Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft (raw, json)
Hash identifier:          oBNtvn+b7XzEZMmBUl8Wn0PqUGgNhXmp86h2KNe73qM=
Subject key identifier:   E6:9B:B9:04:0A:18:B2:B1:E5:1D:48:29:0B:E0:E2:C9:2A:20:4B:04
Authority key identifier: 12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Certificate issuer:       /CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
Certificate serial:       3AB6C21DB892F850BF8693B63E95D8FC722B3603
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
Manifest number:          0152
Signing time:             Sat 23 Aug 2025 16:27:11 +0000
Manifest this update:     Sat 23 Aug 2025 16:22:11 +0000
Manifest next update:     Sun 24 Aug 2025 19:10:11 +0000
Files and hashes:         1: 3138372e3130392e3131322e302f32322d3234203d3e20323732373533.roa (hash: w0qqFPXS1q1NP5A7+SdrqOfHPoWk++ZYHhgDw9+ls14=)
                          2: 323830343a383832343a3a2f33322d3332203d3e20323732373533.roa (hash: Z1e00J+pj3xgDu7l+bTC4iqXuYLvr6iGTUsPSS+TEdc=)
                          3: 120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl (hash: OtZXFTN8PbKCZvFNQK9C3r5pAxgctySZilc4wI7CHeM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b6:c2:1d:b8:92:f8:50:bf:86:93:b6:3e:95:d8:fc:72:2b:36:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Validity
            Not Before: Aug 23 16:22:11 2025 GMT
            Not After : Aug 24 19:10:11 2025 GMT
        Subject: CN=E69BB9040A18B2B1E51D48290BE0E2C92A204B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:5c:a0:43:08:84:ab:24:cf:ec:08:12:af:
                    47:22:a8:45:df:eb:cc:45:5b:31:f7:82:d4:35:71:
                    1a:39:9c:04:f6:5d:b6:79:5b:6e:84:81:cb:83:eb:
                    ca:f1:ff:15:72:23:f4:6d:4b:12:7b:99:1d:10:7a:
                    fe:41:bc:23:03:68:39:b8:cf:17:11:7c:09:ee:11:
                    9f:70:6f:97:30:74:a3:f6:e2:e2:08:0e:08:2e:c5:
                    6b:86:6e:80:b2:f5:3b:91:d5:51:51:47:81:c0:b6:
                    b8:80:bb:90:5d:94:98:85:47:b6:b6:f0:71:c4:4b:
                    96:87:e7:6a:11:ba:e9:dc:e8:c0:e9:0e:3a:c9:67:
                    c9:8d:5e:06:08:bd:02:dc:ba:74:7a:1b:b6:96:28:
                    cf:e5:53:6e:00:12:23:20:b6:af:d8:ba:19:db:19:
                    65:73:a0:7b:dc:63:aa:88:e2:37:61:05:d3:95:b6:
                    5b:dd:15:b2:44:0c:a0:fe:64:89:c5:11:77:e4:e4:
                    e6:c9:23:99:a6:20:9f:c2:67:08:17:ab:fc:78:2f:
                    ee:f9:0d:79:4a:5e:53:c0:6b:7a:bc:ea:65:9a:b2:
                    24:41:a3:07:29:fe:8a:71:26:39:0b:26:e9:27:52:
                    10:04:2f:31:e4:2f:b9:cb:14:bb:da:f5:ac:80:c1:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9B:B9:04:0A:18:B2:B1:E5:1D:48:29:0B:E0:E2:C9:2A:20:4B:04
            X509v3 Authority Key Identifier:
                keyid:12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a1:6b:58:3d:bf:5b:5d:22:54:b9:e9:66:c9:cd:9b:94:e8:
         f5:a0:aa:a5:cc:77:a2:47:0e:2b:9f:54:a7:1f:f2:28:24:cd:
         4e:f6:52:ec:24:58:95:32:81:5a:3e:82:74:0e:cd:c5:3e:b3:
         41:d2:67:23:62:5c:21:fc:be:b2:58:33:df:d0:5d:32:2f:ec:
         b1:14:3c:85:80:e8:95:6b:87:95:c8:0c:fc:de:3d:d5:3d:75:
         63:34:18:ad:ff:4f:69:75:6d:96:88:6c:6b:2b:30:2e:e9:ba:
         53:5b:f5:f2:96:e6:81:c2:20:95:d7:b9:c5:fa:c9:65:f4:15:
         cb:e4:7a:2e:d7:86:9f:a3:24:11:4a:c0:71:a0:56:14:a4:b3:
         d4:01:16:4d:24:9b:fc:eb:f9:6a:d5:ca:2a:3a:0c:a3:86:e9:
         ee:4c:db:2d:e2:f9:c8:ca:4f:bf:87:36:e6:0a:ab:de:86:97:
         7a:43:1b:b8:a1:94:5b:d8:0f:c2:51:81:da:60:67:56:58:2c:
         6e:f0:64:ca:09:c3:db:9d:a7:85:07:18:cf:97:8e:ed:74:69:
         f9:36:87:37:22:5a:5a:58:76:8a:a8:a2:fa:11:b4:88:04:f1:
         f6:ed:19:a8:ac:d8:43:f2:8d:55:17:1e:6f:ea:92:51:69:87:
         bb:c8:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:05 2025 by rpki-client