Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
File:                     C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json)
Hash identifier:          1+YSCTXDCP0T18yWgbOO47OgK9Y2Ha1CCH3FUjVH/Zw=
Subject key identifier:   A3:1E:75:59:A9:99:95:67:5A:4E:03:39:2F:80:F1:07:70:0E:F9:BF
Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10
Certificate issuer:       /CN=C952C93A676BA611AEC114DD4983F2B03168FE10
Certificate serial:       31CF1003FDA628CCD2F51D44731899E84246F916
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
Manifest number:          21
Signing time:             Wed 20 Aug 2025 01:03:19 +0000
Manifest this update:     Wed 20 Aug 2025 00:58:19 +0000
Manifest next update:     Thu 21 Aug 2025 04:25:19 +0000
Files and hashes:         1: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: FX7CxEwMe77oGVOke0pJc/KWM5ZKvh54JurYKVnN8TM=)
                          2: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: yZRSrVO4WrybXUbp1iJlZCDy0CDvB+rh//bShgF0RoM=)
                          3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: CinqX1j3jyRc5maom4CkOjawfLigGHk+YxdzO16vL9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl
                          rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cf:10:03:fd:a6:28:cc:d2:f5:1d:44:73:18:99:e8:42:46:f9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10
        Validity
            Not Before: Aug 20 00:58:19 2025 GMT
            Not After : Aug 21 04:25:19 2025 GMT
        Subject: CN=A31E7559A99995675A4E03392F80F107700EF9BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:c4:7d:d6:12:22:ca:2e:9b:b8:93:aa:ae:
                    ef:c1:44:92:ac:aa:18:33:88:de:86:8f:f2:15:25:
                    43:1d:18:c8:e2:0b:38:d4:d9:85:74:4f:fb:b5:88:
                    81:6f:dc:82:98:cb:04:a8:c1:6f:c4:03:87:9d:3f:
                    26:43:04:a6:92:d7:42:37:c8:ea:e6:e2:c1:d0:d1:
                    61:30:01:12:e2:fd:5f:b0:05:7e:5d:87:48:e7:37:
                    43:d8:10:b2:35:ae:9b:79:fa:ea:8f:83:bb:3e:35:
                    fb:8b:91:87:8c:49:cd:63:bb:97:d7:1d:d1:52:68:
                    c5:12:db:f4:7d:89:91:cc:f2:ce:70:d7:90:ee:28:
                    35:c8:e7:86:05:33:1c:0a:99:e4:de:bc:9a:70:e7:
                    dd:6c:fe:ce:44:84:d6:e2:03:8a:16:5b:7d:28:de:
                    80:83:f3:a2:81:cf:cc:92:a4:84:43:49:48:5d:37:
                    14:e0:d3:8a:fe:74:29:1c:ad:09:63:1c:ea:8b:8a:
                    8f:b3:bf:d7:fb:c1:94:33:ca:d6:81:5b:e8:31:ae:
                    be:89:6d:cc:80:82:1d:30:78:cd:75:b2:fe:e0:9f:
                    3e:76:a7:e1:0c:70:c4:a7:45:58:41:32:77:0e:4a:
                    17:7b:a6:fa:77:25:14:b1:db:72:e9:b1:e5:6c:e4:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:75:59:A9:99:95:67:5A:4E:03:39:2F:80:F1:07:70:0E:F9:BF
            X509v3 Authority Key Identifier:
                keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:77:94:64:5b:f8:49:45:6a:fa:ff:2e:39:a1:58:40:68:
         0c:e5:57:5c:f3:49:e4:ff:0c:1a:48:52:7c:09:f8:07:ea:a2:
         7e:76:fa:c5:07:f1:f2:15:91:10:48:2a:ca:eb:34:88:06:9c:
         37:2c:63:bd:7e:6d:00:62:5e:08:ec:08:db:5a:03:00:d1:e1:
         2b:65:57:96:8d:d2:37:08:0c:54:ff:64:9f:c1:be:f4:09:07:
         df:51:a6:05:2f:15:7b:8e:3f:ef:cc:45:91:38:a5:80:f4:a8:
         1e:d5:38:3d:e3:45:91:a2:7b:8e:ed:ad:8a:83:dc:ba:03:16:
         07:bc:a7:18:66:da:f4:22:72:55:f8:53:18:a5:ce:70:93:4e:
         21:65:3f:6d:ff:e9:27:10:7c:bb:c3:c2:f5:3b:e3:8c:15:77:
         ee:d7:0a:61:04:a3:2e:0e:bc:3d:5e:36:8e:f5:a1:40:7a:5e:
         d9:f8:41:5d:f0:89:5f:ac:27:0f:56:6c:98:9b:18:cf:53:34:
         ca:99:05:0c:bb:e2:86:79:ef:2c:b9:16:b7:6c:35:b2:b8:b8:
         e2:57:3d:96:60:c0:10:7a:f3:0e:ff:29:b4:a0:47:9c:a6:4a:
         24:30:49:7f:80:f5:25:e5:30:a9:b5:1e:c5:95:6d:3e:46:83:
         0e:03:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:25:58 2025 by rpki-client