Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File:                     B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier:          dvn/2U0WGB38YzB3jh/Q1lgNMrpblDTwLkFi0wzaxJ0=
Subject key identifier:   61:12:14:93:1D:89:EF:CA:25:FC:89:1B:02:B8:33:45:DA:4C:92:E0
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       4B6FA9080E18B91232DC7DCF483BEACCC73ECD88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number:          027A
Signing time:             Thu 24 Jul 2025 04:37:17 +0000
Manifest this update:     Thu 24 Jul 2025 04:32:17 +0000
Manifest next update:     Fri 25 Jul 2025 06:54:17 +0000
Files and hashes:         1: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
                          2: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: LLVr40H80/IZfLs9capbcbQIlwvhCwTGvEEVOG6w0zo=)
                          3: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 06:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6f:a9:08:0e:18:b9:12:32:dc:7d:cf:48:3b:ea:cc:c7:3e:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Jul 24 04:32:17 2025 GMT
            Not After : Jul 25 06:54:17 2025 GMT
        Subject: CN=611214931D89EFCA25FC891B02B83345DA4C92E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:30:36:77:80:00:a1:b3:49:89:f2:b5:a5:
                    ac:22:ce:d7:2c:ca:b1:c7:13:31:cb:5c:25:6a:1a:
                    2a:1a:c2:f1:19:ff:d7:d2:09:5b:42:6a:28:83:97:
                    82:df:a5:12:ce:7a:c5:f5:ec:98:7b:99:62:83:c6:
                    da:d4:32:07:92:f5:ba:d9:64:b7:7e:c8:77:9f:4b:
                    fb:fa:fa:04:cc:ca:9b:42:27:2a:9b:e8:1b:7b:2c:
                    fa:c7:c9:18:32:3d:b4:7e:28:6c:b7:61:57:74:bc:
                    13:42:56:47:b2:c9:09:32:a5:12:41:e7:9f:c9:2c:
                    4d:fb:14:79:68:85:ee:96:95:09:ad:24:99:22:3a:
                    33:ea:17:83:fe:69:5d:5b:15:f6:0f:45:9a:43:aa:
                    27:9f:3e:1e:61:94:60:59:1c:14:b0:69:cd:9c:da:
                    d1:ec:07:88:ac:a5:e5:7d:4d:36:8d:e6:98:9f:f1:
                    de:de:6c:e3:3c:4f:d5:50:30:bf:d7:65:2c:7a:a9:
                    dc:02:87:6d:93:a1:e9:97:e3:a1:59:d8:b6:e8:23:
                    9a:77:df:08:50:2e:cc:0b:35:f4:62:dd:03:35:88:
                    29:fe:5a:ab:71:3e:a5:dc:24:c5:6d:8b:d5:9e:20:
                    40:a5:43:c5:17:cb:6b:78:53:88:0c:07:53:fb:ab:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:14:93:1D:89:EF:CA:25:FC:89:1B:02:B8:33:45:DA:4C:92:E0
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:a5:71:97:e3:3a:ae:4e:93:c6:fc:c0:d0:19:e5:55:80:
         b1:ef:31:1e:57:d7:c4:7c:34:03:55:e0:e6:82:9e:0c:51:30:
         63:0d:ce:67:85:a6:29:02:2e:06:5f:2f:32:59:d4:5f:d9:d2:
         3f:cc:41:3c:14:8d:31:c4:97:b3:58:b2:bc:79:a8:de:03:0b:
         0d:23:83:1f:b6:47:a0:c8:c7:1a:78:d6:25:de:83:fd:ad:5a:
         32:84:da:a4:74:44:72:74:43:78:83:8e:53:97:63:b5:34:b1:
         ae:3d:78:28:67:04:5f:47:97:5c:01:55:04:fd:2b:2b:ad:a0:
         dc:c8:60:30:06:3d:bd:f3:9f:8c:9a:32:de:3f:33:98:7e:88:
         32:4e:8d:45:cd:9b:72:a5:0f:f1:c1:c1:ac:00:d2:a8:75:4b:
         df:13:3d:8a:5c:54:0a:88:6d:7a:4b:5e:8a:c1:33:10:6b:8c:
         a3:63:1f:09:a4:bc:47:78:0f:c2:38:57:b2:f9:d2:8d:85:b2:
         e8:cf:da:fc:9b:b3:e5:ef:4a:3b:a0:4b:09:a4:0d:55:07:96:
         c0:8f:e4:8c:3a:df:95:4e:d7:7f:fe:92:1a:bb:19:94:e3:ca:
         30:37:7f:69:0b:2c:d8:a5:a2:d9:1e:e0:e0:bb:d3:e8:32:fb:
         ad:a9:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:45 2025 by rpki-client