Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          Zn5KG3EbNDNhep4VtlVXT3DPDHfAhAdChFVIrs3q/mY=
Subject key identifier:   DE:40:1D:AB:D9:90:12:88:E2:53:52:0D:BE:84:80:B4:49:2B:50:C7
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       4F53537429692B4219324CE6BDC1D257ED60A562
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          0138
Signing time:             Wed 17 Sep 2025 22:18:13 +0000
Manifest this update:     Wed 17 Sep 2025 22:13:13 +0000
Manifest next update:     Fri 19 Sep 2025 01:36:13 +0000
Files and hashes:         1: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
                          2: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)
                          3: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          4: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: 8luiA/mI5bIsyNPh7U5BQ3h//iTuX2nBGa9zzzEQkIg=)
                          5: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
                          6: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          7: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:53:53:74:29:69:2b:42:19:32:4c:e6:bd:c1:d2:57:ed:60:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Sep 17 22:13:13 2025 GMT
            Not After : Sep 19 01:36:13 2025 GMT
        Subject: CN=DE401DABD9901288E253520DBE8480B4492B50C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:99:0f:0e:2f:5a:c6:29:d2:9f:9f:de:ce:
                    fc:13:33:9f:c9:c5:49:a3:a0:76:f8:69:0b:cc:f6:
                    18:18:85:eb:9f:12:ab:7e:38:78:84:6d:59:56:e4:
                    70:16:59:0c:8e:b2:19:27:24:3e:eb:50:10:93:c7:
                    e2:43:04:32:1b:ec:9a:14:82:af:ad:f4:bd:17:e7:
                    98:45:8d:f1:9a:a0:bc:f1:62:ef:c8:a3:ff:38:d7:
                    2d:2c:c6:4a:e9:39:55:ec:f6:ce:3c:0d:a1:ff:2e:
                    1d:e0:55:a7:92:33:c2:86:75:9f:73:1b:91:82:97:
                    e4:af:4f:e3:82:6f:ad:ce:13:63:ce:74:a2:08:a3:
                    7f:44:09:76:d0:11:cc:80:f9:82:08:92:47:50:33:
                    bf:97:46:73:2e:98:b4:18:2b:67:bc:f4:ac:c0:60:
                    52:ec:ad:62:9c:14:44:50:a5:4c:12:2a:d7:37:8c:
                    7b:99:5c:f5:32:cd:fb:6e:be:57:01:d3:fa:9d:a2:
                    b2:69:f5:0d:a6:62:44:19:a1:78:ff:30:50:80:a7:
                    ea:b4:22:b2:49:2c:b3:c5:8c:09:b0:5a:1d:7a:16:
                    1d:f4:38:4f:bd:9f:0e:c8:a3:a5:d3:da:c8:2a:08:
                    13:cc:2f:23:a0:96:7c:26:5e:6e:d1:84:13:ad:cb:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:1D:AB:D9:90:12:88:E2:53:52:0D:BE:84:80:B4:49:2B:50:C7
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:73:bf:49:7d:5d:29:8d:01:99:e9:0a:25:1c:ef:a8:1a:
         9f:e9:bf:6e:c9:d3:b2:6b:11:51:1a:17:1c:fe:b6:62:5c:e5:
         b7:2e:be:53:90:da:8a:ad:25:da:ca:87:13:ce:27:72:5a:20:
         93:19:f5:ca:e9:8f:d2:a9:3c:e4:7c:fe:a3:06:ae:c5:6a:12:
         d0:2d:bd:02:d2:0d:5d:68:d9:ac:dd:2d:ed:1a:64:6d:9f:8d:
         2d:f7:ac:22:ba:02:94:5d:eb:fa:b3:70:eb:f3:c7:4b:42:37:
         81:26:b6:b2:40:5d:42:6b:55:b7:95:2c:56:ad:48:8c:5d:05:
         75:e1:31:2f:3e:a0:85:d7:6c:47:e0:d4:e4:b6:a4:e9:7e:5e:
         9e:39:46:e2:7b:3e:60:d5:ec:17:c6:cc:b4:e6:59:a4:6b:45:
         9a:8b:1a:12:27:0f:10:e5:e1:bc:13:76:c8:ea:d3:ac:3c:fb:
         ec:51:2c:32:43:2f:67:23:58:87:29:a0:8c:73:c2:1b:79:b5:
         39:2a:48:88:b7:0b:6a:2e:ff:89:fc:a8:df:12:a9:fe:8a:4d:
         7b:59:94:fd:a4:cf:9b:a1:7c:ae:57:21:82:b6:7d:60:cd:f9:
         3e:72:28:67:6f:8d:97:e4:18:cb:61:2d:03:f5:28:8e:5c:55:
         5d:df:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:39:40 2025 by rpki-client