Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
File:                     653D1900116E7E41CE869340B5477E400370D802.mft (raw, json)
Hash identifier:          UYaWZ6XjtrkQ2+87gKESaT032FslzNylpYbfF/WeHd4=
Subject key identifier:   A2:38:1E:3E:F7:45:44:D5:FF:16:50:C5:F5:DD:51:69:87:40:52:1B
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       3A6BC35D9224E64862F43B65EED73C8BF7659A62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
Manifest number:          0147
Signing time:             Tue 29 Apr 2025 02:20:01 +0000
Manifest this update:     Tue 29 Apr 2025 02:15:01 +0000
Manifest next update:     Wed 30 Apr 2025 04:45:01 +0000
Files and hashes:         1: 3137372e35322e34352e302f32342d3234203d3e203532373936.roa (hash: 8nKTSDvQFg6La3NFuWrIWiPTfUl3V9v/9pC79oIzkMk=)
                          2: 323830343a6239343a3a2f33322d3332203d3e203532373936.roa (hash: i8Yd07otQA6CickL7Gk8vL8706Ya7Q1DFncsOj0638M=)
                          3: 3137372e35322e34372e302f32342d3234203d3e203532373936.roa (hash: Me8sF2+asBjQzqdjookZoDzQzIGI1AiYt45FkqewfEw=)
                          4: 3137372e35322e34342e302f32342d3234203d3e203532373936.roa (hash: iWOlP3YyWv18nwii+RxMhIBU92oLX7IlRzTwWvAIXHY=)
                          5: 653D1900116E7E41CE869340B5477E400370D802.crl (hash: 76haKaN3bgSO3bun4KydMmeWNbKw622GLxuDrJxOxEQ=)
                          6: 3137372e35322e34362e302f32342d3234203d3e203532373936.roa (hash: xMb62ptB4qh4E7pSy5GsPXhUsLq8KpVZm1RFDEoLK/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 03:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6b:c3:5d:92:24:e6:48:62:f4:3b:65:ee:d7:3c:8b:f7:65:9a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Apr 29 02:15:01 2025 GMT
            Not After : Apr 30 04:45:01 2025 GMT
        Subject: CN=A2381E3EF74544D5FF1650C5F5DD51698740521B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f7:c5:4e:42:67:5a:76:36:29:c4:63:ed:44:
                    56:54:f9:84:8b:7b:38:f8:05:e8:13:b7:9a:4e:fe:
                    f8:0a:17:3d:50:a8:7e:2d:d9:92:14:09:0b:5f:9e:
                    2f:a5:8d:8b:da:20:2f:c9:7d:ad:58:5c:a6:77:8c:
                    d6:af:3a:be:3c:a8:ba:e7:07:56:16:29:86:5f:52:
                    4b:d0:4c:40:ca:35:81:dd:6e:99:bb:9d:f6:75:5f:
                    55:54:a1:45:f5:9a:f1:d2:f2:d2:ce:9b:25:43:4b:
                    4b:6a:61:7d:6f:15:e8:5f:74:6e:77:0a:e0:2d:20:
                    9a:a5:10:76:6d:c6:0e:97:86:5d:3a:12:e1:6b:e3:
                    63:65:74:cf:c7:18:15:c2:12:c1:3b:df:33:08:75:
                    b3:f3:b9:b6:91:1a:65:22:cc:27:6d:f7:13:29:ce:
                    d9:eb:0b:e4:04:1c:be:17:77:cc:cd:1d:1a:2d:f5:
                    59:34:5a:c2:0a:0c:67:ea:ef:95:22:83:ec:88:87:
                    e5:5a:4d:97:87:61:b6:b5:99:b0:c2:1d:fb:a0:d1:
                    c5:4d:5a:94:32:e3:2d:e2:ea:25:70:19:c3:23:ac:
                    4f:81:dc:76:6d:54:40:65:c5:8f:0b:f1:e7:ec:63:
                    3a:c7:00:53:b5:ff:a3:70:1c:d0:0a:6b:39:c1:0f:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:1E:3E:F7:45:44:D5:FF:16:50:C5:F5:DD:51:69:87:40:52:1B
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:13:74:b0:00:10:01:08:ce:71:2b:ce:1e:62:3b:26:4d:e3:
         71:1b:aa:78:79:f2:f0:eb:3d:29:68:1a:de:f2:0a:83:51:a5:
         38:5a:56:da:5e:30:78:4e:95:90:cd:ac:7b:29:0a:75:0f:8d:
         2f:11:eb:70:56:0b:fc:59:00:d2:34:a7:2c:0d:fc:c3:93:59:
         69:31:5c:7e:2b:96:68:ed:46:43:bd:33:9b:ff:8b:8f:39:b8:
         5b:bf:a6:01:aa:24:ec:5e:dc:9e:48:5a:13:fb:67:dc:91:7c:
         31:ab:9b:6b:ff:2c:bd:a1:dd:5e:1c:b2:a6:90:c2:76:14:24:
         b1:12:64:68:fc:8c:25:3e:eb:95:c3:f5:7a:af:ec:3d:a5:7e:
         80:bc:60:e4:2c:3b:da:94:58:2d:0d:87:3a:2a:94:11:88:56:
         52:43:0d:f4:7a:a0:90:0b:9d:fc:3b:ec:ac:c8:ee:ea:33:6e:
         b4:de:cf:d8:77:35:a9:0d:6a:ca:56:2a:0c:c9:a8:e8:ec:f2:
         7f:0f:26:f4:1e:0d:b1:cc:58:fb:ed:54:c1:93:d8:8d:34:10:
         f1:0c:f6:2b:42:c7:7e:27:99:f2:0c:ee:8f:e1:26:6a:07:3d:
         41:6a:95:3f:0e:16:b3:68:94:1b:4c:a9:e0:6f:ea:90:f3:5e:
         24:b2:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:11:12 2025 by rpki-client