Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          Div5qoZZWFP7VFqA0qdD0GPrb1THFzVVW7g0hEsthG4=
Subject key identifier:   52:03:41:72:F1:9B:86:CE:64:A3:4D:F8:58:BC:88:CA:F3:C6:0A:0D
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       62AAAC667428F0F7C0FA73504E0EAE1DC3B1FEA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          AC
Signing time:             Wed 20 Aug 2025 13:48:53 +0000
Manifest this update:     Wed 20 Aug 2025 13:43:53 +0000
Manifest next update:     Thu 21 Aug 2025 15:30:53 +0000
Files and hashes:         1: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: 8sEMsyI17Ow74K/ZFZT7mqjHDe5XXHO5uEb5Nq+jFmU=)
                          2: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=)
                          3: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: IInVxv3kcMa5vG/U4cTD9sr87/Sbsyr6ChFNUDZQdGI=)
                          4: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: 1lj+3sFMNB4egkilmG1GQjAutsJHZiknJoxF8YP/VHY=)
                          5: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: nbN4ukyce754UAe7rihr7N/UFNah0kB8NkqYIQh4yFQ=)
                          6: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=)
                          7: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: 7qbfjGwinlfawR0X//sZeHGiCnVc4qfkZRjUARdD6XY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 15:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:aa:ac:66:74:28:f0:f7:c0:fa:73:50:4e:0e:ae:1d:c3:b1:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Aug 20 13:43:53 2025 GMT
            Not After : Aug 21 15:30:53 2025 GMT
        Subject: CN=52034172F19B86CE64A34DF858BC88CAF3C60A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:35:5c:ad:51:b2:a6:80:e8:0a:1d:6e:5b:
                    10:96:93:a5:1f:0e:e7:f6:0c:30:ee:dd:51:4b:a4:
                    62:d2:d2:d0:e9:94:f2:4f:78:0a:d9:8d:6d:d6:eb:
                    a3:ff:cd:8a:53:9c:f8:ab:52:cd:3d:31:88:5d:b5:
                    f3:c6:d9:c5:74:4b:9f:24:c3:e4:76:74:bb:dd:e1:
                    77:c4:bb:34:be:3d:ab:15:3f:2c:d4:99:c5:8b:67:
                    ed:b6:ad:a4:81:6f:68:f0:66:af:bb:63:99:e6:da:
                    57:96:cb:2f:2c:45:2d:12:52:06:2a:90:ed:d2:24:
                    ab:29:2b:a5:ec:3d:a9:fe:67:58:c7:7b:42:fa:20:
                    6b:73:d2:f6:84:f4:a4:e4:93:6b:8b:44:87:cf:81:
                    fd:03:19:22:1f:50:43:bc:74:d9:62:38:8a:d6:bc:
                    9a:ba:db:e3:eb:e4:89:79:1a:a5:05:98:de:98:2a:
                    e3:b6:f9:e7:cc:b5:5b:16:6b:d9:90:c7:ec:63:61:
                    18:25:71:4f:67:e8:d7:97:90:86:c7:e0:f5:a5:b9:
                    6e:80:e5:47:b0:3b:4c:0f:be:27:d4:e7:7b:e1:b6:
                    a7:b2:9f:17:b6:c5:40:b3:a9:2c:8e:f8:ff:22:6d:
                    2e:15:8d:87:33:db:a3:2d:53:a1:47:bb:4a:71:51:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:41:72:F1:9B:86:CE:64:A3:4D:F8:58:BC:88:CA:F3:C6:0A:0D
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:10:69:35:bd:d2:5d:71:06:fd:0b:cb:e8:45:f9:30:2a:
         53:2a:48:99:50:f6:94:a2:bd:9e:19:14:b8:93:56:03:f9:bf:
         d1:c0:eb:cc:68:80:66:d5:e5:66:13:35:46:74:87:81:d6:88:
         0e:01:72:5e:94:9d:06:17:fa:0f:e9:f7:16:33:07:e7:40:b6:
         25:9e:f6:f6:3d:b7:61:48:c6:5e:98:90:62:b5:0e:bc:df:22:
         c1:c6:8d:d6:3b:3e:22:70:4f:a2:88:a5:32:46:24:c3:f2:1b:
         b8:b6:ab:c7:a5:52:e8:8a:0e:68:df:d5:98:62:f5:05:3f:44:
         b9:b8:5e:48:da:47:d4:0f:1d:05:4a:29:bb:4f:3a:e3:e6:68:
         62:cd:8c:3f:52:f9:a1:5f:3a:be:92:a2:4f:42:be:ee:8c:e2:
         79:37:7a:d3:8c:e9:1c:6e:d3:fb:be:c7:73:b0:53:f6:83:2c:
         5f:29:da:db:10:38:2e:69:7a:de:96:95:fc:f1:2a:65:ab:2f:
         05:4d:f5:ad:35:bf:bf:ad:30:86:8b:cc:a5:2b:f5:68:f2:3b:
         0d:0f:31:75:65:f4:6e:f0:f8:70:03:4a:8d:31:7b:f1:a3:43:
         9d:e4:3c:10:e4:02:2f:58:e1:02:10:f6:e1:53:c5:2a:59:3b:
         59:74:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:17:49 2025 by rpki-client