Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
File:                     0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft (raw, json)
Hash identifier:          TJbNsXBAVDYlKbTKTZ4bJ6FyeGSYADTvPtUhTpBnE/k=
Subject key identifier:   48:38:D2:55:E4:D8:0C:DA:73:50:47:68:D0:E0:0F:72:DB:F2:58:25
Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3
Certificate issuer:       /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
Certificate serial:       1C8EFB987CBBE727724D2B10C17CB88134085198
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
Manifest number:          0259
Signing time:             Wed 02 Jul 2025 18:50:53 +0000
Manifest this update:     Wed 02 Jul 2025 18:45:53 +0000
Manifest next update:     Thu 03 Jul 2025 21:52:53 +0000
Files and hashes:         1: 3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (hash: 7E5vUvNwbvGRD3amrlIDwIFLBLtnwrGhSNKkBs7Mcfg=)
                          2: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl (hash: R00c8LB3rnx2pPEIhTZco6WEjpvdpwZYfnARSygltKA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl
                          rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:fb:98:7c:bb:e7:27:72:4d:2b:10:c1:7c:b8:81:34:08:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
        Validity
            Not Before: Jul  2 18:45:53 2025 GMT
            Not After : Jul  3 21:52:53 2025 GMT
        Subject: CN=4838D255E4D80CDA73504768D0E00F72DBF25825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:8c:f8:c8:4d:8f:92:16:41:80:dc:bd:a6:
                    91:41:7e:87:70:2d:2e:8b:90:aa:23:75:5a:f5:88:
                    ef:68:98:30:c2:bd:2c:e5:e6:86:af:3c:61:f2:1c:
                    57:ad:95:4c:b5:8d:e9:da:2d:57:09:b9:37:07:54:
                    4d:1d:7d:8c:65:19:6e:e2:93:54:c2:52:3b:b5:e2:
                    c9:c3:5c:1d:3f:14:d6:06:63:98:3a:8c:c6:6a:8a:
                    20:72:b8:b2:d0:31:62:6d:6f:4a:bf:eb:ae:06:eb:
                    a0:da:36:09:ee:4e:8f:91:94:19:60:c5:25:e8:e0:
                    59:e5:6e:09:3e:7d:9f:80:b8:c8:f3:a1:23:d1:e3:
                    fb:6b:e0:67:76:e9:b7:aa:f3:68:64:09:f1:f0:63:
                    05:76:a0:eb:45:be:8f:2a:08:2f:29:b8:a3:6c:d3:
                    fa:8a:f4:43:e3:58:c0:a9:0d:b3:11:d5:9c:d0:2a:
                    0a:d2:61:4c:5b:2b:65:c1:79:4b:e4:26:cf:31:5e:
                    75:5f:53:82:5f:be:ab:88:1e:d5:bb:f6:fd:25:07:
                    80:75:57:73:b5:c5:e0:4b:65:1d:bf:a2:96:16:79:
                    6c:3c:0d:4a:86:9c:ca:f0:ba:8d:63:d4:35:78:1a:
                    51:53:a6:44:81:d3:a9:4b:34:30:c4:86:69:90:f5:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:D2:55:E4:D8:0C:DA:73:50:47:68:D0:E0:0F:72:DB:F2:58:25
            X509v3 Authority Key Identifier:
                keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:bd:fd:65:91:0b:51:0a:3d:02:9a:9f:44:a4:f8:49:65:
         d9:fa:4e:c8:27:08:9a:53:2a:bc:d1:da:46:5f:83:19:c9:78:
         e9:f9:e4:a6:8d:d0:ff:a9:ec:83:c0:a1:67:4a:31:3a:dd:7d:
         6e:8d:81:71:64:2f:78:8d:9b:63:6a:cb:56:31:04:08:95:e9:
         61:f9:fb:f5:da:fd:21:06:f2:65:c0:df:0e:ea:a1:f3:0e:08:
         7f:cd:e4:34:4f:21:2e:0a:f1:10:d1:9f:7d:bc:0c:90:3c:2a:
         8f:06:15:1e:20:f0:de:27:8a:4b:a7:d5:8e:a0:aa:2a:ce:ab:
         2b:b5:9e:54:9c:02:0f:90:ea:2c:a0:da:f1:44:d8:e5:95:bd:
         d6:71:fc:f4:a9:8b:62:35:c0:b4:c0:ca:f1:12:f5:2d:01:02:
         ce:b0:19:4e:e8:4b:9d:d0:0d:e3:a7:63:0b:ad:cf:a4:af:09:
         b7:a1:92:a5:36:9a:51:f4:73:bb:15:ee:16:a7:b2:a0:47:00:
         f3:fd:ad:92:e6:0d:b3:69:d8:62:26:cc:c0:7b:74:85:30:90:
         bf:f8:fc:ab:ff:56:c8:c8:24:af:59:9e:88:ae:98:53:39:17:
         5e:fa:7c:77:de:5d:0d:be:e3:34:be:44:1f:35:fa:6d:90:36:
         6a:ed:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:15:38 2025 by rpki-client