Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          IDxbaeuHRe2PZoDFn2ARxxOlAPcu1QdnFep4KVRs9/w=
Subject key identifier:   49:0C:9D:63:7B:62:D4:B2:05:E4:AD:A2:03:3F:47:B3:0E:DA:10:55
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       4AA326A890C0958A26FB667DBA9DDB3061F38BC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          021A
Signing time:             Fri 09 May 2025 07:20:28 +0000
Manifest this update:     Fri 09 May 2025 07:15:28 +0000
Manifest next update:     Sat 10 May 2025 08:14:28 +0000
Files and hashes:         1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
                          2: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: I1jIWSTOWvuFljutJPUVFTOKxF8TzkHLJaB1BD0lH24=)
                          3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a3:26:a8:90:c0:95:8a:26:fb:66:7d:ba:9d:db:30:61:f3:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: May  9 07:15:28 2025 GMT
            Not After : May 10 08:14:28 2025 GMT
        Subject: CN=490C9D637B62D4B205E4ADA2033F47B30EDA1055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:41:40:ca:4b:74:c0:6a:77:b5:7e:9b:46:dc:
                    34:a3:62:27:a8:65:bc:8f:73:3a:a6:90:5e:e4:02:
                    17:06:b7:28:e2:77:92:d9:58:a4:c5:50:67:49:49:
                    a6:97:5c:64:3f:07:89:26:32:d9:a5:9f:25:a0:b7:
                    7c:f7:32:56:dc:2e:d5:0c:24:e3:95:ca:7a:fe:01:
                    22:b5:f1:ce:46:05:10:56:e7:fb:a4:72:a3:06:68:
                    96:05:25:f4:6b:70:5f:1d:38:36:24:c4:12:40:9c:
                    3d:6e:22:3e:1a:0a:84:ab:09:a8:a8:5f:92:96:30:
                    b2:6a:b1:58:9f:e8:af:23:15:51:23:13:4d:d2:4e:
                    be:61:be:71:09:09:b9:5d:63:26:d9:98:e3:76:d7:
                    9f:d7:e0:3e:a5:01:50:24:6e:d8:9c:f2:b5:ce:24:
                    70:5f:54:93:93:38:56:51:c1:13:88:3a:44:67:44:
                    e7:b7:e8:8f:46:48:13:ce:3e:d0:f3:c0:14:d2:12:
                    78:3c:61:03:6f:3d:e5:c3:6d:dd:33:5d:07:86:88:
                    1c:3e:6e:3e:b5:42:64:da:10:5f:24:3b:24:b8:a3:
                    ab:54:44:32:b0:3a:12:06:aa:b5:07:29:d6:c1:a7:
                    f3:80:e6:6d:5b:c3:06:93:11:7b:23:66:75:da:a5:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0C:9D:63:7B:62:D4:B2:05:E4:AD:A2:03:3F:47:B3:0E:DA:10:55
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:13:23:5a:cd:3e:12:df:bb:ae:2c:f6:ef:3d:89:52:f2:03:
         48:33:33:ef:2f:e8:5d:89:bd:48:c1:ba:a2:ee:82:ef:1c:e8:
         d3:5f:b3:a2:e3:42:e3:d2:d6:75:6e:d6:b5:4d:ef:1f:0d:e5:
         5e:44:69:28:7c:bd:92:14:60:69:a5:00:b8:9e:4b:e0:2d:ad:
         45:ac:cf:a5:e4:b1:4b:a8:57:0b:56:1c:37:66:5e:06:23:16:
         ff:3d:6c:cb:41:72:db:46:68:d8:9c:1d:c0:97:80:cc:2b:52:
         ee:d0:bf:7d:b0:ae:90:d3:8c:b8:f6:ee:75:23:be:4c:bd:28:
         68:88:44:90:85:7c:a6:e6:d8:19:c5:06:fa:54:f5:a9:0d:b1:
         c9:40:46:8f:5b:40:85:5a:f5:5c:ea:50:2d:5c:02:7b:9f:a4:
         55:ee:3c:32:21:da:ea:1b:0d:b0:4d:04:8a:c9:0c:a5:fc:fc:
         94:19:25:71:34:74:2b:8a:be:e1:cd:cc:48:59:9e:99:09:62:
         16:50:63:e7:1d:3a:1d:17:5c:74:45:7d:e1:ac:58:77:5d:fa:
         15:15:07:8f:5d:ba:58:3e:11:f4:e3:c6:d3:c4:61:e7:ca:f7:
         4a:28:49:45:e3:c4:0c:3e:78:67:91:93:33:48:07:e2:22:00:
         68:9b:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:50:08 2025 by rpki-client