Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.mft
File:                     59EBD64E49BF8B639B234124EFC1995E94A8A5F6.mft (raw, json)
Hash identifier:          5jywRQ86cI9wiy2TSXT0bNMkezAzMs1/c7UKAtu93J0=
Subject key identifier:   A8:1D:7E:5A:F2:55:16:14:B3:70:BD:6D:D3:21:C7:41:FE:BF:47:7C
Authority key identifier: 59:EB:D6:4E:49:BF:8B:63:9B:23:41:24:EF:C1:99:5E:94:A8:A5:F6
Certificate issuer:       /CN=59EBD64E49BF8B639B234124EFC1995E94A8A5F6
Certificate serial:       2CC595B8BD7C19A43A13F276843260ACB017E51B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.mft
Manifest number:          11
Signing time:             Sun 04 May 2025 12:07:35 +0000
Manifest this update:     Sun 04 May 2025 12:02:35 +0000
Manifest next update:     Mon 05 May 2025 14:34:35 +0000
Files and hashes:         1: 323830343a393362383a3a2f33322d313238203d3e20323734373936.roa (hash: chSP9o3M4hG8eF8KICH+21CWJ5Q2NbV0o8S2zY1V6OA=)
                          2: 59EBD64E49BF8B639B234124EFC1995E94A8A5F6.crl (hash: QvayvYYAFl5cqWb2w8Cc9+hzlJZP3WZdZPFiBDwk4Uo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.crl
                          rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 13:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:95:b8:bd:7c:19:a4:3a:13:f2:76:84:32:60:ac:b0:17:e5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59EBD64E49BF8B639B234124EFC1995E94A8A5F6
        Validity
            Not Before: May  4 12:02:35 2025 GMT
            Not After : May  5 14:34:35 2025 GMT
        Subject: CN=A81D7E5AF2551614B370BD6DD321C741FEBF477C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:c4:a2:9b:33:3d:48:84:8f:86:c6:c6:c6:
                    cc:b5:16:05:aa:09:ac:04:df:d2:f6:26:57:bc:a5:
                    b3:58:90:46:2c:dc:1f:99:ff:e1:a8:0c:43:13:45:
                    cf:2e:dd:e2:43:ee:ab:f5:c9:95:29:f5:32:f2:c8:
                    0b:a6:3e:04:7b:3b:bf:54:78:16:bf:75:3c:94:98:
                    a4:7c:ba:67:e5:ca:59:fb:48:e7:a5:08:5c:2e:02:
                    e4:ea:fa:38:92:b0:43:67:77:71:e4:e4:b3:19:a7:
                    9d:b4:10:e1:18:74:6e:0f:28:f0:ca:ec:e7:05:5b:
                    7e:97:ce:93:5b:51:7c:2f:1a:ab:e9:5d:70:bf:d7:
                    be:ec:e5:53:af:5f:05:50:2b:04:83:34:bb:64:f7:
                    50:f0:98:c9:20:64:3d:b3:b7:e4:ee:80:92:ae:43:
                    aa:bb:1a:1f:ce:3e:6c:ae:1f:ba:25:a2:5a:5f:6c:
                    a9:09:53:c2:5c:49:8b:f5:80:4c:21:33:8b:d3:42:
                    fb:74:c3:7c:03:64:58:88:74:bc:5a:3e:1c:b8:0d:
                    dc:84:12:04:86:fb:6e:e8:a9:ff:e7:b5:7b:2a:1b:
                    f9:20:37:00:04:67:f2:43:5f:c2:37:d3:3c:46:c3:
                    87:d4:bd:1c:dd:76:eb:9a:8f:2e:2c:72:76:6e:8d:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:7E:5A:F2:55:16:14:B3:70:BD:6D:D3:21:C7:41:FE:BF:47:7C
            X509v3 Authority Key Identifier:
                keyid:59:EB:D6:4E:49:BF:8B:63:9B:23:41:24:EF:C1:99:5E:94:A8:A5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLxfLW8FEh6dZLYhwfpvBqm8MCD2bESzTPr3XA85bMgh/0/59EBD64E49BF8B639B234124EFC1995E94A8A5F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:2e:6e:34:8c:68:79:e7:d2:cc:08:d8:b3:fa:ed:ab:74:
         dd:12:4e:41:3e:8f:94:6b:07:80:85:f9:0b:5a:9b:81:39:42:
         94:47:b6:51:78:cc:27:a5:a3:31:e5:7f:47:1d:d6:20:c9:c0:
         85:28:20:6a:13:53:cc:89:92:2c:5b:14:52:96:bb:2e:d1:19:
         27:3b:07:cf:2c:4a:a0:6e:75:aa:3c:7c:6c:66:e9:fd:a5:f1:
         f9:78:80:3a:50:39:c8:82:13:d5:cf:78:75:70:97:aa:d8:b8:
         14:55:02:0d:c1:18:33:a3:e6:a2:b8:5b:77:51:6e:a5:8a:7d:
         bb:21:8a:51:cc:66:71:54:d8:b7:ac:31:e5:08:8f:1e:af:75:
         38:80:04:02:62:50:4f:8a:ea:dd:32:9b:8f:cf:34:63:1d:86:
         d7:23:37:6d:ca:11:2f:cd:d9:bf:f3:b7:6f:b5:4c:48:50:01:
         fe:18:0f:ba:86:df:69:5c:ae:ac:82:e5:88:b1:20:e7:5a:16:
         64:96:34:f3:8e:be:d1:bf:a4:61:79:02:bd:13:43:7f:0c:d1:
         8e:93:5e:54:fa:06:d0:eb:7c:ac:09:af:e1:0c:0b:45:c3:7f:
         99:a9:da:e6:94:eb:37:95:94:39:d5:18:03:05:67:a9:1a:d2:
         d4:6e:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:56:34 2025 by rpki-client