Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          kGwWyEJesR45KNELj1IUCtuoxRf5h8/E/VpkwF1Izks=
Subject key identifier:   AB:A7:73:F0:4E:4D:0D:08:4D:3A:1A:54:89:13:3D:6E:5E:BE:F0:27
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       3EFBDA9F8AC7389D0B2CAAA7748DB23556A89D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          015E
Signing time:             Thu 18 Sep 2025 05:11:00 +0000
Manifest this update:     Thu 18 Sep 2025 05:06:00 +0000
Manifest next update:     Fri 19 Sep 2025 07:53:00 +0000
Files and hashes:         1: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: skQOzkPTQZFZec1K7wXdytKDapP/Rl8ttG0KuDQZl8g=)
                          2: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=)
                          3: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: tRP99msVkW4x5i6Uy0O0k8TB+1CHSJFMroGWXc0LjX4=)
                          4: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: tsOYH76BfqT8mY4MadK531UC5ikBGOXeTaV5dqn1iMM=)
                          5: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: hYhI8DrxJwx77ijyfRSEPiOMYTfIUK0ZFXqFZI1FTPU=)
                          6: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: TWk0qbr98hdZcik90dFhM/vWCOrd/lQB5+fTAQwFpUg=)
                          7: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: nLiE6yi8v2swM0N2WR++xc99oe2em4lVBJ/aphER4g0=)
                          8: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: /34j/Zblbc9QpCPurMd+3e8YrhB5qUJR+HSqmwA1xBU=)
                          9: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: o2AWkGLSZ5uTr9uUvc/qL3QyFADL0DLPLW60o2iQcfM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fb:da:9f:8a:c7:38:9d:0b:2c:aa:a7:74:8d:b2:35:56:a8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Sep 18 05:06:00 2025 GMT
            Not After : Sep 19 07:53:00 2025 GMT
        Subject: CN=ABA773F04E4D0D084D3A1A5489133D6E5EBEF027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:95:40:b8:9f:19:b3:55:9c:d6:fd:09:e8:
                    fe:d1:e2:23:d6:02:d6:69:3c:d9:6d:8e:3d:01:01:
                    bb:85:a0:8a:ba:9a:5f:f7:b1:2c:28:08:d0:da:09:
                    bf:c2:1b:6a:f6:1f:d2:01:d8:54:43:3d:3f:5e:72:
                    eb:3a:99:5e:1c:ac:d5:75:37:15:94:e2:e3:79:39:
                    83:6a:72:6e:3d:e1:13:c6:99:12:d1:b5:ef:7a:22:
                    b6:73:1b:79:2c:9b:96:4e:ae:47:5d:4b:b2:2c:73:
                    a7:6c:e5:d3:40:49:17:12:12:c0:fd:a9:6b:17:07:
                    a1:53:ae:06:33:19:4f:47:4d:6f:64:2c:ce:26:71:
                    8c:fb:c7:81:73:f7:a8:e7:9b:51:c7:bf:92:fd:0a:
                    31:93:71:22:1d:89:af:91:9b:40:fd:40:32:20:28:
                    ca:0b:b7:31:4c:3c:b4:dc:81:ea:49:c9:d1:7e:5c:
                    1e:4b:b3:2b:59:e5:0e:10:f6:37:c0:56:a1:58:0d:
                    20:10:1e:02:32:a1:d4:cf:1e:ce:23:c5:ab:4b:b3:
                    b0:22:98:d8:d6:2c:9f:93:04:ed:2f:ae:aa:35:cc:
                    ce:d7:b1:9c:cf:c6:56:ab:d5:15:52:32:5f:83:d1:
                    ca:94:c9:a5:a1:b4:b0:6b:66:b5:b2:35:aa:b3:d2:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:73:F0:4E:4D:0D:08:4D:3A:1A:54:89:13:3D:6E:5E:BE:F0:27
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:df:5a:e6:c7:b5:5f:e9:cd:32:e0:00:1c:1d:3b:21:0c:
         ea:dd:a1:79:d0:32:72:70:08:4f:a4:0a:d0:26:18:03:bb:49:
         ef:ac:2f:ca:65:17:ab:75:8a:91:61:9a:00:50:3c:66:30:d5:
         c8:13:55:c1:ad:40:87:d3:21:49:ac:31:17:94:9f:2e:fd:5c:
         6e:93:f6:60:a5:47:b9:c7:96:9c:c1:e7:73:79:06:8b:9a:e5:
         68:bf:a9:4e:95:23:0a:b0:94:0c:4e:ee:38:5b:3b:99:ef:da:
         ac:5f:e6:84:20:25:8f:e5:58:3d:05:75:d0:c2:dd:6f:ca:a9:
         f7:04:3d:12:df:9f:02:e3:cc:a9:55:27:0b:68:77:f5:d2:eb:
         45:39:80:60:38:83:65:f6:91:82:e3:22:76:3e:05:7d:bf:49:
         f0:6d:03:72:b9:f0:df:d9:3a:fa:f8:fd:36:9a:27:ac:ff:7c:
         c9:3f:7c:43:ee:45:2d:33:03:1d:2d:d9:6f:63:10:20:38:10:
         95:dc:d7:71:99:60:1d:10:3d:bb:41:f9:60:c9:8e:35:ad:a7:
         d7:78:d8:95:3a:26:6f:ce:bb:9b:a6:4a:37:2d:a1:9a:32:bf:
         60:17:cb:37:ec:8b:9f:9a:ae:24:27:f5:39:61:01:ce:c0:7b:
         92:9c:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:15:54 2025 by rpki-client