Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
File:                     0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json)
Hash identifier:          mBjBB6ufydZINAcNp+B5rEJa0cNjrENVOWpJ8F4fyEE=
Subject key identifier:   24:76:D5:D1:14:15:85:B5:0A:7D:51:95:12:9B:4C:BD:8D:65:77:12
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       13275B9228E2D499B347C7A2D33C84AF22C5CA00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
Manifest number:          0281
Signing time:             Sat 26 Jul 2025 07:21:53 +0000
Manifest this update:     Sat 26 Jul 2025 07:16:53 +0000
Manifest next update:     Sun 27 Jul 2025 08:00:53 +0000
Files and hashes:         1: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: bbaVkD8XLmrlMFd8vPqyQqAQg+19SaLMjRQUrqW2EzU=)
                          2: 34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (hash: RTprnNg5aQfyb92AvIkxl/fHyWTeQKd0ma+1zK6ILDA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:27:5b:92:28:e2:d4:99:b3:47:c7:a2:d3:3c:84:af:22:c5:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Jul 26 07:16:53 2025 GMT
            Not After : Jul 27 08:00:53 2025 GMT
        Subject: CN=2476D5D1141585B50A7D5195129B4CBD8D657712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:d7:75:d8:a2:d1:f7:93:e0:a7:a9:1c:c4:
                    d2:e8:ef:60:56:0a:02:00:37:b7:4d:3d:5b:8b:81:
                    92:59:9a:1d:00:fb:e7:98:d2:79:a3:68:17:fb:18:
                    1c:7c:78:d0:72:db:7a:13:d9:c5:c3:f6:13:36:31:
                    bb:b5:cf:19:20:7a:91:6e:c7:6b:24:4a:d6:6c:a4:
                    65:f4:fe:f3:ba:55:07:6f:8e:00:01:0a:3f:f7:c9:
                    59:71:2c:d8:e1:b6:61:a1:e9:2a:fa:3d:e9:93:f2:
                    36:a2:5d:99:75:46:1b:13:7f:bb:70:b3:2b:e9:17:
                    12:b4:89:a4:a6:94:44:ca:36:83:95:ed:70:51:85:
                    7a:3f:5d:19:6f:2c:97:07:a7:95:67:10:fc:5f:35:
                    2c:48:54:a4:8a:71:95:b0:99:27:87:a6:8b:d7:79:
                    89:ed:e4:e2:b0:80:0d:04:24:af:d7:04:07:a5:78:
                    18:43:22:26:5d:16:2c:e6:d3:07:59:d7:61:9c:2e:
                    fa:94:fc:ca:be:65:96:e0:7a:4f:df:ba:9d:05:8c:
                    5d:88:5b:6f:f3:3a:c7:c9:92:d3:da:34:64:1c:7d:
                    eb:57:69:e0:53:03:12:bb:b6:77:7f:a0:8b:45:cd:
                    11:67:89:4f:dc:82:3d:3e:43:4a:28:77:3f:86:b1:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:D5:D1:14:15:85:B5:0A:7D:51:95:12:9B:4C:BD:8D:65:77:12
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:3c:fa:0b:2f:7d:04:bf:f2:07:d0:18:06:59:38:3e:c5:
         ad:a4:69:c8:46:1b:20:48:29:05:a5:07:a7:b1:0f:48:3f:8b:
         c4:06:73:c0:1e:67:86:ea:6f:70:69:6d:c1:c6:52:25:3f:a5:
         87:0a:66:a6:a4:97:b2:60:a1:35:25:eb:8a:d5:94:67:44:cb:
         56:14:ed:68:29:e2:7a:af:56:27:89:4a:9c:90:d2:2a:46:8b:
         dc:1a:f0:09:94:6c:dd:bd:dd:09:b1:b9:95:31:cb:20:94:f0:
         2e:fd:41:a9:27:c2:5f:b0:20:89:2b:63:4e:b4:1d:79:b7:6a:
         ba:ad:ca:65:6f:ce:cc:ca:b9:60:72:8a:58:8c:b5:ea:11:35:
         c3:1f:fe:4f:21:93:45:a7:f7:a5:7e:4f:53:3a:4b:5f:ff:73:
         94:41:66:df:13:28:57:d4:18:9a:d1:a0:46:2e:a9:b0:5d:d0:
         14:01:60:72:fa:95:b2:c0:71:79:b6:0a:80:91:c1:24:46:1a:
         99:ba:14:13:69:35:d2:f6:dc:8d:2c:fc:78:93:21:e4:fa:ca:
         0e:58:fe:48:62:2b:08:dc:53:c6:33:97:e2:ca:0b:03:e8:02:
         e2:a4:11:ae:9f:99:d5:8d:7e:72:07:32:3e:a2:75:54:bc:a2:
         d8:19:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:19:21 2025 by rpki-client