Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
File:                     3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft (raw, json)
Hash identifier:          5kMz8LSN5bXNYyK2IQkC26hS9suOGZk17jmrv1Raclg=
Subject key identifier:   15:57:B5:61:38:0B:BE:E4:5E:A4:CE:AB:DB:80:5D:A5:40:39:7C:F9
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       5958A52FE31B776E047949BED1DA4C5FBF429331
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
Manifest number:          0154
Signing time:             Wed 30 Apr 2025 09:41:16 +0000
Manifest this update:     Wed 30 Apr 2025 09:36:16 +0000
Manifest next update:     Thu 01 May 2025 11:31:16 +0000
Files and hashes:         1: 323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa (hash: O7lRxtgZl8BapuqLa5UPSp0xWtN5Trehm8J2qxloqwk=)
                          2: 323830343a383338383a3a2f34382d3438203d3e20323638383433.roa (hash: ps9FFVa0pbwR7Sm2zkYqf1DkcygY8HvK8Nf+CkI9fxo=)
                          3: 323830343a383338383a383030303a3a2f34382d3438203d3e20323638383433.roa (hash: 1/92VkU/7nnTUlr6lRHYZVj14qJ+RvBmMjXqR37XG+o=)
                          4: 34352e3137332e34362e302f32342d3234203d3e20323638383433.roa (hash: na1+EpulGfwXVRRsP+djXyhwDsWI5rVKJzeSH8O39Tc=)
                          5: 323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa (hash: Nwf4Wx/U9RN9PQg2m7FLd1WdJCMfGvOKYyNg01RIOs4=)
                          6: 323830343a383338383a383030353a3a2f34382d3438203d3e20323638383433.roa (hash: Eo8eJ/uT4h+fJ/Nv8I+Vvs/jjdWTMtmz5fYmUPl5lyY=)
                          7: 323830343a383338383a383030383a3a2f34382d3438203d3e20323638383433.roa (hash: fdpQYIJVmTEiBT+E0adx3TSm7eLU9HjIzB5XOSVCmhY=)
                          8: 323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa (hash: 6kRHbE1h8q7d5tsWVXHgr8te1HuPLygJSRch5payQZE=)
                          9: 323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa (hash: xJRm+mPk4S8dtClnu8BwuaAY6xRFF8wo6KWJpQ9uF5w=)
                          10: 323830343a383338383a383030323a3a2f34382d3438203d3e20323638383433.roa (hash: CzdiL3MepT+Jk0RSkaPSPAV1WPqZgQyNhS2B0m2ufF4=)
                          11: 3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl (hash: 6HLNwArnPu//dMuf9VCCaLQnvHVA2pyX47i6MRVQ0w0=)
                          12: 323830343a383338383a383030373a3a2f34382d3438203d3e20323638383433.roa (hash: 5+CIZ9LvG1wTzE9Xsnyw5i3rHDWA0Bh/la3ly+78VCQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 11:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:58:a5:2f:e3:1b:77:6e:04:79:49:be:d1:da:4c:5f:bf:42:93:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Apr 30 09:36:16 2025 GMT
            Not After : May  1 11:31:16 2025 GMT
        Subject: CN=1557B561380BBEE45EA4CEABDB805DA540397CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:0c:1b:03:40:b9:92:fd:12:c5:b0:fb:ac:
                    0e:34:17:2a:45:17:20:c5:48:94:5d:f7:26:b7:1a:
                    98:fc:8f:4c:2c:6e:9d:de:a9:c4:3a:ff:be:5e:6d:
                    18:6e:b5:50:ef:3d:76:a9:f2:9e:fa:e1:19:a4:ee:
                    20:11:da:5b:8f:e2:0a:e5:e4:17:c6:73:40:47:e2:
                    fd:47:ff:1a:4c:bb:9a:0b:58:74:c6:fa:74:12:ca:
                    f2:30:32:06:66:b6:84:21:dc:f7:69:4d:04:cd:80:
                    53:b3:db:03:4b:55:43:77:56:dc:74:23:a3:ab:ca:
                    c4:c5:ef:61:af:55:32:7e:d5:f5:3a:6c:19:91:98:
                    2d:5c:f3:ed:a0:d1:41:04:12:e6:d6:9c:87:02:26:
                    de:0e:07:ef:de:f6:0d:be:fd:52:52:2a:cc:2a:c7:
                    85:33:51:8d:7b:26:6c:35:8c:02:6e:09:33:f9:bc:
                    64:83:ea:74:e9:25:dd:de:7a:c2:e9:73:4e:0e:c9:
                    bc:d6:9e:01:7e:19:ed:e1:82:b9:2b:17:8a:e6:c7:
                    f9:6f:37:4b:20:f2:6c:ff:b5:a7:8d:08:35:41:4b:
                    48:8b:1e:49:e4:32:41:78:52:0f:6a:59:45:95:25:
                    07:40:5d:91:6f:ee:f0:26:3f:c1:15:d0:3d:40:4e:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:57:B5:61:38:0B:BE:E4:5E:A4:CE:AB:DB:80:5D:A5:40:39:7C:F9
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:58:39:38:f3:80:21:06:9d:b3:96:39:1d:dc:de:19:d2:
         ec:36:58:d9:c5:db:f8:58:57:81:f4:06:6c:f5:10:b2:4d:9c:
         67:f1:6c:89:05:53:9a:08:9b:3a:ed:c3:0f:04:4b:73:a3:db:
         44:51:7a:0e:63:e9:36:bf:6f:74:8b:df:68:47:22:1a:00:ba:
         ad:1f:26:98:46:3c:af:d3:01:64:f9:d9:0a:2f:a7:b4:9e:21:
         d3:fb:2c:55:24:ec:04:db:9e:6e:0b:16:35:15:1e:b5:30:e8:
         4c:8b:70:c0:23:bb:24:c9:e1:1d:0f:a2:4f:36:28:82:f2:f4:
         7b:ba:7b:53:cb:f8:10:ac:3c:2f:38:fe:db:f4:3e:37:34:95:
         01:49:58:f0:a2:d2:ac:99:8e:6b:f7:0c:b9:be:51:2b:b3:99:
         3a:5d:0a:ee:29:94:de:8e:09:04:25:16:f9:13:23:b9:99:9e:
         5b:2a:3c:05:3d:53:6d:89:13:27:76:dd:e7:19:86:0d:43:87:
         dc:65:c8:c1:a6:46:3b:3f:4a:e6:f9:f3:1b:76:07:8e:90:01:
         53:7e:38:b0:2c:cd:c5:68:8a:50:59:32:aa:45:7b:09:e5:95:
         ce:4e:60:fc:ca:57:ff:5c:a6:1b:79:90:5b:63:15:0d:1d:9c:
         9c:fd:36:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:14:06 2025 by rpki-client