Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
File:                     3D580FBC905909266C331DDA6416C18006A24750.mft (raw, json)
Hash identifier:          X+Ts59Ya0XJFwcBYSPaMzk035pQGx5Q94Gpaft6bnHs=
Subject key identifier:   84:B1:70:EC:BA:06:1C:AD:46:89:ED:41:B9:39:E9:46:64:97:FD:85
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       34600F6645319F5259D8E79A1D263BBC41AD404A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
Manifest number:          25
Signing time:             Thu 18 Sep 2025 12:23:04 +0000
Manifest this update:     Thu 18 Sep 2025 12:18:04 +0000
Manifest next update:     Fri 19 Sep 2025 16:13:04 +0000
Files and hashes:         1: 34352e3138312e36302e302f32322d3232203d3e20323639313730.roa (hash: Do1Fy9rtM/rtDSxICSLTzo102lfyMjgmG8V4jivV8S0=)
                          2: 34352e3138312e36322e302f32342d3234203d3e20323639313730.roa (hash: IonYoiapNcoWkoV7loCpJnBAQfRj9zi7/2jHi+OiHh8=)
                          3: 34352e3138312e36302e302f32342d3234203d3e20323639313730.roa (hash: yysmFhfl6dWPBbezymnVgq+//1DbGUKn/Y2TVFwYDeg=)
                          4: 323830343a363037633a3a2f33322d3332203d3e20323639313730.roa (hash: bDMA0Rwtq0RjW/5LOo5tEukpRf+he8sVB8/de82kmvA=)
                          5: 34352e3138312e36332e302f32342d3234203d3e20323639313730.roa (hash: AbId8ST2mc685olQVHsKVLlX+OYE7IVqpF7eDxTXeIY=)
                          6: 34352e3138312e36312e302f32342d3234203d3e20323639313730.roa (hash: q8k6xA83euUkXs0Ca2bmdbe639/0DbngXdXv9QgLr8s=)
                          7: 3D580FBC905909266C331DDA6416C18006A24750.crl (hash: GD6dg13hB5tGC7bih+jejYJB33XjrAYtdCnUQigb0x8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:60:0f:66:45:31:9f:52:59:d8:e7:9a:1d:26:3b:bc:41:ad:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Sep 18 12:18:04 2025 GMT
            Not After : Sep 19 16:13:04 2025 GMT
        Subject: CN=84B170ECBA061CAD4689ED41B939E9466497FD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a1:8e:b8:c2:7c:5f:8a:47:76:91:1f:cf:e4:
                    dc:6f:19:73:52:73:91:8a:89:14:91:61:06:a3:f5:
                    2b:57:0c:63:85:93:26:e2:7e:e4:45:b1:f2:29:e9:
                    12:58:0c:87:ec:cb:6e:2d:ee:65:4f:b6:88:0f:0b:
                    07:f1:aa:a3:ff:67:82:2f:04:b4:78:05:5c:aa:1d:
                    f6:20:13:15:f4:ca:a7:1b:44:25:03:e7:84:9a:10:
                    ce:ff:bc:c5:0d:ae:62:0d:c8:e4:93:3d:4b:0a:c9:
                    86:6f:1e:83:df:81:fb:5a:ea:bd:e7:06:a2:a8:34:
                    24:33:1b:68:a2:0a:1b:b1:59:df:ea:15:2b:98:03:
                    2c:c3:93:11:7a:92:57:ff:cc:4d:b6:4e:ca:01:6e:
                    0e:bb:b0:17:93:51:0a:a3:7a:fb:da:77:bc:b0:bb:
                    02:4f:bf:48:a0:6b:0f:97:bc:fa:6e:84:7d:bb:3b:
                    47:50:e4:ba:41:2d:77:69:ad:11:b1:4f:ac:95:5a:
                    a8:30:ed:f8:52:2f:65:97:2b:65:5a:c0:d6:1f:0d:
                    f2:2a:30:ff:86:f4:53:a0:b3:ba:85:2c:2b:a5:d7:
                    28:e3:0a:f7:bb:29:d9:a0:7a:3c:b5:08:13:ac:83:
                    ce:60:b6:b7:d5:94:13:1a:18:59:cf:1c:f2:48:5a:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:70:EC:BA:06:1C:AD:46:89:ED:41:B9:39:E9:46:64:97:FD:85
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:9c:9e:cf:4e:a8:33:74:ec:3b:68:cd:ad:fd:70:57:f1:
         30:92:aa:88:e9:74:76:ca:28:9d:3a:13:76:11:3e:79:a5:5d:
         e4:e8:df:a4:92:89:1f:e0:1f:fb:e6:6d:a9:94:f9:f2:be:2c:
         55:85:89:e9:ca:d7:6a:91:1a:1a:5c:b7:2d:0f:3b:88:99:71:
         67:6a:f2:64:c5:f4:5a:63:66:ae:ed:ba:fe:93:33:8c:8c:f0:
         30:b8:fb:35:c8:dd:ee:d3:3d:1c:66:2a:55:51:4a:6f:ca:46:
         9b:2b:ec:e0:48:ed:de:a4:e2:57:4f:7d:a8:94:db:18:1c:5e:
         90:68:f9:b2:55:77:d5:3e:58:4a:21:f6:d1:4e:3d:85:a4:19:
         97:c6:51:4f:42:01:f5:24:ae:01:c9:34:d5:65:88:cd:68:6d:
         95:17:23:ce:c5:38:b6:0c:9d:df:f9:93:89:52:2b:a5:02:57:
         3d:5b:09:f7:5e:12:d3:58:3a:a6:01:22:1c:4a:cb:50:b4:56:
         87:a0:e4:c5:5a:b8:01:66:84:e5:1d:18:7f:f3:4f:77:12:41:
         07:13:f4:5e:16:6c:b3:9b:54:c7:03:89:b6:69:dd:9c:0c:eb:
         3e:bd:dc:5b:00:83:6a:de:35:a8:cf:f7:52:4b:c4:6d:21:1a:
         03:e4:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:38:03 2025 by rpki-client