Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
File:                     2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft (raw, json)
Hash identifier:          hZwOlhjzgOUftTjtbyTIGqnhp6Tt0fCwzhrcKUwWV4U=
Subject key identifier:   30:5B:0D:AA:CA:16:57:49:F6:4E:FC:3D:D5:55:5F:FB:BA:FF:43:E7
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Certificate issuer:       /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial:       6B8A0632A650B9420CF2DD37CE1025C881ECBF99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
Manifest number:          023D
Signing time:             Wed 20 Aug 2025 11:55:03 +0000
Manifest this update:     Wed 20 Aug 2025 11:50:03 +0000
Manifest next update:     Thu 21 Aug 2025 12:19:03 +0000
Files and hashes:         1: 3137372e37322e38382e302f32312d3332203d3e203532383232.roa (hash: l1bCBW5xTIWmnRtwFALqoufSI4NmF7ZdUExV4DVUkHY=)
                          2: 323830343a6262633a3a2f33322d313238203d3e203532383232.roa (hash: NiTHJW5Y+34NTE8ZT454pnL1Mlzpd+vYci8H9lwnai8=)
                          3: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl (hash: nLKy3p7kd3oOSXDyIwlpNXIa8vBP5Zjj2rqyyIzHLz0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
                          rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8a:06:32:a6:50:b9:42:0c:f2:dd:37:ce:10:25:c8:81:ec:bf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
        Validity
            Not Before: Aug 20 11:50:03 2025 GMT
            Not After : Aug 21 12:19:03 2025 GMT
        Subject: CN=305B0DAACA165749F64EFC3DD5555FFBBAFF43E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:2a:48:ab:1a:aa:cb:d6:89:41:8b:71:0b:
                    02:e1:3e:01:60:f9:19:2c:0b:5d:d9:e9:14:83:8e:
                    ea:58:5e:57:ad:c8:5e:0d:82:27:1d:47:fc:d1:77:
                    d1:41:d8:e8:05:48:ea:c0:b1:bc:00:f9:59:2c:84:
                    a8:1e:89:66:d1:65:22:12:18:90:13:ce:b6:1d:f4:
                    3c:9a:82:59:e3:66:b3:53:aa:7d:86:27:98:94:e4:
                    2f:e7:5a:b5:01:da:a1:3a:8f:0f:43:09:f1:da:08:
                    eb:e2:d8:4e:d2:32:6c:7b:d7:be:8f:4a:6c:2a:a1:
                    17:9d:17:ed:0b:2c:0f:1c:a0:58:46:07:97:40:2d:
                    f6:4d:97:d9:f7:33:33:8f:77:f6:37:aa:db:e4:eb:
                    82:e8:73:24:71:07:12:58:9f:2c:30:c7:d6:86:ea:
                    a0:78:4e:5d:a2:2f:db:cd:a7:dd:4e:02:06:ba:65:
                    22:9e:f8:cf:79:ab:6f:20:fd:45:40:9c:14:eb:d4:
                    e9:39:4b:26:de:9f:0b:03:7b:47:57:6b:28:5d:bc:
                    be:a2:05:00:0a:f5:cc:94:72:45:50:d1:a3:72:3e:
                    2e:6b:14:e4:e9:04:61:d0:06:0e:ed:d8:d9:14:cd:
                    7f:70:49:02:28:a6:45:54:78:35:57:bb:72:d9:05:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:0D:AA:CA:16:57:49:F6:4E:FC:3D:D5:55:5F:FB:BA:FF:43:E7
            X509v3 Authority Key Identifier:
                keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:ee:2b:22:90:54:d4:8b:8a:5b:df:83:6e:bd:d9:b5:97:
         89:1c:2b:8f:1b:c7:3c:44:7f:56:4c:be:0f:1d:0c:b1:e6:ae:
         f2:f8:47:ec:6f:79:e9:85:15:f0:50:f2:fb:d9:59:17:dd:a3:
         f3:cf:d7:6b:16:26:4d:b0:86:ae:5a:92:e9:bc:f3:88:38:e0:
         2a:90:8d:dd:b8:37:16:3a:59:a5:8f:62:51:1c:d0:67:33:0b:
         74:bc:cd:56:f8:d9:da:be:ff:78:c3:2c:1c:be:4e:2f:4f:02:
         e2:06:fe:dc:29:dd:aa:f2:35:c0:0c:81:60:bf:dc:7e:f0:9c:
         e9:d5:9c:cb:7b:b8:e1:b3:81:64:03:c4:05:a3:13:7a:fc:bf:
         51:62:6f:43:ac:22:7c:e2:8b:68:12:b3:a6:2a:7a:03:05:46:
         fd:22:74:3b:17:c6:60:60:82:12:5c:df:af:72:c1:4c:0b:0e:
         2c:fd:60:f4:1b:72:2b:bd:6e:28:cd:60:ef:a5:11:ca:50:fe:
         f4:5d:4b:a9:d8:2a:f6:b9:12:e7:c9:67:45:07:1b:8b:0c:99:
         df:ad:a1:9d:a1:87:31:75:14:0c:2b:c4:ef:8e:a4:10:75:75:
         0d:ee:7c:ff:af:da:d9:34:d9:9b:8b:7b:73:7a:11:5a:11:9c:
         92:43:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:24:08 2025 by rpki-client