Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
File:                     250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft (raw, json)
Hash identifier:          E4w/Reijk+i6UMsHWcm07BborTldzQPAucO0G64etp8=
Subject key identifier:   E4:2F:E9:5F:8E:33:1D:F1:15:67:28:22:64:2B:75:F9:8D:E5:92:7F
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       5C8C2817EA3A7D32F825E2096092023A2469A3B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
Manifest number:          0202
Signing time:             Sat 26 Apr 2025 22:12:39 +0000
Manifest this update:     Sat 26 Apr 2025 22:07:39 +0000
Manifest next update:     Mon 28 Apr 2025 01:44:39 +0000
Files and hashes:         1: 250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl (hash: qomhNAfbkGB1CKTCF/C0tazOsA0Lr8yz2i8eCXg2/SI=)
                          2: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: qEUNQRMsYNR1m04gVAHTSFhJbxEs97UqSXwSoKGJ62o=)
                          3: 3139312e3234322e3139382e302f32332d3233203d3e20323633313433.roa (hash: jg3v88734LxtSvUfT6aR7ilwlGNvDFTifB684MGJV2Y=)
                          4: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: SLdN7miKDj6zZuAzWis/kDxA3bVq8JmQYeBgk9u4V2o=)
                          5: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: O4umjiYVU7j4EsoyzkJkKmVp7SWzfxGg5KPRjQx133g=)
                          6: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: +FZe3/GZkagt33qvR402xt+sHt5bbMI94in3uZcKxU0=)
                          7: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: bF23rWLfiATcolX7e+WvWEMbkjG+FJddzU4ENbylUas=)
                          8: 3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (hash: +pnoY2NjD/47wfbCWhznUaERDBSbjtnI2NstgYB/dSs=)
                          9: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: +EL9N8Kkyxh/h6Yu6nkKSNBOQxAiEN0kM3VLnapBiMk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 01:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:28:17:ea:3a:7d:32:f8:25:e2:09:60:92:02:3a:24:69:a3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Apr 26 22:07:39 2025 GMT
            Not After : Apr 28 01:44:39 2025 GMT
        Subject: CN=E42FE95F8E331DF115672822642B75F98DE5927F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:d1:55:ee:78:69:e4:19:07:29:19:36:76:
                    00:ea:76:4a:7e:92:a9:e5:14:a0:0d:51:e0:05:6a:
                    ca:c3:17:cd:44:55:06:d0:1e:f0:f2:21:41:92:cf:
                    c5:91:47:85:1f:d0:cb:fe:d6:42:d7:6b:27:73:5d:
                    c7:32:77:af:1b:ab:2f:16:76:9e:c9:fa:19:e5:d5:
                    0c:65:ce:ca:8c:80:e9:68:66:e6:d4:57:57:f8:e9:
                    b6:56:5f:3e:3b:05:a4:86:b9:d1:f2:9f:2d:81:ba:
                    ff:c6:a9:4c:b1:16:1b:e4:a0:9a:f8:98:60:8f:df:
                    7f:f4:3e:28:5d:49:7e:26:d6:ab:0e:a2:83:62:90:
                    95:bd:b2:b0:13:8d:e7:5f:ce:5e:cf:1e:8e:f8:c4:
                    d7:6e:75:5a:bd:f3:7b:65:99:4c:a7:ca:7e:b4:b5:
                    4e:de:b9:1b:ec:61:e9:5b:f7:be:9a:09:65:ed:75:
                    a1:e2:2f:4c:72:fb:17:3b:2e:54:21:d7:de:29:47:
                    71:c9:84:bd:71:7d:4c:70:35:d2:58:c4:69:61:50:
                    f3:b7:8c:71:2f:ee:76:3b:a0:07:9d:41:2e:9b:f5:
                    1f:dd:42:7c:6b:12:56:e2:e8:19:9e:89:19:3c:1c:
                    b4:d5:6e:23:3e:a6:69:46:89:18:4d:ab:6b:99:b6:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2F:E9:5F:8E:33:1D:F1:15:67:28:22:64:2B:75:F9:8D:E5:92:7F
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:70:cf:12:ed:5d:4b:de:3f:b9:91:d9:36:a4:c9:80:14:
         bc:80:42:34:89:43:a2:04:a2:a2:94:a7:00:5f:88:aa:49:39:
         4b:d3:f6:29:0f:63:22:67:c2:37:ca:9f:22:06:bb:4e:9c:78:
         46:5e:63:f6:9e:b2:c1:88:34:d3:1b:fc:e9:99:80:66:04:9a:
         7d:09:40:5a:e1:bf:73:85:84:1d:e6:e1:51:4a:cd:55:12:6c:
         2f:34:fc:29:a5:fb:d1:22:63:a0:c4:65:d2:4c:94:fc:b2:ac:
         7c:e2:00:2e:12:93:5f:5c:d3:e4:71:b8:d9:25:ab:9b:f3:ff:
         63:1d:49:b9:95:53:92:e0:c3:bd:5c:69:5a:10:d4:77:08:35:
         41:6d:14:a9:8a:6b:dc:c9:95:c1:72:79:24:94:84:71:de:96:
         22:21:44:60:11:00:4e:25:e5:1e:96:46:58:46:19:fc:01:3c:
         70:72:9a:23:48:f4:17:5b:00:cb:0e:51:d2:f5:f1:95:b3:85:
         0d:69:92:c9:2c:18:20:b1:e8:96:35:5a:aa:55:44:5b:96:03:
         1e:26:1f:66:99:46:49:4a:7a:25:86:d9:11:23:0f:27:df:34:
         21:5b:ed:55:34:2e:22:6a:c5:e1:7c:99:62:49:ee:40:95:02:
         f0:44:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:32 2025 by rpki-client