Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
File:                     44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft (raw, json)
Hash identifier:          mF9qkZ2sCW3Yu+Ebz7jVBb7z9S0yMaJ9j5VXKdPWXfY=
Subject key identifier:   6C:B9:B7:C9:A6:CD:B1:82:F1:BE:C6:F7:27:E6:C1:A8:10:82:B4:E2
Authority key identifier: 44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7
Certificate issuer:       /CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
Certificate serial:       579E6A6CA570BB8422DFD3933DAEAFE3350CD24E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
Manifest number:          02C3
Signing time:             Thu 18 Sep 2025 02:22:41 +0000
Manifest this update:     Thu 18 Sep 2025 02:17:41 +0000
Manifest next update:     Fri 19 Sep 2025 05:20:41 +0000
Files and hashes:         1: 44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl (hash: jlZZ9QGWH4U+fa2A+AawNFxIFLgA8WOhYzeCP3Qiliw=)
                          2: 34352e3232392e3132342e302f32322d3332203d3e203631393337.roa (hash: 2rxfJ7+FEMjemnONWVms/kp9Wp3lgHCKqM3UTG9Pwno=)
                          3: 3230302e39352e3139322e302f31392d3332203d3e203631393337.roa (hash: QJOrIYXntus3WzdFzz7d6OGEdi6tiqkaXDszdQeTz80=)
                          4: 3136382e3139352e3231302e302f32342d3332203d3e203631393337.roa (hash: i6Fejjei2se7yKdc1VU2zHg5G1USJZnef/3Kn1lw0uY=)
                          5: 323830343a313838343a3a2f33322d313238203d3e203631393337.roa (hash: S4Otg2pIdF//eFxCXr/lJi7AbpbqOHza0u9yERabhNY=)
                          6: 3138392e34352e3136302e302f32302d3332203d3e203631393337.roa (hash: XrwYDxUn3M0Y/8ojzZ4eu7asJQPWZ5rRhp75CBUKXjM=)
                          7: 34352e37302e3130342e302f32322d3332203d3e203631393337.roa (hash: vstgdu7FUE3NyXL2ANq0d0iGHPYnYvnDgG8+RCMUkXA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl
                          rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9e:6a:6c:a5:70:bb:84:22:df:d3:93:3d:ae:af:e3:35:0c:d2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D2CB646F48BA214AA28A2DB894C4AB75020CE7
        Validity
            Not Before: Sep 18 02:17:41 2025 GMT
            Not After : Sep 19 05:20:41 2025 GMT
        Subject: CN=6CB9B7C9A6CDB182F1BEC6F727E6C1A81082B4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:bd:aa:23:ec:e1:73:99:ea:9b:f1:36:a7:
                    7b:86:7e:04:02:e1:8d:b8:8d:15:05:98:0c:d8:67:
                    69:14:52:4e:52:e9:6b:d7:46:40:fb:a4:48:03:18:
                    2d:e8:d8:41:87:c4:46:46:ea:38:db:c5:48:7d:a5:
                    4d:c7:87:a1:49:c4:92:3b:cf:8b:c8:58:da:02:31:
                    25:ec:88:32:7c:44:5c:09:af:a6:b3:9e:8e:af:88:
                    43:33:0c:ae:1b:6d:58:dc:de:0b:b1:cd:d6:31:5d:
                    63:b6:7a:3a:a3:9f:15:3c:4e:69:c3:fb:06:c3:89:
                    4b:94:1a:66:67:c1:59:58:86:06:a5:4e:c8:73:6a:
                    05:ce:c8:9a:88:f7:70:96:4d:13:1c:17:44:f9:19:
                    18:fc:d9:38:8f:73:91:43:1d:fd:c8:6b:5a:d0:ff:
                    48:10:53:7c:1c:0c:24:24:ea:f8:40:43:2c:a9:3d:
                    fb:94:f2:53:e3:6b:c6:5d:d5:1f:f3:05:b9:63:bd:
                    6f:5c:b2:34:0b:ab:88:9e:0f:1f:6c:19:5c:d4:23:
                    03:c0:4f:32:59:77:b6:06:64:fd:e7:22:e2:81:ef:
                    d9:f7:ad:bd:2c:3d:fc:21:95:f3:9b:7e:aa:c9:e1:
                    d7:18:e2:4d:95:92:3e:66:b3:b0:c8:74:35:44:68:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B9:B7:C9:A6:CD:B1:82:F1:BE:C6:F7:27:E6:C1:A8:10:82:B4:E2
            X509v3 Authority Key Identifier:
                keyid:44:D2:CB:64:6F:48:BA:21:4A:A2:8A:2D:B8:94:C4:AB:75:02:0C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9erfwLYKrqkPEiq1iVh4TE3yeWSCgWo15vbe6zEw4VyZ/1/44D2CB646F48BA214AA28A2DB894C4AB75020CE7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:56:9e:01:ea:55:e4:0e:9e:fd:04:18:d5:23:4f:d1:54:
         48:a8:ec:8c:4d:b8:2c:10:1b:4f:eb:4f:f8:5e:5d:06:0a:97:
         5c:0a:d4:08:a8:20:96:a7:ed:8d:b3:f6:36:8b:47:0f:c4:0f:
         59:9b:61:43:e4:53:2d:ef:67:98:8c:c1:39:1f:6d:2b:6e:40:
         6c:80:ac:fc:ca:16:6b:e9:17:c6:08:0c:d0:6e:60:00:6b:5e:
         12:50:9c:b1:11:69:f7:d4:a9:3f:df:57:66:ea:91:0b:30:a5:
         ec:07:56:2b:dc:d9:c1:c4:70:2d:52:81:60:df:bd:ad:5c:37:
         6c:49:44:c7:30:f9:5f:0f:68:e2:21:5b:c0:83:cd:ac:36:db:
         21:4e:67:64:54:fc:a7:92:d5:a9:99:eb:8b:87:b6:5a:ce:52:
         53:5f:c6:f5:61:46:c8:77:fb:45:ca:ea:f8:cc:15:f6:46:3c:
         ff:6d:fc:28:3f:a0:a7:49:d5:80:25:9a:f8:2f:59:71:9f:c6:
         a7:16:e1:ba:ce:f3:36:26:35:7c:ac:44:26:0a:2a:d4:a8:14:
         51:ef:0d:03:30:ac:e3:b7:98:bb:53:d7:eb:c7:fa:76:fb:a3:
         33:2c:48:ec:ce:7e:be:2b:68:91:b3:19:df:95:52:b0:bd:93:
         3a:55:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:02:25 2025 by rpki-client