Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
File:                     A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json)
Hash identifier:          zJaZGmi1ehp4+pdXoKYaVa8lkWF1jQojPas9k2huY/o=
Subject key identifier:   ED:27:1F:F4:07:3B:65:F5:09:CC:A6:CF:D8:A5:9E:68:03:B1:D2:D7
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       6CE2816A33CB0D7AB468AB187E6B658568E3125E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
Manifest number:          0204
Signing time:             Sat 26 Apr 2025 23:00:00 +0000
Manifest this update:     Sat 26 Apr 2025 22:55:00 +0000
Manifest next update:     Mon 28 Apr 2025 01:35:00 +0000
Files and hashes:         1: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: /I5vajGjFQQ7M9n3lu24TssVjqdIlopWk+bSOlpSkFE=)
                          2: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: ODfMmaHbZE0gEskMRFLRp3jCARbHA/qcQoXVqBzR2ik=)
                          3: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: o7UTrJPLitctqzzXnLlZo/0NxrECDDhyd8kpvmxBTYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e2:81:6a:33:cb:0d:7a:b4:68:ab:18:7e:6b:65:85:68:e3:12:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Apr 26 22:55:00 2025 GMT
            Not After : Apr 28 01:35:00 2025 GMT
        Subject: CN=ED271FF4073B65F509CCA6CFD8A59E6803B1D2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:b0:f2:03:8f:1d:da:e7:16:cd:cc:65:fe:
                    d1:13:f7:3c:17:45:7a:90:71:66:ec:38:70:76:fe:
                    c4:16:af:3a:03:9e:f4:81:cd:d9:14:f3:fc:22:3a:
                    4e:9e:58:a1:c0:6e:83:37:09:f0:e5:b7:5e:8b:ce:
                    78:aa:31:53:c7:1d:98:bf:c6:e0:dc:ae:25:70:fe:
                    41:2b:22:87:ae:b9:b3:91:f0:d4:d7:ec:79:0a:a5:
                    9b:29:3a:55:cd:02:fa:41:21:31:02:c0:74:b6:de:
                    38:29:c7:34:a7:1f:af:fc:cf:62:54:68:09:88:21:
                    fd:50:71:76:63:b7:af:18:15:7a:af:a6:84:78:05:
                    6a:5c:b9:7f:20:93:91:96:38:61:a6:58:01:69:03:
                    a2:8d:ab:54:d6:d7:48:53:6c:56:d5:e7:64:45:6e:
                    09:59:85:5c:e1:9d:00:88:4c:73:8a:6d:b7:cb:d1:
                    95:a5:ed:c8:6e:98:61:3a:bb:d9:88:7b:40:d4:a4:
                    72:15:70:83:e4:dd:2b:67:51:af:83:0f:16:34:3c:
                    eb:4d:c2:9c:03:77:46:e2:da:25:1e:e1:3f:c4:00:
                    31:28:a2:66:b7:a7:d9:b4:bb:10:68:a1:76:f0:c9:
                    6f:08:d9:b3:e4:4b:a5:cb:ef:01:83:fc:de:12:67:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:1F:F4:07:3B:65:F5:09:CC:A6:CF:D8:A5:9E:68:03:B1:D2:D7
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ba:9d:11:72:88:80:9b:30:22:eb:65:a8:27:2d:7c:fe:a6:
         fc:ec:6a:15:94:11:2a:23:e4:82:b2:1d:0c:3d:2e:55:7d:22:
         17:36:6b:57:c2:4f:50:aa:8a:72:a2:e1:0b:4c:2a:b1:21:f5:
         38:b1:e5:00:a7:ab:a7:83:55:d2:23:a6:90:b9:3f:89:11:4a:
         82:92:a9:71:ac:07:3a:b2:70:44:31:8a:19:9e:58:dd:95:cc:
         10:2f:97:87:92:a0:75:51:41:b4:98:74:b0:3b:f9:23:3d:54:
         b8:3c:62:0e:8f:95:41:99:f0:ca:f3:d5:48:a6:7f:a1:a2:86:
         c0:d5:4b:d2:9a:20:02:49:d4:32:b5:c6:4f:a0:86:f8:23:12:
         9b:7a:0c:6e:a1:ab:ad:0c:44:bb:e0:b2:7b:f9:1c:f2:84:a8:
         c0:c1:dc:2a:a3:16:ea:be:76:c7:33:a3:53:f9:a6:3b:34:7c:
         48:cd:1c:20:6f:8d:d6:b4:6c:ca:d8:a9:03:ca:d8:b2:5c:59:
         cc:44:0e:e2:18:de:16:74:08:c2:30:1e:e2:49:f3:ea:98:34:
         ca:b0:cd:00:92:65:d9:4d:7f:79:e9:6a:42:90:35:d3:ef:a7:
         60:f9:7d:ef:a2:87:b5:85:9b:ce:47:3b:03:95:32:12:f6:01:
         67:e1:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:31 2025 by rpki-client