Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
File:                     FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft (raw, json)
Hash identifier:          3TjRxOFYn1F9O4OklIF0a+WsvBOxIi4w1ub6MxEH2Is=
Subject key identifier:   23:DE:A1:88:B5:00:F6:F6:9B:76:C1:98:B2:85:BE:0B:C4:6A:6F:88
Authority key identifier: FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E
Certificate issuer:       /CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
Certificate serial:       4DFAE872675FFC404A6D0761DE162C93A99D7FF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
Manifest number:          9F
Signing time:             Wed 20 Aug 2025 02:12:37 +0000
Manifest this update:     Wed 20 Aug 2025 02:07:37 +0000
Manifest next update:     Thu 21 Aug 2025 03:13:37 +0000
Files and hashes:         1: 34352e3138322e3234382e302f32322d3332203d3e20323639323435.roa (hash: E+cklEAbvkMVYK9jhvnpL60xDxOtgqMtgJs65eGmU7c=)
                          2: 323830343a363139633a3a2f33322d313238203d3e20323639323435.roa (hash: YKjIAqG1yuEFYMVP4xZkWKECjkHqyOHvad/Qpo5c/Co=)
                          3: FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl (hash: BOT5Iuc13pKiWynTD96ry06YzAT6ZpSY2gwL9JviUZU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 03:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fa:e8:72:67:5f:fc:40:4a:6d:07:61:de:16:2c:93:a9:9d:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDD143F62E397A87EC22FC239E7DA2435AD80D9E
        Validity
            Not Before: Aug 20 02:07:37 2025 GMT
            Not After : Aug 21 03:13:37 2025 GMT
        Subject: CN=23DEA188B500F6F69B76C198B285BE0BC46A6F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:2b:f5:79:0f:d0:70:b0:4f:5e:a1:9a:e5:
                    a5:09:25:03:25:46:64:19:4f:7d:9c:a9:cf:41:8b:
                    95:9a:0b:d9:b8:e9:2b:4d:6a:85:67:af:11:3f:e2:
                    81:fa:cd:5c:8c:e6:78:6c:4c:c1:e2:0f:a1:09:c3:
                    f6:e2:5a:a1:ac:3b:b3:dd:fa:04:7e:b5:94:67:05:
                    e3:67:d4:6f:9e:3f:bc:31:d6:a8:52:c4:75:33:ba:
                    5a:42:89:66:5a:a4:84:f3:d4:d8:9c:70:ce:2f:1e:
                    18:70:72:7f:20:3e:9f:c0:c7:e1:dc:07:5c:d3:e7:
                    fb:34:b1:59:c5:41:9a:f2:80:76:98:f5:ce:a3:2a:
                    06:17:80:63:cb:bc:0a:0e:b0:43:bb:46:28:14:8c:
                    44:5f:fb:a6:c6:cb:0e:bb:c8:66:da:14:2a:28:b7:
                    ac:f1:08:78:1e:1d:48:e6:45:4f:91:a0:73:7c:c2:
                    8e:ce:11:8c:45:ee:63:f0:6d:8a:3b:7b:c1:6f:47:
                    fc:f2:52:3d:c7:66:b5:75:05:33:6d:0c:77:7d:e9:
                    86:d4:1c:05:de:5e:d5:67:07:b2:8e:87:70:a2:19:
                    ca:aa:d8:e6:5b:aa:91:92:a2:46:08:62:cd:73:2d:
                    1c:fd:b1:b4:9a:35:57:ca:b5:34:40:97:52:10:dc:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DE:A1:88:B5:00:F6:F6:9B:76:C1:98:B2:85:BE:0B:C4:6A:6F:88
            X509v3 Authority Key Identifier:
                keyid:FD:D1:43:F6:2E:39:7A:87:EC:22:FC:23:9E:7D:A2:43:5A:D8:0D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/FDD143F62E397A87EC22FC239E7DA2435AD80D9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:6a:01:0d:75:3a:21:3e:19:a4:5d:0b:f3:0e:d2:c4:34:
         5a:2d:f5:21:20:7f:86:08:ea:46:20:90:3d:46:e1:5a:3d:ee:
         51:5b:ad:4d:52:8e:0a:c0:12:45:80:d1:ad:e6:1c:94:76:a4:
         c3:ae:07:84:ed:ad:7d:1c:ec:2a:b1:e4:3f:84:66:96:f9:c4:
         60:fc:7b:ef:d8:04:f1:9d:aa:79:d1:e7:a9:36:e9:9a:69:27:
         cb:28:1c:d6:dd:3e:5a:19:7b:4d:bc:5d:02:b1:05:86:04:61:
         71:0e:81:dd:2e:2a:a6:ee:da:78:ae:40:97:aa:ce:33:8c:fa:
         46:5f:01:47:bd:75:36:b9:2b:63:d3:49:15:95:65:74:39:4c:
         cf:25:e8:31:de:c1:d2:60:ea:43:62:b0:a7:0a:b6:ab:6a:23:
         0e:df:90:d5:2a:95:1c:59:db:8c:e8:cc:e6:fc:54:59:7a:02:
         3c:18:5b:25:77:a7:c7:50:b7:03:88:21:89:61:e3:c7:6e:d1:
         89:6b:dd:12:e9:64:c8:96:ce:8f:49:3e:f8:b0:a4:2b:79:9b:
         82:ae:bb:19:7e:91:ea:12:e5:d0:91:65:e0:d1:fa:27:70:66:
         4d:de:19:17:38:76:c4:5c:b7:50:91:9c:75:ae:2f:e6:fc:ab:
         79:38:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:34:42 2025 by rpki-client