Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft
File:                     2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft (raw, json)
Hash identifier:          ouGIwAq5y96U0quOUdIs+UFVsK8vyPRFm8tzWRUKsBo=
Subject key identifier:   A6:E4:6E:D3:67:47:E8:51:D8:BA:DD:63:F6:95:DA:17:E5:EB:FE:D8
Authority key identifier: 2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A
Certificate issuer:       /CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
Certificate serial:       244761361ED2E2B30B55C9C76D0340584D59F267
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft
Manifest number:          0A
Signing time:             Fri 25 Jul 2025 07:09:10 +0000
Manifest this update:     Fri 25 Jul 2025 07:04:10 +0000
Manifest next update:     Sat 26 Jul 2025 09:53:10 +0000
Files and hashes:         1: 3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (hash: PDbdeahEuJBblk0HII6048mwCsY3agXmqNlVHUzFC6Y=)
                          2: 2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl (hash: sNPwIsQrNabwHDsAOY9puUHIBWKH4nCPTKi+2FMYSyk=)
                          3: 323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (hash: V0OXYKPf6335Uur99UCJAzIV6XdkhuuASSKsIiSpxwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 09:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:61:36:1e:d2:e2:b3:0b:55:c9:c7:6d:03:40:58:4d:59:f2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
        Validity
            Not Before: Jul 25 07:04:10 2025 GMT
            Not After : Jul 26 09:53:10 2025 GMT
        Subject: CN=A6E46ED36747E851D8BADD63F695DA17E5EBFED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:89:90:d8:31:2f:de:95:4f:0c:a4:dc:58:
                    39:37:3f:c6:2a:a8:f4:5f:cc:10:98:9a:84:d0:d3:
                    91:87:7c:6f:bb:f3:7d:d3:99:36:33:2e:4a:3b:0c:
                    a2:29:73:ab:23:3d:42:7a:e0:b2:c1:dd:4d:fe:93:
                    99:8b:9a:cf:5d:e0:b3:61:43:23:0c:8b:d9:df:ef:
                    c7:9b:93:e0:4d:49:35:ac:8a:65:5a:c8:83:44:c4:
                    0a:db:51:1a:1b:8b:c9:c8:7a:4a:a4:ec:56:97:99:
                    e6:f5:82:f8:4b:7d:70:4d:b0:e8:dd:35:84:5b:22:
                    69:13:f6:41:4c:d0:79:76:67:c8:62:fc:98:4a:b3:
                    f4:e8:b2:c8:2b:ef:b0:1f:08:11:64:54:ef:f5:dc:
                    0f:e4:9d:8c:20:45:b5:e3:53:bd:1c:27:9f:38:18:
                    ee:ad:b3:1c:2c:ff:20:80:1a:6c:b2:db:a2:02:4e:
                    46:36:d5:12:23:9c:2a:9b:5a:6a:1a:a0:cf:a5:25:
                    e1:ca:d7:e4:ea:24:fa:68:4c:b7:d2:cc:0c:ee:d4:
                    b2:e2:c6:19:e6:ba:f1:52:75:96:51:25:53:a5:04:
                    96:8e:08:81:fb:fc:a6:d3:3a:61:a3:3a:0d:60:ef:
                    d6:61:2a:4f:9d:74:53:8c:82:ad:7d:a9:99:de:c3:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E4:6E:D3:67:47:E8:51:D8:BA:DD:63:F6:95:DA:17:E5:EB:FE:D8
            X509v3 Authority Key Identifier:
                keyid:2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:9c:72:77:8b:47:a9:69:ab:60:95:7c:a6:dd:a9:6d:88:
         12:1f:33:66:ed:99:46:93:87:c4:20:97:40:88:ac:8b:71:08:
         5c:d3:45:8f:bb:9f:76:6d:4d:46:7c:56:32:c7:49:a7:b8:96:
         3a:5d:e4:65:7d:0e:1a:98:19:26:f3:b0:82:67:00:db:8b:40:
         3a:9e:e0:8a:7e:72:94:15:94:0e:94:f1:fd:0d:84:2a:e6:06:
         ef:2f:22:0b:79:cc:f2:26:5a:4b:d6:04:95:60:d3:36:6c:8b:
         db:c0:e1:67:71:ba:e0:f9:f4:a1:72:55:54:d4:6b:3e:7f:69:
         53:a9:5e:d6:72:b0:8d:a0:a6:55:31:29:72:c7:e1:d8:cd:24:
         f9:49:bd:4e:f9:42:c8:7d:b9:a7:5e:e1:48:77:0c:45:71:63:
         40:27:13:26:fd:3c:e5:f7:29:4f:35:1d:5c:6e:5a:c1:6d:cc:
         dc:d3:2d:52:3a:b4:e2:ce:39:12:ba:b8:23:55:f0:5e:96:40:
         31:5f:83:3d:d9:30:ea:04:0b:1a:5d:b3:f0:9e:b6:62:53:24:
         61:9f:95:03:d5:30:f4:1b:74:11:9e:62:ae:6b:02:30:fa:5b:
         a6:b4:48:81:17:55:f1:0e:b9:9b:ed:b2:49:63:3a:37:7c:b5:
         85:7b:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:56 2025 by rpki-client