Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
File:                     1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft (raw, json)
Hash identifier:          RbzJ0VwmaacolZA1Dxd5o3ir1G7aVRe2cPvObmPWipo=
Subject key identifier:   A8:11:1E:DA:A3:79:E6:DF:27:76:A5:6C:D3:98:53:A4:D1:81:23:68
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       44BA97D17F704EFB3B2E646F71394FAEBD76CC4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
Manifest number:          BD
Signing time:             Thu 18 Sep 2025 00:55:11 +0000
Manifest this update:     Thu 18 Sep 2025 00:50:11 +0000
Manifest next update:     Fri 19 Sep 2025 02:17:11 +0000
Files and hashes:         1: 323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (hash: aD/1W5vcN5sKlP6Ppoy6UUzi65TpJP9G+BK78fxP0pU=)
                          2: 3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (hash: kWYkqeJL8ZF4RYR3DzlyfYsKf6cO0kjoeXavqNftg4k=)
                          3: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (hash: wcJMeWoanvy2wFJbeaUFCcXJxjN3pZlhN5sTDCvEj28=)
                          4: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl (hash: RSuyPtq1Vo7WkM9hjIA82vW68KTPPoLCphVnRNWvHts=)
                          5: 323830343a326231303a3a2f33392d3339203d3e203532393136.roa (hash: nPL+xnXcYrg1ykMYeggphY3KOs7MUTc6/PjBJTXzFdU=)
                          6: 323830343a326231303a3a2f33382d3338203d3e203532393136.roa (hash: kJBP1vS+6cQ6tyY0U3zNjsBies5UKlVnL5KfYbA4d1A=)
                          7: 3137372e31302e32302e302f32322d3232203d3e203532393136.roa (hash: smy51vn5xY+hD44RXEQH1GN3yihMewD/SsPH2SaCpMM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ba:97:d1:7f:70:4e:fb:3b:2e:64:6f:71:39:4f:ae:bd:76:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Sep 18 00:50:11 2025 GMT
            Not After : Sep 19 02:17:11 2025 GMT
        Subject: CN=A8111EDAA379E6DF2776A56CD39853A4D1812368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:24:7b:a2:df:3b:4e:ae:8a:bf:97:6f:e6:
                    ec:bb:65:39:f9:24:61:4c:c7:4a:ad:49:d9:42:0e:
                    c4:91:d4:b3:fe:4f:61:bc:53:ea:8e:89:50:f7:1e:
                    9c:16:d7:2e:59:4a:9c:41:fa:e4:a3:fd:79:4f:f0:
                    c2:7b:b2:77:d4:67:ad:2c:03:c6:97:d9:98:4b:0a:
                    8d:b3:2c:81:62:cb:83:0f:63:fe:49:5f:7e:c9:05:
                    2b:e4:01:ab:e0:20:48:db:bb:9b:3e:67:a2:63:93:
                    07:32:55:3b:a3:bc:91:0e:08:fb:ce:3d:cb:53:34:
                    bd:27:52:02:39:60:d4:79:c5:9c:7d:88:b8:8c:16:
                    54:25:c1:7e:93:bb:29:59:23:b8:65:b2:bb:31:1c:
                    cf:1a:73:d2:8d:d6:72:94:84:73:9c:a4:a9:56:6e:
                    f1:66:0d:c9:6f:c9:11:76:b6:17:8c:24:3b:fa:2e:
                    3b:74:a2:73:93:0e:67:bc:79:e4:74:8a:25:83:6c:
                    42:55:4c:8b:2d:3e:9b:92:ca:f9:ea:d9:dc:26:1b:
                    9c:38:a6:24:c5:be:12:35:1c:55:8e:14:bb:90:f6:
                    7b:83:10:36:00:d9:e3:96:47:e7:01:4e:12:f2:48:
                    45:15:29:a5:5f:8f:52:55:60:6f:69:73:b6:aa:e1:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:11:1E:DA:A3:79:E6:DF:27:76:A5:6C:D3:98:53:A4:D1:81:23:68
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:4d:ba:d4:60:3e:f0:33:85:1c:9c:7b:6f:93:f8:55:59:
         e8:be:5b:e1:d1:8e:c0:09:06:63:cb:1b:fb:c1:96:7d:80:20:
         87:4c:78:49:1a:64:e3:53:3f:5c:b3:20:ae:57:44:8c:a7:27:
         43:bb:0a:a6:95:84:1c:dd:56:dd:bd:f8:6d:f6:46:ac:f9:04:
         76:7f:fc:7d:dd:5c:be:df:5e:95:7d:ad:f8:06:3c:f9:a1:84:
         43:b4:56:62:c0:20:21:ca:d0:6e:cf:c1:93:9e:e6:07:12:bc:
         d9:7a:da:02:a5:4d:70:02:99:06:6c:49:eb:fc:e7:ef:58:34:
         7e:3c:00:d0:88:a7:c1:f2:df:97:41:4a:ae:b7:b9:ae:fb:24:
         4e:61:f0:ce:8e:93:57:39:8f:92:01:7c:b8:db:44:fa:1d:cf:
         5a:68:c7:55:29:91:66:ef:15:4c:43:93:28:53:e2:6b:d4:64:
         ac:3c:42:8b:45:32:61:2d:47:31:3f:c9:24:61:99:fb:3e:fe:
         0e:6b:92:05:31:46:d7:74:10:ee:d1:c6:d0:e5:cf:97:a8:5a:
         e4:e2:35:34:ba:23:bc:ce:76:67:b7:1d:ae:e2:23:a1:27:3f:
         2d:39:8c:c8:a5:4b:59:d3:1a:ee:fe:20:cc:4c:5c:33:da:e4:
         9d:fc:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:17:15 2025 by rpki-client