Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
File:                     4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json)
Hash identifier:          JY95JglCxT4A2t4NleCV55xf/wzgbhPwUOWmNFJeedA=
Subject key identifier:   B0:8D:0B:63:F3:3B:D4:C4:10:7D:03:BE:4A:A3:E3:E6:4D:3B:74:E9
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       7DDF47942364668FD234083BF7325B299EDD3A54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
Manifest number:          01D0
Signing time:             Thu 01 May 2025 00:07:37 +0000
Manifest this update:     Thu 01 May 2025 00:02:37 +0000
Manifest next update:     Fri 02 May 2025 01:27:37 +0000
Files and hashes:         1: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: l52S43eaKfvUZ2t/kqDe9o3Cqn1Y9zJ+3VEnL0T6tag=)
                          2: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: QGVQpW1q0Ar5fGawCo2Y276IiVuwlZ0zXMVqsrih7Rc=)
                          3: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (hash: 2T0ObRxo5BMGuagiajA9IIMVotrKZHgUC8Y0CTXt9eU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl
                          rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 01:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:df:47:94:23:64:66:8f:d2:34:08:3b:f7:32:5b:29:9e:dd:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: May  1 00:02:37 2025 GMT
            Not After : May  2 01:27:37 2025 GMT
        Subject: CN=B08D0B63F33BD4C4107D03BE4AA3E3E64D3B74E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:21:35:7c:9a:84:e5:e6:2b:63:d1:65:94:
                    9d:fb:d5:dd:ba:e4:46:3b:67:7a:f8:14:e0:2a:ab:
                    43:79:e3:fb:97:9b:5d:cc:92:7d:37:7f:f9:b2:3a:
                    2c:f7:d7:c0:31:6b:8d:3c:37:89:0c:50:c1:5c:24:
                    44:76:b1:3e:3f:8c:a2:30:eb:59:ee:a7:35:2e:4e:
                    b9:81:fc:22:19:2f:d0:d4:35:59:f8:9b:8d:c5:3a:
                    22:6c:53:a6:ee:97:5f:24:6d:fa:be:e1:3b:bf:2d:
                    86:b1:73:da:d3:66:81:3c:49:36:aa:2b:29:93:b3:
                    2b:12:77:1a:98:34:7c:ab:1f:8b:3a:ae:1e:35:0e:
                    57:25:cc:d1:6e:12:e4:81:15:38:d8:e5:a6:b3:d5:
                    cb:2e:ec:ec:bd:46:60:87:7e:0c:80:24:f9:f4:c4:
                    f2:94:12:83:7f:b3:84:df:41:11:02:28:71:eb:d9:
                    b9:52:7a:13:75:16:76:29:3a:be:e5:85:d0:c5:e0:
                    ea:0d:da:8e:03:c5:b7:c2:fa:2f:a0:d4:24:2d:22:
                    bd:06:c4:95:66:ca:e6:80:f3:77:14:81:28:47:fb:
                    16:fa:e4:f1:66:9e:79:78:57:96:f5:60:2f:7b:f4:
                    0b:c3:bf:ed:f3:6f:23:8b:5a:fe:6c:0d:17:a6:12:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:0B:63:F3:3B:D4:C4:10:7D:03:BE:4A:A3:E3:E6:4D:3B:74:E9
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:10:ec:af:15:ba:72:d5:61:a4:5c:03:b2:db:e7:68:20:
         17:21:11:98:59:b5:75:0d:4a:17:0f:81:a9:ae:e2:4d:83:82:
         75:56:e6:05:a0:a7:48:a8:6e:26:3b:24:02:27:c0:76:34:24:
         ee:19:ab:f5:0b:83:77:eb:03:33:89:80:5b:82:55:ee:63:1d:
         5c:6f:d9:90:9a:0c:77:2b:76:4f:4f:c8:c5:49:fe:1d:cc:29:
         84:df:c9:a3:9c:68:49:c5:50:b7:07:cc:6d:de:6c:c2:48:6c:
         2e:e0:d1:6d:9c:f4:5e:5a:a9:c9:6b:66:1d:52:3c:33:c8:da:
         9e:5e:1e:96:85:fe:00:02:62:43:fc:3d:4f:81:f6:eb:db:95:
         2c:60:8a:aa:35:77:f3:a6:5c:80:5b:a2:26:64:cc:65:54:80:
         4b:f8:73:dc:10:82:ac:7d:b5:60:ff:4a:d0:2a:17:ab:98:dc:
         77:b7:99:df:19:33:aa:d6:a7:28:29:bf:b2:2b:24:ff:fc:c4:
         ef:6c:fe:97:f9:4e:20:83:bf:f5:1e:eb:d1:41:7a:0e:38:45:
         83:84:83:1d:30:ae:85:29:ea:11:ec:7d:58:c8:d8:63:82:4a:
         53:bf:31:21:e2:44:85:3a:0a:17:fa:16:df:c2:b9:dc:4f:4f:
         5e:67:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:46:19 2025 by rpki-client