Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File:                     B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier:          xMuByQZVWkaMBr+r7c5tJ2EKRvjweIoCuqk1ggA6AhU=
Subject key identifier:   C4:09:28:67:C3:F3:A3:43:1F:A2:40:04:10:E6:9F:AD:D6:A8:35:12
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       4F22F61F3E165F43A53A677DCF93147A4FE01973
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number:          025A
Signing time:             Mon 30 Jun 2025 01:13:36 +0000
Manifest this update:     Mon 30 Jun 2025 01:08:36 +0000
Manifest next update:     Tue 01 Jul 2025 03:33:36 +0000
Files and hashes:         1: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: ByT+1Sbp5j92dBf7mXkK0urOng20TZJk5zZHsSfOLb4=)
                          2: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
                          3: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 03:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:22:f6:1f:3e:16:5f:43:a5:3a:67:7d:cf:93:14:7a:4f:e0:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Jun 30 01:08:36 2025 GMT
            Not After : Jul  1 03:33:36 2025 GMT
        Subject: CN=C4092867C3F3A3431FA2400410E69FADD6A83512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d5:9f:19:5a:ba:98:ad:5f:4f:06:1a:ea:0b:
                    66:0a:7f:3b:5d:c2:eb:8c:09:ac:9a:c3:17:dd:95:
                    66:2e:ab:ab:95:5a:c7:8d:af:a2:36:dc:35:0f:1b:
                    e8:54:da:44:cb:a0:c8:2a:0f:52:32:ec:8c:b5:f9:
                    0e:7d:38:a8:9d:e0:3f:cc:02:d8:21:be:72:b1:b2:
                    f6:8e:d6:14:14:de:65:66:db:6e:75:ab:0e:6a:20:
                    53:e5:67:3f:ad:03:54:61:6b:78:50:e5:0e:17:c3:
                    64:cc:b3:f7:e6:a5:66:79:a2:18:1b:a6:b2:66:d5:
                    61:53:95:0f:20:18:f0:34:75:8a:5a:f8:26:0a:9e:
                    05:d0:fb:62:dd:72:f1:73:5f:eb:a8:b2:56:45:f4:
                    8b:2a:94:b1:11:03:ab:bd:66:a6:ab:36:07:e1:b6:
                    77:33:54:4a:bc:22:2a:98:31:28:03:19:0c:a7:f9:
                    95:94:ad:dd:59:71:79:cd:20:b3:f3:56:5a:db:86:
                    c3:a9:98:ee:32:44:fe:93:da:eb:33:4b:c9:c5:fa:
                    88:ba:20:eb:44:d2:19:2b:8b:41:1e:5d:3b:ad:d6:
                    d9:0d:1e:fa:c4:4c:c0:8b:07:78:36:78:4a:25:cb:
                    a6:0c:e2:70:56:39:62:ca:f3:8c:58:b5:07:b1:76:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:28:67:C3:F3:A3:43:1F:A2:40:04:10:E6:9F:AD:D6:A8:35:12
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:38:de:c2:0b:63:2b:83:1a:c7:61:8a:7d:3c:35:14:d9:3f:
         3c:bd:31:f9:6c:22:75:39:45:6e:2a:15:9a:1b:ca:8f:12:de:
         4c:7d:01:29:2b:a4:dc:df:cd:c5:4a:60:e3:fd:d7:40:d2:f0:
         e6:21:2c:84:e7:96:4a:1a:7a:4d:25:be:1c:66:aa:d2:84:32:
         08:f3:65:cc:02:84:bb:ca:6b:18:15:e0:58:44:42:fd:20:fe:
         86:44:86:29:4f:3c:0a:fd:f7:ee:82:f2:d4:f2:e7:5e:de:03:
         7f:48:80:e7:97:86:e8:34:86:ca:d6:0f:30:59:98:d7:54:d9:
         00:1c:20:6b:07:c8:c8:86:e2:0d:06:09:5f:08:f9:49:c8:d3:
         48:9c:41:b1:2e:37:c7:e2:55:93:e4:61:d5:72:eb:5c:14:eb:
         75:6f:f9:39:79:ec:a4:b6:4b:0f:85:25:df:30:c9:bc:67:a7:
         2f:dd:5c:f6:d4:b6:58:76:62:92:c4:f4:60:af:a8:6f:7f:54:
         65:04:df:bb:d5:2a:96:24:9c:2d:f4:b6:43:11:8e:42:8b:9c:
         a8:c4:08:6a:25:65:2b:4f:33:15:9f:ff:d0:5b:d2:bb:0a:59:
         b3:2a:d0:97:f3:0a:60:8b:c1:ad:3a:50:07:d0:b9:e2:dc:6a:
         12:e6:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:52:15 2025 by rpki-client