Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
File:                     15513D1A379C5EDDB8158CEA26166691DE1B169A.mft (raw, json)
Hash identifier:          jAcwsuHxGQYNmJ9/s3cb+bxZaz7cilxU6Imkj3U94hk=
Subject key identifier:   48:8A:E4:39:D2:47:85:9E:B2:9E:D0:1C:0E:CC:C7:41:C0:98:7A:81
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       37CA65F7F1A4400B698D655DD152E046F9FC6B03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
Manifest number:          0289
Signing time:             Thu 31 Jul 2025 13:09:49 +0000
Manifest this update:     Thu 31 Jul 2025 13:04:49 +0000
Manifest next update:     Fri 01 Aug 2025 15:34:49 +0000
Files and hashes:         1: 3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa (hash: hieV/S0Me90WUqkkpA05Jf9VJNFzhvxkV5K2G+hbZZ8=)
                          2: 3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa (hash: xsGactmuniG7AjuOAqPAn4zHDb8xLkjZVRnMYetw1b4=)
                          3: 323830343a313638303a383030303a3a2f33342d3334203d3e20323633323839.roa (hash: Mj1dO1EdQBmN372k9D6Z6CFHr6ZFPzYn0o9DsHVDo6I=)
                          4: 323830343a313638303a343030303a3a2f33342d3334203d3e20323633323839.roa (hash: elseOMDyAeSfGuYTlaSyA1ZScHSXTkw9zPXEpVcj6G0=)
                          5: 3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa (hash: DQSKoE+j6i6cZNjOyJDd10hn+Okjg2eX8dPsGxJoJY8=)
                          6: 15513D1A379C5EDDB8158CEA26166691DE1B169A.crl (hash: xzX6Yr0R9ZhQl9qhnaVFne/WWfIo+gC0pUznZtqRZY0=)
                          7: 3137372e3139302e36342e302f32322d3232203d3e20323633323839.roa (hash: QSSDvltIN9nQtOkaostpQzSXALweuXuNVUN+y8noALI=)
                          8: 3137372e3139302e36362e302f32342d3234203d3e20323633323839.roa (hash: GRjTUoEEvlwsR48TVysjIiJBIVtO+aghw7AiMfgef/w=)
                          9: 3136382e3139362e3133312e302f32342d3234203d3e20323633323839.roa (hash: oftFtcr0Z9TU8TGDSOxHbOyzQpDbpMIFKt3U/kgk+LU=)
                          10: 3136382e3139362e3132392e302f32342d3234203d3e20323633323839.roa (hash: ex8ABDNszpd3+4G5SNJFi1TikedpzqqYKWu6hxVuwDE=)
                          11: 323830343a313638303a3a2f33322d3332203d3e20323633323839.roa (hash: nIUvWlrQdT4WHFv1vXQAZtD+bmhN6kMYEM+gSZKxJgE=)
                          12: 3136382e3139362e3133302e302f32342d3234203d3e20323633323839.roa (hash: ZroRQ/ROgMXTh8ogCYTid73JjcDkgHBbYe2ujjkQGm4=)
                          13: 3137372e3139302e36342e302f32332d3233203d3e20323633323839.roa (hash: wzJpi/KD9sw53WyUUqaS2Tdc2WQHgdZ8Czwlnr/64wk=)
                          14: 3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa (hash: TwnMTJawJRiJTxut9kVBzk07RcYbqduvF5Iv6cHg3UU=)
                          15: 3137372e3139302e36352e302f32342d3234203d3e20323633323839.roa (hash: 1DgY3tSymZxxX7qj2J4LZ4OBzsughRblo6kTZCMuUGI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Aug 2025 15:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ca:65:f7:f1:a4:40:0b:69:8d:65:5d:d1:52:e0:46:f9:fc:6b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Jul 31 13:04:49 2025 GMT
            Not After : Aug  1 15:34:49 2025 GMT
        Subject: CN=488AE439D247859EB29ED01C0ECCC741C0987A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:97:a9:76:97:9c:d0:68:80:cc:5c:02:00:
                    77:fa:1e:5d:27:9c:cb:e6:12:1c:b3:1a:2a:4f:83:
                    2a:77:ec:f1:18:d6:3d:42:3c:07:c4:5d:09:b0:87:
                    10:7b:0f:36:3a:af:0b:0e:a5:4e:23:6b:c2:0e:da:
                    02:1e:6b:fa:0d:fb:85:22:00:ed:33:16:b8:5a:5c:
                    2d:2e:85:0f:91:3e:6a:37:b7:84:b5:60:a7:0f:a6:
                    f7:5e:26:2d:be:7b:7d:ee:51:e6:56:94:1b:3a:06:
                    8e:e0:6a:b0:26:a7:d9:3b:b6:d4:08:7a:ea:18:56:
                    94:7f:61:73:c5:62:f5:b9:00:7b:a2:79:5b:25:bc:
                    bc:45:e4:c3:a4:5f:1a:3c:9b:e5:76:d2:8b:ff:7f:
                    29:a2:f8:93:74:f3:22:1f:c9:84:3b:59:20:60:7e:
                    13:3e:63:a2:8e:6f:8b:a8:bd:cb:fa:9c:85:8a:36:
                    e6:09:dc:9a:2a:3f:fd:ed:bf:c8:3a:c8:21:5d:9d:
                    43:02:4c:d8:20:3c:28:75:72:a8:86:8a:1a:76:2b:
                    a0:e5:49:ee:4d:42:8f:7f:c7:70:17:14:46:0c:6b:
                    2e:a4:95:0c:a3:23:ff:03:d2:99:07:fd:c7:c0:1d:
                    b1:54:3a:ed:cd:37:de:5e:f7:5f:83:c5:03:2e:8f:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:E4:39:D2:47:85:9E:B2:9E:D0:1C:0E:CC:C7:41:C0:98:7A:81
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:4d:a5:5e:f2:f5:71:bc:42:4a:a8:06:c5:db:af:5b:8f:
         d4:90:4d:8f:1b:e9:93:0b:e5:e8:20:2f:d3:98:a0:dc:84:88:
         ce:f1:5d:9a:fe:a1:e2:65:99:58:9c:24:34:45:0b:bd:8e:46:
         8c:f5:b8:23:e5:b3:a7:8d:2b:0d:cc:6a:fc:8f:6b:c1:c7:a7:
         3a:54:4c:cb:f3:5f:7e:92:db:ed:bd:d0:0c:36:0c:66:1a:7f:
         58:d2:2d:dc:f2:bb:43:5d:48:f3:8d:bf:64:92:5b:16:4e:e1:
         87:42:d6:3d:d1:65:50:0e:8a:42:d8:5e:ca:db:d4:82:a3:40:
         cf:98:69:65:ee:c1:77:5a:a1:4a:c9:c8:6b:0e:1d:f1:07:da:
         2b:51:05:c5:0b:7a:b2:5d:8d:79:47:74:01:16:0e:55:fb:94:
         f1:7b:fb:04:fc:e0:46:3e:39:2e:f4:10:e0:f0:8f:4f:d0:0c:
         8a:1e:d8:1b:c4:9a:7c:42:5b:53:e0:8d:86:69:bb:e2:1f:0b:
         fa:c7:d9:28:fe:6d:23:98:70:67:4e:3b:13:32:39:82:5b:aa:
         e6:ae:21:cd:8a:f2:5e:4b:83:57:0d:cb:cb:1c:8f:ac:2e:c9:
         f9:7f:24:03:00:c3:42:b6:e8:50:76:25:72:94:60:01:7b:cc:
         6d:4d:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 15:26:29 2025 by rpki-client