Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft
File:                     A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft (raw, json)
Hash identifier:          STfQ9lVTQ5jD0/gXrM/ADcEYsRgSj3crDvbGCXuj3rY=
Subject key identifier:   32:CD:73:33:41:E1:80:1F:78:D4:9F:B0:EA:27:AC:09:4D:A3:AD:86
Authority key identifier: A7:22:11:91:CB:E9:36:AC:12:AB:9D:E8:AB:74:9D:96:6A:1E:D9:9E
Certificate issuer:       /CN=A7221191CBE936AC12AB9DE8AB749D966A1ED99E
Certificate serial:       2B48AD303FD21C6A87F71A2A08EAB393F5A59D07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft
Manifest number:          01DA
Signing time:             Wed 02 Jul 2025 14:46:11 +0000
Manifest this update:     Wed 02 Jul 2025 14:41:11 +0000
Manifest next update:     Thu 03 Jul 2025 16:47:11 +0000
Files and hashes:         1: 323830343a383363383a3a2f33322d3438203d3e20323732323139.roa (hash: cZxipir7eNkLYgspdlsqzrjhDoIRpJNDeOFsbaEV6nQ=)
                          2: A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl (hash: T8HMsJtELfTtInNpLrYS3vg2t2JXXioPLusiUWEFTwg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl
                          rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:ad:30:3f:d2:1c:6a:87:f7:1a:2a:08:ea:b3:93:f5:a5:9d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7221191CBE936AC12AB9DE8AB749D966A1ED99E
        Validity
            Not Before: Jul  2 14:41:11 2025 GMT
            Not After : Jul  3 16:47:11 2025 GMT
        Subject: CN=32CD733341E1801F78D49FB0EA27AC094DA3AD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:5c:71:66:41:06:da:5b:3b:44:85:d3:61:
                    36:b7:d7:f9:63:6e:f8:c2:b4:eb:44:90:c9:74:bc:
                    2f:17:35:70:03:30:4b:d3:25:48:3b:28:18:d0:5b:
                    7e:ea:76:27:73:e7:a0:16:38:d8:27:bb:f0:25:08:
                    f5:5d:3a:bf:9f:c7:f9:da:a4:06:c8:dc:91:c3:ed:
                    b6:98:bf:b2:43:5a:1b:c7:d6:48:f5:aa:7b:fe:9c:
                    38:11:ff:b4:43:5e:fc:57:97:08:9a:56:b0:a3:21:
                    8d:0e:f1:06:ca:e8:a0:db:ae:e3:1e:70:8b:33:44:
                    48:ee:bc:00:91:fe:d8:c3:3d:b4:c1:b2:a5:40:20:
                    7d:ba:2a:90:b7:e5:4e:ce:1a:92:8f:c1:32:da:e6:
                    2a:19:84:9a:a3:6c:52:c4:35:c3:2a:c7:53:ef:15:
                    cf:88:e5:ec:24:2e:44:67:20:bd:ef:5e:10:3e:19:
                    39:59:da:a2:ec:e1:72:73:da:aa:ab:52:d2:0d:bd:
                    bf:7e:08:75:2c:aa:ad:5a:48:06:a1:04:e3:25:16:
                    83:6c:c0:09:1d:17:48:03:7b:17:44:65:d8:08:9b:
                    8f:d8:a8:35:ae:12:04:bf:f7:b8:08:ba:21:f8:67:
                    4b:6a:71:74:80:d9:e1:fa:cb:8e:0f:d3:4c:b8:c8:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CD:73:33:41:E1:80:1F:78:D4:9F:B0:EA:27:AC:09:4D:A3:AD:86
            X509v3 Authority Key Identifier:
                keyid:A7:22:11:91:CB:E9:36:AC:12:AB:9D:E8:AB:74:9D:96:6A:1E:D9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5c7QJbqqp1bM5e67qXgwyDxazCG8q5x9wKy2aQ383xsi/0/A7221191CBE936AC12AB9DE8AB749D966A1ED99E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:bf:a3:12:66:e6:d4:44:14:29:fd:7e:7c:e2:d9:b2:41:
         f8:4b:ad:b4:9f:47:e1:33:14:cb:4f:58:e1:07:60:cf:4e:66:
         24:d0:38:1f:a9:1c:02:9b:39:3f:45:c4:8d:4e:ce:ed:08:70:
         39:71:7f:94:a1:32:a6:89:1f:f3:76:19:37:32:02:0a:0a:2e:
         20:cc:39:4b:1a:b8:63:81:52:52:d8:fb:90:7a:1f:bc:e6:01:
         86:17:31:3c:df:cb:06:38:1c:36:7f:c3:93:4c:6e:94:ce:4f:
         7e:cd:a8:bf:90:77:2a:02:63:9c:d1:56:d8:ba:61:b4:a2:0b:
         7a:f0:17:9b:5a:6e:45:43:3b:93:75:75:41:d9:f3:8a:ab:75:
         33:67:2d:6b:5a:02:8c:20:77:d1:ca:21:36:57:5e:3b:30:ae:
         f1:ba:50:e7:83:69:fc:5a:61:9d:4d:89:b8:4c:89:63:b7:04:
         cf:c7:4a:26:74:82:78:9b:d5:3d:93:22:cd:ce:75:7c:91:cc:
         0d:27:ef:59:8f:a2:69:dd:57:74:7b:a6:30:f5:7e:58:62:36:
         b6:2a:8a:07:d3:6e:72:bd:0b:1f:01:6c:71:9a:07:26:3d:35:
         f9:21:47:fd:b3:13:91:39:24:7a:c6:2a:7a:c6:80:b2:ff:26:
         3b:81:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:46:02 2025 by rpki-client