Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
File:                     A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json)
Hash identifier:          lw8L/g4e2ADDRaj07sFV0LD3/7c50oPajKK6vqe0O8s=
Subject key identifier:   43:51:8B:1C:AA:61:0E:82:3E:71:AC:BA:32:8E:76:27:E9:B6:9E:EE
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       214ADEBA22181FD3D788C91C6675165E3CB261B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
Manifest number:          01E4
Signing time:             Thu 01 May 2025 11:34:59 +0000
Manifest this update:     Thu 01 May 2025 11:29:59 +0000
Manifest next update:     Fri 02 May 2025 13:56:59 +0000
Files and hashes:         1: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=)
                          2: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=)
                          3: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: 2b+T7CfjjWwtATA+7JNalN6sTvHRe52TRubI/a1bnzM=)
                          4: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=)
                          5: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4a:de:ba:22:18:1f:d3:d7:88:c9:1c:66:75:16:5e:3c:b2:61:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: May  1 11:29:59 2025 GMT
            Not After : May  2 13:56:59 2025 GMT
        Subject: CN=43518B1CAA610E823E71ACBA328E7627E9B69EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:2b:b6:5f:03:c7:07:f4:64:af:76:14:63:
                    ff:b8:24:32:33:e3:ba:99:e1:40:f1:e3:b4:3e:cf:
                    9c:27:e0:ae:f2:3a:6a:62:af:10:0f:72:8e:a5:12:
                    73:2f:37:00:76:4a:ee:0b:38:f9:4c:a4:63:9f:aa:
                    c4:a4:80:05:47:02:3c:fd:2e:28:e2:e0:d0:b3:87:
                    f0:dc:a1:49:a0:79:0f:e9:7d:36:36:5d:f7:94:0e:
                    8b:02:e8:3b:85:e2:7f:12:90:1c:14:6a:5e:b9:05:
                    5c:50:43:fb:76:47:e4:19:62:ac:78:db:e9:9f:07:
                    1c:13:d4:53:7a:c6:b5:72:be:11:1e:c8:a9:9e:a0:
                    22:a4:f3:47:83:3b:d2:c1:ee:7e:34:79:16:7b:19:
                    96:39:60:e8:c9:e6:81:f9:05:04:82:c5:e4:db:7c:
                    0c:03:49:6e:64:10:04:d5:93:bb:a8:4f:ac:c3:86:
                    c9:b6:18:3c:aa:15:91:42:a9:a7:8a:99:91:28:e1:
                    ca:24:6f:65:7c:56:43:d0:51:70:e3:0f:fe:af:28:
                    ef:1c:d3:04:d9:f9:c0:21:5f:c8:58:5a:ad:4b:a8:
                    f6:03:cd:17:17:ca:dc:c2:ca:1a:fd:5b:94:b3:c4:
                    6b:f9:36:95:c8:d7:c3:5a:3b:2c:fb:41:18:f5:42:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:8B:1C:AA:61:0E:82:3E:71:AC:BA:32:8E:76:27:E9:B6:9E:EE
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:01:6d:8c:db:ca:98:d7:bf:9a:c7:ec:26:ed:e4:8e:52:
         cb:58:eb:6a:74:2e:21:2e:55:5d:b8:fb:f7:64:13:07:6c:8d:
         58:00:7b:a7:3a:cc:6d:c9:93:53:01:4f:6d:f1:d4:bc:1c:c3:
         7d:3c:b0:ac:12:2f:4f:1e:a8:5a:22:77:02:e3:ed:64:f2:b4:
         5a:9c:67:a5:1a:e1:de:98:d0:dd:f0:a6:11:05:5b:9e:f9:56:
         41:75:7e:e1:c4:a4:1a:c2:04:08:5d:ec:54:3a:cd:db:c3:e5:
         5e:4d:c8:dc:b5:d3:7d:87:21:49:43:f8:d0:a3:20:5c:c6:24:
         ab:ac:d7:20:90:7d:90:ee:c2:78:49:c9:87:cd:d9:7d:5f:5c:
         24:1a:ac:ed:bd:ac:cd:ab:22:b3:b4:15:56:03:39:1b:16:78:
         12:97:f7:8a:30:19:8d:ac:38:5e:5f:47:77:6e:ce:f5:f5:93:
         e7:81:0a:4f:78:43:17:a6:71:28:53:e8:40:01:ef:33:ef:a4:
         8b:3f:10:fd:00:b5:40:b2:93:93:b1:53:53:62:3b:5a:e8:2e:
         76:2e:82:6a:1e:2d:13:6c:ed:9f:e4:35:ca:7d:8b:b4:22:f8:
         08:d2:0a:49:fd:3b:0c:de:3e:03:0f:87:19:71:fc:31:a0:c6:
         9d:12:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:10 2025 by rpki-client