Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          heqeV0jhq5ejFG83ZB9tFfPGL2Iz6DE/KYd9VUVpGj8=
Subject key identifier:   35:57:0D:D4:33:C4:80:0C:78:59:BC:BF:64:DD:EC:70:8C:15:33:BF
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       0925B1B02195A79E27DF2EC6AB0D205C0BEFFBD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          025A
Signing time:             Wed 02 Jul 2025 23:38:23 +0000
Manifest this update:     Wed 02 Jul 2025 23:33:23 +0000
Manifest next update:     Fri 04 Jul 2025 03:10:23 +0000
Files and hashes:         1: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          2: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
                          3: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          4: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          5: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          6: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
                          7: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: 4WfVWQUmqqAqBF5nixivYzw6KUVdasU+ARddqukPZfY=)
                          8: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:25:b1:b0:21:95:a7:9e:27:df:2e:c6:ab:0d:20:5c:0b:ef:fb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Jul  2 23:33:23 2025 GMT
            Not After : Jul  4 03:10:23 2025 GMT
        Subject: CN=35570DD433C4800C7859BCBF64DDEC708C1533BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:5e:a5:ae:07:f4:55:fd:8b:10:34:5d:99:
                    0c:fd:a0:10:ad:3d:ce:90:6c:6f:9e:06:e8:5e:8c:
                    ec:8e:44:81:10:3a:81:b5:06:26:d0:89:44:19:48:
                    87:2b:f3:3c:66:bf:b4:8d:57:ea:fd:b5:5b:5b:3b:
                    91:90:37:11:d9:63:8c:24:09:cf:7e:7f:62:98:08:
                    ad:48:cc:d3:30:51:c0:8a:54:8c:43:a3:77:2a:cf:
                    05:00:6e:98:6c:f6:2f:9d:49:b2:66:43:04:c3:c9:
                    f8:e8:5c:87:de:8a:4b:aa:6e:00:8d:c2:93:b4:21:
                    d1:03:29:af:8e:c2:35:0b:e8:50:ea:d3:ec:10:30:
                    3d:c3:27:28:c7:e5:7d:ba:23:59:b1:34:35:68:93:
                    b4:bf:54:97:1b:a0:ee:0b:86:44:97:7d:7c:7c:60:
                    39:21:0f:90:bb:5f:3b:51:63:8d:04:83:1c:3e:bf:
                    2d:17:65:27:42:10:dc:cf:70:18:4a:fc:ea:19:61:
                    76:9a:00:b0:14:73:e7:40:41:87:94:d1:a2:7c:48:
                    0b:ec:ee:4a:4f:5d:3b:0a:c2:a5:9a:01:be:e0:d6:
                    4f:a9:07:33:e6:c9:97:23:58:6c:c9:38:7f:05:f3:
                    31:b4:44:2b:1f:88:e9:16:b5:17:f8:c0:92:8e:ef:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:57:0D:D4:33:C4:80:0C:78:59:BC:BF:64:DD:EC:70:8C:15:33:BF
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:75:44:e5:0a:ef:14:68:00:26:b3:aa:b6:97:07:69:1d:
         5b:f0:6f:a8:96:b6:25:e7:d7:44:a2:da:b1:58:d9:3f:d4:b0:
         9c:90:b2:9a:c9:85:54:6c:b9:b9:cb:b0:38:0b:f1:cc:a8:ac:
         6a:49:65:11:a8:0e:cb:b5:ce:9c:02:b3:3c:6f:a0:10:72:9b:
         b6:aa:7c:17:e7:93:6f:1d:5b:94:d0:5b:ff:20:b2:2d:80:00:
         96:6c:6c:d3:34:d7:1f:f3:a4:e0:01:18:04:32:ae:48:47:7e:
         f2:9a:cc:3e:90:ab:4f:39:4c:0b:aa:c7:6f:ee:a3:ed:da:1e:
         73:d5:6d:41:c0:a9:8f:69:56:0d:72:f8:fb:f5:fa:66:9a:0c:
         8a:60:f0:a1:23:3a:84:4f:c2:f6:a0:4b:be:5c:86:c8:10:63:
         f4:32:0b:e4:15:d2:01:6c:36:12:34:dc:30:30:1c:db:59:17:
         98:6f:7d:72:23:9f:f3:00:e5:c8:bf:19:ba:d8:28:af:64:c8:
         dc:dd:9a:d3:64:02:60:b8:d2:1e:25:4a:01:80:96:25:f1:ec:
         e4:d7:52:9d:95:a2:a1:c6:62:2b:c8:47:1b:cb:c0:f2:0f:37:
         5d:92:97:5a:29:0b:1a:a4:14:7e:48:a9:0f:f7:71:fc:c1:d4:
         05:76:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:01:24 2025 by rpki-client