Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
File:                     1A706BB72455093A32D1C60201116349B90D2EC7.mft (raw, json)
Hash identifier:          TkFnhQW1Q2rdYW1yJX9IOAYyE+4R/p560chczUhnyaw=
Subject key identifier:   E8:27:AF:BC:E2:B4:6F:C4:EE:E3:7F:CC:89:69:13:DA:86:5F:E1:1C
Authority key identifier: 1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Certificate issuer:       /CN=1A706BB72455093A32D1C60201116349B90D2EC7
Certificate serial:       3889B9C49EFCC02BA15E07795ECE780DF9203331
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
Manifest number:          A3
Signing time:             Fri 22 Aug 2025 22:29:01 +0000
Manifest this update:     Fri 22 Aug 2025 22:24:01 +0000
Manifest next update:     Sun 24 Aug 2025 00:00:01 +0000
Files and hashes:         1: 3137302e38322e3137322e302f32322d3234203d3e20323636343434.roa (hash: D/9DWkPSs9OV/5NsQOgV12XhW3ZW1nrEQMQRd8u31Tg=)
                          2: 1A706BB72455093A32D1C60201116349B90D2EC7.crl (hash: tHSoiedGMIIe7V/3aQKVx0m9Sn41AX/oaSoy5whDxAI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl
                          rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 00:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:89:b9:c4:9e:fc:c0:2b:a1:5e:07:79:5e:ce:78:0d:f9:20:33:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Validity
            Not Before: Aug 22 22:24:01 2025 GMT
            Not After : Aug 24 00:00:01 2025 GMT
        Subject: CN=E827AFBCE2B46FC4EEE37FCC896913DA865FE11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:ff:28:88:89:4f:e7:28:79:53:b9:e2:ca:
                    73:fa:01:ab:94:5a:c8:c3:af:66:c5:a6:70:5f:ea:
                    a9:73:fc:91:8e:2a:b3:3a:43:5f:a1:69:72:b0:ad:
                    66:d5:6a:9f:40:02:df:ac:f0:70:3f:27:a3:51:16:
                    00:18:32:40:59:86:08:84:31:2d:b3:7d:cf:4e:4a:
                    f5:28:43:6f:c6:ba:8a:63:24:88:6e:cb:c5:14:3e:
                    98:bf:e2:a6:33:62:e2:49:7d:6f:9a:46:99:98:ac:
                    1c:ea:b2:3b:b6:47:ce:aa:91:b8:a3:54:44:01:3b:
                    52:37:b5:8e:e3:f6:f2:6f:9c:91:5a:8f:64:97:c2:
                    58:69:b8:e7:ce:54:b3:0f:38:9b:13:71:59:b2:ce:
                    18:d1:7f:fe:76:47:a0:d0:d9:26:ad:d0:83:77:32:
                    cb:71:1d:16:df:b3:63:22:62:ac:d1:dc:da:99:72:
                    13:d1:a6:7e:0f:79:b0:68:d6:49:1a:6b:fa:88:66:
                    52:7e:46:d2:98:3d:f7:7d:98:d2:d8:14:38:3e:43:
                    eb:f9:9c:98:f2:b7:33:0c:e1:7f:e0:ab:db:26:f9:
                    be:5e:30:84:aa:47:e2:dd:4d:78:dc:7f:da:d3:10:
                    20:7b:15:4f:a0:00:f1:82:61:03:b0:3b:45:c5:d5:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:AF:BC:E2:B4:6F:C4:EE:E3:7F:CC:89:69:13:DA:86:5F:E1:1C
            X509v3 Authority Key Identifier:
                keyid:1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:47:1b:e7:b5:c7:60:08:8c:76:98:db:dc:06:ea:76:e6:
         21:44:bb:3f:eb:ac:01:3c:ab:a3:08:2e:f5:00:29:f7:68:99:
         6a:c9:af:3f:70:eb:eb:b0:2e:79:16:de:58:7a:8c:be:ca:7e:
         0e:fd:ac:03:74:8b:72:79:e7:1b:f6:16:cd:3d:70:37:96:70:
         29:38:44:79:4d:c1:91:d3:a3:24:32:4a:eb:06:23:d0:02:da:
         83:36:a7:78:dd:80:18:1f:f4:f9:e2:02:eb:e3:a3:01:92:f5:
         80:10:fb:81:da:bc:3b:68:07:93:e9:ca:ff:1c:a2:5d:30:ac:
         c4:1e:41:0a:2d:0a:53:7b:3a:c1:c4:a2:ee:0a:21:90:cd:69:
         3a:f0:7b:bf:4c:13:53:f8:ea:a2:96:ab:ab:7f:e9:84:c2:10:
         57:f7:fa:49:a5:b6:46:b6:74:47:9b:cd:37:b7:d3:a8:61:c9:
         71:07:70:7c:ed:fb:61:88:e2:34:95:24:cb:76:36:c2:73:8c:
         e4:ec:7d:35:46:d1:12:3b:f9:82:e1:4b:cc:86:d7:bd:b0:42:
         60:e8:0f:84:9e:26:05:a6:e6:c9:4a:8b:af:e7:c5:a7:66:39:
         f6:2a:7c:92:a5:ed:11:cb:85:9a:7b:cd:5a:15:e5:b8:af:88:
         4c:e6:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:45 2025 by rpki-client