Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
File:                     BB28C577DF924111463D0D089EB3700DB6333A08.mft (raw, json)
Hash identifier:          ShoV97RrS9C8oMLeao2KxQObaZ66Bx819KLwhRZIAm0=
Subject key identifier:   C8:86:3E:A0:D5:B1:3E:83:23:5A:A5:D0:86:F6:FC:DC:28:62:81:25
Authority key identifier: BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08
Certificate issuer:       /CN=BB28C577DF924111463D0D089EB3700DB6333A08
Certificate serial:       044FE1CDD1B553CB3037EB758FB9253D7FDDA87C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
Manifest number:          E4
Signing time:             Wed 02 Jul 2025 07:19:20 +0000
Manifest this update:     Wed 02 Jul 2025 07:14:20 +0000
Manifest next update:     Thu 03 Jul 2025 10:02:20 +0000
Files and hashes:         1: 3137392e34382e3138342e302f32322d3232203d3e20323731303935.roa (hash: mf5kOnGLinzLoK2P/Age80BdVk/qTly4H6v3aFtSNSc=)
                          2: 3137392e34382e3138372e302f32342d3234203d3e20323731303935.roa (hash: SavhPxPE5Lyf7T0B4MpwnGMSqHRjb2lI5Yxz3msUeYc=)
                          3: 3137392e34382e3138342e302f32342d3234203d3e20323731303935.roa (hash: rxXWlnG9uSrzj/oTEfd1aQfeZWUr6LNsK2YLrN23yqg=)
                          4: 3137392e34382e3138362e302f32342d3234203d3e20323731303935.roa (hash: 3k9Wk5BftPyULW/+XZwhH81s3yMlae2T/feE4Z166ZI=)
                          5: 323830343a373633303a3a2f33322d3332203d3e20323731303935.roa (hash: kOaelJSbrawNGUj8SHViCcp4NpZdOn1Ab0xJJJsOHrU=)
                          6: 3137392e34382e3138342e302f32332d3233203d3e20323731303935.roa (hash: hkmXaAW54tx3D58QrdDkfMXZVkhFpkSCBOUaBNTviWk=)
                          7: 3137392e34382e3138352e302f32342d3234203d3e20323731303935.roa (hash: qwQzXDvA/TR6rEcBF3MKa/9LCG7ymfe1c48+OCzzsOE=)
                          8: BB28C577DF924111463D0D089EB3700DB6333A08.crl (hash: sIm6llzlSKT5HMWfzfWHi1+MMmt55t6YU4gtF8Ux0PI=)
                          9: 3137392e34382e3138362e302f32332d3233203d3e20323731303935.roa (hash: UK1FVjUUS4NN95+sbBGz7vOGXmhAugdySF3Yo3LFggk=)
                          10: 323830343a373633303a3a2f33332d3333203d3e20323731303935.roa (hash: rMLm5hkY3lLZTv23WMtyompaxAN9MdvbPHahAcydOtI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 10:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4f:e1:cd:d1:b5:53:cb:30:37:eb:75:8f:b9:25:3d:7f:dd:a8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28C577DF924111463D0D089EB3700DB6333A08
        Validity
            Not Before: Jul  2 07:14:20 2025 GMT
            Not After : Jul  3 10:02:20 2025 GMT
        Subject: CN=C8863EA0D5B13E83235AA5D086F6FCDC28628125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:9b:42:90:54:9d:c9:50:a1:83:5c:91:83:
                    63:b6:c6:87:f3:7c:95:c9:9f:e9:de:17:24:e9:88:
                    38:65:c1:29:84:d7:82:84:52:ee:d3:7a:77:10:2d:
                    a0:a6:d2:67:d6:83:9b:9a:38:1d:f9:54:55:88:11:
                    1f:39:4f:d6:71:8e:cb:f7:1c:6f:4f:24:fb:9c:18:
                    a3:b9:ba:05:41:4a:56:ac:8f:b6:02:ec:5f:cd:21:
                    b3:bd:36:a4:22:97:8c:8f:40:0a:dc:c2:06:87:5c:
                    77:c3:0f:e7:cf:db:0e:b9:47:4d:e0:65:43:80:b7:
                    ba:43:12:00:a9:f0:74:e6:0a:28:3b:1a:9c:b7:0e:
                    e1:1b:5e:a5:62:00:a0:aa:1d:c4:d0:8e:40:44:bb:
                    cb:d0:8e:8b:30:16:c3:b1:35:72:14:fe:01:e8:f0:
                    6e:f2:7d:1d:b1:85:46:f4:4d:1a:fc:63:77:2b:de:
                    99:aa:5f:6e:2b:46:a8:55:9b:e6:7e:09:ee:c7:d4:
                    9c:a7:ac:db:4c:13:4e:2b:3f:1e:e7:28:4c:0f:14:
                    83:64:b9:df:ed:a5:46:32:97:d4:6a:fc:5a:90:26:
                    fe:9c:aa:6f:18:b7:f5:f7:cb:e2:07:04:59:88:c9:
                    bf:38:02:7f:7e:a5:d4:10:25:84:1a:15:8b:84:05:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:3E:A0:D5:B1:3E:83:23:5A:A5:D0:86:F6:FC:DC:28:62:81:25
            X509v3 Authority Key Identifier:
                keyid:BB:28:C5:77:DF:92:41:11:46:3D:0D:08:9E:B3:70:0D:B6:33:3A:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB28C577DF924111463D0D089EB3700DB6333A08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/BB28C577DF924111463D0D089EB3700DB6333A08.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:5b:f6:19:1f:46:d0:76:9e:2f:56:b7:17:a4:b2:dc:ea:
         16:21:b4:e7:f1:94:91:a6:da:b2:b2:b9:2e:5e:b9:47:bd:94:
         51:e3:35:5a:24:2a:a9:75:37:1e:96:d9:3b:08:19:24:9a:db:
         26:33:1b:c6:2f:de:81:6e:57:46:5a:f6:d6:c9:f8:5e:fa:dc:
         46:e1:3b:95:c4:16:61:f3:df:70:75:1d:3a:14:a2:52:1b:e0:
         23:00:74:f5:26:d4:87:e1:17:cd:c9:f2:72:10:4b:e5:fa:62:
         c7:27:5e:10:f5:02:47:d8:85:7e:10:e2:23:b2:32:dc:18:97:
         fa:f2:fb:14:e7:2f:22:d7:34:d0:48:01:56:dd:e7:d1:d6:c0:
         65:7e:bd:fa:22:3b:e2:f8:09:97:3d:47:04:10:0c:50:19:bb:
         6f:ef:d4:6d:10:3a:ab:db:e5:3b:48:2c:8f:62:51:f5:4f:95:
         ce:99:51:c9:60:2d:57:06:5c:e7:81:e3:17:26:ad:95:0d:ef:
         a6:c9:0e:df:60:ae:d6:46:c5:81:4c:48:e3:e3:1f:d7:ee:66:
         5c:72:f1:f2:7d:ca:e7:ff:d5:03:3f:88:2d:6a:67:0f:6d:b8:
         fa:80:a3:40:2d:0f:54:17:a2:c0:42:96:2a:5a:b6:30:26:a0:
         60:dd:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:23:33 2025 by rpki-client