Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
File:                     D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft (raw, json)
Hash identifier:          l+Vd3McKJJqgITZWepcfFfGCkUV+TOYgDVrYfGRO2OY=
Subject key identifier:   13:F0:2D:E3:26:56:F5:04:95:95:E8:AB:36:0E:69:D5:A9:A7:D9:18
Authority key identifier: D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B
Certificate issuer:       /CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
Certificate serial:       054E2DAAEA40454D76EE91A5AE8106A1E6BFA9DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
Manifest number:          27
Signing time:             Sat 23 Aug 2025 02:11:31 +0000
Manifest this update:     Sat 23 Aug 2025 02:06:31 +0000
Manifest next update:     Sun 24 Aug 2025 04:15:31 +0000
Files and hashes:         1: D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl (hash: JY2UfOHPqjUfncaDfn0pexlV7ElK/vbL+9zqUrWGfEE=)
                          2: 34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (hash: mOXkqMNclDJ7PmlNw0yxQWbMww+lvOI6qELEBEEMLH0=)
                          3: 34352e3138322e33342e302f32342d3234203d3e20323639323635.roa (hash: xOoERlEhSi9M48UCfsW4Jh3De+JMGZNiha1TchGUW94=)
                          4: 34352e3138322e33352e302f32342d3234203d3e20323639323635.roa (hash: mySaU6fwlINwOm8Fs2UnMlGXQ421idH9Xpz0cducaT4=)
                          5: 34352e3138322e33322e302f32342d3234203d3e20323639323635.roa (hash: gDKF4Wwnv8nYlZMHxKheOOJRwPHFzRP2IDSa3GY2Mi4=)
                          6: 323830343a363165633a3a2f33322d3332203d3e20323639323635.roa (hash: G5uYp0ecuOs4MuZb+A34zoxhoZ/nOHhZNf5CuuFyumo=)
                          7: 34352e3138322e33322e302f32322d3232203d3e20323639323635.roa (hash: pCzDonosnG1M/FMYP6mGKnR9D//kOSapxlVj/nSW3nk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4e:2d:aa:ea:40:45:4d:76:ee:91:a5:ae:81:06:a1:e6:bf:a9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B
        Validity
            Not Before: Aug 23 02:06:31 2025 GMT
            Not After : Aug 24 04:15:31 2025 GMT
        Subject: CN=13F02DE32656F5049595E8AB360E69D5A9A7D918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:cb:87:8c:f3:3e:f3:8d:a5:eb:64:47:b1:
                    5f:33:f0:2f:0b:fd:e5:50:27:08:fb:2a:bf:bd:d6:
                    f9:62:24:47:67:c0:46:54:bc:a2:eb:e8:a3:a8:4a:
                    7c:90:2c:f8:c0:0d:6f:54:6d:a1:15:c7:6f:83:ab:
                    de:6b:ff:c2:2b:09:24:3b:69:b8:c7:2a:d7:7b:07:
                    b4:3a:50:06:f5:7f:77:f4:19:eb:8a:42:29:d6:70:
                    42:db:92:90:1f:05:21:09:ed:08:59:90:b4:38:cb:
                    4c:3a:bc:d7:3f:9d:72:41:fe:c0:61:32:cc:80:55:
                    a8:17:cf:89:b0:9c:40:9a:9c:4f:a6:9c:14:be:fa:
                    80:c2:01:29:d5:64:a2:84:36:8c:e8:0b:f4:4f:fa:
                    a1:2e:5e:70:f5:15:c4:5a:c5:fd:de:8f:58:1d:a1:
                    d6:ab:8a:93:e6:5c:9e:58:5c:47:5b:80:93:26:46:
                    0d:68:0f:29:32:8c:76:40:fe:20:12:16:ab:de:59:
                    b0:6b:8f:fa:17:ee:08:4f:b2:74:ac:a2:9a:a0:8b:
                    0e:00:31:81:b0:47:52:28:83:31:0a:75:a5:f8:63:
                    ea:dc:38:17:b1:fd:b8:85:ff:da:6d:7a:af:1a:27:
                    c5:8d:46:49:84:5e:a6:3f:8c:f0:12:9e:bd:37:4b:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:2D:E3:26:56:F5:04:95:95:E8:AB:36:0E:69:D5:A9:A7:D9:18
            X509v3 Authority Key Identifier:
                keyid:D7:31:01:88:F9:E2:12:C8:3E:92:DE:1C:5E:BB:FE:55:EB:88:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D7310188F9E212C83E92DE1C5EBBFE55EB88CE9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:66:f8:b5:13:d3:15:73:19:d0:a3:5c:02:3e:cb:71:67:
         e8:9d:6e:4b:1d:a2:d9:68:e4:31:4a:17:18:fd:fc:3f:6a:16:
         48:c4:ba:aa:94:b9:c3:ad:73:98:e0:91:97:73:f0:61:96:37:
         4c:ae:57:1e:be:73:77:64:07:bf:c1:22:c0:aa:f8:3d:d6:7a:
         2d:a0:33:2a:fe:b0:48:bc:e5:a6:b2:eb:ea:e1:e4:93:d8:7b:
         71:42:5d:63:92:7f:03:cb:0a:2b:7e:91:7d:58:56:dd:89:ce:
         75:0f:a5:c2:5c:fd:57:85:c6:e9:f9:40:d7:49:81:d3:d9:e0:
         6e:5c:74:91:86:89:d2:c2:70:bd:0c:a5:f9:c7:70:48:da:a0:
         38:35:5e:9a:db:3e:8a:6d:c1:7b:d5:97:33:eb:d4:f3:39:81:
         d4:10:9e:13:7b:b0:78:5d:74:e4:1c:ba:8d:2d:70:b6:a5:ab:
         d5:6b:bb:94:d5:0d:8e:55:96:82:67:40:b7:d1:e1:e6:cb:91:
         bb:0d:8f:4a:ca:1c:0f:17:5b:db:bb:de:73:83:45:19:c8:f4:
         54:cd:ef:eb:ff:20:dd:1e:10:60:2f:39:41:5d:e9:c4:63:f4:
         20:12:40:16:d1:9f:63:9f:07:6e:87:93:5b:0d:0a:50:ee:67:
         85:ea:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:56 2025 by rpki-client