Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
File:                     4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft (raw, json)
Hash identifier:          pAJL9dYvqeJZU7E68Vb2WcvQO2sAaMeARRvVSq8fjPc=
Subject key identifier:   B3:F2:E8:5C:39:94:24:34:5F:09:6E:BC:4A:9E:DE:72:B3:3C:14:BD
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Certificate issuer:       /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial:       46BCA8245102730DE6E4B7ECBB083312DEAF523D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
Manifest number:          02A1
Signing time:             Sat 23 Aug 2025 05:11:05 +0000
Manifest this update:     Sat 23 Aug 2025 05:06:05 +0000
Manifest next update:     Sun 24 Aug 2025 08:35:05 +0000
Files and hashes:         1: 34352e3138362e3233322e302f32322d3332203d3e20323731363536.roa (hash: AwKwCZdwbOUibuNR1i8XrT9Tfaror0z1Pm6/W6G5zwc=)
                          2: 4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl (hash: KFcw48tvC4AyROqkM+/D1dRX8QHkbDnN2rRgUCsU3gI=)
                          3: 323830343a376566303a3a2f33322d313238203d3e20323731363536.roa (hash: BSWaPmS67xRVsnW3AMVQYa8EI6CRtHNg5ATogTv70Zs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
                          rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bc:a8:24:51:02:73:0d:e6:e4:b7:ec:bb:08:33:12:de:af:52:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
        Validity
            Not Before: Aug 23 05:06:05 2025 GMT
            Not After : Aug 24 08:35:05 2025 GMT
        Subject: CN=B3F2E85C399424345F096EBC4A9EDE72B33C14BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:d3:9b:38:1c:fc:ea:e5:6e:e7:ae:2f:46:
                    90:d1:ee:85:bd:62:e6:a5:33:9e:26:3c:d2:91:c6:
                    2b:ec:f2:1e:95:9e:e6:b7:83:29:8f:04:fe:72:6c:
                    d7:3a:0c:77:ee:58:4d:9b:7e:51:b8:9e:5d:17:5e:
                    eb:4e:4a:60:74:43:e9:22:af:20:59:92:d6:b1:99:
                    a2:cc:19:75:e4:a9:e5:2c:63:e9:c1:ee:08:09:1a:
                    7b:6e:b0:74:ae:d9:50:cc:41:9e:f4:2e:56:83:40:
                    75:36:31:f5:d7:36:7b:82:4a:3c:bb:66:2e:69:0f:
                    77:d8:cb:77:5f:e2:c9:6f:6e:8c:3d:eb:11:50:fc:
                    92:a0:9f:c6:ab:4f:a6:35:43:02:e7:85:e1:a3:f8:
                    a3:a1:3b:e6:5e:70:97:82:c2:b7:05:36:79:2c:d2:
                    f3:bc:95:17:69:ba:33:9d:3e:9a:02:32:35:3f:fe:
                    53:ec:1c:e3:62:d8:a3:87:7f:06:d2:31:a8:60:5c:
                    55:98:42:13:63:a1:6c:8a:4d:b7:17:77:c5:f5:fe:
                    0d:22:9a:04:bd:39:e1:58:f8:54:c5:4d:38:42:42:
                    16:2f:6a:5a:81:27:49:6c:27:c7:c7:2c:a6:77:cc:
                    87:91:64:fe:e1:57:66:78:10:5e:1c:76:53:b4:f2:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:E8:5C:39:94:24:34:5F:09:6E:BC:4A:9E:DE:72:B3:3C:14:BD
            X509v3 Authority Key Identifier:
                keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:99:b7:db:8b:16:13:3e:72:ff:76:1d:94:7d:95:3f:89:
         48:83:df:42:fb:ae:33:f5:b4:39:91:42:81:3a:f5:af:85:1b:
         74:f9:7a:f2:bb:af:7b:ad:83:ca:fe:bf:ab:40:da:97:58:b9:
         8d:30:1d:fa:31:28:40:93:9c:c6:3b:de:33:f1:29:de:ec:d8:
         fb:6d:73:a7:9c:73:c6:46:cf:e5:d7:80:1a:70:82:dd:0d:7f:
         7e:1b:2f:32:4b:8a:4c:8c:27:5b:d9:16:0c:2f:f6:2f:bb:77:
         31:aa:dc:04:4c:50:bc:12:af:b3:be:20:b2:60:d4:76:48:d4:
         cd:0e:0a:e2:f8:29:6f:e5:97:4c:8e:3e:11:a0:63:fc:3b:d9:
         3d:e5:7e:6f:19:63:9e:fa:32:0c:a5:51:f3:ba:5c:9a:d4:67:
         c6:bf:bd:c5:a5:65:4f:3e:48:85:b7:12:71:84:1d:0f:ad:5e:
         c1:ff:cd:f1:c5:ad:7a:71:53:ce:65:38:6c:ed:25:2e:8f:f6:
         b7:40:de:72:e4:64:50:e5:4d:81:49:06:82:e0:7c:6f:0f:51:
         4a:b2:3e:c5:bf:fd:b9:e1:9b:4e:75:c0:74:d2:f9:91:2c:9a:
         7f:b4:3b:6f:38:83:ed:81:4d:c7:8e:3d:d6:50:34:f5:71:ac:
         63:b7:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:51 2025 by rpki-client