Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
File:                     832871127BCACF2B8301B7D52E8D2FBE066B8056.mft (raw, json)
Hash identifier:          QcQzzvbBXPu6KVEkqT7p7kMWSPGZzzXWLB8HVm9fpMc=
Subject key identifier:   BB:9B:31:C5:AB:B5:B8:D2:56:1F:C3:0D:22:8D:52:A6:7C:3F:5C:2D
Authority key identifier: 83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
Certificate issuer:       /CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Certificate serial:       422B44D0D0657E74EA1B0E2F7D42D134C6C4A89D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
Manifest number:          01D3
Signing time:             Sat 23 Aug 2025 09:12:24 +0000
Manifest this update:     Sat 23 Aug 2025 09:07:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:15:24 +0000
Files and hashes:         1: 323830343a383566343a3a2f33322d313238203d3e20323732363130.roa (hash: 5MD0hhTl+FiLV0nD1XfSSFpuLiOjyxCZEof41eyrC1c=)
                          2: 832871127BCACF2B8301B7D52E8D2FBE066B8056.crl (hash: atH908QBtKrVO535pGj5xT46JuLERt5ND6F/EA0Mzjg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl
                          rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:44:d0:d0:65:7e:74:ea:1b:0e:2f:7d:42:d1:34:c6:c4:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
        Validity
            Not Before: Aug 23 09:07:24 2025 GMT
            Not After : Aug 24 10:15:24 2025 GMT
        Subject: CN=BB9B31C5ABB5B8D2561FC30D228D52A67C3F5C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:8c:0f:c1:46:0a:fe:2e:a7:ae:2c:88:6b:
                    62:ab:a7:b2:aa:af:9b:86:de:7e:9f:ab:33:73:82:
                    06:81:5f:c4:45:26:16:90:ea:70:a2:09:53:0a:98:
                    e5:5d:ad:f1:4e:df:13:8a:f6:af:49:2b:d3:b9:39:
                    e5:92:18:0e:5d:2c:98:5a:08:31:97:ef:41:4b:8b:
                    2e:95:52:17:79:02:0e:ab:c2:2d:59:a5:1e:af:3b:
                    81:df:df:f6:0a:c6:b4:a6:dd:cc:b9:a1:c7:46:b3:
                    a7:fe:9d:6e:1f:ba:20:6b:ff:5e:83:1f:26:3f:e9:
                    97:6b:f6:a8:1b:03:bd:ef:8a:2a:be:1a:2e:70:a7:
                    78:83:9d:d9:45:37:b6:9c:f9:97:28:05:d6:a9:c8:
                    fa:c0:76:b8:1b:54:80:2c:42:4c:29:da:91:14:70:
                    f6:4c:6c:14:69:8b:36:08:c5:c4:8d:43:e7:0c:a2:
                    da:dd:66:15:25:25:4e:2d:ad:0f:7f:3b:63:a6:89:
                    54:c6:c8:dd:56:3f:db:12:4e:04:1c:66:7a:09:9a:
                    55:f3:91:f4:79:bb:b6:ee:c9:35:88:f8:7f:df:53:
                    38:f1:38:71:5e:1a:a3:89:53:12:70:dd:c5:37:ca:
                    ce:78:31:da:ac:b1:ad:61:40:42:37:cf:50:32:4b:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9B:31:C5:AB:B5:B8:D2:56:1F:C3:0D:22:8D:52:A6:7C:3F:5C:2D
            X509v3 Authority Key Identifier:
                keyid:83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:02:d2:84:56:2a:17:9e:2e:b0:41:b9:4c:6c:09:ba:6d:
         3c:a4:9d:ed:58:5c:1c:97:4b:b6:96:fc:f5:fe:81:98:be:68:
         b8:23:dd:4d:a2:69:d3:e8:74:93:bd:68:67:fb:75:eb:5b:32:
         fb:81:41:16:47:c0:bf:cc:57:3c:52:fc:1d:4d:f2:6d:07:cb:
         d1:4f:35:0e:1a:ce:42:6a:a4:64:7e:6c:c3:2e:5a:4c:79:c1:
         5d:4b:a2:03:58:a6:97:8e:5b:f1:94:8d:c6:0d:ea:3e:12:89:
         9c:99:a6:bf:30:cd:f6:42:e3:2e:a0:cc:75:9f:22:fd:79:6c:
         42:59:3f:ef:77:7d:ae:23:a9:7b:4a:a9:53:b3:10:cf:ba:66:
         09:01:05:b2:8e:2c:5a:39:36:fb:d8:06:30:81:b0:c0:5f:91:
         5e:f9:ab:dc:5c:25:6f:69:f4:3f:f8:4d:70:10:ea:12:0a:46:
         f6:ba:55:df:9c:d1:08:d2:c8:8b:2c:a9:86:de:b9:5e:d5:7c:
         6a:db:8e:ef:35:48:d8:4b:df:ba:34:61:0e:fc:d1:5d:85:88:
         f4:64:d6:b5:ae:dd:1c:a1:9f:3a:e7:5e:04:2e:d0:5c:3b:8d:
         0e:a5:ee:b1:62:fb:c8:43:f2:b1:0e:13:6f:29:23:57:3a:fc:
         23:15:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:57 2025 by rpki-client