Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
File:                     4D3D5BA9F9B5356D2A4244549680670908498017.mft (raw, json)
Hash identifier:          Y7/OmAyl36B3B1QRLErMV3KVfb+ZkT6eJbBU/UnIaEY=
Subject key identifier:   42:05:A8:4A:E4:1F:52:13:EF:8D:C5:46:EA:60:4C:64:2A:C4:9E:DD
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       1F1DCB67532D1CC686065A82AC4C34D7F7C2EE53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
Manifest number:          0210
Signing time:             Sat 03 May 2025 16:53:47 +0000
Manifest this update:     Sat 03 May 2025 16:48:47 +0000
Manifest next update:     Sun 04 May 2025 19:47:47 +0000
Files and hashes:         1: 323830343a3133303a323030303a3a2f34382d3438203d3e203238323634.roa (hash: xXf529Un2lnZ9Z9GV0BKsrETfJrxC1NhSyhR2EhT9nI=)
                          2: 3137392e3132342e302e302f32312d3234203d3e203238323634.roa (hash: A4YZyAwxOL2d491yJX67JwHS3VZXIuqeSdGm9jvZ1GM=)
                          3: 323830343a3133303a3a2f33322d3333203d3e203238323634.roa (hash: O92aIYrPcEEs4unlKSaHQLbmCUnblrLJBS4+JPp0Q4g=)
                          4: 4D3D5BA9F9B5356D2A4244549680670908498017.crl (hash: owS0uf29P29o8qpFGbu51mit5qFdfSfWnjPaedHUr7U=)
                          5: 3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (hash: TULLUDNFvvV2Xk3PWTiUvG4teCxOcZowNTO25kPDUv8=)
                          6: 3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (hash: TOTGiCBbBori5bE3zTGuc8j3dr7AbTF91Cy6fT3UPQM=)
                          7: 323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (hash: Hfa6U8M8jSsMyiYGzhB7RhX5GsLqQd1pfDBpM95/H3g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 19:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1d:cb:67:53:2d:1c:c6:86:06:5a:82:ac:4c:34:d7:f7:c2:ee:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: May  3 16:48:47 2025 GMT
            Not After : May  4 19:47:47 2025 GMT
        Subject: CN=4205A84AE41F5213EF8DC546EA604C642AC49EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:67:79:7b:60:ad:30:f4:75:7b:36:0c:fb:
                    4f:29:fd:5d:69:18:7f:31:14:3f:a5:39:0a:19:85:
                    89:5f:b1:f3:4e:6c:56:1e:fe:e2:ac:dc:6e:a2:0b:
                    b0:cf:74:03:7d:53:59:5a:e6:67:89:84:a1:f7:45:
                    c4:00:51:c0:9e:14:8f:1b:a8:84:23:45:20:04:0a:
                    19:1d:38:eb:61:03:6a:32:de:2f:3b:93:a9:df:12:
                    55:8d:03:6a:b7:75:db:bd:6f:cd:f6:be:56:49:77:
                    e3:24:00:95:f5:88:1b:c2:23:c9:80:4e:3d:48:37:
                    35:1e:95:95:bf:4a:fa:73:62:53:73:14:bf:1e:87:
                    15:e0:18:7f:7c:ce:06:c6:4f:ec:13:de:87:d1:9e:
                    a3:14:bd:04:77:4f:fc:21:9d:54:e1:06:bd:9f:44:
                    db:71:df:50:e9:03:b6:96:c0:0d:c3:7d:8d:47:27:
                    90:af:aa:5e:14:3d:97:c3:b9:59:bd:61:6e:24:02:
                    23:32:b4:d2:0a:3c:f6:e8:18:4d:48:f8:73:e6:34:
                    00:fa:b8:47:7b:20:25:64:0d:03:2b:72:34:ac:10:
                    cd:fc:3e:d4:98:84:94:2a:35:26:29:49:d8:f5:e1:
                    e0:cf:b2:c8:6c:18:30:34:b3:ee:06:20:ad:2e:61:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:05:A8:4A:E4:1F:52:13:EF:8D:C5:46:EA:60:4C:64:2A:C4:9E:DD
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:eb:a7:2e:8e:79:33:1b:b4:af:de:62:3b:18:57:3f:36:
         7f:f7:11:0b:e8:73:42:5a:ce:ca:08:b8:e2:cf:aa:5b:81:c6:
         f7:7c:13:e4:cd:94:ca:6f:31:97:56:71:d2:5a:a4:9c:48:1d:
         91:02:57:b8:90:3c:65:17:34:16:61:69:09:7b:10:47:66:e8:
         08:6f:df:39:b2:31:91:d3:8b:a6:39:60:88:82:55:b8:58:cc:
         2d:33:aa:5f:ff:93:75:c9:46:4d:66:01:16:91:5a:fe:c6:6c:
         25:0a:6b:85:fa:2a:72:ed:35:94:09:14:f6:87:91:63:0c:cf:
         82:d8:fd:4c:1e:f9:65:04:30:60:75:1d:72:ff:f9:da:29:e8:
         00:b6:2a:63:5a:eb:f2:87:46:08:75:bf:4d:96:f8:6c:0b:21:
         7e:f5:b9:68:5a:36:8e:0a:98:34:47:ae:41:b3:5d:e6:93:f2:
         f8:c8:8f:98:df:c0:c7:18:ff:fa:eb:09:4f:f3:36:6c:31:67:
         59:9b:9d:14:f3:fd:75:3b:36:2f:9c:5b:66:24:ad:61:51:38:
         70:e5:47:80:57:03:29:30:14:ad:9c:b5:92:0e:53:b2:92:ff:
         dc:39:26:42:4d:a9:1c:b9:6c:c8:ee:82:fa:6f:30:e9:3c:e7:
         2b:6d:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:07 2025 by rpki-client