Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
File:                     A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft (raw, json)
Hash identifier:          KPzwO0RyGSHChVaoyF0D1DEj5sYxmC3G+XlRYD2ofF0=
Subject key identifier:   DD:5B:33:5E:62:23:C0:0A:A4:BF:02:84:0C:CC:57:3A:E7:9A:FC:8D
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       5151A0D738B13173FD9405A936BCC19CFD47439F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
Manifest number:          0257
Signing time:             Mon 30 Jun 2025 01:08:25 +0000
Manifest this update:     Mon 30 Jun 2025 01:03:25 +0000
Manifest next update:     Tue 01 Jul 2025 02:54:25 +0000
Files and hashes:         1: A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl (hash: NI6349e6mnr7mkBMHSTEryHPYGnA5YXhCvHV14YIyUc=)
                          2: 3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (hash: fdcldvS++SsDTYn8odxPcaAMMAB1n8qJoznzHm+tfAw=)
                          3: 3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (hash: OrXhQQlp7RZ6/MIGX1Taycaaqe9MXNKl7a134sAYK6k=)
                          4: 323830343a313063633a3a2f33322d3336203d3e20323633363530.roa (hash: +qIJkvUXoe+sIHM7LFZEksM0O2f43VVtgvbVf1lt8CU=)
                          5: 3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (hash: KgQCtdSAmI2B7P7wIGxaMQ4eNKfghqvBGqN62/hpOTY=)
                          6: 3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (hash: J/Q4INq5+rxx5or7Dtxsc3e0XJVFM0Z9uzhdnU1PvWM=)
                          7: 3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (hash: 3cl7qGY3Uah+LpaKDYBwqUJTIJ54UAe8CPZu85SXw8w=)
                          8: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (hash: LXRmb4zfD6o3B7/VmuFOKShUsVwwF+Iq5iC0r91FsZM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:a0:d7:38:b1:31:73:fd:94:05:a9:36:bc:c1:9c:fd:47:43:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Jun 30 01:03:25 2025 GMT
            Not After : Jul  1 02:54:25 2025 GMT
        Subject: CN=DD5B335E6223C00AA4BF02840CCC573AE79AFC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:15:ff:67:75:ca:a5:e5:48:e6:80:27:99:
                    b4:43:8a:c1:7a:0f:f6:55:1d:54:67:b1:30:0f:2a:
                    89:aa:79:94:40:da:36:a4:72:fc:c0:dd:da:0d:af:
                    0d:62:81:01:b9:86:6c:7c:ec:23:e1:e5:d2:f7:2c:
                    28:89:c7:ec:b1:90:9f:ba:9a:a4:95:7c:2e:71:b8:
                    2c:e7:86:9f:23:de:c8:6f:7b:48:eb:98:e4:69:fb:
                    20:e9:ed:85:10:38:0e:fb:31:86:70:9b:69:4e:d5:
                    a9:ce:ec:ec:01:78:1c:3a:f7:a9:e4:fc:95:ad:99:
                    5c:3f:7f:0e:da:43:f5:30:05:f9:d7:10:13:53:1b:
                    a2:ed:94:27:b3:27:e5:c6:46:45:49:e8:18:52:09:
                    a6:a2:d2:9a:92:f5:64:22:12:9d:45:99:c7:42:bc:
                    9c:65:05:15:0f:10:fd:8a:6a:96:86:9c:20:25:f2:
                    17:f7:a1:92:18:a6:2e:67:7b:d9:da:cc:04:63:c7:
                    8f:9b:fe:ec:f0:c9:f8:14:6a:3e:25:44:7e:3e:83:
                    a8:ce:94:d8:bc:02:4a:1a:86:5c:ba:ce:20:a7:cd:
                    b7:55:7e:f1:53:2c:4f:6f:08:66:91:3d:56:5c:ad:
                    bc:da:5b:3d:2b:2f:8f:5d:01:ea:bc:58:57:0f:1b:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5B:33:5E:62:23:C0:0A:A4:BF:02:84:0C:CC:57:3A:E7:9A:FC:8D
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5b:16:c1:24:97:07:3d:9e:aa:f6:e4:6a:9e:6c:85:b2:59:
         4a:1c:9f:78:54:a8:d9:4d:5a:5a:31:f6:f9:93:eb:59:09:7e:
         0e:72:0e:7c:9c:ea:73:97:25:9a:a6:b3:d9:e7:01:7f:c6:b8:
         6d:04:1a:f6:b6:86:c8:47:19:14:6f:e6:c5:92:39:da:23:14:
         4d:94:34:52:d1:66:14:4f:92:c9:dd:bb:ac:8a:fc:36:04:c2:
         31:f6:9e:06:1d:45:f5:73:41:1b:ef:9d:3a:4b:75:9b:19:a2:
         09:ee:ef:a1:18:41:9d:1c:5a:91:bb:3d:dc:6a:a3:89:b9:d5:
         a2:c3:db:32:f7:92:eb:1f:3e:14:9a:f0:d4:c0:77:2c:3e:79:
         cd:54:ac:15:8a:36:93:f9:a3:22:48:8d:ac:fb:e4:db:51:4e:
         3a:46:1f:aa:57:e8:41:c2:47:3d:06:36:f9:55:5d:1a:cc:e5:
         52:34:56:18:e4:52:21:b1:3b:43:be:65:a2:32:f8:87:75:31:
         d8:93:8e:b3:8b:46:a2:b2:61:c9:82:f6:36:15:86:3f:c4:37:
         df:6e:5d:1a:55:d2:5b:f1:30:1e:2e:24:70:f9:ef:d5:eb:30:
         f7:81:4f:3a:08:ff:15:87:66:06:3d:6b:91:70:55:4d:3a:44:
         f9:56:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:40:46 2025 by rpki-client