Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File:                     CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier:          OQeWHheuVYwNc6EitNC4cZJafB0OqLhPGyTJn04jhuE=
Subject key identifier:   0C:AB:5A:35:A3:FD:B7:14:06:0B:37:B9:56:DE:E1:80:5A:0B:60:91
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer:       /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial:       6EEA4A67143ECB774DEA7BABE8FE9E821A1EFD01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number:          27
Signing time:             Wed 30 Apr 2025 18:49:19 +0000
Manifest this update:     Wed 30 Apr 2025 18:44:19 +0000
Manifest next update:     Thu 01 May 2025 21:29:19 +0000
Files and hashes:         1: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: amDeMX/BZEdOLpiY5eI+Syvf2w+HOessOzMCfITuWvo=)
                          2: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: d5c7iQOjjnptZkWIrSLQB7UU1rsGTsUYsxyU4OFpcxU=)
                          3: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: mgsYCCjJSoJmcEEh/9mNABYK1PuWrIpDzusmWD7BpKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 21:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:4a:67:14:3e:cb:77:4d:ea:7b:ab:e8:fe:9e:82:1a:1e:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
        Validity
            Not Before: Apr 30 18:44:19 2025 GMT
            Not After : May  1 21:29:19 2025 GMT
        Subject: CN=0CAB5A35A3FDB714060B37B956DEE1805A0B6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:9c:43:10:13:97:e2:f9:a0:fc:37:a2:70:
                    e1:bd:f4:a4:d0:6d:60:eb:20:d0:26:76:62:bd:49:
                    d8:d2:e7:17:2b:84:88:2d:65:2f:e5:b4:8f:c2:2c:
                    d2:9a:6c:a9:ce:87:9a:cb:3d:4c:92:d2:9d:61:7f:
                    04:dc:80:ac:d0:69:00:3e:86:76:c1:81:9a:95:12:
                    24:8a:c3:8a:55:41:06:5c:05:38:de:e1:ca:ea:38:
                    0e:b8:e8:8d:f2:6e:4e:50:66:ab:17:f5:0e:02:55:
                    4e:e3:52:26:d4:9c:07:b3:13:ae:3c:35:28:5c:2c:
                    35:89:42:1f:02:66:40:cc:d5:8a:09:2c:5a:4a:74:
                    b4:6d:5a:a9:50:56:b4:ec:38:9b:50:a7:0e:ac:a4:
                    72:9a:ea:cb:26:3f:e2:69:13:7e:0b:19:83:c8:87:
                    e3:6a:8b:13:fd:17:fd:7d:91:36:d0:b4:f5:65:ad:
                    ce:58:c6:1d:ce:47:21:b8:9f:0e:ae:c1:fa:e3:ab:
                    30:9f:64:2c:10:4d:8d:47:34:57:db:0e:60:d1:77:
                    22:0c:be:c4:c6:af:d3:13:d6:71:6d:58:55:a5:12:
                    30:9b:bd:72:1e:db:f6:a9:de:8d:e6:6d:a9:96:2a:
                    27:9d:58:65:0f:c1:01:fd:fa:e4:59:e1:7c:e2:84:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:5A:35:A3:FD:B7:14:06:0B:37:B9:56:DE:E1:80:5A:0B:60:91
            X509v3 Authority Key Identifier:
                keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:23:28:4f:43:b4:e7:10:f2:5f:ed:7a:40:53:ef:37:b9:
         be:f2:05:6c:9d:14:d1:6d:c9:e0:5b:28:0b:1c:ee:5e:0a:34:
         0e:2b:62:94:3b:6f:89:bb:cf:b2:90:c8:be:8f:0c:71:1b:0b:
         60:a1:cb:ab:60:ac:7f:76:f8:99:a5:6c:20:56:f5:09:37:bd:
         57:e3:06:82:3c:51:55:03:cc:aa:d2:42:73:ab:3c:aa:c6:a4:
         13:29:52:9d:fe:07:82:b5:d8:a5:25:26:0b:c9:f3:77:80:3b:
         8c:08:81:a0:f8:4e:b6:a6:d0:6b:b6:41:b2:b6:da:23:bf:3a:
         c1:82:11:b4:68:78:4a:6c:25:9d:43:37:45:2a:83:d2:c8:08:
         1d:07:29:01:8c:60:9d:d0:3b:76:b6:31:3b:d5:a7:eb:68:9a:
         6a:38:45:fa:b7:7e:f1:93:5b:5b:56:ac:52:c9:33:2d:3b:2e:
         f3:79:3f:05:c3:e7:82:33:24:34:43:77:63:78:d7:7d:11:2b:
         f4:24:22:a7:ca:82:84:30:b0:4e:58:19:e5:d5:8a:db:69:92:
         33:9d:07:aa:17:59:99:ed:65:5a:70:db:7c:be:d0:ca:99:02:
         dd:e9:89:89:7a:6e:85:fc:8c:5e:71:1a:09:1c:89:36:ec:fd:
         21:07:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:10:27 2025 by rpki-client