Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          wobS0nuVW7IPmdfgYHR7efqRrYgbaCDW6kdGsh2x7Kg=
Subject key identifier:   11:BE:0F:BA:A5:82:1A:8E:0D:1C:51:C0:E3:2A:71:52:7F:E7:BE:06
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       5DB3FDCD4DEAF38DA515FCB733097BADA6666811
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          027C
Signing time:             Sat 26 Jul 2025 05:00:00 +0000
Manifest this update:     Sat 26 Jul 2025 04:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 06:22:00 +0000
Files and hashes:         1: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: C2gaAeMLJCaTjaTCRD9gXMgd6K9aiWuRcNiCGX7T9FM=)
                          2: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: nzGBObgZfOlb5g7ptD/ia0xytS8qU/fdfbuLNT9Fifw=)
                          3: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: ek0I4o/SvNPICrEIerJ5qOwejj1q0d8lWX8tgr6ZEEc=)
                          4: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: QJH4fYHcsHbgYb/UclILf3opV353t9z08DRHEej1kLQ=)
                          5: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: usnqdkf8l7/vxLEyuYp9YjuniSAL+eTEA3XD99qwJbw=)
                          6: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: m0hG+WYXiFoMmdmASCV7yHnD0RxYhyjpHwh+ZVFDzoY=)
                          7: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: Co347ncP7SR7KoR2iCTsOFvpl2Rvlgnd96a0iRNyxzI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b3:fd:cd:4d:ea:f3:8d:a5:15:fc:b7:33:09:7b:ad:a6:66:68:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Jul 26 04:55:00 2025 GMT
            Not After : Jul 27 06:22:00 2025 GMT
        Subject: CN=11BE0FBAA5821A8E0D1C51C0E32A71527FE7BE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:5a:a6:61:b8:5d:22:86:42:44:51:08:9e:
                    f0:ec:40:4e:f3:7f:dc:c1:e4:a8:56:d4:27:65:a7:
                    d7:92:8b:1a:f1:2e:dd:2f:3f:c3:fd:76:2b:69:a4:
                    9d:5b:a8:96:61:8e:b3:c1:17:8f:20:b4:7d:03:46:
                    d9:24:7d:ad:c6:c8:57:b7:fa:e9:ef:89:40:54:1b:
                    30:ab:ab:60:45:d0:cb:6a:12:4e:3c:de:7d:41:3c:
                    72:ba:32:20:50:4a:d8:2e:63:f6:00:07:5f:df:5f:
                    9c:4f:64:f4:b8:4f:52:d7:de:4a:bb:ec:4f:38:e9:
                    ad:2a:9f:52:20:1a:2c:fb:ad:c5:c6:fe:cb:cf:8a:
                    d4:b2:a6:21:a2:d9:df:07:7e:a0:de:67:9e:2c:7d:
                    55:80:6d:ab:0f:9f:cd:6f:b7:c9:ce:b6:a1:5c:bc:
                    bc:24:b1:5d:de:e1:1b:f4:18:5c:5e:11:ee:76:1e:
                    b6:26:a1:e2:c5:1a:73:9b:48:6a:cd:b6:87:4e:a7:
                    67:b1:5a:e6:60:42:d1:cb:5e:18:a6:5f:93:06:1c:
                    c9:14:6d:a2:9b:2e:db:86:ee:b2:8d:ce:85:72:c7:
                    2b:33:5b:f2:11:93:cc:9e:3b:2a:03:c2:9f:33:36:
                    47:7c:92:62:eb:17:79:8c:a7:c9:f8:ba:20:50:25:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BE:0F:BA:A5:82:1A:8E:0D:1C:51:C0:E3:2A:71:52:7F:E7:BE:06
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:71:c7:68:8b:aa:5b:0e:07:43:ff:77:e4:02:82:4b:99:90:
         7b:5e:98:20:21:07:8c:7a:eb:48:d8:69:69:7e:21:e5:e1:40:
         b6:da:1f:ad:c6:85:0c:2c:c4:5b:41:c3:47:7f:ad:3d:89:7b:
         8d:34:36:e8:b1:5c:54:cd:16:f3:f1:2a:4e:83:65:5f:b9:a2:
         53:69:9d:dd:df:29:34:82:85:35:15:a1:d1:b4:1e:6e:43:db:
         dc:cd:b5:fb:fc:ce:06:a8:9b:22:d1:b7:40:64:df:f1:2a:3e:
         c1:ef:cb:47:16:63:fb:30:c0:5b:20:48:52:0a:ea:07:2e:e9:
         a9:2d:4f:fe:71:88:59:1b:61:e2:e8:08:0b:18:01:ef:4a:89:
         65:a7:60:81:e4:d7:a6:a3:2e:9f:ec:31:9f:49:e2:92:62:51:
         99:ff:3c:5e:b9:ec:74:b5:47:d4:0b:39:bc:9f:46:f8:00:8b:
         27:53:4a:26:3b:04:76:a7:38:45:d2:23:1d:b7:94:cb:2e:fb:
         fa:1f:c8:05:fc:61:f2:12:06:f8:36:89:eb:52:3d:dd:f2:ee:
         61:1a:d8:4f:c9:60:4c:89:47:64:ad:b0:0c:f1:f7:1d:c3:d3:
         57:a1:b9:f4:8d:e8:e4:12:3b:65:cc:83:d9:23:54:9b:34:68:
         77:fb:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:00:25 2025 by rpki-client