Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
File:                     891876379661096633CCF1E14D82D1BBB9CBF133.mft (raw, json)
Hash identifier:          CRYDIgzgMjulSGd1PBSL8SKmfmDqtPmP6+tQnJ2Udro=
Subject key identifier:   4B:0D:B2:E1:8D:1E:30:A2:29:61:F2:0A:88:93:C1:B9:08:69:57:5B
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       3E11002644ED6E2AC70DC4BA1BE52F777F344247
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
Manifest number:          01A3
Signing time:             Fri 22 Aug 2025 23:34:19 +0000
Manifest this update:     Fri 22 Aug 2025 23:29:19 +0000
Manifest next update:     Sun 24 Aug 2025 03:00:19 +0000
Files and hashes:         1: 34352e3138332e3231322e302f32322d3232203d3e20323639323932.roa (hash: peRxNHVXlfZphtrZQBpIT3thQ4mpo0xgLq2sAv792oU=)
                          2: 323830343a363235633a3a2f33322d3332203d3e20323639323932.roa (hash: iG9S9U9fXGCHJbOQDHfY8KU88PT5KXg8YyOAssEhUOo=)
                          3: 34352e3138332e3231322e302f32332d3233203d3e20323639323932.roa (hash: gPU+pwwhhwGyCvN44eP0vGWa6o768Y7W4IO2OTaenAE=)
                          4: 323830343a363235633a3a2f33332d3333203d3e20323639323932.roa (hash: q6/FXBCQEvBOMLtOnug193i1fB9BJzn8tvG8xbuqVj4=)
                          5: 891876379661096633CCF1E14D82D1BBB9CBF133.crl (hash: wXQ9Vn/3QD67z4kfa0sGQpXFiuVEdVQb6jXrBrtgtcI=)
                          6: 323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa (hash: 0FqUATDkbXu85wTNvNH7i9D0uhFVcTMG6hHQ3jdZhd4=)
                          7: 34352e3138332e3231342e302f32332d3233203d3e20323639323932.roa (hash: eSpDIpyHdzdP97qQXLYwkBWVxmQy2DtE4xQqzDW5Vg0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:00:26:44:ed:6e:2a:c7:0d:c4:ba:1b:e5:2f:77:7f:34:42:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Aug 22 23:29:19 2025 GMT
            Not After : Aug 24 03:00:19 2025 GMT
        Subject: CN=4B0DB2E18D1E30A22961F20A8893C1B90869575B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:0c:48:e5:ce:47:23:37:43:33:fe:fb:ef:
                    67:88:a3:91:fa:a4:04:67:d9:d1:dd:31:29:64:a8:
                    ab:27:70:93:c4:70:4e:8b:80:12:b4:32:c2:b8:97:
                    ca:f2:64:c9:a0:40:11:d9:70:e6:5e:9d:76:49:58:
                    d2:07:12:56:75:16:42:66:82:92:ad:fb:21:f6:2d:
                    07:68:91:93:7f:ac:1b:8b:fd:3a:85:6e:7c:e7:d3:
                    1e:6d:ec:b1:2b:0a:6f:9e:10:c2:1a:a7:63:b1:b3:
                    2b:80:87:5c:c8:20:1e:b0:b6:25:1d:b6:c0:0b:e4:
                    f3:f5:63:97:1c:56:9c:c2:a9:32:e9:93:fd:0a:c9:
                    51:e2:28:bd:26:3d:55:36:55:a8:d3:ea:b5:90:f4:
                    2a:d9:d0:7b:61:d2:ca:2e:68:22:e0:95:50:6b:e6:
                    7a:a6:57:c4:04:03:7e:1d:c8:ca:fd:e8:18:78:7e:
                    b1:bd:38:e4:72:4d:1b:5e:ef:d8:db:10:b0:70:77:
                    3d:dc:5d:c1:a2:64:24:39:31:56:5c:0a:77:97:ea:
                    0b:f6:1c:4f:8b:12:85:f0:31:80:d7:88:0a:ef:b1:
                    e6:67:76:99:e6:08:b7:14:50:a2:d6:eb:52:64:00:
                    86:b5:11:bc:d1:9c:b0:dd:1b:c4:df:89:c4:05:4f:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:B2:E1:8D:1E:30:A2:29:61:F2:0A:88:93:C1:B9:08:69:57:5B
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:56:28:e1:d9:1c:77:69:a7:77:f0:85:ba:46:e0:30:1f:
         22:92:fd:4f:20:7e:e0:60:d3:49:95:78:39:d4:da:c2:0c:75:
         7e:dc:1f:d8:7b:43:fe:5e:1c:ab:ff:e6:38:2e:c6:01:7a:d3:
         32:77:ec:8d:10:ba:e6:84:32:a3:12:18:e0:46:6c:c3:58:7b:
         a3:17:3b:62:8b:bc:db:76:c9:57:b1:e2:ac:bf:3b:f5:aa:d4:
         9f:39:c5:fa:2b:bb:13:5e:cb:c3:5f:d3:47:ec:13:40:87:0f:
         ff:d9:e2:5b:59:40:58:82:15:52:19:d7:ed:7d:6e:61:de:14:
         44:4f:9f:d5:bb:ef:da:2b:2c:66:fb:f1:31:b3:3d:5b:ba:54:
         df:d3:7e:53:e1:d2:71:52:46:4c:60:b7:a6:8e:41:e1:87:f9:
         67:bd:b0:61:54:53:89:4f:e7:da:85:cf:93:0c:4f:65:b8:98:
         d7:17:37:c3:6c:8c:3b:4e:00:69:52:d9:63:e5:6b:f1:28:c4:
         06:73:69:ed:0d:db:fe:cb:ab:f5:07:79:80:02:2c:89:fd:ea:
         9e:8e:74:28:80:30:ca:23:39:2a:c3:b9:6e:7a:c9:85:07:16:
         95:41:b6:68:36:94:67:6c:b7:87:cb:0f:e2:9a:8b:eb:29:34:
         1b:35:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:23 2025 by rpki-client