Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
File:                     9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft (raw, json)
Hash identifier:          hAHzjE86mXWMq7ltLqGSl05KTyo7vKPngP9U/Dxgkrk=
Subject key identifier:   B9:5F:EB:89:6D:0C:FB:33:8A:FC:73:18:69:A5:6F:CA:A2:0F:63:FC
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       4DF1D13BAFE59633A15CD58E136B10292E0EF207
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
Manifest number:          0234
Signing time:             Sat 23 Aug 2025 07:14:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:09:32 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:32 +0000
Files and hashes:         1: 3137372e3135352e38382e302f32312d3231203d3e20313938393439.roa (hash: PXFq4MyZ9l520M2BPNIlomttZn9u6RK0qeVMJMr6ZJs=)
                          2: 3133322e3235352e31362e302f32322d3234203d3e20323633353836.roa (hash: sTeZiCPYeUDs6CjQlF6oSnGzG0jAMwAmHwVN9MYVKrk=)
                          3: 323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (hash: 52lsjaJNpUCe2AcAV81o+4/grCzfEtC6pQ/EefJtw3A=)
                          4: 3136382e3232382e3130342e302f32322d3232203d3e20313938393439.roa (hash: 8nWkn3Sqf0AfYJvaYyNOiHbYJdg3M6r7Var0f4+1yXg=)
                          5: 9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl (hash: PvYb2LLtLBy6PKTxaYFRS9OFyUXquItXr5xkvbO2zn8=)
                          6: 3133382e3131372e36342e302f32322d3232203d3e20313938393439.roa (hash: LmGWyMO+3XZhMui31SJKmhtEFb943k+2pywheF8/mmg=)
                          7: 3136382e3232382e3130342e302f32322d3234203d3e20323633353836.roa (hash: rgpcqEBw/6xlqS8WEKJnjQSuNRzcCbcMWUc188ZsBrY=)
                          8: 323830343a6637343a3a2f33322d3332203d3e20313938393439.roa (hash: tDo6StoBdhhZGDterYlKws173jnJih2e0Fr5a3GykrY=)
                          9: 3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa (hash: nnDvhWK0LXRtGbYTKQP4TrycepyGAr59vAkt2tuh7mE=)
                          10: 3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (hash: 7dK9IjQo7l30GXdriklsLv1LlGLMCS0TSARyyYDtDWM=)
                          11: 3133382e3131372e36342e302f32322d3234203d3e20323633353836.roa (hash: fXfboTPcVmcsKoPSJSHRy8UwiwNEyGoQv+7iPwATm0A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:d1:3b:af:e5:96:33:a1:5c:d5:8e:13:6b:10:29:2e:0e:f2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Aug 23 07:09:32 2025 GMT
            Not After : Aug 24 09:01:32 2025 GMT
        Subject: CN=B95FEB896D0CFB338AFC731869A56FCAA20F63FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:04:77:dc:dd:87:07:fc:e6:89:e8:94:8f:
                    5e:60:9e:79:f9:4c:08:c0:28:3c:d1:d1:a8:66:a6:
                    ec:36:0d:47:11:29:c9:cf:9b:b3:f5:8a:30:43:10:
                    f7:02:9f:a8:9a:47:a0:78:87:1f:4c:b4:93:91:34:
                    e3:76:39:c6:7f:48:a5:b3:9a:11:94:e5:ad:d9:33:
                    31:c5:d2:c4:f2:b1:fa:c3:bc:8c:75:00:82:66:36:
                    16:11:10:fb:7b:a1:c0:ce:7e:1d:65:49:a2:ae:0a:
                    14:9c:09:b1:60:e7:ae:1b:f3:21:39:6e:62:9e:20:
                    5c:67:47:8c:c5:15:da:67:34:5a:cf:3f:0a:1f:25:
                    f4:56:f2:0e:20:80:18:07:9a:ba:06:23:6d:4e:93:
                    2d:21:c8:12:6a:d8:90:2c:5b:67:3b:7d:67:67:38:
                    e3:1e:c2:e7:3f:56:af:5c:2a:05:8b:23:32:49:65:
                    a3:ab:06:6f:08:23:a4:dc:10:24:5c:cb:dd:2b:9d:
                    14:4f:2b:2e:da:63:88:1b:75:83:ae:95:76:ec:8b:
                    ca:e2:27:45:33:0e:a7:00:d0:8e:a3:f2:c5:c8:52:
                    e7:26:aa:42:2d:f0:fb:30:20:e6:e1:bc:83:a2:71:
                    a5:0c:e5:a3:3d:13:52:5e:c3:61:4c:13:50:e6:71:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:EB:89:6D:0C:FB:33:8A:FC:73:18:69:A5:6F:CA:A2:0F:63:FC
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:47:8c:e7:60:6a:ea:3f:b9:c5:be:21:2c:06:03:9b:2d:
         c1:e5:c4:b7:56:8b:d5:88:41:42:b9:f2:4d:b2:90:5c:c1:7c:
         d8:70:18:70:fb:8b:c9:9b:d7:91:e5:73:19:47:a3:37:14:31:
         c8:2e:5a:3a:9e:e6:3d:0c:96:21:8f:75:24:35:27:ce:76:49:
         0d:e1:26:5a:54:fd:f1:a0:38:de:d8:cf:8a:31:be:61:4a:03:
         a6:bd:7b:fe:35:0c:3d:58:a6:ba:80:f1:fa:59:51:71:cf:2d:
         37:ae:92:22:9b:e2:ac:d9:7f:26:fe:b0:fe:ca:7b:0a:f5:aa:
         58:bc:67:62:06:21:2e:83:b8:f3:69:e4:9b:1e:b9:a0:c9:61:
         18:0f:0c:db:69:af:32:04:7a:b0:78:63:8d:f1:40:ad:19:b9:
         6b:26:ca:f7:2f:b2:06:32:85:b5:78:b7:e4:43:da:1f:0d:9f:
         be:89:35:9e:ef:16:4a:ad:4a:ea:1b:eb:6c:52:39:32:3c:07:
         36:0c:3c:ef:c7:9c:96:1a:76:15:19:ab:60:1f:e8:f7:bf:08:
         b5:90:e0:5b:16:02:39:1c:b1:f5:18:71:52:8d:a3:c3:c5:13:
         8a:de:ca:f0:77:a4:30:2c:3b:e7:e0:6f:81:5e:a2:53:f7:6a:
         cb:e4:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:38 2025 by rpki-client