Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft
File:                     D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft (raw, json)
Hash identifier:          yXPw52JZCUBj3hZWFZKa26xwMxqrWmxTFnu7i4IJV5k=
Subject key identifier:   80:A3:D1:87:4C:97:4B:7B:5D:49:07:DA:1E:EC:CA:2E:C3:C5:60:F5
Authority key identifier: D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7
Certificate issuer:       /CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
Certificate serial:       04BFDD14BB21C32FF4630851C2B491CD6596AEA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft
Manifest number:          30
Signing time:             Mon 20 Oct 2025 15:31:10 +0000
Manifest this update:     Mon 20 Oct 2025 15:26:10 +0000
Manifest next update:     Tue 21 Oct 2025 18:56:10 +0000
Files and hashes:         1: 3137372e3132392e3135322e302f32322d3234203d3e20323633303431.roa (hash: fpWMFviM0uVt3k4Ge+Ast4cwwAwkJgLtKPZR64Nsfgw=)
                          2: 323830343a316337383a3a2f33322d3438203d3e20323633303431.roa (hash: Dixwa65/5GpwICLpSZsVKPMV6Lhpd7ilnNfJgrzQNSc=)
                          3: D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl (hash: COACZZogDTJHT30pGsQ5Go5LIMvc+G7UzENDrsDVnlQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl
                          rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bf:dd:14:bb:21:c3:2f:f4:63:08:51:c2:b4:91:cd:65:96:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
        Validity
            Not Before: Oct 20 15:26:10 2025 GMT
            Not After : Oct 21 18:56:10 2025 GMT
        Subject: CN=80A3D1874C974B7B5D4907DA1EECCA2EC3C560F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:d2:3b:cb:bb:07:73:69:a7:f7:bd:05:39:
                    d1:9e:c5:34:a6:7a:6e:73:c0:af:53:ff:0c:2e:21:
                    40:5e:8e:3c:8b:3d:85:6b:cc:8c:8d:3f:10:2c:39:
                    81:0a:44:3e:71:20:bd:25:14:71:89:40:6b:2a:48:
                    7f:5e:9b:5d:5c:8a:8f:2b:94:b5:89:8d:b3:4c:ed:
                    97:fc:13:0a:02:eb:fc:54:f3:bb:99:05:26:54:8b:
                    d0:b0:77:d5:76:db:e1:02:2d:50:57:a1:b2:5d:81:
                    36:71:96:ef:9a:49:1d:0b:cc:74:82:7b:df:97:06:
                    23:5b:0f:82:9d:04:a4:2b:46:70:5a:d9:22:28:ca:
                    34:0f:66:b4:3c:f9:9d:b9:4a:39:0d:bd:18:11:9e:
                    18:64:b4:4e:d0:03:17:f3:34:95:e5:9a:3b:d2:70:
                    92:66:73:65:23:ec:57:ff:d5:9f:46:e2:bc:94:f8:
                    e0:2d:95:47:1f:9b:94:da:9d:e7:34:dc:b7:d0:cf:
                    0a:99:60:50:d3:36:f5:df:c6:34:17:e8:1a:71:24:
                    40:0a:9d:a8:eb:9c:d1:62:14:80:5d:af:a2:37:80:
                    0f:c9:7f:8d:9c:b8:83:a3:f8:7c:ea:41:ca:67:de:
                    13:e6:9a:7e:95:1f:13:55:a4:fa:36:c6:ad:e2:85:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A3:D1:87:4C:97:4B:7B:5D:49:07:DA:1E:EC:CA:2E:C3:C5:60:F5
            X509v3 Authority Key Identifier:
                keyid:D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:02:9b:69:e9:04:73:41:62:25:7c:ec:64:cf:71:5f:56:
         55:72:3c:31:28:7d:8f:d9:22:78:32:2c:8d:4b:ee:56:ce:99:
         ef:7a:f6:66:7c:8b:ce:10:19:a5:e3:63:89:b3:2e:ab:ef:66:
         3b:6a:8e:5b:e1:85:62:c9:d6:b5:75:23:5c:28:cb:aa:17:1c:
         02:96:21:7c:da:51:df:93:5b:65:24:90:b6:b0:63:48:66:d6:
         1d:5f:05:26:96:27:13:b9:da:d4:b4:0c:a4:f4:44:3f:bd:7d:
         cb:e9:30:ee:d9:f6:c8:c2:2c:52:77:d3:0b:97:e4:7b:c8:39:
         13:9c:ed:6e:0f:d5:20:4e:63:6b:b7:c6:60:b3:89:73:4a:68:
         84:19:55:cb:ba:9f:3d:79:ee:a6:2f:b3:d8:97:34:6d:ab:30:
         18:2c:04:e6:22:6b:f0:f9:83:de:48:b8:bb:a1:7a:79:77:58:
         56:b9:fd:82:2c:fe:4a:0f:a9:59:54:a8:f5:6b:9d:59:32:70:
         9d:36:d9:3f:a2:2d:68:e0:74:51:e9:e1:c4:83:5d:bd:c1:17:
         3c:73:a5:6a:ad:47:d9:2d:f1:81:96:f1:df:00:40:0e:01:e1:
         b3:15:72:09:e7:77:b1:00:64:fa:14:c4:8a:ed:5f:d9:a7:70:
         00:d8:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:36 2025 by rpki-client