Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          yZvpLOx3T0FGtuB6QMjhHbVerq9KZIwV9jMFZ7MUsmE=
Subject key identifier:   B4:BF:6E:50:52:9D:AE:8F:F6:B2:5C:D6:8D:51:5E:78:50:19:33:C2
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       4C185E7C215F2725C9CC60FF3EDCB10D2853C2FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          F4
Signing time:             Tue 01 Jul 2025 08:20:17 +0000
Manifest this update:     Tue 01 Jul 2025 08:15:17 +0000
Manifest next update:     Wed 02 Jul 2025 08:56:17 +0000
Files and hashes:         1: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: o2AWkGLSZ5uTr9uUvc/qL3QyFADL0DLPLW60o2iQcfM=)
                          2: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: tRP99msVkW4x5i6Uy0O0k8TB+1CHSJFMroGWXc0LjX4=)
                          3: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: skQOzkPTQZFZec1K7wXdytKDapP/Rl8ttG0KuDQZl8g=)
                          4: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: hYhI8DrxJwx77ijyfRSEPiOMYTfIUK0ZFXqFZI1FTPU=)
                          5: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: TWk0qbr98hdZcik90dFhM/vWCOrd/lQB5+fTAQwFpUg=)
                          6: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: tsOYH76BfqT8mY4MadK531UC5ikBGOXeTaV5dqn1iMM=)
                          7: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: nLiE6yi8v2swM0N2WR++xc99oe2em4lVBJ/aphER4g0=)
                          8: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: UJiGItk5EqOKT5k8pxRAyZLDzhkLkHGzukI1+j+Avz8=)
                          9: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 08:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:18:5e:7c:21:5f:27:25:c9:cc:60:ff:3e:dc:b1:0d:28:53:c2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Jul  1 08:15:17 2025 GMT
            Not After : Jul  2 08:56:17 2025 GMT
        Subject: CN=B4BF6E50529DAE8FF6B25CD68D515E78501933C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:1e:4d:fc:8c:71:bf:e4:e2:ad:0c:83:fe:
                    62:d3:f2:5c:7e:0c:37:3c:91:39:b1:e2:05:20:75:
                    e9:00:ed:7b:04:33:78:fb:37:e3:50:74:3a:c5:87:
                    6d:f8:b1:dc:60:40:fc:b1:76:be:32:47:4d:45:37:
                    a7:34:f6:7d:94:c2:cc:c0:1d:0f:f0:fc:eb:9b:06:
                    54:c6:28:d8:10:b6:df:fa:1c:7d:24:26:a1:a8:05:
                    4a:c2:2a:cb:24:29:c0:d6:64:37:86:d0:85:52:81:
                    ba:30:dc:22:74:7f:e0:45:65:1f:45:04:b7:0a:9c:
                    2a:37:36:8a:e0:93:25:97:92:25:32:24:dc:8f:42:
                    37:ab:6b:67:28:56:22:71:eb:51:36:56:12:01:fc:
                    16:92:51:9e:91:60:d8:c4:02:27:1a:e1:87:8f:c3:
                    a0:be:bd:3c:e7:d7:e5:89:7c:af:78:2c:79:3d:27:
                    26:e0:c5:e7:4a:30:08:b4:21:d2:9f:dd:f2:54:37:
                    58:a4:92:ab:2f:c7:34:70:31:32:2e:49:fe:3f:c9:
                    1d:c9:23:24:b6:26:2d:8e:2c:ac:c7:99:c0:d6:6e:
                    ba:fe:b5:f3:a1:5f:48:5f:d5:5f:d1:c0:29:4b:4e:
                    80:b7:9f:10:45:e5:59:b0:b4:e2:e8:d7:d3:b7:c6:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BF:6E:50:52:9D:AE:8F:F6:B2:5C:D6:8D:51:5E:78:50:19:33:C2
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:d4:00:d6:17:9a:35:53:a5:ce:7a:0d:ec:38:44:60:c4:
         df:27:2e:bc:4d:60:58:5b:c3:70:8c:80:4d:5f:10:b7:c0:96:
         51:2a:d1:c2:ea:19:bd:28:2b:26:02:59:ce:9d:a3:16:8f:ab:
         c5:4d:f1:b3:45:bb:7a:41:1c:fa:aa:c4:1f:de:d3:0c:29:a8:
         8c:1f:da:0e:01:83:d4:c4:b3:5a:47:6b:d6:7c:95:03:f2:80:
         04:52:2f:c6:50:a9:a0:a3:8a:67:91:12:03:c3:04:a8:36:37:
         12:41:53:75:21:96:df:9c:f1:f5:e9:2b:72:e3:1b:8d:ad:df:
         d7:d2:42:e3:23:5f:b2:e7:1d:85:a4:c4:30:a6:a2:a8:8f:e1:
         1c:7d:6c:d6:25:b5:05:34:c4:0e:02:11:c1:8b:8a:12:96:36:
         a2:3b:a4:9c:1c:79:f7:6c:90:3b:dd:46:b7:21:44:65:ac:7d:
         61:ed:37:83:b0:43:08:9a:54:87:e4:df:7c:61:3e:d4:e2:cb:
         7f:e4:6a:e9:bd:06:15:87:63:b2:12:92:3a:7a:51:35:81:24:
         72:49:b7:8f:79:0d:a8:14:d9:39:6d:b3:85:da:6d:57:9a:3c:
         87:0c:d2:16:18:09:3b:94:2c:cd:da:da:5a:ce:3b:a7:7c:49:
         13:e0:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:39:06 2025 by rpki-client