Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
File:                     53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json)
Hash identifier:          057ke4in6TLcZscPqItUf+OzrolPhzieOc8/0TslypA=
Subject key identifier:   20:C6:6E:56:53:94:A7:78:86:CD:CC:9D:39:01:0E:21:D8:B3:37:50
Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA
Certificate issuer:       /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
Certificate serial:       61495DF7FD6EE7D6D8271690B8156E1A4CE825C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
Manifest number:          02D0
Signing time:             Mon 20 Oct 2025 05:02:28 +0000
Manifest this update:     Mon 20 Oct 2025 04:57:28 +0000
Manifest next update:     Tue 21 Oct 2025 08:19:28 +0000
Files and hashes:         1: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: jSsiPpdfMJb1jXwIKkDoLy57dvL+Hy33DK8ZFCdBE1w=)
                          2: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: qijxX3YIbOB9ww++g/ZKvLgjT9/NU+pcXeR3Lp5d568=)
                          3: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: c7TzAQ1qYxjPFqrQI6yEYE48I0jeUYIK0uevUAVJrM8=)
                          4: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: +nL7ybLpICw7PZ+2W5pi76/oLneSgE73RRDZtIzKVsE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl
                          rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:5d:f7:fd:6e:e7:d6:d8:27:16:90:b8:15:6e:1a:4c:e8:25:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
        Validity
            Not Before: Oct 20 04:57:28 2025 GMT
            Not After : Oct 21 08:19:28 2025 GMT
        Subject: CN=20C66E565394A77886CDCC9D39010E21D8B33750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:3f:db:41:d2:3e:5c:b0:b3:ce:1b:19:1e:
                    80:ef:ac:b6:7e:e5:35:73:98:dc:be:2b:6b:b1:c8:
                    9f:9d:eb:a8:3e:8e:62:9d:61:04:90:c8:6a:76:1f:
                    e9:20:1c:5f:10:14:8b:dd:79:67:c3:83:08:57:5f:
                    10:3a:0c:52:59:68:b5:a8:25:51:0f:66:8a:f7:57:
                    52:27:05:c2:03:6d:8d:bb:92:46:26:dc:2b:1c:b3:
                    5c:fd:3e:3d:7c:55:65:01:ef:ff:17:70:83:1e:c5:
                    5c:eb:8d:89:ea:f6:b0:9a:0d:f1:b6:e0:2f:c2:3f:
                    9b:f6:4e:e7:44:a4:35:6d:cf:21:8f:0a:b3:fe:72:
                    e9:45:54:81:13:29:94:14:7b:1a:46:dd:04:f2:db:
                    40:8f:da:a0:09:9a:8a:6e:29:dd:ac:55:bc:b0:dd:
                    46:ad:67:94:08:50:c5:54:2a:2d:e7:c6:0f:ab:8a:
                    da:5c:f8:ce:11:54:7c:7d:e0:03:ca:5f:8a:5a:44:
                    89:e1:0c:18:11:26:34:57:ea:53:72:59:b1:dd:2c:
                    d7:42:ae:bd:a3:47:cf:63:34:ae:ba:56:54:8d:ae:
                    af:69:83:43:c6:e9:64:da:ae:73:17:ba:e0:2f:7a:
                    47:22:0c:60:d2:20:15:c3:58:38:a1:6c:95:71:48:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:6E:56:53:94:A7:78:86:CD:CC:9D:39:01:0E:21:D8:B3:37:50
            X509v3 Authority Key Identifier:
                keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:5f:21:7e:15:dd:d5:ff:c8:27:78:d9:08:60:0e:98:d4:
         14:40:2c:4e:f3:11:45:27:d8:f3:c7:59:fa:44:14:f1:00:a0:
         f5:cd:50:68:51:6a:16:53:7c:2d:43:5c:3b:0f:3b:47:89:02:
         41:0d:cc:65:a3:59:05:a6:2b:e0:9d:23:7d:e5:5f:c4:22:e9:
         09:d3:f1:33:a4:0e:dc:60:7d:01:0d:92:f7:8f:8a:e9:58:89:
         03:95:58:ef:a5:1b:7f:09:2a:9a:a6:da:71:b6:2f:1c:5d:bb:
         02:ec:0f:32:b7:d4:2c:05:6d:54:29:53:a2:c8:a9:d3:80:a5:
         07:ce:df:cd:8f:6b:f1:76:34:10:2b:62:3b:36:0b:f7:2f:a5:
         ac:63:95:10:05:97:60:74:7d:e8:10:4d:04:8b:d3:f4:e2:ad:
         e3:dd:4d:1d:1c:62:9c:ed:9f:d0:ef:f6:b3:31:60:c4:0a:a8:
         ad:fa:aa:79:83:e3:5a:76:f2:62:1b:95:b8:7a:44:16:17:21:
         60:29:0e:3f:86:5d:b5:d8:70:a2:32:83:04:fd:26:32:55:1a:
         0c:22:d9:67:74:27:49:78:77:30:d4:8d:f2:e0:e5:f8:32:be:
         92:fa:42:31:80:05:99:6e:12:2f:2d:64:ba:1e:92:da:2a:2c:
         cc:b5:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:37 2025 by rpki-client