Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
File:                     EC37D17C061BE878628F004F6A8613266553C3FB.mft (raw, json)
Hash identifier:          aiRxVVb3FFxthCholkzKeGM6X7Q000pTexuPJlYQ4/M=
Subject key identifier:   84:AF:8E:AB:BD:08:DB:57:1F:83:09:1A:05:09:50:13:47:AA:F5:94
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       20C43D624B9C67B5DEEE3F06E18168D058AECA47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
Manifest number:          0327
Signing time:             Mon 20 Oct 2025 04:00:00 +0000
Manifest this update:     Mon 20 Oct 2025 03:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 04:00:00 +0000
Files and hashes:         1: 3137372e3132352e35362e302f32322d3234203d3e203532363037.roa (hash: gTm3JE2wZ9ec0kDgE2rLrOqSrbtHePEDbcoKoOa5iWE=)
                          2: 323830343a336266633a3a2f33322d3438203d3e203532363037.roa (hash: SkUiwPPRh8RlEDwLS6Lx4aUfllu6KV1Az1T8u5m5VNc=)
                          3: EC37D17C061BE878628F004F6A8613266553C3FB.crl (hash: cTYkLOTqIvkqCBHILbYHdrW647JATRjUJwIcsSmJl4Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:3d:62:4b:9c:67:b5:de:ee:3f:06:e1:81:68:d0:58:ae:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Oct 20 03:55:00 2025 GMT
            Not After : Oct 27 04:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:ef:29:3e:d4:54:de:7e:2b:0f:b9:e8:00:
                    dd:c3:6b:ae:98:ff:aa:43:45:35:c0:84:ce:de:b5:
                    2d:71:42:d3:13:d0:23:35:20:be:df:ae:82:62:f3:
                    53:21:ea:0e:c0:8d:40:6d:2a:46:3d:05:6a:bf:26:
                    88:b6:f2:e4:87:26:e9:a4:65:57:d9:c9:82:67:f6:
                    99:fc:61:c6:5a:fd:4b:2e:cd:ad:69:b5:dd:5e:0c:
                    01:58:3f:60:e1:0c:1e:f4:39:ec:3e:59:a5:35:1e:
                    17:b4:d5:d8:be:fb:be:d7:a9:11:bd:2f:f2:f9:ab:
                    00:86:f3:83:f3:43:2c:5f:d9:f8:c3:8c:b2:12:99:
                    b0:86:cc:99:0c:82:3f:77:3b:59:62:78:00:f6:8b:
                    7e:3c:83:7b:20:84:b2:ba:06:4f:a6:66:b5:83:a9:
                    b4:f0:af:00:af:39:5b:e0:9c:c8:50:38:f4:6e:50:
                    b8:9e:63:99:54:31:f7:97:a3:24:4e:0b:f1:6a:46:
                    5f:de:00:a6:1d:7e:88:da:87:c9:b8:3b:72:2f:d9:
                    15:65:fb:d9:cb:db:ad:da:2b:8b:de:73:23:5a:1d:
                    19:c9:f9:99:de:f8:e9:fd:d7:dc:2c:f8:42:13:04:
                    40:dc:3a:44:d1:bb:1f:cc:73:4f:1c:e1:33:d8:36:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:8E:AB:BD:08:DB:57:1F:83:09:1A:05:09:50:13:47:AA:F5:94
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:bc:a1:3c:0a:21:d2:22:c2:34:3b:2d:1a:94:8a:28:94:5a:
         84:a3:27:3f:ca:e9:14:a5:95:f4:62:d1:04:99:26:94:71:03:
         15:6d:3d:23:37:50:c6:24:61:8a:26:ab:e4:ba:e1:ff:66:c1:
         cc:e3:24:d4:9e:6e:02:65:cb:f9:f2:25:b0:7b:2e:01:91:fa:
         7a:41:c4:9d:1d:d4:04:e8:fd:60:8c:cc:39:a9:b4:23:a2:07:
         4b:b0:54:57:ef:20:df:79:b9:62:1c:f4:87:5d:7f:cc:7d:3f:
         de:08:5e:6c:9e:cc:30:7f:43:33:49:b9:8a:0a:14:3a:e3:f1:
         eb:36:8b:ca:40:48:54:12:84:b9:c7:0f:27:45:25:e0:2c:5a:
         89:1b:18:41:48:c2:4c:2b:f8:51:49:6b:07:a4:ad:34:95:a9:
         a1:04:f6:97:cc:6c:84:6f:ed:2b:70:a8:5f:22:19:c2:66:44:
         82:f8:23:b6:0c:fb:05:a4:4f:f1:d6:ed:d6:c4:f7:11:0d:2c:
         c2:c2:26:73:5a:ee:e0:43:32:a2:3a:4b:f0:9d:53:fc:13:65:
         db:d6:80:4f:35:93:f0:f6:19:ed:93:c3:84:a4:f8:5a:d6:84:
         ce:ee:73:af:20:50:38:19:9e:2c:17:99:04:5c:52:6a:33:3c:
         ad:36:74:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:13 2025 by rpki-client