Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          mlk2zQMxtvYOk3N5WobdKBLKfv0krAl3ut11c9Lvup0=
Subject key identifier:   68:9E:57:64:8E:B3:5F:83:61:51:5E:45:CA:77:BB:61:34:7E:54:36
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       6C40DD919F5B198A94C3313F5C04E35B04EEA541
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          F2
Signing time:             Wed 02 Jul 2025 14:18:52 +0000
Manifest this update:     Wed 02 Jul 2025 14:13:52 +0000
Manifest next update:     Thu 03 Jul 2025 15:11:52 +0000
Files and hashes:         1: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: 7GhebfZkMpwDf74rrS7174rTkkTIlJFNXfbzkct2rJU=)
                          2: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: HaHwoyFWVmrHs3VdmJGyyZ+fSHR5dae8NikP/GrmCkE=)
                          3: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: 1qrEyc9df4Z2AG3zLlph44TwEtTy3IHCrOF8zS3oQn0=)
                          4: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: 2qTmrxUdkbRIvwib6+w7UvGkOQiloJ0+6GGIxAc9vEg=)
                          5: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: PCAYfgDOH85jIU2PQU5QKAZW19p7Y3CuMAvF8q1Advk=)
                          6: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: 3Ts042d/UEYTxmGCmrRlmH8gUcNhJn7pIwo1eyDzZ/Q=)
                          7: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: nV3EAzkjyjcLJlLYhUzZ1foiT4YiRW1MyOKwg9DBFxU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 15:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:dd:91:9f:5b:19:8a:94:c3:31:3f:5c:04:e3:5b:04:ee:a5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Jul  2 14:13:52 2025 GMT
            Not After : Jul  3 15:11:52 2025 GMT
        Subject: CN=689E57648EB35F8361515E45CA77BB61347E5436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:3e:e2:84:4d:a9:6e:5e:de:db:c1:96:65:
                    66:34:ce:da:4f:08:3f:4f:1d:ec:bb:52:07:58:d2:
                    e8:53:ad:0a:36:80:17:5b:e2:41:85:26:30:4f:1b:
                    1b:96:d2:6b:ed:09:41:c7:25:6f:54:55:27:9c:e2:
                    6f:52:ec:fe:e9:38:d5:59:42:c0:ef:ae:21:82:33:
                    c4:65:7c:9e:15:13:df:9a:69:d9:25:b7:29:84:be:
                    ec:74:62:2c:c3:8d:f7:5f:6e:bf:eb:6c:81:4e:6f:
                    80:70:4a:73:ad:82:0a:a5:7b:e1:06:47:a3:71:e7:
                    8e:96:a7:ad:21:7c:b6:72:97:16:d2:db:60:80:f0:
                    0c:83:97:09:9d:c6:5f:57:0d:bd:84:5f:67:e0:b6:
                    40:20:93:ab:1a:23:c9:3b:25:1d:f5:2e:10:0a:76:
                    a1:c2:22:a7:2e:e6:63:f8:14:4d:59:9a:c4:ab:12:
                    98:f4:9b:94:de:5c:03:ad:36:db:a3:6f:e3:4e:b5:
                    6e:25:5d:2b:e8:a2:5c:74:ce:16:18:5a:11:44:4e:
                    9d:f5:69:02:c2:35:67:10:91:c1:31:4a:6a:c6:50:
                    1f:dc:5e:c6:c3:98:6e:24:92:ea:1a:09:58:32:e1:
                    ae:4d:f3:14:98:3b:2d:83:8a:62:af:41:c2:f0:16:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:57:64:8E:B3:5F:83:61:51:5E:45:CA:77:BB:61:34:7E:54:36
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:04:6d:6b:02:15:19:5d:c3:23:40:ab:56:fe:0d:11:b9:a3:
         57:30:c2:b0:13:8e:22:de:d6:91:2a:40:c6:88:59:a5:59:b1:
         e2:51:50:69:9d:eb:90:35:c5:de:05:92:d0:b3:bd:44:70:ee:
         9a:4f:d1:4b:d3:30:db:f7:f1:16:78:7b:da:27:9b:e0:13:f7:
         d4:16:26:c9:9a:af:8d:2f:37:25:d4:16:b0:88:71:ed:9e:74:
         17:82:03:66:f4:00:95:f3:67:99:f5:b5:f7:dd:0e:6e:16:fb:
         99:d9:d1:e6:df:14:77:ac:32:26:9b:8b:97:f6:3f:b1:29:f5:
         0f:6f:67:52:d3:1c:f3:c7:26:56:68:33:04:bf:4c:2f:8a:6f:
         ce:5c:9d:9f:a4:91:7b:17:c8:0f:8d:6d:e3:70:59:26:84:00:
         80:20:c8:5c:58:41:87:30:bf:7b:fb:dd:a7:ca:23:da:d1:80:
         67:a1:0a:fd:43:fd:45:9c:0d:fb:73:3d:1f:2f:75:a3:9d:7a:
         69:2e:a1:d1:0f:51:8c:91:82:07:d1:85:da:ec:9a:d2:82:7e:
         30:fa:8a:00:ef:79:28:1c:4c:34:53:11:99:c8:14:b6:d5:5b:
         83:75:01:04:4d:25:51:22:8b:66:19:73:6e:31:7d:a3:8c:e9:
         4b:fc:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:24:51 2025 by rpki-client