Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
File:                     0CEEA1DDF076523B39CF76E704244FA173114D8F.mft (raw, json)
Hash identifier:          NldvCLYK/QiDqq02tuBiqPBsG7R5G8H356lP86LRsx0=
Subject key identifier:   0F:66:95:1D:0B:43:6A:CA:39:E7:AF:45:78:52:4C:84:AD:CC:99:F5
Authority key identifier: 0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Certificate issuer:       /CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
Certificate serial:       4378F265C992DC3973DFA68DF8A2B4F9E41FF5E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
Manifest number:          025E
Signing time:             Tue 01 Jul 2025 11:23:29 +0000
Manifest this update:     Tue 01 Jul 2025 11:18:29 +0000
Manifest next update:     Wed 02 Jul 2025 14:38:29 +0000
Files and hashes:         1: 34352e3136302e3132302e302f32322d3234203d3e20323638343138.roa (hash: QK7M7Hn95eoxyqK+R5yWsmr5Y3VALC5NN9+0lKedKxY=)
                          2: 0CEEA1DDF076523B39CF76E704244FA173114D8F.crl (hash: dUpxCxmPRC1j8KSeO6+lLRBxLt1HfwPIWWhaiFccad8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl
                          rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 14:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:78:f2:65:c9:92:dc:39:73:df:a6:8d:f8:a2:b4:f9:e4:1f:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Validity
            Not Before: Jul  1 11:18:29 2025 GMT
            Not After : Jul  2 14:38:29 2025 GMT
        Subject: CN=0F66951D0B436ACA39E7AF4578524C84ADCC99F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:a7:8b:c6:ad:f7:1d:74:7d:40:c4:0f:c1:
                    cc:1f:26:19:bc:45:47:bb:04:48:ce:b6:03:c1:0a:
                    91:b9:a0:e3:2f:98:03:a8:f8:94:0c:ef:62:c6:7c:
                    a8:1b:0c:18:e4:42:01:e0:a3:ae:60:63:b8:08:cc:
                    87:d8:a2:be:33:ee:2c:a9:2a:32:03:3d:68:1f:04:
                    a6:29:a3:26:84:39:87:08:78:70:37:38:6b:7f:7d:
                    23:32:66:43:57:2d:6a:90:bc:77:6c:3d:e6:32:c7:
                    5c:47:99:7a:5f:e8:2c:a4:11:ae:47:82:df:88:7a:
                    2e:02:44:15:ec:06:89:c4:6c:a8:b8:15:b9:40:8b:
                    4f:01:62:b2:bd:35:ce:83:fd:c7:41:91:b8:6a:f7:
                    dc:93:82:ab:05:71:6e:bb:4c:4b:76:b5:ce:35:ef:
                    bb:62:da:7c:e2:20:da:3d:07:f2:4e:f1:f9:14:fe:
                    08:51:92:53:9d:8e:71:42:82:16:09:cd:26:4c:d3:
                    18:47:13:26:be:d1:de:d0:82:f3:62:e3:6a:38:00:
                    4e:eb:8f:56:eb:75:22:64:b2:9e:56:a7:ad:17:86:
                    9b:6a:5b:17:b9:a5:9d:67:2f:be:4f:47:ef:4a:12:
                    69:69:85:1c:56:10:12:f4:cd:89:2d:27:73:84:ad:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:95:1D:0B:43:6A:CA:39:E7:AF:45:78:52:4C:84:AD:CC:99:F5
            X509v3 Authority Key Identifier:
                keyid:0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:e1:b5:0a:9b:ef:ce:f6:35:0d:85:cc:d3:c7:12:76:54:
         82:bc:52:45:b5:e5:26:35:da:4f:5b:23:6f:12:ed:4a:b2:95:
         22:ed:a5:02:c7:c9:23:c9:ee:67:f6:0c:e3:18:3d:89:c7:02:
         82:98:b2:eb:fa:ed:6d:a8:fb:35:b2:d3:3d:6d:0f:f9:ef:33:
         02:f4:45:6d:77:6e:17:04:14:e0:73:4e:2b:3c:71:14:4e:09:
         a2:3d:2d:9d:b0:78:25:e7:e3:35:37:c2:71:3f:ed:29:f4:9a:
         b1:f4:b4:29:7d:fa:e6:9a:38:16:e2:7f:86:74:95:a0:b4:d2:
         59:60:2d:83:8d:65:8c:ee:a3:e3:92:2c:be:84:3c:11:1f:ec:
         db:8f:87:c0:16:1a:bb:ea:21:ce:55:f6:7b:ee:fd:af:f1:fb:
         ef:5b:4b:2e:6d:12:77:13:da:93:b8:c6:a7:f6:eb:f7:cb:e6:
         c1:a9:de:1e:f8:88:be:5b:c8:4d:9a:92:af:97:25:aa:24:48:
         5c:03:3d:15:02:69:da:44:90:97:87:cc:9d:8f:6f:c2:a7:91:
         f1:d3:0f:57:ce:97:78:a6:5a:33:ec:4f:94:87:b3:2a:07:82:
         91:48:a9:99:d2:36:3a:2a:a4:6f:a3:60:db:2d:10:51:0f:af:
         84:2f:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:35:47 2025 by rpki-client