Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          9rGO5ugSFJucY8vy9wNn02WMDyxUiOm50zrZrlB7BCo=
Subject key identifier:   03:11:49:F0:6E:3C:20:BC:F2:C3:D5:C8:A1:C2:0D:FC:2F:D1:4C:2D
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       414BCF0D7CC55C786C5B5C14DAF530CAC3A53B40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          0217
Signing time:             Tue 06 May 2025 20:15:10 +0000
Manifest this update:     Tue 06 May 2025 20:10:10 +0000
Manifest next update:     Wed 07 May 2025 22:42:10 +0000
Files and hashes:         1: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: lPi5xr0QE5vLiZ/FdvAP9K8viXX1Dd0AlCfXahGzr7E=)
                          2: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: ZbPo6p/ScftCF/my+WWsLHegmB2sy1zC7mUueJ7++4Q=)
                          3: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: 545HbYYN9NnHI0uHbB8qazrnE932EHK5MKEv+2F0wZE=)
                          4: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: 4Gk48kKTN9SsGmwdSfhYTt+Hcd5W1ygERzoSo+IqOwQ=)
                          5: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: Dd/ahx92Mgj6jnxNafrm1N0hwfLWrCeNJrUxaOyNNpw=)
                          6: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: MxudmROzGdKah5Md9V9wV5jf3p8gXDHxjok3JD2Laik=)
                          7: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: MwakXQDp8VPS07RxEauyiv4qHuhatlLluKDPqt6YRhw=)
                          8: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: ujHCchh4HkVvX3qw8a/nPtLOfcPW0GsSKDirmNhvkk4=)
                          9: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: b6hyY042J0efcXpmB8FbhDcOH+Yyec/+LfGuo44Kr98=)
                          10: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: VoAeRcDLop4iDqVWSFGZA36P/Mvk9Prgr43AZW8xkIM=)
                          11: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: P9yKXvhhlSkRsYakfdUQdMbTa083/HvMmg3R2Scgz/8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 22:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:cf:0d:7c:c5:5c:78:6c:5b:5c:14:da:f5:30:ca:c3:a5:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: May  6 20:10:10 2025 GMT
            Not After : May  7 22:42:10 2025 GMT
        Subject: CN=031149F06E3C20BCF2C3D5C8A1C20DFC2FD14C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:4d:69:fe:72:c1:a8:54:0b:51:91:9d:07:
                    cb:bb:69:b4:ff:99:87:24:50:85:74:61:9e:8a:6b:
                    9c:ce:8d:a8:34:75:12:a3:71:20:ae:29:a3:7b:a2:
                    cc:68:e3:16:e9:5f:38:24:94:60:ba:36:65:96:92:
                    dc:aa:3d:79:cc:de:ab:5d:05:fb:ef:cc:a5:3d:32:
                    f4:97:70:39:06:53:41:51:1d:4a:89:dd:70:08:05:
                    07:3a:4a:66:ca:fc:d4:de:0c:68:e5:b4:07:ac:02:
                    0b:e1:11:9c:27:ec:e7:52:f0:1c:c6:51:95:50:42:
                    ac:2d:bd:c8:9c:34:58:eb:3c:6a:5b:0d:55:ad:9b:
                    53:13:df:6d:d9:2a:d1:a5:d2:e3:dd:37:ed:3d:13:
                    c2:d8:1d:fa:34:1a:b4:49:a3:ec:93:12:0c:c4:70:
                    77:0d:2c:5c:71:46:79:c1:31:ee:35:85:9e:e4:1b:
                    84:6e:4a:cc:f7:51:dc:d3:cd:81:02:c7:1d:e1:a2:
                    6b:05:ca:4f:82:9e:08:81:ce:30:98:71:69:8c:b3:
                    d0:6d:d9:a9:8c:a6:80:5f:8a:d4:cc:05:39:53:8b:
                    bd:a4:77:c6:b7:1c:05:be:b3:06:dc:85:72:1a:e2:
                    bf:09:2a:8f:ca:bc:ff:89:f8:17:10:f7:64:f8:16:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:11:49:F0:6E:3C:20:BC:F2:C3:D5:C8:A1:C2:0D:FC:2F:D1:4C:2D
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:83:df:d2:e2:78:1e:72:ee:3d:71:6e:63:61:82:7f:96:0f:
         2d:de:68:cc:88:af:f4:55:a2:60:6c:fa:e7:f0:f8:30:a3:74:
         7c:11:50:f6:fa:c1:7d:6e:34:1c:0d:2c:45:46:a5:67:16:bb:
         f8:ae:07:4a:22:55:b4:c4:7a:82:d1:5e:04:0f:74:2e:0e:9b:
         41:a6:59:43:ce:17:53:fd:a1:89:97:77:a7:0f:8f:39:bc:84:
         46:ab:8d:75:f2:ec:4a:4a:fc:a7:78:a2:8d:2c:d0:0c:d6:06:
         43:ef:7b:18:d4:7e:03:3c:53:99:80:fa:3d:a0:03:35:64:4e:
         54:cc:a0:bb:79:22:ff:08:4c:7f:40:2f:3b:e3:77:ed:7c:cc:
         9b:68:d7:e5:4c:4d:96:8e:b1:2d:04:98:29:0d:f6:26:fe:fa:
         29:f7:fd:f8:f8:28:70:28:ac:ba:e1:af:65:6c:f3:e3:34:4c:
         d4:33:53:3e:3e:e1:a3:4a:75:4f:24:9a:49:d2:4e:85:c4:41:
         d3:a5:10:c3:32:80:a6:3c:a9:0d:2b:1d:2a:65:41:ab:a6:01:
         c2:e6:2c:25:47:f5:5b:5e:61:4f:18:26:6d:5f:71:2f:d4:75:
         89:cd:c6:9f:f5:bc:99:c3:a1:4c:74:f1:8b:2a:45:88:6a:f7:
         14:df:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:57:38 2025 by rpki-client