Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          IUp5ajCAhGC8YnN+Z/RBULSQk16wbRhLNzGK3YAlUuQ=
Subject key identifier:   4C:2D:4A:02:B5:C3:83:A6:C4:92:C8:E8:10:8C:A8:53:AE:C7:DF:00
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       3F89A756842F553769CA74ED83C13D38CBAF4AF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          0245
Signing time:             Fri 13 Jun 2025 09:40:00 +0000
Manifest this update:     Fri 13 Jun 2025 09:35:00 +0000
Manifest next update:     Sat 14 Jun 2025 11:50:00 +0000
Files and hashes:         1: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: A29uFPI1dE2pL7Ym7I1sLhIfm55LwVTB0Q1J4KIDhQY=)
                          2: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: OnKIYKJargD/FTIo6Z54sfeV3foda7Z1vivFEJao5xA=)
                          3: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: h1+BPE8QKGkGQjlwrOwfbil3+GmL9t/TZ5FhPjfP0Ys=)
                          4: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: d+OO6yHmtNmMdldpaGIH7mI4OjxFPcqrxCHb2GcVmmw=)
                          5: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: IlooSbQXnxtp9yE158oMr+kw+VRPcvYSK0oGbAfrITs=)
                          6: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: 1QaaHGZII86d9mGbjqzaZ+SrF2kGCAd2kLcMFDLAtT0=)
                          7: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: fyv559suoxOTWuZ+x7F4q8+xix1OaSFY/Rn/K8Tm6UI=)
                          8: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: 8MSaZGp/oQ19MDpNrNYIwOMH8Rvub228ncf8cGi5UrA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:a7:56:84:2f:55:37:69:ca:74:ed:83:c1:3d:38:cb:af:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Jun 13 09:35:00 2025 GMT
            Not After : Jun 14 11:50:00 2025 GMT
        Subject: CN=4C2D4A02B5C383A6C492C8E8108CA853AEC7DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:c8:92:de:c8:f8:5c:4c:c4:50:04:bc:00:
                    9e:20:f5:86:ae:b0:0d:db:70:64:46:71:86:d2:fd:
                    43:0b:f8:64:75:4b:74:d1:13:19:ba:40:1e:d0:9b:
                    5c:bd:da:b6:ff:76:fa:d1:0e:8c:bf:b6:e2:cc:d3:
                    e7:9f:e7:46:db:fa:00:a8:6d:e5:20:25:f7:ef:40:
                    b1:0e:b8:66:bc:f6:99:96:76:a6:e2:85:8c:40:22:
                    65:dc:ef:f3:87:84:d6:0e:1d:8a:3e:02:e1:7c:85:
                    7a:b6:2f:fe:b5:7c:c8:a6:cd:ef:7e:21:de:f5:dc:
                    b1:91:d4:5b:65:44:6f:c0:c5:f8:30:2b:75:92:eb:
                    9e:88:a6:d2:7b:2b:9e:a8:e8:7e:b8:67:b1:7b:00:
                    cd:20:91:df:d0:f0:52:42:6d:e4:ef:66:47:03:ee:
                    c2:19:3c:de:66:39:7d:da:42:e6:ba:7c:1e:3e:08:
                    cf:40:67:ae:83:60:78:7d:1b:80:7a:7d:99:9a:e7:
                    7c:d7:5b:89:f0:b7:69:45:59:4b:34:c3:18:b8:4b:
                    cc:31:51:47:25:71:9e:f7:39:51:f6:0f:b7:3b:62:
                    10:e6:4d:6e:d9:56:32:78:6f:19:86:8e:00:6d:ab:
                    be:72:e1:15:29:d5:e6:2c:3a:1c:12:42:dd:ed:2f:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:4A:02:B5:C3:83:A6:C4:92:C8:E8:10:8C:A8:53:AE:C7:DF:00
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:df:15:1d:23:a6:6a:3b:c6:55:14:d6:77:16:b2:a0:f2:
         4a:32:77:29:03:8c:21:fc:46:2f:6a:0d:d4:99:27:f3:ee:93:
         38:4e:1c:e4:44:f4:38:9c:31:5d:df:1d:32:64:7c:ca:cf:25:
         f4:ca:01:9e:ac:6a:8d:30:55:af:70:69:2e:d3:be:ac:01:10:
         73:bd:cb:cb:fa:ae:14:c0:30:e7:97:0b:c5:b9:e4:4f:32:b9:
         88:62:cd:49:89:61:92:6b:ad:8b:70:e1:ce:e1:37:e4:cb:75:
         76:1f:1b:45:7f:7a:24:00:81:e8:cd:47:08:12:52:40:a7:0d:
         19:f8:69:78:39:70:d2:9b:63:83:54:4f:b5:30:8a:50:c4:4d:
         57:d3:96:4b:15:3c:cb:aa:b5:a3:42:fa:ee:f1:d9:85:54:49:
         47:62:28:b3:db:ad:d0:60:d3:d3:c6:d2:91:86:ec:b2:da:c2:
         f5:87:17:30:08:5a:d4:ab:82:f8:e6:a8:4b:77:87:8a:ae:95:
         34:c2:98:22:be:78:54:ee:74:e5:19:27:5f:b4:88:2d:91:9f:
         72:63:8f:d2:e8:9d:92:d4:11:94:a2:f8:ad:aa:b9:ca:97:e3:
         fd:56:56:d5:02:05:98:89:ca:eb:36:1a:58:f8:d7:18:42:37:
         65:8c:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:56:21 2025 by rpki-client