Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
File:                     614EF54DCD6F303805D5996E2C956F5A6154005E.mft (raw, json)
Hash identifier:          bRcAkHmLZu9epUrGhbDftLE3UASWCiChPKQv/3o5H/g=
Subject key identifier:   65:3F:9C:17:AD:C9:6B:E3:16:78:39:DA:F8:D6:81:4B:99:3C:E7:A6
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Certificate issuer:       /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial:       1C5CF5F70EFFA4BB0CB1ACC10677F3FB04E8DA6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
Manifest number:          1D
Signing time:             Thu 24 Jul 2025 12:16:37 +0000
Manifest this update:     Thu 24 Jul 2025 12:11:37 +0000
Manifest next update:     Fri 25 Jul 2025 16:03:37 +0000
Files and hashes:         1: 3137372e3132392e3134302e302f32342d3234203d3e20323633353834.roa (hash: UdZT3Z8ev2GLZArI+ovPxhxxFoPSDeF3xL3EevP2VgY=)
                          2: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (hash: 4KNuw3KrhokAp07epZbqKXvturdr87y4wuDmG7XhaGQ=)
                          3: 3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (hash: SNXXb/g6faoaWJsqyK/eyOfjCa3Z9s5ux8rZsDSkMg0=)
                          4: 614EF54DCD6F303805D5996E2C956F5A6154005E.crl (hash: SOyzU7VhX5HPo02YkhvtugnV/Dboa7AI1Hsf7GJsk1U=)
                          5: 3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (hash: EcWhsGBEyrxRGE0ptJvEFZQphtJFD8XAczjy8uYmwDQ=)
                          6: 323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (hash: zUD8uqd6uittgR5PWSbgkrPlAbzFb/Kx/40Lbq9YDXw=)
                          7: 3137372e3132392e3133392e302f32342d3234203d3e20323633353834.roa (hash: KPFsJwP681bwFuDIYCf+KNEj5DHNcwmZ22LUwOciiZA=)
                          8: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (hash: /Mtsp4g7qk08CXrjewNoBqbuX9hkEiUx+YEVhVhnqdI=)
                          9: 3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (hash: AIn4FLTJdPCW5wdGLKV+S21Qle29a3vSxmhBr7SFUmk=)
                          10: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (hash: K1lcHBBbdkthPlR7YaN3SRcwPg2gGF9G6DZDw1KxElY=)
                          11: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (hash: UoK4ansdy/Vqz+biwynMr5yVCoy/NJnSbemU5jsHxbU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5c:f5:f7:0e:ff:a4:bb:0c:b1:ac:c1:06:77:f3:fb:04:e8:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
        Validity
            Not Before: Jul 24 12:11:37 2025 GMT
            Not After : Jul 25 16:03:37 2025 GMT
        Subject: CN=653F9C17ADC96BE3167839DAF8D6814B993CE7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2a:c3:dc:92:67:e3:e2:14:06:ba:6d:7c:43:
                    79:a2:11:07:99:51:60:b2:a0:36:08:6d:f8:87:3a:
                    49:ca:65:38:53:b8:d1:a8:52:0d:c7:01:9f:41:d8:
                    8b:9f:a0:79:d1:44:ce:99:81:c2:70:66:53:96:a7:
                    49:e4:1b:85:9c:21:b1:65:3e:5a:ec:be:ea:4c:0f:
                    d6:e0:fb:f1:d6:ba:25:0e:c0:77:3d:db:50:da:34:
                    53:bd:c8:98:74:bf:2e:1b:59:88:b0:a0:7d:e8:ae:
                    0b:43:c0:e0:fb:db:6f:f6:c4:6f:9a:49:dc:56:81:
                    75:87:40:75:a0:30:7e:19:8f:27:98:c5:07:62:87:
                    aa:e8:65:77:09:33:11:f0:05:69:5c:00:3f:46:89:
                    9c:b3:49:f3:09:7a:6e:d3:60:f6:02:86:88:44:d0:
                    3e:6b:e5:f3:ef:8a:c9:85:fa:db:7d:02:0f:dd:9b:
                    18:b2:e8:26:d1:4f:55:c5:07:19:fd:00:b7:5b:c1:
                    c1:e1:b0:db:87:8d:fe:ef:f1:5f:24:e6:79:d7:96:
                    a3:76:17:8d:35:9b:d5:dd:72:75:68:7f:49:2a:45:
                    92:c5:a6:5b:70:7c:06:b2:5f:03:0f:0d:4a:09:a3:
                    d8:d5:31:89:3c:58:25:64:b8:e6:a2:85:fd:db:f8:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:9C:17:AD:C9:6B:E3:16:78:39:DA:F8:D6:81:4B:99:3C:E7:A6
            X509v3 Authority Key Identifier:
                keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:43:2a:06:5b:18:28:3f:10:b3:f6:06:63:77:96:df:ea:
         8b:81:c2:b9:af:6f:6b:15:03:bb:09:2f:c2:13:1a:c3:d9:59:
         c1:f1:14:e2:29:2b:5e:3f:ba:64:9c:63:b8:91:e1:03:e5:9d:
         18:79:84:6d:00:8d:2a:26:27:33:67:ce:6a:6a:4c:a4:98:e9:
         b5:06:33:8e:52:ab:3f:51:bc:9a:97:da:66:08:20:c9:96:0f:
         c9:6a:fb:88:b2:89:dd:93:da:d9:4a:51:36:e0:94:0f:d3:bc:
         bc:34:41:10:f4:be:31:11:61:8d:fc:b3:ce:f4:d7:88:67:28:
         c7:88:2c:fe:61:df:27:07:32:62:a3:6d:02:d2:a3:82:df:dc:
         75:a1:ac:fd:5e:ba:5e:38:68:ea:47:bf:66:0b:77:2d:8e:fd:
         44:5d:2e:20:6f:20:ca:9e:4c:f0:ff:5e:52:69:dd:1e:47:6f:
         f9:06:2a:38:9f:69:35:96:80:3a:8a:bb:b8:af:be:ad:b6:1c:
         5f:80:b8:e2:d2:25:88:cd:ca:cd:15:45:b5:46:3b:4b:bd:cd:
         e0:b0:e7:df:a8:8c:99:99:7c:29:74:1c:2b:55:57:84:46:e5:
         87:c1:71:87:48:c4:d9:c5:e5:da:3f:7d:30:f4:21:b6:0e:12:
         bb:17:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:00:05 2025 by rpki-client