Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
File:                     5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft (raw, json)
Hash identifier:          oJ35RSNpa71CVw8HB1C7kS73v0Zj5zsx7I1ulDVmKDA=
Subject key identifier:   A5:88:3D:7B:B7:D1:11:32:6C:24:1F:91:04:53:AF:07:8D:89:56:47
Authority key identifier: 5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE
Certificate issuer:       /CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
Certificate serial:       077DED5326DAB5A8348427B7FA1BAB54EDCFE930
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
Manifest number:          025C
Signing time:             Wed 02 Jul 2025 02:43:23 +0000
Manifest this update:     Wed 02 Jul 2025 02:38:23 +0000
Manifest next update:     Thu 03 Jul 2025 06:16:23 +0000
Files and hashes:         1: 3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (hash: d08Pl+W/dTWpZFlmMKe8w3cnyJqa/CScvBLfxR4G/Og=)
                          2: 323830343a323037343a3a2f33322d3438203d3e20323634343931.roa (hash: 0+yyYhzefzIILi0EAiz+ba5lOaT5HBHgqWt7VVeb80Y=)
                          3: 3133382e3231392e35322e302f32322d3234203d3e20323633393234.roa (hash: qoIZEu1/WWy4s44he/lhY8Elf0Ze8PVUEg3vPzj5UoM=)
                          4: 5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl (hash: g/tanWNpw4JrGN2Wo781u769sMVLMG/jJ6chGKO0W/0=)
                          5: 3137302e3234372e3235322e302f32322d3234203d3e20323634343931.roa (hash: DavKGaLt8+OCiM0sr6n2fHGnv4su2dNtgMGBKD7OrZI=)
                          6: 3136382e3233322e3137322e302f32322d3234203d3e20323633393234.roa (hash: 9mykslR77fZ7xC9MLu79f7z8bzLyXOic2iyPtYgwpU0=)
                          7: 323830343a323764343a3a2f33322d3438203d3e20323633393234.roa (hash: RTx6CCPuW1lY1SE9RqyeFLKfpghK/ucENv3ATWs3J+g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 06:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7d:ed:53:26:da:b5:a8:34:84:27:b7:fa:1b:ab:54:ed:cf:e9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE
        Validity
            Not Before: Jul  2 02:38:23 2025 GMT
            Not After : Jul  3 06:16:23 2025 GMT
        Subject: CN=A5883D7BB7D111326C241F910453AF078D895647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:04:3e:2c:7e:ee:10:da:eb:dd:0b:72:11:
                    65:a8:32:98:cb:3b:ca:85:eb:1f:d2:74:78:18:cb:
                    67:f2:c8:39:91:0b:78:a5:e7:da:af:60:b1:be:61:
                    13:d4:f4:cf:dc:72:45:01:e9:87:38:52:e1:87:ca:
                    c3:90:e4:b7:0c:84:99:5a:02:05:59:ec:79:63:59:
                    36:f1:17:08:a7:fb:50:72:ec:7b:39:6f:61:bc:8f:
                    ba:dd:5f:3e:49:5d:ec:0a:10:52:00:a9:1f:f8:e7:
                    63:57:dd:28:94:9c:13:36:9a:44:c5:bd:1a:80:f6:
                    0c:f0:09:c5:1d:c9:ea:79:89:05:62:88:63:1e:53:
                    35:57:47:b2:b7:43:ec:78:2e:1c:1a:e7:39:0b:9e:
                    62:21:d6:83:8f:85:06:e3:6d:df:43:3a:01:17:5a:
                    58:82:01:13:79:c8:e6:de:a9:af:9f:ad:82:50:20:
                    8f:09:52:8e:aa:d1:bd:d1:d2:f1:2f:49:75:83:a1:
                    3f:eb:9d:75:d5:08:c3:3c:b2:84:88:35:0f:24:a9:
                    05:4e:39:08:96:79:34:39:e5:fd:17:99:14:88:35:
                    c7:82:a5:1f:0b:a3:17:0d:59:c6:c2:a2:8f:6b:7f:
                    9f:6a:f8:77:46:50:6e:2f:24:ce:9d:23:03:ed:9e:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:88:3D:7B:B7:D1:11:32:6C:24:1F:91:04:53:AF:07:8D:89:56:47
            X509v3 Authority Key Identifier:
                keyid:5D:6F:D7:EE:DF:45:A6:BB:5F:1B:66:DD:D4:44:94:64:FE:18:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/1/5D6FD7EEDF45A6BB5F1B66DDD4449464FE18BCAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:39:2f:f1:29:ea:50:23:e4:61:f4:a9:dd:d0:a9:28:87:
         6c:21:f5:75:af:dc:d9:81:46:47:1b:f8:ec:c3:c9:6b:f4:bc:
         35:6f:81:82:67:0f:01:c3:48:f2:c2:67:de:7b:9a:90:4d:dd:
         86:e4:89:da:9b:81:d9:ae:67:81:e6:fa:a6:cd:4e:ce:93:fe:
         a7:7e:ee:90:93:4e:05:0c:6b:ed:b0:1d:17:06:7f:68:04:e7:
         ea:54:b2:39:69:2f:3d:21:23:d1:c1:38:3c:d4:3a:23:9d:f7:
         41:ef:7b:2b:b2:a9:61:77:a5:28:e1:7f:f4:fe:06:ad:69:45:
         b9:59:32:51:6b:2b:35:6c:e1:7b:6a:9d:7b:5b:1f:e5:ec:78:
         24:59:ac:38:42:3d:4e:df:9b:10:7e:09:1f:af:4b:0d:18:a6:
         0b:25:53:90:c0:3b:e6:42:2f:33:b9:26:d6:3d:c8:e6:35:2c:
         76:07:69:2e:9c:de:9e:51:6e:71:4a:c6:88:cb:71:8f:a9:61:
         c0:c4:20:1d:e0:ed:e4:c2:fc:45:b4:b1:b3:2a:a4:84:da:01:
         f6:11:a1:ae:af:c9:6d:c0:c8:b0:80:59:ed:36:87:37:3c:95:
         b9:f4:50:fc:f9:0d:a7:32:4b:37:c0:14:43:b0:18:23:3d:87:
         1a:f4:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:07:00 2025 by rpki-client