Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
File:                     4D3D5BA9F9B5356D2A4244549680670908498017.mft (raw, json)
Hash identifier:          Uie8u6BWB4BZVdOEG7cMHgo6MsB0l+A0j2uDJrsX+mo=
Subject key identifier:   09:04:CA:9C:5B:7C:66:6F:E7:4E:2E:CB:1A:45:0C:5F:C2:0D:1E:4C
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       38B0D26E8751D1B061A407A47E84E112A9DAA676
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
Manifest number:          02A0
Signing time:             Wed 20 Aug 2025 04:48:20 +0000
Manifest this update:     Wed 20 Aug 2025 04:43:20 +0000
Manifest next update:     Thu 21 Aug 2025 05:33:20 +0000
Files and hashes:         1: 3137372e32322e3234302e302f32312d3234203d3e203238323634.roa (hash: TULLUDNFvvV2Xk3PWTiUvG4teCxOcZowNTO25kPDUv8=)
                          2: 323830343a3133303a323030313a3a2f34382d3438203d3e203238323634.roa (hash: Hfa6U8M8jSsMyiYGzhB7RhX5GsLqQd1pfDBpM95/H3g=)
                          3: 323830343a3133303a323030303a3a2f34382d3438203d3e203238323634.roa (hash: xXf529Un2lnZ9Z9GV0BKsrETfJrxC1NhSyhR2EhT9nI=)
                          4: 323830343a3133303a3a2f33322d3333203d3e203238323634.roa (hash: O92aIYrPcEEs4unlKSaHQLbmCUnblrLJBS4+JPp0Q4g=)
                          5: 4D3D5BA9F9B5356D2A4244549680670908498017.crl (hash: f/yUv7xKmor0pFpbyxW2BRnSLarpeKB+ney8C/he+Ys=)
                          6: 3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (hash: TOTGiCBbBori5bE3zTGuc8j3dr7AbTF91Cy6fT3UPQM=)
                          7: 3137392e3132342e302e302f32312d3234203d3e203238323634.roa (hash: A4YZyAwxOL2d491yJX67JwHS3VZXIuqeSdGm9jvZ1GM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 05:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:d2:6e:87:51:d1:b0:61:a4:07:a4:7e:84:e1:12:a9:da:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Aug 20 04:43:20 2025 GMT
            Not After : Aug 21 05:33:20 2025 GMT
        Subject: CN=0904CA9C5B7C666FE74E2ECB1A450C5FC20D1E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:85:63:9f:0e:00:5c:fe:e7:10:2a:67:d3:
                    0b:43:ae:c3:34:19:a5:a0:1d:52:4d:3d:2c:5f:3b:
                    a7:7f:66:e8:ca:0c:80:29:8c:dd:f6:97:e6:4f:66:
                    ca:8e:84:61:57:1f:2b:65:3d:ca:a5:c9:22:bd:b8:
                    77:ac:68:2f:d6:39:6f:b0:db:21:7e:9b:57:3f:35:
                    9d:e7:40:b2:82:73:a2:49:be:d5:71:62:a0:29:98:
                    30:13:02:3a:b4:b8:f3:af:ab:96:48:45:43:4e:37:
                    f7:79:0c:1d:f2:28:6b:92:c4:17:2b:f1:89:26:74:
                    21:a9:aa:36:5d:27:a8:87:16:e1:b9:e1:9a:b7:b1:
                    53:7f:0c:c9:00:c8:28:9c:de:83:e4:67:81:5c:14:
                    7b:bd:e0:2a:8a:d9:a2:a5:98:86:7a:bb:be:03:54:
                    c4:d8:79:2d:0d:ff:8c:a2:48:82:db:be:b3:c6:d1:
                    f9:fc:61:63:a9:8b:54:63:92:0d:b4:88:be:18:e5:
                    f4:1e:41:5e:fd:4d:72:ae:e9:45:b1:47:16:3b:7f:
                    7f:68:24:0a:8b:62:41:a6:5f:8c:af:94:57:4c:29:
                    ce:db:aa:52:16:00:5f:eb:db:13:3d:2a:33:49:9b:
                    aa:68:32:bc:2d:c9:8c:c2:67:00:2e:a9:49:49:11:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:04:CA:9C:5B:7C:66:6F:E7:4E:2E:CB:1A:45:0C:5F:C2:0D:1E:4C
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:d1:37:3c:4b:f1:7a:ee:06:37:99:51:4e:09:3f:0e:11:
         2c:c9:8e:e8:96:11:c4:0a:56:8a:56:23:9e:1f:d4:64:2b:c9:
         44:db:a9:53:81:64:b5:53:73:89:01:d0:82:0a:4e:dc:82:3d:
         a1:fa:48:59:f3:bb:a7:29:f1:0e:f8:d9:c9:9c:f8:6d:e4:ca:
         01:8c:a6:ac:81:f7:a0:53:93:23:73:83:d5:bf:e0:1d:86:95:
         bd:91:26:fe:98:c2:8a:be:cc:cb:19:10:11:98:e5:51:a9:cd:
         8e:e8:2e:0d:2d:17:e7:ce:06:f9:9f:32:ca:4b:ee:7c:af:40:
         6d:ba:95:aa:5d:fd:fd:4a:c3:c1:67:7e:80:91:8d:ba:0b:71:
         e9:7b:e3:68:62:b6:70:bf:e6:6f:47:53:f1:20:f9:9b:77:f0:
         e1:ff:94:a1:82:da:c7:03:c8:53:df:f2:c6:ec:e0:b2:ef:78:
         31:81:66:90:ca:6c:22:40:3f:df:4b:b9:d8:9c:a7:69:a5:db:
         c0:f8:7a:8f:ba:a2:64:4d:6a:1e:d9:4c:27:f8:6b:e5:0f:2b:
         56:3b:91:77:e4:fe:fe:4b:b2:af:ba:c4:bf:e6:4b:70:85:92:
         e6:17:c8:bd:3a:52:9b:32:3c:f0:4b:c7:44:4e:13:d4:a7:53:
         9e:6b:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:29:13 2025 by rpki-client