Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
File:                     BDE43E626C927270D334976A9B665C443892DF57.mft (raw, json)
Hash identifier:          1Chod3cFCAUlbppEAOTgqysG3QL2u9usalkWGWboi4w=
Subject key identifier:   11:18:F1:67:AD:05:E1:FB:69:48:EE:10:3F:14:8D:C4:8D:6D:B6:24
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Certificate issuer:       /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial:       4662EA66F7FA232FB312666FD8B5B41617D141CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
Manifest number:          D4
Signing time:             Sat 03 May 2025 14:21:25 +0000
Manifest this update:     Sat 03 May 2025 14:16:25 +0000
Manifest next update:     Sun 04 May 2025 17:09:25 +0000
Files and hashes:         1: 3139322e3134312e3234302e302f32342d3234203d3e20323637353432.roa (hash: cYpAj5rgDR58Mw3pivkFtZn7NdA+uT4E+M5gGoGV4/A=)
                          2: 3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa (hash: GWKkTNtEG1a63Qu8OhR6vF+4t4EKoI1EZSj7BNhuiYw=)
                          3: 323830343a343330303a3a2f33322d3332203d3e20323637353432.roa (hash: tkDsUCaLqwHwe6ULCaF5Q1JfquPcF5Bcw3ECyhgtg5s=)
                          4: 3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa (hash: XvVi8S94j3/kae6qTxK1+1xB7j15KqcYw5m/G30X+4Y=)
                          5: BDE43E626C927270D334976A9B665C443892DF57.crl (hash: 8A/t0j3raZw6m2LqLyqUL4t9CuJ16vxTd3lVGi5oE+Y=)
                          6: 3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa (hash: iJ6ltOQJVNmJbZeqxftraIZmSiZ90s12Z7mWp2U363U=)
                          7: 3139322e3134312e3234322e302f32342d3234203d3e20323637353432.roa (hash: OL2ItaAq9W2vkNvG+8dkRmuvqXqbVX6IK2PH4GBGRZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
                          rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 14:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:62:ea:66:f7:fa:23:2f:b3:12:66:6f:d8:b5:b4:16:17:d1:41:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
        Validity
            Not Before: May  3 14:16:25 2025 GMT
            Not After : May  4 17:09:25 2025 GMT
        Subject: CN=1118F167AD05E1FB6948EE103F148DC48D6DB624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:73:a6:fe:aa:b8:cb:80:db:0f:79:2b:56:0e:
                    02:e0:9a:69:c2:70:cb:82:30:02:f7:0a:b4:33:d6:
                    b6:aa:a3:6b:f1:cb:ce:da:b3:3f:23:6f:73:da:75:
                    5d:a2:96:f2:f5:dc:d5:c6:85:ca:a8:43:5c:0b:4e:
                    35:e1:ee:73:af:31:bf:18:32:26:11:5c:f6:f5:62:
                    c5:d8:98:e4:3c:24:aa:16:8f:7f:18:db:5c:81:03:
                    c4:45:9a:9f:0c:b4:82:87:6b:aa:ae:3b:22:c9:98:
                    67:68:74:a1:3f:ec:ec:7e:b8:98:b2:99:4b:f3:7e:
                    74:d8:d4:2d:2f:9d:67:40:12:53:d2:2d:92:2c:39:
                    a2:3c:53:0b:41:32:a6:be:bc:2a:51:e0:c9:67:48:
                    3c:5d:51:19:ae:f9:88:3f:0b:16:31:fe:e5:c7:d1:
                    48:72:c6:7b:47:64:e2:77:ba:b6:6c:01:50:40:12:
                    d9:9d:08:8e:38:4f:af:30:3d:e7:6a:1d:73:b0:a9:
                    61:bd:cb:23:30:11:20:04:ce:40:cb:5f:1a:e3:0e:
                    91:e5:37:92:5c:db:37:f2:10:8e:df:4d:bf:5d:2b:
                    52:88:dd:a4:42:c2:7e:c4:ab:85:b6:4c:5d:bd:5e:
                    1c:dd:a3:24:66:d8:7b:03:e7:c6:ba:a3:35:77:ba:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:F1:67:AD:05:E1:FB:69:48:EE:10:3F:14:8D:C4:8D:6D:B6:24
            X509v3 Authority Key Identifier:
                keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:51:59:0a:47:5b:98:21:12:65:cb:56:70:d2:f7:18:4d:b0:
         4f:6b:2d:35:4b:df:2b:12:22:46:97:08:b7:d4:d7:14:98:dd:
         cf:42:ef:2d:64:52:f9:5e:5a:37:fd:1e:77:c4:85:65:00:7b:
         cf:89:57:5e:9b:0b:2d:70:f2:d4:61:26:61:e5:ff:51:b6:b2:
         04:3c:c8:ef:68:55:c3:d4:ef:c7:c1:bd:0c:f0:3f:5e:41:62:
         52:c7:5a:b1:c1:15:cf:68:80:6f:73:03:2c:32:6e:70:08:d2:
         3a:06:02:27:dd:c5:ae:dd:2e:6e:0e:e5:ee:38:a8:3e:b1:65:
         ff:6d:a1:80:1c:4b:ce:f6:b8:b0:d5:fb:4b:d3:7f:15:9d:25:
         31:9c:d4:40:0a:0c:3c:68:81:6b:7e:13:10:e2:71:ca:58:f9:
         cf:56:36:8e:c4:10:7d:58:e6:4b:57:e8:66:a5:ce:db:1b:e9:
         f5:1c:5b:e6:5b:d0:96:8c:a8:29:88:e6:92:76:11:80:f5:5a:
         e4:f2:80:06:ee:80:0e:9d:80:a4:6b:27:04:3d:07:8a:a7:3e:
         cc:9b:9e:bf:22:af:e4:58:82:bc:ac:04:08:08:39:d2:81:80:
         fa:d8:b7:55:32:8c:f2:a8:f5:95:d9:31:e1:03:57:ab:bf:47:
         91:9b:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:01:22 2025 by rpki-client