Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
File:                     62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft (raw, json)
Hash identifier:          zHCyXLikKXVwtjBya1gKvbBhDmYMCkGRDInhjwE9Vl0=
Subject key identifier:   21:A9:BC:73:06:44:AB:DF:15:2C:DD:AA:2F:EA:73:F2:82:13:EA:84
Authority key identifier: 62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9
Certificate issuer:       /CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
Certificate serial:       7A454B1C3C42FCB2E558913BE97E422CEC0771B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
Manifest number:          A7
Signing time:             Mon 20 Oct 2025 11:41:03 +0000
Manifest this update:     Mon 20 Oct 2025 11:36:03 +0000
Manifest next update:     Tue 21 Oct 2025 14:22:03 +0000
Files and hashes:         1: 323830343a386135633a383030303a3a2f33332d3333203d3e20323733363634.roa (hash: NpgPlsV452I5lElw5hEI4snHvlQYxRoSGXUY+4DiMxk=)
                          2: 62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl (hash: hZ+9nilPmqFPnMjHw07w4k0rUR/4cuM49vW7gRjH07U=)
                          3: 34352e3137392e3235322e302f32332d3234203d3e20323733363634.roa (hash: qiTJnElBKyT5lsjhppAsuKt3s4WFcSxaqY1Z+OuyJiQ=)
                          4: 323830343a386135633a3a2f33332d3333203d3e20323733363634.roa (hash: 5CmcIU/vS1Rv9N6s6xqwYRYa+UAdiZf20l3gN+MdMKY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:45:4b:1c:3c:42:fc:b2:e5:58:91:3b:e9:7e:42:2c:ec:07:71:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
        Validity
            Not Before: Oct 20 11:36:03 2025 GMT
            Not After : Oct 21 14:22:03 2025 GMT
        Subject: CN=21A9BC730644ABDF152CDDAA2FEA73F28213EA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:17:a1:d6:50:4d:5c:e6:17:61:aa:e4:be:
                    33:52:fb:df:c5:10:f5:2a:85:af:df:66:94:d2:fe:
                    c5:ec:25:2a:bc:ab:2d:d7:e9:0a:4b:38:24:07:21:
                    14:e1:4e:6a:5c:ab:bd:fa:fb:70:a2:71:83:c7:4f:
                    52:da:14:3a:5c:ce:2b:a7:9d:26:67:f1:af:74:11:
                    61:ab:b8:54:0f:a9:dd:90:8d:b6:6b:21:f3:60:5d:
                    65:1a:8a:7f:a6:de:96:31:6c:c5:1b:3b:b1:5b:0c:
                    28:5a:93:79:a1:ed:f0:ab:1d:cd:f2:d8:c1:ec:b6:
                    3b:88:c3:e1:cf:11:0d:31:83:4e:9e:4d:69:31:9d:
                    87:23:d4:53:2e:d3:43:61:43:25:cf:76:ab:d3:64:
                    00:1f:97:8c:e3:62:90:1b:a1:cc:5d:57:0a:d3:36:
                    a6:29:b7:82:ef:9c:4a:4c:fe:4c:e4:70:2f:d6:e1:
                    e3:80:7e:91:28:b3:a2:67:a7:e5:05:b2:95:7e:52:
                    f0:6c:68:cc:62:dc:b7:e3:9c:4d:46:34:d5:d6:fc:
                    1c:29:2d:bf:3f:a7:35:95:20:bf:d9:e3:ff:43:d4:
                    57:f8:8f:df:f0:c8:ee:45:b8:f3:21:15:00:38:94:
                    c1:b9:cf:7b:0f:68:34:d1:64:06:45:bf:8f:38:12:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:BC:73:06:44:AB:DF:15:2C:DD:AA:2F:EA:73:F2:82:13:EA:84
            X509v3 Authority Key Identifier:
                keyid:62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:fe:22:39:3c:fe:a2:14:5b:3a:8d:37:4c:8a:fe:4b:44:
         cb:a6:63:9a:82:3d:37:b8:66:b8:4a:46:12:83:51:0c:fb:9a:
         2f:a7:00:61:f3:4a:aa:cf:c9:b4:74:25:fe:05:ba:b4:63:85:
         21:65:fa:e9:5e:89:d1:e2:ba:70:e4:10:0b:b9:6f:fe:12:20:
         4e:6e:e5:e9:cd:b1:1c:98:b4:ed:42:15:b1:39:46:e5:0e:8d:
         10:cc:49:ee:04:48:6a:ba:cc:bc:2f:6f:78:12:d9:54:91:77:
         66:8e:e8:08:61:71:00:3b:22:cd:11:1b:b9:da:0a:19:7b:f4:
         17:75:3d:5a:6f:3e:77:94:72:7f:97:e3:d7:59:aa:98:48:50:
         7e:44:f9:f7:ae:60:be:b2:fd:bc:d0:4e:e7:2b:e2:c6:c4:73:
         09:83:07:e5:b3:c4:9e:fe:ca:60:5c:a2:3e:58:07:fc:53:7f:
         ab:33:dd:4f:9d:08:72:27:02:c6:81:40:6b:b0:22:ff:63:98:
         50:a0:43:7c:16:2a:c4:d7:43:f0:fd:93:44:d0:41:10:35:ab:
         43:c0:a6:5b:76:25:db:10:7b:cd:fa:1e:04:df:15:9f:91:cb:
         c8:58:21:43:88:ee:ea:a8:5e:ae:f0:71:5d:ae:c8:24:9f:a6:
         e7:31:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:11:42 2025 by rpki-client