Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
File:                     ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft (raw, json)
Hash identifier:          Q9Qf3Va3P0Qs7UuxGrI8qgqrnT4FlF4VUWzFUUajHbY=
Subject key identifier:   88:6C:93:5E:C9:C5:AA:C6:05:3B:C4:6D:D9:4F:16:0C:62:16:52:9E
Authority key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3
Certificate issuer:       /CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
Certificate serial:       5CB6CBABAC872A300A15197CF858C695C454B639
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
Manifest number:          73
Signing time:             Mon 20 Oct 2025 14:34:39 +0000
Manifest this update:     Mon 20 Oct 2025 14:29:39 +0000
Manifest next update:     Tue 21 Oct 2025 15:30:39 +0000
Files and hashes:         1: 3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa (hash: SsXD886T95rYk9iwsu3tA9o0IO4HF37PZLy5bAhP65g=)
                          2: 3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa (hash: DFb86hLP8RFFVaFra6bPGGN4pznKE9jAgGVmZ0SyXec=)
                          3: 3137302e3234372e3138352e302f32342d3234203d3e20323731323435.roa (hash: kJLqsLTw5L3+JNzK7zIBCEHVQd1X/1flbiNn5NZChrE=)
                          4: ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl (hash: 9LH/vFBOAAu+ZYMWfyeeKEVGPtno2CcxD0QNO609uBE=)
                          5: 323830343a373837633a3a2f33322d3332203d3e20323731323435.roa (hash: gWzHOj7RpUvvubTZm4O3BfvOn4wzZ5t6kx8zYlUUHnc=)
                          6: 3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa (hash: VxC9ek/IiQME6RVkfnxqtRySxifRRQ9GAUzrwIGcojI=)
                          7: 3137302e3234372e3138342e302f32342d3234203d3e20323731323435.roa (hash: ykZ5to881WBireaJKh2OnFiYBepZyxB1EvI5/mf3Dj4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:cb:ab:ac:87:2a:30:0a:15:19:7c:f8:58:c6:95:c4:54:b6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
        Validity
            Not Before: Oct 20 14:29:39 2025 GMT
            Not After : Oct 21 15:30:39 2025 GMT
        Subject: CN=886C935EC9C5AAC6053BC46DD94F160C6216529E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:e2:7a:f7:23:7b:05:00:0c:de:c8:60:21:
                    fd:a3:97:c9:d6:f4:ae:04:99:3e:ad:38:2e:c4:3d:
                    d5:77:c7:af:18:d1:70:1e:98:9d:08:a7:0b:c4:6a:
                    39:bc:3d:f2:0d:bf:b3:8f:b8:a9:56:7c:ff:82:f7:
                    16:d0:4a:8b:e8:9a:91:e4:8f:66:2f:f4:0d:10:2d:
                    4e:c2:a0:f6:c0:3d:e3:ca:4b:c0:0a:cc:2a:47:6e:
                    cd:f1:aa:2c:9f:5a:96:0e:50:78:9f:5f:76:d4:9e:
                    ff:88:67:0a:43:1a:e6:42:0d:1e:1d:0e:96:bf:bf:
                    e5:b7:7e:89:0a:4a:f0:d9:f2:c7:3c:03:ca:01:02:
                    e9:a8:e2:67:55:52:3a:0e:fd:42:51:bb:9e:cf:7b:
                    9a:a7:80:4b:ee:dd:48:4a:91:87:d8:d9:6b:ed:ad:
                    3b:41:a7:5c:f8:eb:27:2c:f8:a5:ec:01:02:e6:61:
                    e2:05:a5:56:9c:f3:65:1f:37:18:00:80:68:b1:1c:
                    ad:b7:e7:a6:13:d7:e0:8e:9e:74:c2:c2:83:64:90:
                    9a:fc:8c:07:bd:d7:d9:c8:88:7d:89:2d:5a:6b:69:
                    b7:7b:e3:34:d7:cf:30:10:bb:7a:62:fe:3b:fa:fa:
                    57:d7:d0:56:e5:19:0a:3f:e5:00:ae:e9:0a:1d:23:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6C:93:5E:C9:C5:AA:C6:05:3B:C4:6D:D9:4F:16:0C:62:16:52:9E
            X509v3 Authority Key Identifier:
                keyid:ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:de:4e:54:48:73:7c:79:5e:60:d9:8f:91:0f:04:10:8a:
         c9:dc:d1:68:b3:df:b3:a9:01:93:72:bf:d2:76:0e:7e:b2:d7:
         2d:80:8c:fa:0e:e6:ef:df:34:5c:4c:2b:2a:9d:36:56:b0:b3:
         6a:de:41:cb:36:bf:0b:7d:63:14:06:e8:c2:f3:b0:27:f5:e7:
         73:18:8b:1d:1c:0d:54:da:65:46:42:f0:88:4d:b5:73:26:48:
         21:7e:28:23:ca:09:b5:8c:85:bb:1c:7f:98:5a:6d:b2:0b:83:
         d2:a8:52:1f:61:eb:93:fc:49:a7:bd:67:d0:e3:1d:ff:e6:73:
         e9:90:c8:8c:6f:bf:15:94:4f:33:cb:c5:dd:5b:6f:d0:ae:25:
         f1:94:f4:e3:d7:7f:33:23:ac:59:fa:d1:3d:ad:96:5d:b7:39:
         b3:10:8e:3c:64:ed:72:30:6d:40:f8:09:91:92:50:c6:0a:29:
         2b:db:c3:60:ef:7e:75:7e:d5:bc:61:ca:9e:a7:19:2f:47:2f:
         f3:2b:17:0c:99:b6:9f:05:06:4a:fa:6a:74:11:e1:c8:9b:bf:
         c4:22:c4:4d:b2:7d:6e:a0:a9:4e:76:02:e8:88:8e:a6:53:8a:
         5d:50:12:80:a3:b3:01:f6:ba:b9:18:23:12:0b:32:38:7d:e1:
         a0:41:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:25 2025 by rpki-client