Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
File:                     F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft (raw, json)
Hash identifier:          unZxxXYe8U/IhzS3OLw8HBR1eVNZKEhAASrzLHw+ZF4=
Subject key identifier:   A3:14:5C:E4:1B:AB:B1:1F:90:2C:88:E9:51:B1:E6:D0:46:AD:3B:00
Authority key identifier: F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D
Certificate issuer:       /CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
Certificate serial:       2D0C5C118D8946ED13490BBF550CC1EFC389103F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
Manifest number:          87
Signing time:             Sat 23 Aug 2025 08:37:11 +0000
Manifest this update:     Sat 23 Aug 2025 08:32:11 +0000
Manifest next update:     Sun 24 Aug 2025 11:48:11 +0000
Files and hashes:         1: 323830343a393430633a3a2f33322d3438203d3e20323734383138.roa (hash: txs4qGVE6CFf1oe0D7Nr3lbJ5NrOYxnIQyBplIdS0Dk=)
                          2: F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl (hash: ggSkImcc7FA9B/qJERC1BCII3uWqnX4coJ1Qq0aLiRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl
                          rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0c:5c:11:8d:89:46:ed:13:49:0b:bf:55:0c:c1:ef:c3:89:10:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D
        Validity
            Not Before: Aug 23 08:32:11 2025 GMT
            Not After : Aug 24 11:48:11 2025 GMT
        Subject: CN=A3145CE41BABB11F902C88E951B1E6D046AD3B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:d0:be:6b:7d:bf:f9:3c:e4:16:98:b5:29:
                    a3:12:f8:17:a3:44:a2:3a:08:eb:c8:bb:2d:8e:4f:
                    9c:d1:aa:a3:a6:f1:ea:ae:19:f1:cb:df:bb:a9:db:
                    ff:25:82:56:e3:75:26:b8:21:65:da:eb:28:db:f7:
                    5c:93:ed:77:29:ed:cb:50:2a:e1:ec:62:ca:a8:f6:
                    af:0a:2e:11:85:ef:19:2f:84:f9:e6:8c:cd:6a:1a:
                    66:c9:60:c2:bb:48:5f:d1:2f:32:c6:9f:56:ac:ae:
                    ee:3f:07:81:4f:3a:f8:b0:98:07:5e:b3:dc:3d:b1:
                    14:7c:dd:66:15:fb:12:63:9f:f3:55:b2:f9:53:31:
                    e5:32:aa:06:ca:13:b8:ad:a2:b8:5c:ae:60:a8:ef:
                    0c:41:ba:21:42:bf:ea:ac:9a:c5:89:42:e0:7e:82:
                    cc:5e:c4:53:f2:20:87:6e:1c:93:bf:4d:48:ca:4d:
                    da:2a:5e:f3:15:79:b5:36:27:c8:0d:10:d8:58:00:
                    7f:5c:89:1c:2f:66:a0:fc:ae:3e:9f:68:b5:90:49:
                    ad:14:95:14:13:04:ff:b7:d1:ea:a1:bf:7c:8c:98:
                    6f:48:b4:7b:9b:0f:17:90:ac:7d:d6:13:cc:d3:7a:
                    aa:12:09:6b:5e:19:43:95:62:ea:05:6b:24:0b:03:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:14:5C:E4:1B:AB:B1:1F:90:2C:88:E9:51:B1:E6:D0:46:AD:3B:00
            X509v3 Authority Key Identifier:
                keyid:F9:E7:F3:76:E0:D0:EA:F5:21:AC:DD:5B:3B:F0:C8:44:33:FB:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNaaTe3s9rPkgeoukrXis525TbXXgF9w91tceEqFrgt/0/F9E7F376E0D0EAF521ACDD5B3BF0C84433FB3A5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:eb:0b:a6:37:22:4d:af:90:a1:9c:20:a0:e3:28:fb:49:69:
         e0:84:96:1c:dd:bc:7d:f2:b7:4d:50:2f:99:0b:74:8b:3f:c7:
         0b:a4:36:1c:82:8e:56:ee:b8:49:27:5f:52:af:06:d7:eb:09:
         b6:8b:22:e8:00:a7:f9:40:f3:12:bb:93:84:8a:62:08:fe:11:
         b2:9c:8d:a9:83:47:86:78:e9:36:a5:e9:97:b6:b3:15:c6:fb:
         8e:17:b7:85:10:52:88:04:5f:14:a4:1a:6d:f0:2b:06:40:51:
         8c:2d:85:c8:98:19:3f:11:5f:3e:c6:6e:87:ed:0b:b1:55:b3:
         20:57:26:9e:13:9a:bd:09:6b:04:6a:d3:b7:29:c6:99:4f:d5:
         a2:65:c4:21:d6:6c:fa:70:84:af:73:ca:1b:8e:44:50:9e:2f:
         5d:c2:4b:76:ed:b9:50:dc:db:69:fc:18:06:0f:5c:f0:b0:4b:
         3c:dc:9e:69:6b:ae:f2:de:38:50:85:8a:33:3d:8c:b0:6b:9e:
         2c:e6:cb:0b:30:4f:e9:f0:dd:54:38:7d:56:6c:06:ba:c5:5d:
         d7:e9:a3:33:71:06:55:87:85:31:2d:2d:f8:2c:d0:52:36:2a:
         4a:74:cd:11:ad:d7:e3:13:55:6a:23:e7:f6:5e:c4:39:09:cd:
         10:49:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:36 2025 by rpki-client