Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          uJV8Nmj4PT9ep6Wtpibhjo0ipUP3nr7KpXFirTlMcqM=
Subject key identifier:   B4:AB:3C:A1:F2:68:14:58:72:B5:57:DA:E5:9F:88:1B:D5:6E:7A:D7
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       732CEA1F2D66335A8AC258CF4FE9A2DAEA68112A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          02AA
Signing time:             Sat 23 Aug 2025 07:07:56 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 09:13:56 +0000
Files and hashes:         1: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=)
                          2: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: 7399gaGleCuwnVxjqw6SUgNehxf/Jwn2SNCcQFpwgs4=)
                          3: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: uZqp4Wgh9r1u3S27RMEiTIHkcnYebpfguoeafqx6tVw=)
                          4: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: Ul7gq9CrRCwHaFK/u17aTOhNwaf2ziJyjPRRtidqANw=)
                          5: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: Q8fT0X0GWM0hUQiYXkk2teK4Zmhm+tiJhQOBJv4JZPA=)
                          6: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: LZs8UJxd25+oAoU0PN8Wb4clhACrCQakXa1FWzEA8gQ=)
                          7: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: aSA8jLBDOKXb/wGF0KTIXFeM70Ti1je/b4isJG4ZqbQ=)
                          8: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=)
                          9: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: I8gegaDlfSoPVJB4JicAvO6ZERf+vifvuI3FclW4DgI=)
                          10: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: Dw5AssA1HgxByRJyZF+pm59eguv/pTJItHP30N+8988=)
                          11: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: zAMTmLC4WZfoe2M0Wu6wK3iaa8mmiwf2SqxgNYCF040=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:ea:1f:2d:66:33:5a:8a:c2:58:cf:4f:e9:a2:da:ea:68:11:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Aug 23 07:02:56 2025 GMT
            Not After : Aug 24 09:13:56 2025 GMT
        Subject: CN=B4AB3CA1F268145872B557DAE59F881BD56E7AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:05:df:ae:9a:e8:5e:6f:de:91:69:67:90:
                    57:b4:9a:72:ef:26:7e:fa:8d:37:78:86:03:5e:b1:
                    05:5a:c0:65:44:83:17:3e:6d:3d:df:c0:47:51:6e:
                    b3:fb:7b:c0:4e:5e:1a:41:15:e7:66:4e:b2:6c:a3:
                    62:7b:c6:5e:76:97:1b:f6:f4:ce:0e:ac:1a:41:fd:
                    5a:bc:e7:cc:c8:9f:b6:22:2b:e6:33:fc:c8:90:36:
                    a6:15:80:f6:b8:2e:93:24:4d:43:38:22:a8:51:05:
                    bf:11:d0:b0:31:0a:48:62:5a:89:ab:8e:3e:d5:aa:
                    c5:af:61:a9:b7:1a:c5:21:77:80:71:2e:d1:75:c9:
                    79:b8:8a:72:18:8b:27:e7:dc:ac:84:f6:31:51:45:
                    37:5e:61:b7:59:a3:6b:f9:b5:31:4b:7f:8b:60:fc:
                    26:d2:22:45:9f:f2:3f:51:e8:96:e0:ac:90:d7:93:
                    12:d1:3d:2b:36:20:1d:4c:50:be:bf:55:84:40:22:
                    5b:35:f5:05:45:c6:eb:4a:5c:44:96:79:f5:59:ab:
                    4a:5d:b7:53:f2:75:38:9c:c9:c4:55:2c:c8:b6:11:
                    02:a3:0f:42:fa:eb:3e:9f:d4:88:40:cb:8e:bd:ba:
                    f6:ae:9d:9d:01:5a:15:b1:7c:61:b3:06:d7:c7:e0:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:3C:A1:F2:68:14:58:72:B5:57:DA:E5:9F:88:1B:D5:6E:7A:D7
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d0:70:90:a2:39:33:04:81:4b:0f:f9:8f:27:e3:8f:ff:0e:
         6d:de:c4:24:92:50:99:73:74:03:48:47:01:bf:6a:f5:9e:4c:
         2c:b2:f5:1c:c2:bf:e4:46:55:74:2b:28:bb:2c:03:1a:c0:14:
         3f:fc:7f:f3:81:5a:c0:a4:d0:24:96:5e:88:a4:10:b4:ba:1c:
         12:fc:a1:bb:b5:1b:87:27:d0:39:3d:e3:f1:ec:bd:63:32:bb:
         da:e4:a9:46:9e:a7:01:79:4d:0d:b7:47:1e:ab:ec:08:2f:6a:
         5f:d1:fc:19:0b:24:f3:0a:8d:18:69:8c:de:94:7a:6e:0b:1e:
         6b:80:7a:93:5a:9b:c0:af:df:97:ca:2d:4c:33:66:b4:25:8d:
         ea:04:4e:24:8d:19:7d:52:25:5b:0d:f0:82:55:a9:d6:fd:18:
         66:be:6a:c8:db:60:f5:e3:81:7f:f6:07:27:b0:1a:43:88:04:
         aa:cc:0d:ee:dd:8f:4f:ac:17:a6:ca:96:bd:0c:6a:00:4c:f1:
         20:3d:06:05:b4:b0:fb:d2:21:91:d6:56:9d:de:d0:48:42:aa:
         33:4b:c8:72:ae:b6:cd:3a:39:98:21:d5:98:cc:8c:5f:5e:2d:
         a7:05:92:ec:22:e6:ce:b0:da:b5:8f:d1:6f:e8:9c:81:f7:73:
         db:a5:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:18 2025 by rpki-client