Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft (raw, json)
Hash identifier:          1ncI4WSm3r0jF5s3g7nuTtZ/b91oDaDhNFbDcMx7DWg=
Subject key identifier:   EC:D2:AE:BC:62:AE:D1:69:B9:36:03:30:64:79:4E:3B:83:C7:9B:3E
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       1F2B85045C6D7280EEBF10814EA2DAE0177DFBA3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
Manifest number:          4D
Signing time:             Sun 08 Jun 2025 20:54:39 +0000
Manifest this update:     Sun 08 Jun 2025 20:49:39 +0000
Manifest next update:     Tue 10 Jun 2025 00:25:39 +0000
Files and hashes:         1: 3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (hash: o0sTCMwaYkCxWQEkq5SF4UjWyAqD9Ss8VEnXcbMp2O0=)
                          2: CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl (hash: 7LiguyxtxkMqxXOFps+rG2W42IaIqTpC+nE7a7Qvxs8=)
                          3: 3137372e37342e36342e302f32302d3235203d3e20323632333136.roa (hash: jHEp77ey3eYInyX7NnipiftUAAgDp3GkFWmhML9L1Yg=)
                          4: 3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (hash: p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=)
                          5: 323830343a3763303a3a2f33322d3438203d3e20323632333136.roa (hash: a6f42d45bxiLHIMWETpqkEcBoAgdph66Eltfz5OsBcc=)
                          6: 3133382e3131372e3139322e302f32322d3234203d3e20323632333136.roa (hash: 3lrRZ88ALQ/YEae09+IqsEdagITWdjR3q3G5UsvfNxw=)
                          7: 3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (hash: sDn+4Uu4m4W5bslIPmCXR04C2X/8MTPWAS8yBpOzj8A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:85:04:5c:6d:72:80:ee:bf:10:81:4e:a2:da:e0:17:7d:fb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Jun  8 20:49:39 2025 GMT
            Not After : Jun 10 00:25:39 2025 GMT
        Subject: CN=ECD2AEBC62AED169B936033064794E3B83C79B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:a4:ad:bb:43:aa:0e:90:8d:16:1c:57:6d:
                    6b:3a:06:6a:1b:58:53:d4:6e:ae:08:8e:97:e8:19:
                    6a:2c:a7:ac:0f:2b:37:0b:4b:6f:f5:3b:16:c2:43:
                    e6:eb:c1:8c:c9:65:e7:3b:26:bb:97:5d:c3:a8:4e:
                    d2:4f:81:43:f5:7c:7f:ec:bc:4d:f5:76:ba:8b:26:
                    5a:9d:88:dc:89:d4:a8:88:f8:6c:45:06:46:5a:2d:
                    41:9a:27:ad:d5:d3:24:37:52:18:7e:b5:2c:e9:d6:
                    66:c8:18:74:96:94:39:15:56:f7:97:ed:41:da:ec:
                    6b:c6:36:01:bb:f0:34:8b:35:8a:9c:38:90:ed:59:
                    c7:74:bf:7c:46:d5:2c:8e:d8:af:21:0b:26:7a:de:
                    fb:90:18:76:6f:45:6f:fa:80:8b:10:4a:99:a3:67:
                    3c:1e:c1:47:c5:b7:bf:53:d1:f4:88:11:92:ba:51:
                    26:a8:c0:87:76:f7:6f:87:f8:87:e1:44:da:68:34:
                    e9:ff:7f:a9:f9:2b:cd:c0:f1:c9:de:2b:ae:91:43:
                    de:0f:c6:ce:60:c9:4e:db:d7:0f:96:44:55:14:3e:
                    99:23:0d:af:c0:db:14:9c:f3:a4:09:5c:e7:e1:69:
                    7b:9f:99:7d:fd:07:4c:16:f9:b8:f3:b5:27:08:5a:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:AE:BC:62:AE:D1:69:B9:36:03:30:64:79:4E:3B:83:C7:9B:3E
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:88:a8:fc:67:06:23:a3:bb:33:fa:73:4d:4a:28:3f:69:6d:
         6a:02:80:d7:67:7f:23:89:4c:a7:02:78:1e:8d:f4:68:82:41:
         f2:4e:2f:9d:d2:cc:bf:f5:9a:b7:d9:bc:69:d5:f4:08:ef:8e:
         aa:3c:32:60:25:4b:33:dd:15:f1:a3:68:58:5d:ca:5a:fc:eb:
         f0:ec:4c:5e:36:20:4e:ad:62:78:b9:58:80:c2:81:cf:79:2b:
         70:a3:69:12:2d:5a:c1:cd:4b:d6:fa:12:87:bc:4b:df:05:57:
         64:ef:2d:c2:b9:6f:58:f9:e4:8c:ae:a9:be:c7:c8:9f:13:6c:
         c5:5a:ec:7e:f4:d7:e3:72:31:37:99:d9:b7:b5:6e:61:43:9e:
         08:16:0b:5a:48:42:99:b9:18:b3:9b:bb:27:21:df:5e:fd:ca:
         16:6f:6d:d1:47:9c:25:ba:58:c5:60:ce:6a:a0:26:5c:f3:4c:
         f3:dc:83:69:8c:08:69:1e:b2:f8:f8:95:a3:69:5a:69:f7:3e:
         eb:5d:18:7e:eb:6d:5c:e4:b0:03:a0:24:8f:45:88:76:a2:e4:
         bd:31:ca:89:c0:d0:c0:35:a9:76:0f:6c:f4:09:88:42:43:00:
         db:b0:6d:22:0b:46:3d:d9:ba:5f:0a:2e:1d:04:0b:78:3f:54:
         40:40:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:03:49 2025 by rpki-client