Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          gbBUphLOOZviEv2gtDZa5PBxmL35rOUCLcsgCDcp5aU=
Subject key identifier:   07:A1:24:AE:8D:99:BD:FB:89:D7:AF:D8:4C:D2:7A:E5:49:50:29:6F
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       54F4EE3D0B546FF8B32AC1771019FFF73BF90661
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          0329
Signing time:             Mon 20 Oct 2025 01:00:00 +0000
Manifest this update:     Mon 20 Oct 2025 00:55:00 +0000
Manifest next update:     Tue 21 Oct 2025 01:00:00 +0000
Files and hashes:         1: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=)
                          2: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=)
                          3: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: bGco2uEV/LRweFcPYtgkHp7pQzuLx1vJMuk8Z56cNnE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:ee:3d:0b:54:6f:f8:b3:2a:c1:77:10:19:ff:f7:3b:f9:06:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Oct 20 00:55:00 2025 GMT
            Not After : Oct 27 01:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:4b:21:66:51:35:22:3c:64:d2:d4:7c:a7:
                    09:65:14:ac:bf:86:c7:86:1a:23:6a:b2:48:d0:a8:
                    6e:fd:f7:8d:e5:4c:e6:24:73:3e:63:1e:9b:7a:6e:
                    61:2d:59:d3:d5:3d:8d:8b:5d:62:7c:6c:e0:15:af:
                    4d:60:c2:8e:55:6c:c5:f4:7d:50:bd:00:3a:fb:c4:
                    17:31:7d:dd:f4:70:0e:77:05:95:9a:ca:48:de:ca:
                    15:e8:3f:27:68:7f:2f:12:92:63:32:17:da:e1:34:
                    8b:c9:0b:27:77:ee:5f:19:03:88:b2:46:92:b0:5d:
                    2a:b7:18:fa:87:5c:f9:78:5b:f4:4b:97:0f:51:48:
                    a9:eb:00:4a:78:1b:b6:eb:cb:c5:71:d4:a2:fe:03:
                    0d:86:ed:dc:ec:c5:90:28:52:b2:bb:e2:7b:3d:40:
                    71:b4:99:36:0e:73:0d:99:81:b1:f1:b6:0f:ab:30:
                    57:94:90:c7:60:9c:ec:62:f1:32:84:44:d5:58:a4:
                    b1:06:9e:f2:63:d9:50:d1:e8:4a:9e:c5:ef:cc:95:
                    bf:75:54:b0:65:3f:10:d0:84:7f:d0:5f:f7:30:0c:
                    bc:9d:df:97:3b:d0:16:1f:00:96:2c:f4:df:e9:66:
                    1f:ae:a6:16:71:16:e9:d7:31:7e:c5:b4:24:0b:d3:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A1:24:AE:8D:99:BD:FB:89:D7:AF:D8:4C:D2:7A:E5:49:50:29:6F
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:c1:68:9d:dc:4e:6e:f2:dd:6c:7a:87:f9:82:76:b2:33:
         c4:5e:01:db:0c:c1:cf:d1:e7:74:81:e1:b9:32:d3:01:1d:d0:
         ec:a7:de:1a:73:85:a2:64:0c:6f:c0:88:d9:87:6b:20:5b:43:
         4e:c5:5a:5d:59:2d:6e:bf:22:91:00:dc:6f:2f:2b:12:e3:6b:
         2a:10:c8:99:1d:aa:1c:09:ca:50:bd:4a:60:44:21:01:cc:ff:
         6e:52:1d:db:5a:a5:93:1f:a8:7f:77:24:40:92:e0:a1:e7:54:
         5a:80:db:b9:fe:d6:b6:d3:21:ff:25:aa:30:5d:36:e8:08:e5:
         c1:89:50:80:e4:ec:eb:20:26:f6:69:6a:21:f1:8c:6e:32:bb:
         f1:b2:53:cb:85:50:14:99:e1:a9:a4:0d:eb:ac:a4:b5:13:40:
         5c:b7:1d:22:b1:6a:0a:5e:b1:a9:cf:ba:e5:0c:29:5d:09:75:
         b6:90:50:89:26:d5:24:6f:63:d8:f7:c8:9b:fa:e2:65:18:6e:
         35:eb:5a:50:5a:d3:c2:4a:d0:fc:87:09:1d:cb:ac:17:03:c1:
         b4:98:3d:08:70:18:59:e5:3f:56:7f:95:47:2a:0c:26:81:80:
         12:30:1e:8d:6a:60:3d:3d:e1:22:3a:6d:92:c2:ff:cb:5c:d4:
         99:e2:5a:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:16 2025 by rpki-client