Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          C9jd0sNqCwk0xr/gqfyPqJaAy8pMKaaFmMaUML9y/Hk=
Subject key identifier:   EC:02:17:F3:B5:37:DF:FF:3A:5C:62:D1:54:AA:DB:6A:2F:77:17:81
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       4371EEF81EB9DDF87908CAEE0E0F010257663B41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          0126
Signing time:             Fri 25 Jul 2025 16:39:53 +0000
Manifest this update:     Fri 25 Jul 2025 16:34:53 +0000
Manifest next update:     Sat 26 Jul 2025 18:47:53 +0000
Files and hashes:         1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: 7E18746FdCRZivLE6pPu4ACfvWmzhPMWvKdUg2tebco=)
                          2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 18:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:71:ee:f8:1e:b9:dd:f8:79:08:ca:ee:0e:0f:01:02:57:66:3b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Jul 25 16:34:53 2025 GMT
            Not After : Jul 26 18:47:53 2025 GMT
        Subject: CN=EC0217F3B537DFFF3A5C62D154AADB6A2F771781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:52:20:0f:d1:83:d4:8f:63:23:b6:f7:2e:
                    83:61:88:db:22:97:75:07:09:75:f4:93:cc:d3:6a:
                    92:ed:5f:de:f2:a2:73:8c:45:3e:2d:f2:68:89:e6:
                    d0:7d:48:68:75:d9:ba:1d:cc:6c:5a:23:3e:3f:6e:
                    c9:fd:18:b1:13:80:28:56:cc:63:99:80:b5:15:51:
                    6c:90:dd:55:74:1d:a5:72:d1:0a:8b:8e:f4:41:e4:
                    ad:88:f4:7c:c2:87:f7:4c:8e:8f:78:37:47:b7:6e:
                    06:0e:7e:e4:23:8f:4e:21:f7:18:64:09:0f:c7:be:
                    f3:3e:7c:81:80:0e:9e:0e:f5:75:d6:79:9a:06:3b:
                    78:a7:28:f3:bb:63:67:77:5f:ef:ec:48:06:c3:b8:
                    fe:84:64:17:43:73:34:8c:6d:af:47:bb:e6:23:61:
                    01:88:a2:0f:43:d6:bd:a6:ac:6e:28:55:d4:0f:e5:
                    85:e3:27:1b:6c:ff:70:a4:fc:94:99:c0:78:21:b8:
                    cc:01:75:e6:35:02:89:04:1f:54:30:dd:ac:de:0c:
                    0b:1e:2a:59:9f:52:90:54:3a:09:6e:24:f0:ca:2b:
                    16:4f:f5:ab:34:32:b4:4a:1a:2a:e5:f5:38:f0:fb:
                    86:b5:eb:a6:77:06:e6:2c:1e:d0:e6:79:d1:7d:8f:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:02:17:F3:B5:37:DF:FF:3A:5C:62:D1:54:AA:DB:6A:2F:77:17:81
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:d3:c3:d1:49:ec:4e:12:a1:18:75:52:14:01:64:8f:da:
         a8:62:a9:17:94:3d:e4:e4:94:3c:d2:84:01:15:18:ee:aa:a8:
         73:06:97:1e:43:54:a3:1f:37:d3:16:3c:91:b4:37:bc:3e:32:
         54:3d:5d:5c:c0:b1:cf:27:d1:48:8c:ea:d2:4e:18:0e:cf:b9:
         e8:68:ab:78:37:8a:ba:15:f0:e9:ad:1a:b1:5e:ad:0a:ed:0f:
         61:63:91:10:8d:50:f8:1a:02:7f:df:80:b3:a6:90:e1:42:9e:
         e0:8b:23:6a:a5:80:ce:7c:45:d1:75:b0:26:cf:50:a0:9b:1a:
         78:ef:b4:a8:01:e4:f8:dd:f7:d1:5a:94:dd:1a:bc:64:b7:d5:
         7b:f7:cd:eb:d1:c2:c9:23:f6:b4:8f:97:67:30:e4:c6:0f:d6:
         2b:24:11:57:80:d5:07:0a:22:d6:80:93:bb:0b:4e:3e:55:7a:
         ef:0c:54:46:1e:91:cd:34:19:a1:bd:b0:39:75:8e:8a:f9:c5:
         b0:32:5f:00:19:af:5d:a4:87:e3:a2:7c:43:72:8b:3f:83:e1:
         65:15:2d:1e:ef:84:81:4b:b4:5a:77:16:49:56:39:23:51:03:
         b4:fe:03:17:a4:f2:aa:45:20:e7:c3:d7:75:6f:be:eb:c2:2c:
         9d:14:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:40:06 2025 by rpki-client