Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File:                     5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier:          4PVd1xidhvKkN2Hb7txnB5Yb8EA3Nt05J2ongFaw5Ug=
Subject key identifier:   7B:F0:07:1C:91:2E:F2:9D:33:6A:73:CA:4B:E0:3C:48:FC:06:AA:DF
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer:       /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial:       31F2DBE60BE4FC56E2AF2FD3DBAF62323C32834F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number:          025B
Signing time:             Mon 30 Jun 2025 12:49:06 +0000
Manifest this update:     Mon 30 Jun 2025 12:44:06 +0000
Manifest next update:     Tue 01 Jul 2025 14:36:06 +0000
Files and hashes:         1: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: hoV9bl/WbgoYomh6U9MlLDwcgytbzAsvPl5uVmnC21M=)
                          2: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=)
                          3: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f2:db:e6:0b:e4:fc:56:e2:af:2f:d3:db:af:62:32:3c:32:83:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
        Validity
            Not Before: Jun 30 12:44:06 2025 GMT
            Not After : Jul  1 14:36:06 2025 GMT
        Subject: CN=7BF0071C912EF29D336A73CA4BE03C48FC06AADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:9f:15:a1:09:86:3e:1d:2e:96:6e:f8:01:
                    7c:6b:8c:fe:6d:89:c4:7b:cf:d3:53:21:4d:de:31:
                    97:85:9d:b2:5e:94:15:ca:9f:98:d8:6c:82:7d:f8:
                    56:38:2e:01:70:fd:1c:e0:ab:89:71:6d:8e:53:bf:
                    52:00:b4:de:5a:dc:93:b7:b1:ea:9e:e9:64:f2:0f:
                    ea:16:87:07:ea:fc:36:84:af:b1:74:0e:be:a7:2e:
                    1c:23:e2:e3:1e:98:07:43:5e:de:cd:7d:2a:ed:48:
                    a8:18:27:d7:f5:72:35:95:27:cb:c3:f3:c2:82:23:
                    c5:69:3c:85:29:b7:30:c7:e8:de:9f:21:6f:08:e8:
                    ac:f2:3c:c5:db:6d:70:30:5e:dd:9f:5b:bc:fb:06:
                    db:aa:cf:27:7a:c5:9d:6c:2b:69:8a:63:72:ad:8d:
                    5c:ab:d6:84:08:8b:81:af:87:8a:04:ee:25:f6:52:
                    cb:00:15:b1:33:f7:6f:61:cf:5a:09:e7:50:99:00:
                    79:96:2c:40:be:24:c1:fb:0f:f9:a9:3d:30:1b:2a:
                    5f:19:c4:6c:6e:4f:4a:29:e1:ab:bb:3c:22:69:cf:
                    36:57:1e:19:ee:20:0b:4f:ac:17:5d:43:74:e6:58:
                    b9:c1:ca:31:3d:8f:1f:52:88:9f:e2:97:fc:c2:db:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:07:1C:91:2E:F2:9D:33:6A:73:CA:4B:E0:3C:48:FC:06:AA:DF
            X509v3 Authority Key Identifier:
                keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:4d:02:09:a0:bb:bc:f4:19:c4:81:96:0e:4d:21:b8:ec:
         71:58:5e:52:3c:af:ea:e4:fb:39:1b:eb:e5:b0:50:36:9c:37:
         7b:e4:a5:e4:5f:2f:8f:b1:18:7e:41:95:2b:e7:c4:84:4a:2c:
         ce:b7:43:4b:5d:d7:70:fc:ce:cd:3d:6c:06:28:87:ce:1b:27:
         a1:cf:1d:e5:3c:ad:7b:89:8d:95:13:07:02:89:e3:10:b4:19:
         31:74:38:ba:65:a0:ce:fe:69:1e:4f:98:a4:21:39:96:59:d7:
         5d:64:5f:b3:bd:7b:8e:b9:f4:90:97:be:8b:8a:47:4c:4a:89:
         ae:4b:20:ec:22:ad:0a:d9:b8:da:71:86:98:5c:ad:5b:46:12:
         3c:d4:cb:48:bc:5d:39:9d:f1:68:96:b7:a1:ac:f7:07:c9:4b:
         42:d7:b4:a7:43:ae:3c:f4:9c:42:d9:76:e4:6c:f8:5b:d4:c7:
         87:5e:90:6b:24:23:b3:e1:0e:08:3c:6b:fd:5d:a9:65:0b:ec:
         02:63:fc:62:e9:d4:7c:4a:6c:31:c9:79:e9:2a:2f:27:a0:84:
         7e:4c:9e:5e:da:43:3a:55:cd:04:13:9c:fb:be:4b:8d:69:1f:
         aa:d9:e9:fa:69:cd:7a:18:40:44:82:af:85:45:3a:6a:c2:01:
         94:a3:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:20 2025 by rpki-client