Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
File:                     09B86DF2675EE46F17CF5F43330433E2F22C8432.mft (raw, json)
Hash identifier:          eZtSgqhml8pCMPNB8x8HB9IU29Pjk2rmPvHYrENedC0=
Subject key identifier:   66:25:34:10:A9:1E:E4:51:09:7A:82:EF:AA:92:79:07:87:7B:51:B1
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       3339CC99EBCE0AF6E5E8E3C596BCC5638AEAF67D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
Manifest number:          0166
Signing time:             Fri 19 Sep 2025 11:51:10 +0000
Manifest this update:     Fri 19 Sep 2025 11:46:10 +0000
Manifest next update:     Sat 20 Sep 2025 13:17:10 +0000
Files and hashes:         1: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (hash: 9cmwa/EjIHXq9mMNpoYQR4n5fw0qKo7hhSMP7U2r66M=)
                          2: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: PuvRBmtSfW019bAKsmUe0+rTNxuXw1pFP0looDysGEw=)
                          3: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: zNH2DTIGS/EMjzSeq1+poV5vX3CbHq/oe6HfJIa6Sww=)
                          4: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=)
                          5: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=)
                          6: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: BDbkIOTo1z+rcsqGg8AzmzwEnhj4V4/lYattEazDYSg=)
                          7: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=)
                          8: 3137372e3132342e3136342e302f32322d3234203d3e20323632373639.roa (hash: fIX1rsqkrEcxfwHxtTnwZrhQYl82JOUf5vdma4FSDSQ=)
                          9: 09B86DF2675EE46F17CF5F43330433E2F22C8432.crl (hash: nd9ALK8050j7dLEaNKqPHAT2HZRfZTMUVdL3p1lpx5I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 13:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:cc:99:eb:ce:0a:f6:e5:e8:e3:c5:96:bc:c5:63:8a:ea:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Sep 19 11:46:10 2025 GMT
            Not After : Sep 20 13:17:10 2025 GMT
        Subject: CN=66253410A91EE451097A82EFAA927907877B51B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:bb:d2:e4:04:72:c7:61:21:a1:47:d1:7a:
                    06:e8:67:ef:d4:64:0d:d5:f9:11:24:cf:a4:72:7c:
                    5e:61:71:bb:26:fb:a8:88:ae:e3:be:66:d5:15:15:
                    64:8c:e7:49:86:ab:97:e1:32:29:b7:73:0c:85:4e:
                    fc:1f:53:66:c1:28:ff:58:64:f6:67:b4:91:61:0d:
                    7c:14:1a:bf:7d:f1:be:12:6b:5c:f8:e2:4b:44:e1:
                    3b:a8:ae:86:3b:7c:94:17:f6:b9:b7:1a:a2:4b:54:
                    80:bc:a8:cd:c0:1a:a8:51:ae:bf:68:5f:bb:f4:3c:
                    be:e3:74:ee:94:d9:38:91:74:f2:bd:6d:f5:c0:19:
                    8d:a5:76:b0:26:b3:bd:b1:91:ae:da:11:41:5d:74:
                    75:b9:f3:cb:4b:f7:d9:f8:b0:c7:85:32:49:bd:24:
                    6d:22:51:52:7a:ff:91:7e:03:0b:59:d4:a6:de:6f:
                    1d:52:e4:eb:80:20:de:67:35:e3:e2:d5:51:3a:2d:
                    59:a5:fa:89:f6:54:56:e9:f4:af:06:5a:60:05:f4:
                    7f:72:1b:19:cf:59:8f:28:f5:3c:4d:d9:2a:9d:7d:
                    7c:6e:59:99:1f:da:ad:5b:d8:18:88:c6:b7:3c:6b:
                    a5:bb:76:c5:dd:71:42:c2:b8:75:fa:d5:e1:d7:0d:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:34:10:A9:1E:E4:51:09:7A:82:EF:AA:92:79:07:87:7B:51:B1
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:b2:c4:64:d1:74:57:ec:10:43:6f:a1:ab:d6:c3:2e:b9:ac:
         d1:a5:df:f3:90:33:5f:34:af:c5:ce:f5:bc:71:65:bd:a5:09:
         33:cb:86:91:41:2b:40:80:73:1f:be:3b:1f:02:40:94:d0:09:
         56:38:09:33:42:3d:79:26:2f:cc:5e:29:26:8a:ea:f3:94:b1:
         fe:19:54:68:8e:b4:06:34:30:d0:3c:2f:2e:34:93:6e:14:6a:
         ee:04:47:cf:5c:48:c7:9f:ed:be:33:b9:b6:e0:6b:dd:88:d1:
         1c:b9:2e:f5:c6:37:45:7f:7a:29:e0:fa:df:15:77:62:09:88:
         93:3f:8c:5e:00:46:b3:44:41:7e:28:d1:1d:02:dd:28:e6:fa:
         40:2f:54:5a:de:e8:87:8f:5d:69:d1:d8:89:04:03:4a:71:59:
         35:62:28:7f:6b:a1:0e:13:ef:dc:51:5e:c6:92:c5:c8:68:2e:
         2c:f2:a6:d2:cc:29:d2:8a:e0:24:0b:28:25:df:bb:27:64:ce:
         e8:c0:c7:75:24:a6:67:ff:df:01:f8:31:80:a0:16:0b:aa:9c:
         36:ae:42:36:4f:50:33:c3:25:2d:b4:a2:c9:4a:55:8d:59:1e:
         2b:03:f0:78:bb:d5:47:88:1d:d7:99:19:60:07:df:27:49:33:
         37:30:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:30:11 2025 by rpki-client