Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          xVJIEbh0vUiaeZbDwkGLBfhDgcafDbS61ntgLPbGlZQ=
Subject key identifier:   06:42:D7:45:FF:9F:15:CB:7D:0B:D8:4C:E8:B7:32:A0:DF:D2:8E:4B
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       1633A7962FB09A1E501A203329FB950FF5C73C67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          0119
Signing time:             Mon 30 Jun 2025 00:57:43 +0000
Manifest this update:     Mon 30 Jun 2025 00:52:43 +0000
Manifest next update:     Tue 01 Jul 2025 02:32:43 +0000
Files and hashes:         1: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: roCjiwn3BFM68/X9lTNC/eHWHyzOA8loX33ToscVxEs=)
                          2: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: 8P1eaFp0tA8qC8rMxyfqGAMEpI9v3qQCV5zgBFTyZZg=)
                          3: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 9nEqa5tSdE4U2Bk6FZixssrYslJxLVWNmjZzPYiScQE=)
                          4: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: 7avbEw36mUHNbqt8USdMKE7K3As3U+10r7o3kE8SXJs=)
                          5: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: hQb+4bJCLueZdw9zMe8maPJ2VFU86LTKiK7lH2fIgzA=)
                          6: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: UdG7kbJM/WVCbUaEpLZG+mOcMv/uiRVonmIjQ54ofpE=)
                          7: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: pTb4BZBb+vT1N3y2rOEzZTkDwA1MFDS+AauZA2gcMWU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 02:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:a7:96:2f:b0:9a:1e:50:1a:20:33:29:fb:95:0f:f5:c7:3c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Jun 30 00:52:43 2025 GMT
            Not After : Jul  1 02:32:43 2025 GMT
        Subject: CN=0642D745FF9F15CB7D0BD84CE8B732A0DFD28E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:41:34:6e:68:ad:38:70:80:07:c9:d2:2b:
                    69:90:94:38:de:69:38:e9:46:2b:4d:99:5a:0a:25:
                    1b:67:0e:8b:65:cd:14:20:5a:68:81:4d:36:d6:ad:
                    ab:5d:a1:85:4a:9d:83:5f:ed:86:08:fa:04:3c:3b:
                    0a:82:0f:f8:2a:34:37:39:e7:90:67:ec:2e:cd:29:
                    e3:f9:bb:c3:df:a6:f1:70:99:ea:82:73:ea:9b:06:
                    62:7d:57:af:0b:dc:9d:47:72:46:d1:25:ac:04:ab:
                    c8:15:05:3e:97:36:f9:17:52:df:f6:3f:12:f4:e4:
                    aa:b0:b9:74:5f:c4:b0:87:02:87:78:6a:2a:7e:13:
                    f0:dd:22:50:93:71:5e:98:43:b3:f4:d6:f3:c8:9d:
                    97:57:99:df:9b:ae:83:5f:84:0c:80:f7:64:c7:04:
                    cb:3e:e5:82:e7:04:dc:f7:b7:ad:0e:2b:9c:6a:22:
                    51:a4:77:69:c9:bc:a2:16:95:cc:fb:2f:d8:42:54:
                    5e:21:b1:85:13:6b:d8:36:ed:3b:64:62:df:ef:dd:
                    b8:73:c2:57:9d:8f:2c:54:75:de:62:7f:ee:03:f4:
                    5e:11:3e:24:e8:39:14:c4:e6:aa:c0:f9:b8:4a:af:
                    6e:5b:39:50:81:e8:bc:e8:94:49:de:e8:48:38:c8:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:D7:45:FF:9F:15:CB:7D:0B:D8:4C:E8:B7:32:A0:DF:D2:8E:4B
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:16:46:31:68:d0:42:56:a0:84:0a:f7:ef:fa:13:9d:cd:
         80:47:c7:90:c6:39:4f:f3:d5:87:62:ef:32:d0:cb:99:53:49:
         2f:d0:1b:69:5b:80:27:11:e0:4b:38:63:fe:3c:9f:3e:50:79:
         9c:1d:12:bf:d4:da:7f:0d:42:a1:45:11:64:1a:cb:9f:f2:46:
         80:5a:40:35:e5:75:5d:c1:9c:94:95:ff:0f:43:14:d3:ab:3f:
         5f:95:f3:1d:71:0c:6e:62:0c:83:a7:c5:ca:8d:aa:25:03:b6:
         37:0b:64:d3:6b:78:d9:d5:8c:3d:a4:5f:65:39:05:da:88:d4:
         a9:46:9b:d4:1e:68:77:b1:de:15:87:b5:cc:fa:39:bc:18:14:
         2b:89:55:ef:6b:cd:e7:d7:fd:b4:4b:10:c1:ee:67:6d:dc:0e:
         cb:13:3e:ae:bd:83:de:d3:25:2b:45:90:76:51:dc:86:31:57:
         44:c9:a5:10:ab:3a:5d:7e:a8:8d:35:10:32:66:8c:2c:b7:57:
         b2:00:b1:2d:b9:4b:11:dd:ea:07:aa:e6:94:d5:c8:b6:0f:a9:
         a5:05:04:84:32:91:34:c6:6a:92:fe:60:2f:a1:aa:e8:53:4e:
         c5:95:50:b4:52:70:cf:74:fe:84:9a:43:45:00:50:d6:ce:56:
         cb:93:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:34:37 2025 by rpki-client