0e:0b:b3:8a:05:2b:4f:1b:
                    b6:25:54:c0:cf:08:6e:35:8c:c8:fd:68:74:74:db:
                    81:92:86:e5:b9:c6:8d:cc:97:75:72:c9:9d:f1:3b:
                    5a:bd:1e:84:1d:91:11:0a:ad:45:c6:0b:5a:f7:4f:
                    6f:2e:44:9b:9d:ce:78:2c:ca:a3:55:02:9e:c2:d5:
                    f6:78:4a:af:8a:30:04:ce:06:d6:cb:c4:a2:aa:2e:
                    32:83:af:f6:b5:08:f1:07:69:f3:d0:cf:bf:63:3b:
                    6e:e3:b8:52:5c:33:5b:0f:bf:de:fe:a9:63:03:0b:
                    eb:c2:04:32:f4:80:0e:9d:5f:6c:8b:bb:c8:75:4c:
                    64:92:3b:e9:f2:1c:2a:d9:5d:07:25:96:f2:10:dc:
                    7c:50:fd:90:a0:80:92:31:04:85:47:3c:39:f4:92:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DB:62:29:AC:F3:05:AF:28:DA:7D:DA:42:E0:E1:5E:6D:34:A7:18
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:0d:bb:c5:7f:2b:dc:bf:42:2f:7e:b1:81:92:4d:00:79:
         15:ce:88:e3:69:99:ee:1a:23:bd:c6:d2:82:e5:fa:81:a8:75:
         97:f7:22:dc:eb:4d:9d:4a:a7:1a:6d:85:58:da:dd:f7:8d:03:
         f7:8f:2f:b1:49:90:eb:a4:e6:4c:7e:11:60:07:70:d9:d6:b6:
         ec:9c:e2:3e:d2:ef:c3:96:d0:fe:c8:d7:80:6d:a5:4a:09:e8:
         67:2a:27:5f:b1:85:20:96:88:47:3b:4a:3c:51:55:08:c4:e0:
         17:ba:09:e8:a3:5c:50:24:7a:0a:40:c0:bf:f4:b0:0a:65:b8:
         fd:db:c1:ba:22:92:ca:65:d8:b2:97:1f:70:68:9d:a3:d4:9d:
         fe:97:a0:80:8a:44:26:57:98:9d:b4:4f:84:8f:27:5f:82:15:
         5a:9f:21:ce:5c:ec:a0:a0:5a:89:e8:9f:8f:0b:24:f9:55:c8:
         5f:73:f4:36:e1:7d:51:76:28:df:8d:59:23:e6:9e:6c:fd:a4:
         94:21:b3:1b:10:02:24:22:90:4c:49:f4:4e:a7:f7:70:7c:1d:
         8e:47:43:6f:1f:aa:b4:9d:95:8a:a3:e5:60:a7:af:c5:fb:32:
         fc:05:8c:38:2d:eb:4e:de:c3:7b:44:e0:ad:25:a0:73:cf:48:
         e6:1e:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 17:11:24 2025 by rpki-client