Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          MIC8ykARx4eJHFs8Gk/om2QcXCy2nEp82Bd5+NBrqco=
Subject key identifier:   A9:2E:F8:B9:E6:98:12:70:F1:1E:31:50:54:5E:35:8F:2B:ED:07:3F
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       34EEC9C52079F465B2BA5C88B4AB640F3A16DC22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          025A
Signing time:             Mon 30 Jun 2025 02:43:22 +0000
Manifest this update:     Mon 30 Jun 2025 02:38:22 +0000
Manifest next update:     Tue 01 Jul 2025 04:14:22 +0000
Files and hashes:         1: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: l3povcAz9XVd1PMqDFL5tIDTayHGtM/q1o8EZqMj1wg=)
                          2: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: C20itxJ4DTD7IOico22t2Q5Dvtz1NIhvSEH11LBPj6s=)
                          3: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: hYJKiYdiFG1bbXS2RPhu3e6mc0U2abXL5vHaZmQMmCI=)
                          4: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: alVtSNHx14XtzkxqRCajfAxCGOdONGl8TCrIbYetgGo=)
                          5: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: LxMMnzvb3MU5AwskvJ2vhzJKMPcEnPpmSsbF4wuhS5s=)
                          6: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: MDPUgUYSfdJiWKEt+cbVYiP4K2zgNepc9HVMAH7+QYk=)
                          7: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: HQA4VHNeDvlzZ0FpXC7b5HlrZmh4T75PBg+MFy1R9dM=)
                          8: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: iUIlj8bU3D1YQi71akmv8N6JOC3/Xm/VMYK71LX7wYs=)
                          9: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=)
                          10: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: eP/e+S40xYPmJ9ZuV4OR4lQuR8dlAoCtsAdKrq+TUWw=)
                          11: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: s0XQ5cBXXSL2f/2QJcexrzksmoQy6uAfeMCGqzy8uKQ=)
                          12: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: P6SWfUEDEOicu/ThJIKlS3i7QKxb9vdCrj94vmvEAhk=)
                          13: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: NUCcgTm6CQCpYaJ+Q2SGGo4K5pvws+aseML9l7II4Uc=)
                          14: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=)
                          15: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: V7JVCFnxEVgzrvrEtD4MgqjAc1VMeVN0mUu++RS9r80=)
                          16: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: jqKjLV7pjenHVLaMRKXdC6mfWl48w5DovZV07lhn8Sc=)
                          17: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: 7pF+J+djX5+jWkVin/T3LCK6bs9RTrurUrAtxMJI8R0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 04:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ee:c9:c5:20:79:f4:65:b2:ba:5c:88:b4:ab:64:0f:3a:16:dc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Jun 30 02:38:22 2025 GMT
            Not After : Jul  1 04:14:22 2025 GMT
        Subject: CN=A92EF8B9E6981270F11E3150545E358F2BED073F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:1c:7d:0b:81:54:92:ce:82:4d:f1:1e:fe:
                    55:c0:bf:d4:f3:09:79:cb:0e:94:4d:42:21:ad:66:
                    24:a3:06:d1:d9:dc:8b:dd:43:ed:9b:00:f8:62:b6:
                    21:a8:26:d9:b5:ff:c8:c6:5d:f8:f3:16:1a:c0:c6:
                    79:2c:cf:a5:9a:85:c3:07:ea:50:b2:c8:d2:40:cf:
                    2f:8f:34:0e:1d:04:f4:7d:30:bd:66:e9:eb:ad:b0:
                    93:b6:62:1a:87:2c:1b:18:ca:31:67:59:81:63:b9:
                    39:8a:39:e0:d8:b8:2e:bd:dc:b7:49:b3:6d:0c:4e:
                    6b:54:56:77:ec:ed:38:52:34:88:6a:a5:73:1a:4c:
                    8f:43:94:2b:75:ab:eb:42:ab:f7:ba:bc:e8:a1:2b:
                    6f:d1:28:1a:9c:4a:a7:8c:b7:c0:9a:5f:ec:be:3e:
                    e0:43:6b:e7:b3:12:f7:f6:b2:40:8e:c5:9a:e6:82:
                    92:24:d3:f5:2c:fc:49:0a:61:5c:8f:e4:c1:f6:23:
                    71:2a:af:fd:ac:a7:8c:d3:c3:54:86:7b:b9:42:a4:
                    4e:bc:79:04:d5:2f:a9:9d:ce:1a:88:d2:5d:68:ff:
                    57:44:a3:43:70:61:93:15:49:7a:f9:88:9c:a7:93:
                    4d:f4:95:b5:60:03:16:8d:e1:bc:7f:fb:6a:d8:a2:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:F8:B9:E6:98:12:70:F1:1E:31:50:54:5E:35:8F:2B:ED:07:3F
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3f:1c:d6:64:eb:88:49:83:cb:cb:93:2a:6b:af:cb:c3:c9:
         4b:5f:1d:84:6e:04:a0:0c:ff:ef:0e:55:d4:8a:07:14:0c:ec:
         a1:1c:83:23:02:5b:4a:ec:66:84:09:ef:aa:fa:af:f4:55:1c:
         7e:3f:f4:84:73:c6:c6:37:ef:42:b7:b9:db:e3:75:59:89:bc:
         3c:6c:75:70:4a:cc:9d:4b:51:93:bc:e0:cf:ec:57:01:71:09:
         10:43:87:c9:66:85:89:e2:81:05:b6:58:68:18:5c:d6:e8:37:
         04:24:3c:9c:46:a8:ac:64:42:06:f3:00:56:6f:c8:5a:77:4b:
         1d:5f:b3:af:68:03:74:dd:40:18:31:9e:93:a1:bc:17:90:25:
         79:c0:00:87:79:27:4c:e9:cf:25:d3:0a:f0:8e:c5:eb:d0:43:
         da:73:5d:72:68:6e:69:b5:90:9b:4e:09:4c:15:2a:bb:57:45:
         5b:81:05:07:b0:48:88:4b:b7:9e:3a:df:80:63:87:a0:86:81:
         4e:8b:2d:f4:c7:08:5f:5f:77:ba:dd:e2:76:12:0b:e4:86:d6:
         b5:ad:f6:b7:cf:59:8d:52:13:1f:58:97:8c:71:b2:3f:7a:3b:
         19:c1:bf:be:dd:83:63:da:ff:df:53:9a:0d:9c:0f:77:18:eb:
         e9:8b:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:24:07 2025 by rpki-client