Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
File:                     357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft (raw, json)
Hash identifier:          n/UG5wRw4+AM1FIDBrDu/q+nwWncMoA14d6GRoA/rCY=
Subject key identifier:   06:04:41:7F:16:A2:33:27:D4:C6:A8:77:C0:AA:8D:50:BB:71:58:E7
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       65B50CBB490F7D8F3513D1BE3D0FD5FC6F9CD2F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
Manifest number:          028D
Signing time:             Sat 23 Aug 2025 05:11:15 +0000
Manifest this update:     Sat 23 Aug 2025 05:06:15 +0000
Manifest next update:     Sun 24 Aug 2025 06:31:15 +0000
Files and hashes:         1: 357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl (hash: BXyV3jyXIqSFx4y1IwUKWILnL1Sx1VCDbxdd8neCb7Y=)
                          2: 34352e3136392e3135372e302f32342d3234203d3e20323638313136.roa (hash: SRpuftg/q39McEuI+pMNT/QjhDteZDm/A9j/NxS09HY=)
                          3: 34352e3136392e3135392e302f32342d3234203d3e20323638313136.roa (hash: UKbA3xtojHWRKljuXm8Rn4fCf3qItyLDVPfPjD3UCw4=)
                          4: 34352e3136392e3135382e302f32342d3234203d3e20323638313136.roa (hash: nn1II6dJ8s4MEe7QoUpaWFdkR2uQukgWW+oIh6a1sLc=)
                          5: 34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (hash: 7wG+NG3qrvXuiYzFmKV9SZRWcEYBcZawH7XbmFppOvE=)
                          6: 34352e3136392e3135362e302f32322d3232203d3e20323638313136.roa (hash: Me2As91cxhG+/dqx8yX9zaYQScOJY/cWFuECkfueDI4=)
                          7: 34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa (hash: eqqfYP5Kh8QIH7clBXSyBhqialr/Y42KYJ0I6naQTsk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b5:0c:bb:49:0f:7d:8f:35:13:d1:be:3d:0f:d5:fc:6f:9c:d2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Aug 23 05:06:15 2025 GMT
            Not After : Aug 24 06:31:15 2025 GMT
        Subject: CN=0604417F16A23327D4C6A877C0AA8D50BB7158E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:ef:c6:17:df:c6:d4:61:8c:7f:22:20:22:
                    52:a2:b9:44:59:ea:26:2c:c5:0f:56:b9:ec:cc:12:
                    b4:2f:4a:f9:d3:94:4e:de:54:3a:b1:e0:d7:e7:84:
                    00:f9:df:c7:d2:5e:62:fd:b2:37:17:9a:04:e8:1e:
                    68:42:eb:36:4d:be:00:50:ae:fa:e4:62:b3:f7:3d:
                    24:18:c6:73:df:72:8d:e5:f0:dd:26:a1:ac:2b:9f:
                    1f:9c:f7:cd:ec:ba:24:be:35:aa:64:c6:36:c5:43:
                    e3:6a:6e:09:28:69:14:0b:b6:10:87:8f:a1:87:a6:
                    39:8d:58:52:d3:58:47:b5:ff:e5:02:fc:f4:3c:6c:
                    67:46:3c:06:bb:b7:e2:a1:95:d1:7f:79:5f:d9:2b:
                    81:03:4f:fa:b6:c5:6f:2c:f7:a2:e9:bd:f1:ba:c1:
                    e4:fc:ce:ff:e8:ce:9d:c2:6e:34:ec:c2:35:ff:59:
                    14:82:96:27:3a:9e:87:57:39:ae:08:cf:b5:d4:4c:
                    5a:b9:77:83:3a:17:c1:5c:a5:0a:4a:11:76:f2:1c:
                    b1:ea:66:8f:01:86:d7:06:70:8e:a7:e9:0d:61:1e:
                    ef:30:e9:0d:83:91:39:70:11:df:97:da:93:e9:a4:
                    83:09:f7:e0:25:6d:0c:30:f8:48:72:aa:f0:5e:9f:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:41:7F:16:A2:33:27:D4:C6:A8:77:C0:AA:8D:50:BB:71:58:E7
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:8c:26:6d:4d:92:ef:7c:4f:c1:3b:43:ce:a6:ab:4f:2e:
         4a:95:fb:ca:91:8d:a2:ca:9e:07:f4:56:c9:d0:72:9f:43:06:
         c1:22:0a:18:74:f2:8f:88:95:40:67:fb:40:83:89:42:61:fa:
         53:58:50:6c:35:22:c0:31:81:48:f2:d0:30:8c:f2:6f:1c:49:
         28:e9:05:6e:c3:1c:a7:61:00:e8:2b:3d:5c:7a:8e:3f:88:4e:
         59:47:13:02:07:7d:3d:e5:88:9e:23:67:7d:c9:2c:20:8e:3b:
         99:8a:21:d2:a9:43:93:37:8a:5d:9d:ad:61:5e:31:47:6f:71:
         3d:63:52:f4:b9:dd:1f:e6:8e:f6:b1:a1:07:e2:37:12:5e:17:
         9f:22:13:13:9f:02:72:e6:5b:c6:d6:9d:5a:87:3b:8b:37:6d:
         71:16:79:72:50:be:9e:9f:54:84:6c:01:21:14:cb:67:ab:0d:
         78:33:41:ec:53:8c:39:8f:e3:30:aa:c2:68:f2:65:11:11:3c:
         82:fc:78:c4:50:20:f1:33:55:f9:c2:e8:25:81:7c:36:7a:19:
         b9:6a:c9:e8:bb:78:eb:2d:2f:a3:b8:d4:b5:4c:16:13:c0:43:
         6a:e2:b0:90:93:52:7d:c7:2f:99:0c:58:2e:1e:f3:5e:d2:03:
         b6:8a:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:33 2025 by rpki-client