Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.mft (raw, json)
Hash identifier:          mqx0Bet7uieoM5P8lrBy2v/DSNwvweVIL+KaEEKoNdg=
Subject key identifier:   DD:C1:D4:7B:70:E9:6E:18:3E:19:FA:E0:7B:3F:1A:8E:53:E4:D6:16
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       2E560CAC0037E42411330A80B5642F10092CB8B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
Manifest number:          0286
Signing time:             Mon 28 Jul 2025 20:19:22 +0000
Manifest this update:     Mon 28 Jul 2025 20:14:22 +0000
Manifest next update:     Wed 30 Jul 2025 00:01:22 +0000
Files and hashes:         1: 3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (hash: TWp4o6hfgsqCNsroy8xQzqXPkmDTRyp+OiTAo+o6fRQ=)
                          2: 3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (hash: 80/5uHHr5e5A2Mrkjc4ckTwMz5jjtIE+JZWY+P7uRnc=)
                          3: 4329045FF5A88F6B7949093B6FE2C5D28A774010.crl (hash: nrAWLa7CwQBroRn4egHwdy+6A9HKjARLzVqm670hXd0=)
                          4: 3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (hash: QgxHMDYpUG5U2n7Tqtu7q8sPvNLB18Q/IiS12jWPoO0=)
                          5: 323830343a313736633a3a2f33322d313238203d3e20323633303938.roa (hash: 6urLe1qWg2v8eMe2oKgYt0ZAQWt9DYnjfH3T405VXdY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 00:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:56:0c:ac:00:37:e4:24:11:33:0a:80:b5:64:2f:10:09:2c:b8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Jul 28 20:14:22 2025 GMT
            Not After : Jul 30 00:01:22 2025 GMT
        Subject: CN=DDC1D47B70E96E183E19FAE07B3F1A8E53E4D616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:1f:ab:3f:79:71:ee:3f:d1:9d:bc:e7:05:
                    ba:aa:2f:a0:cd:5f:b7:53:61:08:32:5d:5e:94:9f:
                    f3:4c:c5:e6:2f:4b:ee:9a:a6:d7:cf:1d:35:cb:c4:
                    c2:31:72:db:8e:34:d6:0e:d1:ee:98:66:ee:01:90:
                    ec:10:84:06:95:da:7a:0b:2a:61:d7:e1:f8:11:d8:
                    1c:13:87:01:9f:42:9d:09:2d:c5:26:f1:6e:3d:09:
                    ce:a8:55:da:f2:e2:e7:63:f1:3b:cf:9c:e4:78:3e:
                    72:ce:13:5d:b6:aa:58:f4:d2:84:ec:32:62:f5:92:
                    a5:88:34:fa:9b:bc:c9:37:42:2f:66:31:68:a4:ed:
                    24:35:48:9b:a0:3a:03:19:fc:74:cc:2b:37:28:06:
                    37:e4:0c:be:26:4f:92:d2:0d:f9:b6:86:c5:48:86:
                    27:2f:25:b5:04:63:36:fc:d3:3d:f7:d6:11:8c:4e:
                    da:2c:df:e7:5c:2d:27:4e:b9:bb:0a:a6:50:11:b2:
                    8c:a4:dc:88:9d:31:c6:a5:43:6b:e3:69:c1:82:2d:
                    65:54:dc:8a:0a:2a:5f:b4:06:43:96:0e:29:70:88:
                    94:2b:5d:56:74:69:42:54:18:26:21:57:8a:e8:ea:
                    4c:59:a6:16:d5:ed:06:c7:45:d5:69:30:0f:2f:55:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C1:D4:7B:70:E9:6E:18:3E:19:FA:E0:7B:3F:1A:8E:53:E4:D6:16
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:82:04:4f:62:9f:79:44:5a:08:6d:6b:95:0d:16:95:9d:78:
         c4:08:20:94:27:b7:75:2c:b6:5a:4f:e9:f1:01:65:3e:e4:91:
         c6:09:19:bc:b0:ce:99:5d:10:b1:3d:37:70:19:20:cf:9f:29:
         45:9b:90:37:84:36:00:d4:21:1b:f8:93:ac:f3:73:dd:89:37:
         66:2d:74:77:19:72:bf:05:40:5a:fc:90:1b:ec:d2:ac:07:3f:
         83:b4:dd:ed:d9:94:9f:5a:0c:34:dc:bd:d4:b7:19:7f:b9:f6:
         c5:64:77:05:70:b0:3b:7c:ba:4c:08:97:4a:4e:00:bd:ae:29:
         5e:c1:a3:c0:74:b2:27:c4:11:2f:13:9c:73:e8:07:64:10:cd:
         72:d8:c9:4d:15:36:7b:6f:30:4d:31:00:ca:25:f0:93:29:2b:
         9c:36:5f:31:64:64:cf:0e:1a:e0:a5:56:b7:7c:3b:ea:4e:c3:
         e2:ab:7d:ac:b4:85:4c:0d:b6:82:20:cd:f4:26:63:b3:a3:bf:
         07:2e:47:c5:cf:26:79:81:b7:fd:d1:15:f2:0e:dc:31:1d:9b:
         f9:02:c7:38:c9:4f:c1:ec:63:f2:b4:68:7a:e0:1d:17:4f:bb:
         ba:4e:0d:4f:40:f7:10:84:ef:58:26:c5:65:4b:83:b9:8b:38:
         17:6f:4b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:30:08 2025 by rpki-client