Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft
File:                     F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft (raw, json)
Hash identifier:          fMGkns77ZAM7YJstPmDcUxkXZYep8L0TmpnMfJUdY9A=
Subject key identifier:   D1:80:72:8F:91:FD:6E:3E:A4:DC:80:6D:00:7B:B6:75:3C:A0:C3:6F
Authority key identifier: F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76
Certificate issuer:       /CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76
Certificate serial:       06D0E41F59EB91B49301C18F8CA0E77DBEB62FD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft
Manifest number:          27
Signing time:             Tue 03 Jun 2025 20:23:40 +0000
Manifest this update:     Tue 03 Jun 2025 20:18:40 +0000
Manifest next update:     Wed 04 Jun 2025 22:36:40 +0000
Files and hashes:         1: 3137302e38322e38382e302f32322d3332203d3e203631373631.roa (hash: DeV3ghzClDhNWc5fI48Fh+wmoNn3hxAURf0+NWEs6+0=)
                          2: 3230312e3135382e32302e302f32322d3332203d3e203631373631.roa (hash: D+BmbotEMRuhgcf/8juLcrwkiiy0a0xn/fvzywyRNaA=)
                          3: F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl (hash: ydcGSMHZqvgJFfhgd3X/fzqtaNzqoz250uSkxo7fWbc=)
                          4: 323830343a313865343a3a2f33322d313238203d3e203631373631.roa (hash: lMKm2AmmLA2KyhRByU7NQAZHyx+VM/IIAvW3uO44Iqo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl
                          rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d0:e4:1f:59:eb:91:b4:93:01:c1:8f:8c:a0:e7:7d:be:b6:2f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76
        Validity
            Not Before: Jun  3 20:18:40 2025 GMT
            Not After : Jun  4 22:36:40 2025 GMT
        Subject: CN=D180728F91FD6E3EA4DC806D007BB6753CA0C36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:d5:c7:06:83:31:b8:31:69:df:ae:78:93:
                    9c:d9:56:f3:ca:78:cb:2b:d0:fa:75:ae:82:6b:ac:
                    d6:6c:fb:07:1b:24:1f:88:ef:55:66:a2:79:da:a0:
                    bf:6b:01:14:68:51:e3:c1:e5:aa:72:3f:56:d1:25:
                    a7:73:18:65:01:4b:14:fe:37:14:db:e0:b9:a1:a7:
                    94:6e:b8:1a:8a:7a:fd:66:ec:fe:0c:6a:d7:51:54:
                    9d:bc:16:8e:bf:5c:8d:05:1a:9f:74:aa:dc:96:59:
                    a4:9c:fb:06:09:a5:6b:a4:06:5d:82:f4:14:7f:9d:
                    3f:ba:6b:cc:20:01:2e:ca:5c:20:8b:87:16:c5:54:
                    f5:f9:14:3e:4e:b9:d2:13:79:a1:50:1c:4f:61:4b:
                    52:ce:f0:57:bb:ac:5b:54:fc:e2:fc:1b:7e:9d:f2:
                    b1:14:e8:c3:47:3f:27:ef:f2:af:33:aa:ef:de:1d:
                    b4:82:f3:35:8f:e5:58:d7:9f:98:86:b4:e2:37:45:
                    53:0b:62:58:7d:d6:44:f3:62:9e:cd:8a:8c:f1:4a:
                    35:82:e7:d7:f8:f3:d6:37:ab:39:d2:9e:19:ac:17:
                    21:ba:84:85:af:c8:32:bf:09:f7:c9:2e:23:ee:7c:
                    a0:6e:d6:5c:8b:e0:36:22:09:6c:f2:d2:13:77:3f:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:80:72:8F:91:FD:6E:3E:A4:DC:80:6D:00:7B:B6:75:3C:A0:C3:6F
            X509v3 Authority Key Identifier:
                keyid:F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:c1:2b:0b:75:6d:02:ed:9d:22:c9:f0:56:20:6c:58:ea:
         7b:69:dc:f1:6e:de:15:87:f8:68:40:d7:cc:11:4d:d9:ea:78:
         9e:f2:72:3f:20:67:f4:58:36:e2:27:23:86:99:35:49:74:b8:
         67:68:51:1a:cb:21:51:6a:06:f7:d1:be:cb:44:89:fe:9c:5f:
         63:8f:e5:59:b7:3a:d8:28:1e:78:49:14:52:43:d6:d4:7f:0a:
         da:ee:db:3d:94:41:e3:6e:27:6a:86:91:07:44:5e:d6:61:d9:
         43:9a:9b:a6:58:c9:e6:d2:4d:2e:6b:33:f0:0a:ad:8d:fc:83:
         3c:bb:25:2b:5d:5d:c2:89:ad:89:3a:de:10:a3:07:70:ad:d3:
         12:cb:7f:da:29:df:99:77:4d:de:33:aa:0f:8a:de:ac:bb:02:
         4f:46:ac:79:f1:08:1c:e2:e2:b5:8b:b6:12:3d:57:da:87:71:
         c5:02:9c:02:85:5c:bd:1a:c0:41:d7:f9:94:5e:cb:53:d1:56:
         41:e0:13:e9:b0:4a:bf:7b:aa:e6:4a:8e:99:0e:d2:e6:92:04:
         8b:85:cb:d1:32:ef:db:e9:6b:a4:e0:3e:34:5a:60:f8:7d:bd:
         f4:65:14:d5:28:30:b7:db:01:67:f8:f4:40:e0:f8:44:6e:0b:
         72:99:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:14:17 2025 by rpki-client