Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
File:                     C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json)
Hash identifier:          eVHUlwlgHidg+j1S2K1JL/1vvIR/n4h8OzQbN5YB63M=
Subject key identifier:   EC:53:EB:72:CD:D0:3D:EA:E5:A1:4E:FC:DB:36:99:C8:59:B1:9F:BA
Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10
Certificate issuer:       /CN=C952C93A676BA611AEC114DD4983F2B03168FE10
Certificate serial:       559FF43D007DA79A3151B21675E5470F3BA2F2F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
Manifest number:          25
Signing time:             Sat 23 Aug 2025 00:18:35 +0000
Manifest this update:     Sat 23 Aug 2025 00:13:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:31:35 +0000
Files and hashes:         1: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: xBuIGpueXH+1zdBsu5BqXO22+Vr1TPyrGvgcj0MT7SM=)
                          2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=)
                          3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl
                          rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 03:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9f:f4:3d:00:7d:a7:9a:31:51:b2:16:75:e5:47:0f:3b:a2:f2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10
        Validity
            Not Before: Aug 23 00:13:35 2025 GMT
            Not After : Aug 24 03:31:35 2025 GMT
        Subject: CN=EC53EB72CDD03DEAE5A14EFCDB3699C859B19FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:de:7c:3e:25:ce:ee:4d:01:35:04:e2:6c:
                    70:da:74:3f:6d:ba:ec:97:02:29:7a:bd:17:77:9b:
                    f0:69:65:32:33:51:45:99:19:12:62:84:0d:06:f8:
                    3b:ce:c2:19:e4:a5:76:13:b6:38:7a:b2:ba:c8:52:
                    47:f7:30:b4:9c:e4:fd:ac:9b:d9:a6:74:45:9c:75:
                    4e:a7:05:95:11:e7:93:55:2d:67:18:ea:fc:e6:b7:
                    ce:45:53:b1:0c:1c:7d:da:d6:0e:1f:19:87:40:87:
                    65:e9:a5:ce:68:d4:dc:a0:fa:d8:87:2b:d4:49:13:
                    7c:62:06:ba:31:f3:a9:8e:60:19:35:95:e6:77:9a:
                    30:56:ce:3f:40:b8:76:8d:93:7a:3e:7d:74:87:35:
                    53:15:e5:c5:e2:00:cd:6c:6e:65:8e:cd:08:46:57:
                    63:20:9c:41:16:62:65:f6:f9:20:06:8f:7c:1c:c4:
                    2f:be:35:e6:e9:76:f9:94:28:fc:2b:8a:56:2e:9c:
                    95:82:a1:73:9a:e3:c4:da:5f:49:96:65:14:54:46:
                    da:4f:55:b4:e1:1b:53:1d:ed:82:04:cc:70:3f:d7:
                    36:89:08:20:62:83:8c:77:85:32:c0:35:b5:77:b2:
                    86:07:6c:1a:eb:8d:6e:e0:14:1e:a4:ba:57:88:2d:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:EB:72:CD:D0:3D:EA:E5:A1:4E:FC:DB:36:99:C8:59:B1:9F:BA
            X509v3 Authority Key Identifier:
                keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:fb:a5:5b:bf:a0:b1:1e:7a:a4:8b:e6:49:43:4b:4c:26:
         33:fb:91:5a:1c:4b:bf:01:bb:00:ab:1d:94:86:a6:f9:ba:ff:
         8e:d3:a2:73:1e:ac:8a:6f:ba:6f:c1:db:5a:e0:f9:70:66:a9:
         dc:73:6a:25:4d:79:da:ce:e9:2a:99:77:90:74:58:c3:b2:6c:
         f7:8b:a3:92:7d:53:b0:03:c6:68:e1:20:51:e8:9a:f8:28:f0:
         c1:18:f5:44:99:bc:4e:42:2a:bd:4b:11:7b:c7:46:4c:74:bc:
         52:3d:fa:b0:cb:e1:06:29:1b:67:d1:3b:79:bc:b0:45:7e:30:
         ae:17:0c:d1:90:66:65:d2:f0:19:85:c0:49:cf:e4:4f:f5:ba:
         66:05:61:a4:c8:20:0c:9c:13:c0:03:d9:0b:97:50:35:43:f9:
         7a:c1:64:45:d1:fb:f8:a6:96:b3:07:c0:0c:0f:9d:8c:f9:46:
         bb:eb:1f:70:5e:e7:52:88:a6:81:5c:e8:fe:90:1c:96:15:19:
         63:df:b7:fa:7d:b9:62:8c:9a:a0:92:e8:dc:6e:3c:8e:71:b6:
         eb:05:16:de:f3:aa:7e:ad:21:2d:a5:ae:1b:3c:d7:1b:9b:0d:
         9f:96:c4:e0:2b:e3:6a:40:bc:dc:6b:df:3d:f0:65:72:63:5b:
         a3:2b:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:43 2025 by rpki-client