Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
File:                     43A7C7C2B310D67DE688F19B159433597525FE31.mft (raw, json)
Hash identifier:          Hl1I9ay0SklpeGnc6WrEvOvTFZaqFhNHZYjBFAS6h8Y=
Subject key identifier:   18:77:D3:D0:0B:97:0A:3E:BD:72:F4:F8:95:C6:42:B1:8E:EC:92:DA
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       18950DA564B6A87205D43A728EFC1B5BE052241A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
Manifest number:          02AE
Signing time:             Sat 26 Jul 2025 04:00:00 +0000
Manifest this update:     Sat 26 Jul 2025 03:55:00 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:00 +0000
Files and hashes:         1: 34352e362e3133362e302f32322d3234203d3e20323636313336.roa (hash: xVTS9aY7JJWTF69eZmGnn2UtRow1ARVcIof6mdgGYvk=)
                          2: 43A7C7C2B310D67DE688F19B159433597525FE31.crl (hash: fNWsV9lxTI4BQ9fWVoPhLsEm5bz7y0QxBHqiiNcBHcI=)
                          3: 323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (hash: BsAdEqunEhJCfkGUPGa8OoXqKBbybo/Jki+SLpM68lM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:95:0d:a5:64:b6:a8:72:05:d4:3a:72:8e:fc:1b:5b:e0:52:24:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Jul 26 03:55:00 2025 GMT
            Not After : Aug  2 04:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:17:ee:62:47:93:c2:cb:ab:0c:c3:8c:87:
                    23:fa:aa:55:6a:c2:74:5a:75:30:53:77:e8:44:7e:
                    17:90:11:de:88:2e:78:ae:f9:8c:3a:68:26:12:b7:
                    0d:14:38:4a:6c:67:3f:c8:33:bc:44:d7:69:40:1e:
                    a4:0f:ef:c0:21:02:1f:b4:21:21:54:21:b7:3d:8b:
                    40:57:02:f7:9f:b2:71:d0:58:25:6a:b6:cc:96:ac:
                    c2:0f:66:f4:f5:db:49:2c:17:b5:be:e0:b7:0d:dd:
                    ea:42:20:a0:00:73:b4:b8:c7:07:5b:c3:3e:3c:75:
                    1f:0a:7d:66:61:f3:5a:fa:d7:90:9d:25:e6:c3:c4:
                    19:1b:6c:23:0b:55:4f:42:01:b1:81:39:89:9a:90:
                    73:39:3c:4d:fa:6c:e9:40:62:0a:b9:25:82:c3:32:
                    bb:25:55:7a:71:ef:38:3f:91:7a:52:a1:da:c8:60:
                    e4:1c:44:30:ec:12:a2:76:c4:51:22:44:db:c5:2d:
                    a7:e3:96:0c:96:7f:9c:b2:30:31:4d:b1:55:f0:e5:
                    d3:a1:35:fc:50:ef:fa:9c:c5:b1:a5:14:d2:e5:c9:
                    ad:e9:ef:14:27:1e:c7:05:ec:72:b2:1e:6c:9c:b9:
                    e8:8d:a0:13:02:e3:1d:b6:3f:12:32:5b:2d:b0:82:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:77:D3:D0:0B:97:0A:3E:BD:72:F4:F8:95:C6:42:B1:8E:EC:92:DA
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a7:ed:1f:7a:a1:4e:31:07:33:ae:f2:41:ea:1d:81:6a:87:
         1b:ec:9a:e3:e1:fe:95:7f:27:37:70:e2:de:94:5e:11:eb:db:
         5e:0b:b1:fb:fb:27:7e:96:2a:b3:c1:b4:35:99:72:b2:3c:57:
         94:b3:2c:b4:33:a9:72:dc:95:e3:b4:e6:e3:a0:0e:c1:d3:98:
         42:bf:5e:bf:a1:cf:0a:42:ef:b6:84:25:ab:26:0b:71:ca:ef:
         54:51:46:d6:fe:a2:ca:05:45:dd:47:1a:71:02:e6:56:ca:f6:
         ff:97:37:33:73:6c:b5:b8:20:03:21:b1:77:de:a5:f3:b3:c8:
         c7:f4:c4:27:e0:4c:96:6d:37:9f:d3:af:7e:c2:b0:10:07:58:
         85:b3:2b:36:cb:af:7b:e3:f7:61:88:2a:f1:12:bf:6e:8d:13:
         1b:13:cd:11:dd:7a:05:d6:a9:6f:95:ce:a4:40:60:11:35:bb:
         72:01:fb:28:b6:42:a1:2d:80:88:a8:85:d6:eb:b3:7b:46:7b:
         ae:1f:3a:84:4a:bd:53:26:44:b4:f8:9b:33:46:5a:57:db:38:
         e8:09:d6:02:1c:6b:89:50:01:f9:3a:47:98:34:77:3a:0d:1b:
         af:f1:52:de:7e:69:b4:54:7a:59:60:78:dc:e6:40:75:ec:90:
         55:ba:4d:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:27:09 2025 by rpki-client