Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
File:                     99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json)
Hash identifier:          DaQeOb3E91UHB/whXFFV+mlIvAjHO2lsbRCKhSuS5IQ=
Subject key identifier:   B1:52:A1:BD:62:B0:6F:E0:B4:E1:4B:61:B6:49:91:CF:92:05:48:F2
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       33F67CE1087FF657430A1D73C3CEB48777526758
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
Manifest number:          AE
Signing time:             Mon 30 Jun 2025 07:35:24 +0000
Manifest this update:     Mon 30 Jun 2025 07:30:24 +0000
Manifest next update:     Tue 01 Jul 2025 09:40:24 +0000
Files and hashes:         1: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=)
                          2: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=)
                          3: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: 1Sa9BnxDZl+SZTWvhQEvPIu2yfRD62qGvF4DfmVJ1DM=)
                          4: 3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (hash: +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=)
                          5: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=)
                          6: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=)
                          7: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=)
                          8: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=)
                          9: 3137372e38352e3232302e302f32322d3232203d3e203532383438.roa (hash: bpwbadI4PJrdbgkJUAI3blXoAxBzzJDOU/RK8agy34I=)
                          10: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 09:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f6:7c:e1:08:7f:f6:57:43:0a:1d:73:c3:ce:b4:87:77:52:67:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Jun 30 07:30:24 2025 GMT
            Not After : Jul  1 09:40:24 2025 GMT
        Subject: CN=B152A1BD62B06FE0B4E14B61B64991CF920548F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:6b:33:36:39:92:8e:87:75:bd:f3:a4:b3:
                    df:3b:a4:d3:67:45:1a:1b:45:59:d5:ba:ae:27:6d:
                    66:48:54:7f:ad:66:61:ee:9d:c1:db:20:9c:86:7f:
                    05:7f:a4:a9:84:97:99:84:84:e0:98:89:3a:3d:4a:
                    ea:6f:d4:e6:f6:29:2f:8d:5b:07:c2:64:98:04:9a:
                    67:8d:f4:ce:b8:80:53:8f:96:40:e4:5d:aa:f0:c5:
                    7d:d4:3d:21:dd:fd:1c:36:84:b1:87:72:88:a6:db:
                    23:21:00:4c:74:35:f0:15:98:a0:c3:6b:bb:e8:db:
                    f6:97:bc:a8:61:4e:92:8f:15:06:b0:50:ba:17:35:
                    10:f3:9d:f6:7d:7e:e7:a8:36:5c:da:42:1d:50:f6:
                    b2:31:55:a8:fc:50:de:e3:2e:2e:44:6b:d3:4c:1a:
                    53:c7:29:71:9a:6f:d2:df:98:c7:77:7e:ae:4c:ce:
                    c3:20:67:cf:bd:dd:37:27:2d:90:4f:5f:ff:eb:dc:
                    de:71:85:17:57:81:d9:20:c2:b0:d2:75:7e:e5:6e:
                    ab:cc:14:19:35:28:f8:79:ae:42:70:61:c7:77:8b:
                    a5:7d:ea:3d:e1:f0:f2:05:51:e5:76:c4:90:02:b3:
                    cf:bc:a8:a1:69:85:fc:ee:b6:f7:40:1c:50:96:dc:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:A1:BD:62:B0:6F:E0:B4:E1:4B:61:B6:49:91:CF:92:05:48:F2
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e7:fe:aa:32:00:31:2f:71:70:d5:c0:72:95:d6:31:fb:39:
         4a:2b:2f:bc:89:b5:c0:5e:7f:92:d3:ad:da:ef:4a:dd:37:aa:
         da:94:5f:c3:18:e4:01:95:45:61:a2:b4:a8:55:46:b6:29:41:
         ca:6d:b3:c5:21:ac:20:7e:c5:d8:81:32:ba:b9:49:f6:d2:37:
         f5:ef:46:0e:69:09:74:5f:cb:73:e3:94:d9:1a:e2:a8:4f:84:
         2c:2c:f4:71:79:ad:4a:a5:cd:ff:f7:42:e5:74:a1:34:6c:4f:
         40:4b:53:e6:9b:01:04:aa:92:1a:87:fb:63:5d:c5:de:30:2d:
         6b:ae:93:67:f5:55:af:6a:a1:17:8b:5c:11:32:87:a0:0f:e9:
         96:54:dc:dc:ea:77:e3:e0:e9:02:37:87:80:2e:ca:83:64:3c:
         b6:12:d0:f8:69:68:f0:33:6b:ae:89:00:7c:f5:f6:71:6a:1e:
         3e:2a:da:98:8d:c9:85:99:f9:4c:1b:33:76:0c:9e:5c:84:f8:
         b8:87:b5:26:3d:ff:a0:eb:4b:9a:e7:53:64:b2:cc:b0:42:98:
         96:de:bb:20:88:76:a2:62:ab:04:b9:7e:47:30:64:c4:42:32:
         75:f2:e2:e1:5e:0d:42:ed:da:26:07:52:c2:07:3b:2d:08:95:
         ea:45:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:54:14 2025 by rpki-client