Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          Ngd3Dm6fEkqaBTp+OJcUqSAVdOUvKhrlfDGBBaFxw+c=
Subject key identifier:   C0:A5:7C:BA:5D:18:AE:35:10:89:EC:2D:56:30:26:64:92:88:6C:73
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       44B7B38216B12BB793170DE73145F947A8BE60A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          B0
Signing time:             Sat 23 Aug 2025 14:37:37 +0000
Manifest this update:     Sat 23 Aug 2025 14:32:37 +0000
Manifest next update:     Sun 24 Aug 2025 17:44:37 +0000
Files and hashes:         1: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: 1lj+3sFMNB4egkilmG1GQjAutsJHZiknJoxF8YP/VHY=)
                          2: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=)
                          3: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: IInVxv3kcMa5vG/U4cTD9sr87/Sbsyr6ChFNUDZQdGI=)
                          4: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: cK3OMTbQgfr1RhptxCu+pP4qoDvHdmj57AwKYU+D5sM=)
                          5: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: 7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=)
                          6: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: nbN4ukyce754UAe7rihr7N/UFNah0kB8NkqYIQh4yFQ=)
                          7: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b7:b3:82:16:b1:2b:b7:93:17:0d:e7:31:45:f9:47:a8:be:60:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Aug 23 14:32:37 2025 GMT
            Not After : Aug 24 17:44:37 2025 GMT
        Subject: CN=C0A57CBA5D18AE351089EC2D5630266492886C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:16:11:d2:d4:2b:1a:1c:65:5f:cb:18:dd:
                    6a:f9:7a:47:96:7a:3d:36:76:d9:4d:75:a8:d9:cb:
                    fc:7c:6d:39:00:03:86:a1:ff:73:a7:4a:b9:4a:b8:
                    78:bc:e1:a5:30:9a:de:91:d2:bf:f2:ef:df:5e:1b:
                    e8:5f:64:b8:c8:78:a1:ba:91:eb:3f:27:7b:82:43:
                    79:a3:d5:af:60:ab:b8:c0:9a:28:6d:62:0d:61:62:
                    cc:c8:c6:71:63:36:fa:69:a2:4f:32:57:4a:ea:a7:
                    00:d0:b8:18:c4:41:b3:fb:95:25:d5:52:1d:4c:3c:
                    42:b8:c1:15:11:3c:fc:26:46:af:31:c0:fe:2e:0e:
                    d9:79:6f:04:1b:5f:7f:02:c3:57:21:02:65:f5:4e:
                    ad:8b:0b:4f:e5:a9:1c:81:c2:49:27:87:25:1e:b0:
                    2e:fa:30:23:81:d6:3d:d1:ce:fd:c8:14:61:5c:22:
                    11:50:8c:4e:5c:02:d4:2a:e5:8a:39:ce:d0:9d:11:
                    f4:13:88:7d:fe:49:3b:24:b5:55:9b:c9:b3:c8:20:
                    60:32:5a:7f:a5:a7:eb:f4:1f:96:39:dd:eb:c7:b0:
                    ac:c6:52:85:0f:41:8c:3d:11:cd:c6:29:00:0a:5b:
                    f9:33:b5:5e:a8:25:2b:2c:00:bf:77:b2:40:a4:aa:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A5:7C:BA:5D:18:AE:35:10:89:EC:2D:56:30:26:64:92:88:6C:73
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:28:17:d2:c0:21:1f:70:ca:92:ce:af:cc:f6:8b:bd:5c:13:
         cc:fe:fd:34:c1:4d:da:74:be:b2:0f:4b:6d:b9:97:6d:d1:ef:
         78:75:ff:40:8c:88:b9:3b:67:42:7c:7d:37:fb:c3:d4:65:69:
         93:60:1e:f8:37:56:10:8e:ea:30:4c:ed:8d:ff:fa:7a:0e:60:
         28:fb:46:e9:01:33:bd:d3:92:f7:74:48:e3:ca:0e:8b:49:c9:
         ce:09:79:9d:46:a5:47:98:9b:13:c3:0d:99:62:a6:11:77:2f:
         ae:49:4f:a7:8f:b5:c0:b9:e9:6a:8d:94:04:0d:96:f2:09:60:
         3f:e1:54:5c:a0:1e:ca:22:f2:87:d3:66:cd:ed:0e:a2:9a:c2:
         17:c5:25:35:70:98:8a:83:56:56:b3:6f:94:f8:d1:c0:a3:09:
         f1:90:54:06:20:ab:50:71:8a:49:cf:5d:b0:62:57:95:16:a6:
         f4:27:e8:3d:1c:05:60:1b:b4:84:51:99:d8:64:54:95:d2:23:
         5e:68:bb:3f:37:d8:f6:36:75:4a:bd:50:eb:ae:15:79:3b:6b:
         21:23:44:21:ac:d7:bf:b8:fa:c4:f4:a5:c9:4f:47:94:05:9f:
         cc:9d:6a:fb:c3:dd:79:d4:45:f6:5f:e4:0c:17:b7:a7:0f:51:
         a3:d2:81:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:46 2025 by rpki-client