Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          DL5GB5vkg7e/zKfK4eGmz0UlHESdoZTpO4AX/cfRZwM=
Subject key identifier:   60:0A:4C:DB:99:9C:1C:CA:FF:1F:03:AA:E9:61:29:73:8F:E4:31:9A
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       026A72825644B943DFC6C919F3D15D30B8B26561
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          0284
Signing time:             Tue 03 Jun 2025 22:40:00 +0000
Manifest this update:     Tue 03 Jun 2025 22:35:00 +0000
Manifest next update:     Wed 04 Jun 2025 22:40:00 +0000
Files and hashes:         1: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: aGIl/LE/JlIFKLywuV74BW53ExFvQdI3FynFIHfHA0Q=)
                          2: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: fY7G8JRvTBq+7OHUSUK9OAYNma1QKsLl1NDjQjfttd4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:72:82:56:44:b9:43:df:c6:c9:19:f3:d1:5d:30:b8:b2:65:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Jun  3 22:35:00 2025 GMT
            Not After : Jun  4 22:40:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:2e:8a:fc:46:70:7b:ca:19:16:af:54:56:
                    45:bc:1b:34:37:a1:da:63:30:da:f9:56:bb:57:28:
                    53:7e:2a:cd:b4:dd:7b:5a:c9:d0:4e:18:29:1c:b2:
                    00:70:25:22:bc:80:3a:08:11:43:06:8a:e1:71:72:
                    3e:78:89:e8:8a:68:a3:f8:13:4a:7e:a0:97:24:95:
                    db:5b:ea:09:9a:f9:03:67:e9:68:c4:55:a4:9e:0a:
                    96:88:2b:95:7c:1b:c4:8e:f4:29:31:f3:ea:5f:18:
                    bf:71:e0:82:32:d3:1c:f1:e4:4f:f6:2f:04:cd:20:
                    2f:77:8b:1b:ec:7f:f4:ce:9a:b2:f9:30:b2:0d:04:
                    13:8d:d9:2f:08:ab:3a:8b:39:c4:d3:ac:ad:91:89:
                    dc:09:a0:8b:3a:15:22:0b:d8:33:6c:45:c6:c2:9e:
                    5d:e1:6b:34:f1:ef:27:16:70:62:4d:19:24:db:3b:
                    4d:24:c0:85:e2:42:1e:f1:3f:5c:b4:4f:93:ce:db:
                    be:55:0b:b0:d3:b2:d5:11:39:c0:6d:ba:a6:0a:df:
                    ee:7c:2e:52:14:c1:ba:87:68:86:bd:af:5b:37:8a:
                    47:f2:cc:e9:42:fe:e4:20:fe:ea:2a:fc:46:b8:66:
                    91:19:e2:91:dd:c1:1a:f8:6d:7d:61:01:a2:96:5f:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0A:4C:DB:99:9C:1C:CA:FF:1F:03:AA:E9:61:29:73:8F:E4:31:9A
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:9f:0d:90:b4:58:eb:5d:d4:cb:08:bc:68:2c:13:53:ff:
         35:90:bb:55:7b:a6:db:ff:2e:44:89:5a:c2:0a:68:c4:f5:57:
         9f:cf:2d:b2:e0:98:a7:70:3a:0a:8e:6d:d5:33:8e:32:c0:bc:
         3e:d8:fa:2e:19:05:20:19:9a:32:3e:8f:32:88:31:78:c1:dc:
         b0:61:1d:09:41:f9:3f:9d:c5:87:6e:95:24:ce:4d:83:2f:cc:
         07:78:9a:13:70:34:8a:90:fc:0f:80:54:4f:e7:b5:b6:31:fc:
         7d:56:10:e8:90:97:b5:eb:2c:40:12:1b:99:95:45:bc:03:9a:
         43:c2:7b:ca:e1:fe:2f:0d:cf:0e:5e:e7:d8:08:c6:77:1f:7e:
         17:9b:1b:f7:96:f5:f8:c8:69:98:8d:a4:f6:89:9e:a8:ef:a7:
         ef:0c:6e:cc:22:2d:48:09:4b:e5:07:ab:ab:3e:7e:06:fa:2b:
         a5:0d:8a:f1:0c:74:97:dc:15:16:5d:e2:a1:a5:cf:30:c2:b5:
         c1:f4:fa:80:73:0b:f0:b9:40:44:df:a1:81:6f:74:48:ba:79:
         8e:13:36:4a:90:1f:25:84:dc:9b:e2:83:d4:cd:91:e1:50:33:
         b2:19:ab:c7:3b:fd:c8:f3:1f:00:c8:d3:19:e2:1a:fd:ea:21:
         b5:90:a8:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:32:49 2025 by rpki-client