Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
File:                     05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft (raw, json)
Hash identifier:          rj6oGGxzOpAmIHs7yFjIrcRpGZcjpGn7gGiLgI4GwCw=
Subject key identifier:   DA:68:91:EE:E6:5E:5D:F1:CE:80:D7:7E:91:6A:52:F2:B3:7E:A4:EC
Authority key identifier: 05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B
Certificate issuer:       /CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
Certificate serial:       3FCFD2886510A1F951792CFC81C4564C8FA0D0D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
Manifest number:          025D
Signing time:             Thu 03 Jul 2025 01:07:36 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:36 +0000
Manifest next update:     Fri 04 Jul 2025 01:46:36 +0000
Files and hashes:         1: 3136302e32302e36382e302f32322d3234203d3e20323636313436.roa (hash: NZj6IJ1MD222I2XpaHYrfvECEhjWy1Iqzppf7GDD1rs=)
                          2: 05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl (hash: avuFu4e1EeMnlyHySWCq1VrBgDpbdGBvAR2HdIK4JYw=)
                          3: 323830343a336236343a3a2f33322d3438203d3e20323636313436.roa (hash: Y5XTgZR6OUeZMGSge1pnwkK2KxkQUWlBXZecutlBAQU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl
                          rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:d2:88:65:10:a1:f9:51:79:2c:fc:81:c4:56:4c:8f:a0:d0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
        Validity
            Not Before: Jul  3 01:02:36 2025 GMT
            Not After : Jul  4 01:46:36 2025 GMT
        Subject: CN=DA6891EEE65E5DF1CE80D77E916A52F2B37EA4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:6d:dd:7e:67:b8:1c:39:2f:66:00:f1:cc:
                    2d:04:ba:3a:b1:2c:fa:77:19:0a:b4:38:df:b0:3d:
                    03:74:33:b9:a6:a2:c2:47:22:54:6f:d3:eb:ce:8a:
                    ae:23:20:ca:f4:f5:e3:a3:a9:d7:1a:02:63:35:05:
                    b4:15:f6:57:ba:95:3f:b9:6c:6b:99:f6:30:db:81:
                    09:d4:4f:8b:91:c7:99:e3:7d:74:4a:16:63:a6:b1:
                    69:a7:39:98:1a:33:13:73:0b:39:52:73:a2:91:c4:
                    a7:b6:3b:41:f5:2a:d1:9c:57:9b:85:17:13:dd:46:
                    ef:75:83:52:06:9a:8f:1b:42:6b:3f:2a:d0:98:f7:
                    00:f9:b0:b5:c4:96:5c:df:94:fe:a8:91:a1:67:5d:
                    cd:ad:e0:8f:58:90:a0:20:df:4c:44:4d:46:7f:68:
                    14:9d:fc:11:4f:8a:fe:84:1c:b4:e1:89:ef:cb:2b:
                    63:9b:1d:cc:2e:b7:5b:aa:eb:20:0d:9f:12:bd:09:
                    eb:17:13:c3:a0:05:cf:a7:04:e6:eb:fd:b1:bb:fc:
                    8f:a3:2a:8d:93:58:18:d0:1b:b7:bf:d1:ff:de:ef:
                    56:77:a3:01:c8:de:10:99:f5:ba:23:98:7d:70:4c:
                    dd:b5:69:77:80:9c:d0:1f:b6:b9:44:c4:6a:23:0c:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:91:EE:E6:5E:5D:F1:CE:80:D7:7E:91:6A:52:F2:B3:7E:A4:EC
            X509v3 Authority Key Identifier:
                keyid:05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:39:0c:72:8c:49:67:3d:42:af:cf:5f:d8:fb:04:16:04:
         96:40:eb:d9:2d:07:99:2b:cf:2e:d7:6c:cf:c4:e7:f6:59:4f:
         73:84:95:bf:30:e2:de:26:7c:5e:4a:19:b4:24:e4:98:6c:db:
         94:fa:f1:84:bf:6a:3d:f8:f6:8f:51:f2:d6:27:49:0a:58:eb:
         7a:bf:61:b6:ef:d9:70:60:6a:6f:14:bc:23:ab:df:a7:8b:4f:
         09:fd:54:4a:f0:a5:60:cc:0f:a2:6d:14:e6:42:3e:2f:75:37:
         13:2d:0f:bf:7a:0e:fd:ce:6c:fa:3e:03:4e:4f:6b:60:87:0a:
         9e:9f:19:26:c5:cf:0e:0a:b9:30:f4:73:82:83:7f:0a:ac:b3:
         49:ad:0e:45:fa:c8:b0:ee:1d:7b:f6:70:92:6a:52:60:03:cd:
         ce:90:56:da:c5:0b:e5:33:7b:cb:71:e3:4e:e5:e5:57:8b:c4:
         6a:8c:96:e4:51:94:2f:a4:a7:b8:70:74:25:08:36:ed:6b:5b:
         f8:02:95:df:ca:bf:4f:e3:53:b6:c1:15:d4:9a:03:96:3e:3d:
         a6:dc:6d:b8:b3:7a:a6:63:99:5a:27:fd:b3:6c:8e:dd:0b:0d:
         a1:f2:0e:c6:a8:56:08:17:32:8e:7a:9f:83:12:7b:98:3e:a8:
         8c:d0:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:23:32 2025 by rpki-client