Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File:                     D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier:          FBrua7EzN6rSrzsuAXVIDbO8mtzSiu11UdEZpoctjbA=
Subject key identifier:   85:C4:26:7F:CD:3C:1A:A6:C5:4D:D9:50:58:5F:56:94:13:8F:E0:1A
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer:       /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial:       638292213F028245C8FC1208CF07F433D26F8AB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number:          0278
Signing time:             Fri 25 Jul 2025 19:39:24 +0000
Manifest this update:     Fri 25 Jul 2025 19:34:24 +0000
Manifest next update:     Sat 26 Jul 2025 20:05:24 +0000
Files and hashes:         1: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
                          2: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
                          3: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
                          4: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
                          5: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
                          6: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: Q7qKO9tg6q+yKEBJMWDFv83armIhu2BWW9X1SW5hExk=)
                          7: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
                          8: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
                          rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:82:92:21:3f:02:82:45:c8:fc:12:08:cf:07:f4:33:d2:6f:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
        Validity
            Not Before: Jul 25 19:34:24 2025 GMT
            Not After : Jul 26 20:05:24 2025 GMT
        Subject: CN=85C4267FCD3C1AA6C54DD950585F5694138FE01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:68:c4:11:74:97:b1:f6:26:ca:07:99:01:
                    39:fa:3a:03:b1:ca:4e:a6:c3:cf:c3:7d:6f:9b:4f:
                    c7:26:c6:89:86:4f:c8:f3:8c:7b:27:1f:1d:e3:ec:
                    84:95:f5:d7:cc:af:50:72:a5:5e:42:a0:54:b8:e2:
                    45:9d:df:ea:4f:a8:16:9a:d0:97:99:b9:ae:53:10:
                    2c:4c:5e:81:58:fd:7b:7a:33:f5:f0:d2:80:18:bc:
                    69:26:93:7e:68:e0:3d:35:53:34:df:00:19:ba:37:
                    68:5c:a0:41:41:61:a0:66:28:82:6a:35:3c:8b:ef:
                    87:1f:13:d4:34:87:be:f9:d5:92:9f:35:1c:1b:87:
                    3e:59:8a:c9:c5:a4:bd:6b:3c:e0:61:08:26:94:d4:
                    82:3f:fe:96:5d:36:de:6b:df:81:15:2b:7d:23:14:
                    bb:ef:b2:9e:bb:ea:67:32:81:8b:de:80:b1:2b:71:
                    03:3d:bc:93:c8:f3:6f:b0:08:ee:3d:88:42:8e:b2:
                    2d:87:c0:b8:e6:ab:ab:a0:b1:90:a5:ae:68:0f:42:
                    77:9d:fa:d3:8e:2e:43:56:26:c9:52:33:57:cc:6c:
                    a8:a6:19:eb:c4:28:79:fd:9a:0a:b7:7f:ab:25:fd:
                    e7:db:17:a1:da:a8:33:a9:ec:6a:64:a0:ba:57:7b:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C4:26:7F:CD:3C:1A:A6:C5:4D:D9:50:58:5F:56:94:13:8F:E0:1A
            X509v3 Authority Key Identifier:
                keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:c3:08:c6:da:1a:8a:50:43:78:98:4c:c1:2e:b6:f2:13:
         d7:85:e7:48:2f:1c:ba:83:d0:a7:99:0b:c7:de:96:a5:58:d2:
         79:d6:a8:6b:78:0d:57:a3:6e:da:f9:67:ab:ea:c4:7f:a9:99:
         4c:d3:b1:de:f7:13:de:b9:2a:1d:57:fb:fd:46:16:0f:b4:6d:
         0d:3e:fe:fd:68:cf:56:65:1b:cb:40:5d:c5:e8:c6:6f:41:04:
         86:df:29:12:4e:57:25:62:b4:79:7b:73:ab:31:85:71:31:93:
         2f:d9:74:8a:df:ee:a9:26:6c:5e:44:8c:f3:e2:b9:3e:c5:df:
         c0:96:56:2d:84:2b:b9:7f:ab:86:5c:e2:50:8f:4f:8c:68:73:
         42:fb:4f:ed:26:6e:2f:53:57:43:71:e6:4c:f2:93:3a:e7:33:
         12:25:d7:5f:aa:04:4a:c4:cf:30:e2:57:d9:2d:c0:30:b4:12:
         93:6c:37:47:e2:70:ba:39:60:9c:83:59:8e:da:1e:83:cc:6e:
         d2:d5:7a:9f:03:33:8a:09:c0:32:20:7f:4a:c9:f3:1d:2e:80:
         f3:5f:76:25:31:16:02:52:00:a9:3b:a9:e7:9f:73:05:5d:a5:
         47:32:de:dc:39:6c:76:80:4d:7c:55:bc:dd:84:47:f6:de:53:
         77:2e:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:19:42 2025 by rpki-client