Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File:                     DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier:          7KZOLX3wRpKUbXX6jHvAOuywS216D4pO9+ffMuBwGOQ=
Subject key identifier:   5D:3B:C4:07:66:F7:59:A0:BE:0A:77:0F:4A:D4:89:64:FF:0F:C7:7C
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer:       /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial:       2442354FCA03590479289E2A68E3314638B63FF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number:          023F
Signing time:             Mon 09 Jun 2025 15:15:35 +0000
Manifest this update:     Mon 09 Jun 2025 15:10:35 +0000
Manifest next update:     Tue 10 Jun 2025 18:36:35 +0000
Files and hashes:         1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: D5Kh1u0vUQX58zC8K3kTptsTZXCjTHtVrMtIC/ORziw=)
                          2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: Col+LRGc/1lk9nvkTe3TytJA4agsIFfCWd9IIiNQBxI=)
                          3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: A5BV4azCGwFtsNztbiyd2cRMfh14S6ywQpQh7R8RyoA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
                          rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:35:4f:ca:03:59:04:79:28:9e:2a:68:e3:31:46:38:b6:3f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Validity
            Not Before: Jun  9 15:10:35 2025 GMT
            Not After : Jun 10 18:36:35 2025 GMT
        Subject: CN=5D3BC40766F759A0BE0A770F4AD48964FF0FC77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:24:3f:09:bb:99:ff:bd:51:46:1d:52:00:
                    80:b2:8d:ad:99:cb:62:07:16:09:cf:44:e3:a5:19:
                    54:53:7a:d1:56:19:ba:fd:41:32:db:b4:7b:a2:3d:
                    30:c9:da:43:2c:86:9b:74:c3:63:8d:48:41:96:52:
                    92:8e:c0:43:8f:10:85:0c:b8:d1:cc:80:98:d6:86:
                    b9:a2:f8:65:9b:ef:38:33:fb:99:28:7f:fd:83:7e:
                    20:60:86:a3:7c:3c:ad:eb:21:94:24:88:14:cb:bf:
                    c5:e3:ff:c4:47:9d:a9:bb:ed:98:f3:e3:76:d8:1f:
                    b1:27:57:fb:8f:48:c4:00:e4:17:6c:9d:bd:5b:91:
                    25:5b:33:ae:ea:d7:d9:33:59:1b:71:0a:80:2c:86:
                    09:de:61:2d:b5:9b:5b:74:bd:90:fb:36:a4:4e:ab:
                    f8:bc:df:f8:f1:ba:e0:d0:4d:06:55:9d:65:53:82:
                    11:4d:83:70:42:46:d9:7a:4f:37:8d:f9:35:3c:86:
                    fb:87:71:9d:35:32:43:9c:df:72:1e:dd:eb:e2:9b:
                    e4:ed:50:7e:78:f3:01:2e:dd:19:d7:0b:91:6d:c8:
                    05:9b:26:56:55:ac:35:7d:dd:f6:51:27:19:6b:46:
                    92:d9:87:99:f4:d3:34:98:17:c2:45:16:f6:07:ef:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3B:C4:07:66:F7:59:A0:BE:0A:77:0F:4A:D4:89:64:FF:0F:C7:7C
            X509v3 Authority Key Identifier:
                keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ee:5f:34:18:1b:3a:c8:8f:35:07:21:2e:01:08:06:91:07:
         4a:91:6f:58:ce:83:2f:cb:98:66:ec:36:42:95:3a:5a:22:12:
         f4:f2:66:75:0e:24:68:d8:3d:7f:c1:36:8d:d6:b6:f5:cd:78:
         d3:f4:8e:d9:74:5c:ae:90:f0:79:c6:43:bc:0f:82:a0:40:8e:
         98:83:0b:a3:2b:d0:a2:07:68:e0:6e:36:18:ad:a2:0f:e2:41:
         07:82:6b:2b:61:d7:e3:58:ad:f1:12:65:d7:b8:7d:1e:07:80:
         d5:e8:b8:3e:e3:46:6e:ee:df:45:4a:30:1f:49:b7:fd:f7:32:
         8d:3b:4e:0f:ec:45:63:7e:f8:20:25:63:1c:7d:6a:60:68:ba:
         81:2e:51:3a:bd:5a:3f:d7:69:4a:6d:f8:00:f9:03:3a:d1:f1:
         7a:b6:25:61:53:1e:f3:00:76:15:bf:66:89:de:92:97:c5:ba:
         84:c2:db:94:01:84:ec:37:99:c5:f1:a2:e9:c4:3c:1b:81:4e:
         0e:2f:b2:49:4e:e2:44:7e:19:6f:8f:76:aa:d8:71:b6:16:bb:
         66:4a:bc:88:c8:25:a1:0d:16:2a:cc:92:47:8a:87:dd:de:3e:
         92:52:07:1c:28:72:09:93:d5:03:f7:9b:6a:33:88:4e:97:8b:
         cd:52:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:46:02 2025 by rpki-client