Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          wZx1/DxKNMHQGMZWD/99on0/ISu1yv9xpeOZzKLvPhs=
Subject key identifier:   67:86:BC:03:2E:CE:CC:CE:90:F3:0C:EA:A1:B1:CA:AC:7B:1F:00:B8
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       453DBF026D54E74FE555CD75E0A02C349E4CF005
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          024C
Signing time:             Thu 19 Jun 2025 07:57:35 +0000
Manifest this update:     Thu 19 Jun 2025 07:52:35 +0000
Manifest next update:     Fri 20 Jun 2025 11:25:35 +0000
Files and hashes:         1: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          2: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          3: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          4: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: 8lv1nXRtLfP0cTtLxJDhVXpCTBMpwBQjoQT8XawIobk=)
                          5: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
                          6: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          7: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 11:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:bf:02:6d:54:e7:4f:e5:55:cd:75:e0:a0:2c:34:9e:4c:f0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Jun 19 07:52:35 2025 GMT
            Not After : Jun 20 11:25:35 2025 GMT
        Subject: CN=6786BC032ECECCCE90F30CEAA1B1CAAC7B1F00B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:83:7a:90:da:d5:56:38:a6:6d:0a:85:c1:
                    4a:43:22:8f:3e:28:8d:5b:d7:0e:53:1f:bb:26:88:
                    0a:cf:eb:9e:cc:78:8f:c4:26:38:89:d9:dd:9a:db:
                    6a:5d:6d:44:8a:a1:52:98:f7:29:d7:cf:5d:e1:e2:
                    bc:86:2e:2b:a8:67:4b:3c:f7:8e:c8:c3:8e:4e:a2:
                    11:49:2e:2a:83:54:8e:da:c1:3c:65:b2:a2:e4:df:
                    03:47:1d:08:4a:f3:53:14:42:c0:20:ed:4d:00:8a:
                    ab:4b:fa:23:29:68:45:7c:a8:6f:29:ea:ab:73:26:
                    37:9a:8e:00:5b:f4:61:6b:e7:cf:40:cc:0b:91:f2:
                    e0:43:27:13:ea:33:c9:b9:46:30:a9:5b:90:d6:09:
                    6e:9c:d7:10:80:17:60:53:a1:9b:15:17:45:6b:5b:
                    8a:96:7f:dd:0c:ba:ed:5c:fc:2a:83:7b:8f:ad:40:
                    37:f7:cf:0c:07:e1:ec:a7:6e:01:fd:b5:3c:e5:a8:
                    46:9d:9b:66:d2:9f:27:c9:82:d0:78:64:80:4d:f7:
                    a8:34:b2:ec:65:44:9b:b9:9e:5a:b9:a8:3e:80:ba:
                    01:fb:c2:95:42:44:42:29:35:79:29:1b:a0:5d:f1:
                    b2:17:25:7f:23:e7:3f:06:b6:23:2e:51:b6:53:3b:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:86:BC:03:2E:CE:CC:CE:90:F3:0C:EA:A1:B1:CA:AC:7B:1F:00:B8
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:17:e7:b6:67:5d:4b:93:1b:e5:b8:ca:11:2e:34:05:2c:42:
         bc:e7:f7:b6:b1:d7:9e:bd:59:3b:a2:bc:ae:dc:c1:8a:14:db:
         c5:51:e6:cf:d9:36:51:b9:d8:0e:29:a3:42:3c:67:19:71:2a:
         e1:0d:26:e8:6c:91:29:c6:b7:41:bd:e7:f1:c8:1a:4d:fe:14:
         1e:ca:c1:81:ab:57:c0:fc:c4:bc:89:31:7e:07:19:81:71:c2:
         46:de:42:29:d7:c4:1e:97:68:70:d8:9a:b3:4f:d6:98:18:fd:
         5b:2d:0d:e5:32:2f:4f:b6:aa:8f:bd:4e:ba:f8:c5:44:b7:16:
         43:2c:ff:47:48:d1:ef:d4:55:4d:4f:c5:14:d2:05:83:d5:7a:
         12:c7:62:a8:82:6e:18:ce:da:90:49:c8:7f:45:f6:43:b7:90:
         b8:aa:c1:32:cf:e0:ac:4c:fa:49:cf:46:a9:9c:89:5e:73:9b:
         8a:0e:3f:00:02:6c:a2:47:35:0e:83:2c:52:7d:d0:4c:2a:e0:
         51:b1:58:ea:85:cc:3d:e9:30:8b:fe:61:79:fd:59:ac:1b:33:
         19:c3:21:00:a0:40:35:93:48:a0:6a:c6:f6:4d:79:14:d0:48:
         7a:93:f5:4b:8f:b7:98:8a:a4:6d:eb:4c:72:db:b7:fe:ed:00:
         27:76:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:55:07 2025 by rpki-client