Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
File:                     2B701A0900880E50F13E6749C2889988811EC8C1.mft (raw, json)
Hash identifier:          Jh9YYk2XboM6VsJPJs3CjdoXpP7a835NQpAQBgUdHl8=
Subject key identifier:   DE:B3:03:0E:24:A6:E7:F1:9A:3D:97:D9:27:21:C9:5C:BC:77:F6:9B
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       204C318B7ED5AEE36CB22313EAC40F018BEBE11A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
Manifest number:          0217
Signing time:             Wed 30 Apr 2025 19:02:51 +0000
Manifest this update:     Wed 30 Apr 2025 18:57:51 +0000
Manifest next update:     Thu 01 May 2025 21:50:51 +0000
Files and hashes:         1: 323830343a376264303a383030303a3a2f33332d3333203d3e20323731343536.roa (hash: subYYX/cgAT5UowT7JGJj/FiXtq221Ul+2MFwUX4vMs=)
                          2: 323830343a376264303a3a2f33332d3333203d3e20323731343536.roa (hash: QACZ12TchlrWlu3GHgPLSkFWOF17/zgcmAIlLebLIEM=)
                          3: 323830343a376264303a3a2f33322d3332203d3e20323731343536.roa (hash: J1lF+NSgXDPDdLPF2pKAcWUDPLOT+mx652FlpwmIgZA=)
                          4: 3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa (hash: pxF0SmMonc0WF1PfYh3UeiShdBvS0LWmHjKWKtC6cPM=)
                          5: 2B701A0900880E50F13E6749C2889988811EC8C1.crl (hash: vjE0r/UZvd2L4T0nSj7iAOu3hiMMKayWG4p4D/CRSPU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 21:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:31:8b:7e:d5:ae:e3:6c:b2:23:13:ea:c4:0f:01:8b:eb:e1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Apr 30 18:57:51 2025 GMT
            Not After : May  1 21:50:51 2025 GMT
        Subject: CN=DEB3030E24A6E7F19A3D97D92721C95CBC77F69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:99:a5:98:51:d7:2b:7c:b5:cc:02:07:21:
                    d9:eb:aa:b1:94:4e:cf:34:d3:61:ba:86:d9:46:df:
                    5b:e7:40:a3:25:a7:71:e9:9a:76:4c:46:89:ad:8c:
                    1f:41:99:99:3b:e0:60:cf:6d:99:3a:92:ff:97:ef:
                    99:a7:e1:b1:5e:26:ae:fb:4c:18:a8:7f:7d:1b:9c:
                    de:5e:a8:26:5d:32:12:58:55:ce:98:d6:6c:be:08:
                    8a:90:2e:70:94:c2:f0:ef:b6:8b:55:a7:78:48:01:
                    82:d0:4a:bd:37:58:ac:b1:ef:ad:c7:f1:0a:43:4c:
                    0f:aa:60:27:52:3d:ad:70:82:5d:30:e3:32:72:5c:
                    9e:36:82:5c:05:89:48:e2:ad:16:02:09:d6:a7:67:
                    58:8c:60:37:35:24:1e:00:45:a1:fd:c9:81:6e:ab:
                    55:5b:4d:92:93:ff:31:92:47:ce:ed:d1:80:fe:eb:
                    65:4a:09:5c:c3:8a:e4:b0:7d:fb:6c:33:c5:6e:31:
                    5a:24:5f:04:de:f5:f9:d8:50:ff:de:d4:3d:8f:5d:
                    23:fa:2e:be:e2:cb:91:0a:36:27:c7:ef:e3:1c:42:
                    c7:69:8e:d8:0a:38:d7:c1:35:0c:06:d7:49:f7:33:
                    56:60:00:ce:66:09:1b:d8:94:58:02:e5:6b:ab:91:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:03:0E:24:A6:E7:F1:9A:3D:97:D9:27:21:C9:5C:BC:77:F6:9B
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:55:87:2a:97:7f:69:e9:8f:fc:e4:0c:64:24:34:9a:0e:b7:
         2a:da:cd:90:f7:e5:f2:f8:3e:55:28:d0:2a:fc:6b:c4:2b:c5:
         fa:3d:a7:8d:be:4d:56:88:0c:da:d6:c8:2b:cf:fc:d9:0c:eb:
         49:bf:ed:04:b3:86:a8:6f:92:14:f0:ec:ec:14:f0:da:a5:89:
         2e:45:11:8a:5e:56:d3:6f:ee:b5:02:2c:6d:d8:f8:7e:fa:c9:
         57:35:8d:a0:8a:8a:30:20:74:2c:e6:cb:d3:39:0d:91:67:cf:
         31:a1:38:82:7d:13:91:2d:f5:58:29:c3:47:b9:05:62:c0:3d:
         f4:40:4d:1f:88:ae:e7:53:2b:04:13:dd:d7:0b:6d:65:2a:50:
         c9:38:83:fe:c5:e8:53:a4:81:8c:35:6f:72:9f:ca:2c:a7:f1:
         d9:6d:3e:93:8d:1e:ec:79:35:83:03:94:d0:2a:54:5a:c6:49:
         ed:b8:b3:23:d9:cf:d9:49:5e:16:3f:4d:b8:98:56:bc:a3:f1:
         e0:81:06:e3:ea:8c:d4:d4:66:16:c1:98:f1:68:ff:d0:e3:5c:
         29:df:db:8d:75:f5:9f:cb:8a:c7:d5:75:6a:25:59:ba:d1:94:
         cc:a9:b0:a9:da:4e:41:0b:98:5d:0a:56:5e:7d:7c:83:7e:54:
         99:5c:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:55:29 2025 by rpki-client