Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          F8a9gjeukGYugoIjXaz+ZWSQg6h3+Kq6DC/dU1cgs2A=
Subject key identifier:   8C:CE:84:69:40:65:81:74:EF:57:F7:61:10:74:12:ED:40:C5:88:FE
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       0AA586EBF5FEA2F0EEF0541EB697131D59E8B0D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          0289
Signing time:             Mon 09 Jun 2025 07:00:00 +0000
Manifest this update:     Mon 09 Jun 2025 06:55:00 +0000
Manifest next update:     Tue 10 Jun 2025 07:00:00 +0000
Files and hashes:         1: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: gmytMNlxeH3j9hJIGBJLZdvIvhQMZEwJGXACmpzXzXk=)
                          2: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: BKCmA0AtGUbHAv33l8+wniMTk6+6nrTXUjb7HrT0unI=)
                          3: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: 308U9YuTQinc/6h6pROcQyW/yhUpaoAEuJenvQ6ZLxc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a5:86:eb:f5:fe:a2:f0:ee:f0:54:1e:b6:97:13:1d:59:e8:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Jun  9 06:55:00 2025 GMT
            Not After : Jun 10 07:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:fe:63:a7:29:ae:26:98:cc:e5:ef:ed:6c:
                    a9:cf:5f:5f:11:e5:d0:03:27:78:e1:44:e3:61:90:
                    b9:be:a7:f7:75:7b:82:dc:6f:2e:1e:46:46:01:bf:
                    58:ba:03:b4:a0:79:21:c9:3b:46:7f:8c:62:da:de:
                    57:4b:4c:70:36:b1:50:3f:49:06:3e:53:de:57:6d:
                    42:2e:65:7a:52:18:a7:86:31:48:6f:05:a2:75:64:
                    1b:7e:37:ea:54:fd:20:20:da:53:a4:c9:75:f8:9f:
                    32:14:98:1a:63:38:c2:18:76:55:37:6b:44:35:f8:
                    59:38:c1:a7:b0:09:d8:dc:9a:f7:70:c5:d5:96:73:
                    ac:82:ed:33:23:de:b9:c7:35:c8:80:b0:48:40:21:
                    93:aa:37:83:a4:8c:26:ed:93:9d:34:4a:03:45:c6:
                    8e:56:97:66:b9:5e:be:c8:df:c5:17:a6:de:e5:91:
                    c1:42:3c:3c:43:14:fe:11:ae:1e:f9:db:a8:6b:74:
                    f8:16:76:56:58:c6:f3:aa:fb:27:23:82:7e:92:b7:
                    a1:31:c4:44:bd:1c:f3:1e:dc:7c:a3:a1:28:40:88:
                    c7:9f:b9:30:33:8d:0d:bb:88:66:fc:e2:82:07:a6:
                    aa:a2:be:29:ea:61:3b:62:f5:2b:47:9f:e6:fa:65:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CE:84:69:40:65:81:74:EF:57:F7:61:10:74:12:ED:40:C5:88:FE
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:61:c3:bc:ca:d6:7a:6c:f4:26:dc:d2:23:04:86:a5:b4:
         a8:9a:07:92:1f:65:02:2d:dc:1b:f0:3a:98:41:27:66:21:7e:
         20:65:60:51:77:93:67:95:2c:c3:0e:43:b4:9d:2f:54:fd:ae:
         11:f9:27:e1:12:67:7c:9c:38:c8:88:fb:85:e7:20:20:2d:83:
         f5:60:2e:c0:2e:54:8c:a1:cb:74:9a:76:a5:8b:93:f8:4b:f1:
         24:b9:a6:13:de:a2:b6:ac:04:f2:bf:8c:f1:4c:e7:42:7b:bb:
         ff:f1:2c:50:9e:ae:13:cf:cd:39:ad:58:36:a4:83:9c:12:a9:
         97:37:25:d9:47:a3:0a:36:2c:c3:e9:eb:00:7f:71:ae:69:45:
         73:7e:21:a2:1f:ec:b6:88:08:3d:f7:7b:1c:70:82:03:ef:32:
         8a:e4:e9:91:4b:04:08:e1:ec:18:54:80:45:a1:b7:0e:90:ad:
         8c:ca:cc:e5:f5:89:15:1c:57:16:a0:46:42:f3:06:2a:65:c6:
         d5:3b:a8:10:0c:2c:b9:90:e5:05:8f:c2:e9:54:c1:c7:fc:6a:
         18:bf:fa:91:2c:cd:45:f5:bd:a8:64:fb:ad:7c:89:85:54:0a:
         7d:83:d5:b7:1f:b9:97:6e:95:1e:9e:c7:b6:b1:8a:56:ad:cc:
         58:b9:c2:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:35 2025 by rpki-client