Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
File:                     72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json)
Hash identifier:          2dDhzr7Jtt5ZvUDx5qU9LKpGLqBBSndqDxDrtx4Vp9U=
Subject key identifier:   3D:B2:A9:A9:D1:74:CC:BE:30:DE:07:F8:51:F1:53:33:0D:AC:F4:AC
Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5
Certificate issuer:       /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
Certificate serial:       791260BBF78C8770CF27112167B550E182D1BE9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
Manifest number:          DC
Signing time:             Thu 24 Jul 2025 15:34:43 +0000
Manifest this update:     Thu 24 Jul 2025 15:29:43 +0000
Manifest next update:     Fri 25 Jul 2025 16:27:43 +0000
Files and hashes:         1: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: rKtywLS1zxT4+jk+4qBxZeJh+sNRpKnf9wjGS48HysM=)
                          2: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: jxNiVCtsB0PLvfOyoeQf2Eh/Bxb2hioKqNygkVlhfSY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl
                          rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:60:bb:f7:8c:87:70:cf:27:11:21:67:b5:50:e1:82:d1:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5
        Validity
            Not Before: Jul 24 15:29:43 2025 GMT
            Not After : Jul 25 16:27:43 2025 GMT
        Subject: CN=3DB2A9A9D174CCBE30DE07F851F153330DACF4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:f0:52:3b:b1:f6:a9:3b:1c:94:b3:f8:02:
                    f5:a5:33:3b:bd:a6:1a:3a:46:d3:6d:b7:1c:48:49:
                    ba:a0:db:6b:34:a6:88:ac:a3:93:fe:c0:7f:32:dd:
                    81:46:e0:04:d9:96:45:25:ad:31:45:29:15:a4:67:
                    f9:c7:a6:52:60:6a:2f:e4:68:1f:e7:40:9b:76:f0:
                    58:06:ad:6a:ae:04:e9:12:20:ce:80:ca:be:b9:c5:
                    1f:d1:d7:8c:93:70:a2:a3:42:82:f0:11:af:92:00:
                    34:30:00:56:28:43:40:37:e7:02:3a:04:88:d5:3d:
                    54:a0:0b:5e:10:41:f7:0c:a1:59:35:9e:fc:a3:ca:
                    9a:4a:47:eb:5d:2a:1b:e6:5f:bc:12:8f:44:7b:14:
                    d9:fb:a0:7f:0e:de:2c:8a:bf:50:a8:bf:ad:25:4d:
                    dd:31:b0:44:6c:ba:f6:f0:35:b3:0f:37:5a:06:ab:
                    db:cd:8d:95:db:98:e2:d0:3f:d8:88:59:40:a2:bb:
                    07:b0:d8:40:d6:ed:0d:22:b5:2e:e6:71:6e:9c:65:
                    29:86:97:ce:87:58:c8:99:fe:18:9a:54:8a:a3:e8:
                    72:8d:39:7c:a9:2e:94:81:28:bc:72:65:a1:f4:24:
                    e0:a8:f3:e1:ad:86:66:5c:d7:23:ae:75:29:b2:4b:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:A9:A9:D1:74:CC:BE:30:DE:07:F8:51:F1:53:33:0D:AC:F4:AC
            X509v3 Authority Key Identifier:
                keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bc:48:f9:f7:2f:3e:b0:d4:04:a7:6d:46:6d:4b:55:87:c7:
         e4:3e:25:6b:d9:95:6a:56:5f:0b:dc:c7:68:a8:79:f9:26:1b:
         3d:50:c4:98:d6:84:2d:fe:53:79:2d:2f:e5:0f:4f:06:b1:f5:
         e6:30:74:c2:bb:65:21:d7:5c:af:52:9a:e1:25:62:18:24:92:
         40:e4:0c:f4:9e:c5:a2:c5:bd:7e:b3:45:4e:39:8c:9b:0e:22:
         d9:25:98:f3:35:46:dd:d0:36:00:b8:43:28:5c:92:6e:bd:34:
         8f:ea:fd:e4:c6:4b:47:36:9f:86:97:fc:db:24:03:e5:75:d9:
         0d:b5:e1:6a:ae:45:94:f8:14:bf:d1:39:22:99:92:97:13:8f:
         ee:00:73:13:72:3e:c2:34:19:1e:3a:e6:b7:41:84:64:3e:79:
         cd:7c:6e:76:fa:7a:59:c2:16:07:a4:e9:26:08:c1:b8:ab:ac:
         a0:b3:94:5c:52:12:6e:af:97:54:0e:62:f2:ae:8e:d1:1d:29:
         6a:dc:22:a6:0c:40:9d:43:35:9d:8e:d2:b2:3d:7c:2c:9a:29:
         64:bd:ec:4b:3d:82:d7:7a:97:7e:b6:3d:f8:a9:6a:89:05:cf:
         db:40:54:ac:e0:05:04:92:47:51:41:40:ee:02:9c:75:b2:b5:
         87:3e:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:32:31 2025 by rpki-client