Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft
File:                     F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft (raw, json)
Hash identifier:          xeE0Mjq0Uo6Vw/DGOokz15Kzi8ceBQp9WXpDlicciSo=
Subject key identifier:   C8:60:C9:C7:18:88:95:4A:C9:BA:E7:FD:E1:92:76:5D:20:B9:A7:53
Authority key identifier: F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC
Certificate issuer:       /CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
Certificate serial:       172A4A687045712A10D53B68E56DA5A95168E43B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft
Manifest number:          17
Signing time:             Wed 20 Aug 2025 11:29:20 +0000
Manifest this update:     Wed 20 Aug 2025 11:24:20 +0000
Manifest next update:     Thu 21 Aug 2025 15:24:20 +0000
Files and hashes:         1: 3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa (hash: uN0YTxOnhWyEHHz4h8BkRhrZCxdzweiJL5r5uZ/SGjI=)
                          2: 3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa (hash: tpZx2lMNuk8eXdR+yksEbih1J6k3+Z6deF9J7AYf6To=)
                          3: 3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa (hash: dcznwJMQJDayzP0SGQCIQXvMFChtjblOPDZ9s1NEhzg=)
                          4: 323830343a373566343a3a2f33322d3332203d3e20323731303830.roa (hash: SFYRKi4lrYUrbFtrRnvkceQQGN+qbFNhrtwNcmdgpsg=)
                          5: 3137372e38362e3133382e302f32332d3233203d3e20323731303830.roa (hash: Puh9Lc9N4zXzNUZfyDkUcOezD9DvVM3vGkFIAXPxvoM=)
                          6: 3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa (hash: W+YactgxYdwpMfVz0+AlnnMMtdqkqCXeLP+vE+H1uHg=)
                          7: 3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa (hash: AaX8CjrYDyQkiphicK18sqyRxcjSmBrkZ/fjil+McCw=)
                          8: F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl (hash: X4TpjRGoKQFzCgiuVzS0skDkUqxWq4zRyTlA+Hmq30A=)
                          9: 3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa (hash: r/uXVd0pgAqrfNNulW2q68Lz/Ko0O6OZUDf+PJDYXvU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 15:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2a:4a:68:70:45:71:2a:10:d5:3b:68:e5:6d:a5:a9:51:68:e4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
        Validity
            Not Before: Aug 20 11:24:20 2025 GMT
            Not After : Aug 21 15:24:20 2025 GMT
        Subject: CN=C860C9C71888954AC9BAE7FDE192765D20B9A753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:f7:32:6f:e6:f3:29:96:d9:0e:1d:c3:78:
                    10:e4:35:1f:88:f4:1a:79:13:56:49:b3:ff:3e:7e:
                    b7:b4:45:36:c5:60:ae:ec:24:96:7c:3c:bd:ed:47:
                    be:07:8f:19:42:24:1f:a9:c5:66:63:4b:e3:ff:d7:
                    7f:cb:32:6c:4a:c9:f5:cd:39:0a:ac:6c:f8:7c:fc:
                    e0:da:60:65:9b:04:34:c7:1e:d2:9c:06:a2:a3:b7:
                    6d:d1:63:89:8d:d3:2d:30:f6:54:0c:4f:fd:5e:4f:
                    ea:48:9e:99:4f:da:ed:3a:c7:26:7e:1e:90:04:ad:
                    15:de:1a:f1:c6:dd:d1:5c:e5:56:0c:d5:2d:b9:75:
                    ba:87:32:0e:e6:74:31:b9:fe:d3:0b:bd:27:00:46:
                    26:a4:f1:b8:8f:8c:3b:d3:d8:73:68:97:f2:fe:5e:
                    e9:64:c2:b3:2a:ca:40:2d:b0:2b:60:c8:c3:f3:74:
                    fa:70:2a:fd:3a:d5:3e:f0:71:98:e5:a8:a4:5a:67:
                    61:6f:46:fc:d6:fd:26:3c:b1:53:94:23:78:81:5a:
                    13:56:2b:22:99:7a:90:8d:8f:69:c3:50:f8:b3:97:
                    6b:bc:af:41:79:26:35:bb:b0:a3:1f:51:49:80:25:
                    89:b0:93:6c:bd:b9:95:08:99:4d:f6:8b:f9:57:92:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:60:C9:C7:18:88:95:4A:C9:BA:E7:FD:E1:92:76:5D:20:B9:A7:53
            X509v3 Authority Key Identifier:
                keyid:F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:ca:60:22:0b:09:07:c4:f7:eb:d3:db:f2:96:e4:87:8a:
         65:23:2f:48:86:43:ff:af:0a:0c:0c:85:df:05:52:b7:7c:2d:
         16:30:65:b2:9e:b7:fb:1a:72:82:83:db:ea:41:d8:f8:06:f0:
         a1:a5:b9:b1:43:83:50:e6:dd:6b:79:67:59:ab:01:0a:bf:b0:
         21:52:ec:e9:fd:c4:65:02:95:bc:12:7b:89:2a:bd:48:16:ab:
         8f:d4:cb:87:69:60:e1:81:ac:43:43:fd:55:b3:60:c5:c4:0f:
         64:4a:99:95:80:c4:56:c9:22:91:45:17:0e:ea:7f:01:de:98:
         18:f4:1e:4e:47:a4:2e:de:4a:15:d1:02:93:c0:0c:a5:c2:41:
         32:84:b5:c1:be:ca:70:c6:38:84:20:0a:45:ab:2f:5d:36:bf:
         74:51:d4:7a:43:3c:c7:0c:1e:ee:20:33:e7:ca:11:08:c1:a1:
         83:ef:f0:5e:ac:fb:1e:ad:71:cb:de:1b:2d:4f:21:8f:04:76:
         f5:a9:78:38:20:9c:1a:cf:82:7b:27:1e:cd:90:57:b2:0f:a8:
         d3:9a:34:ce:fd:f0:eb:4a:bb:61:ae:cc:27:e8:4d:9b:ac:b7:
         d1:5a:66:6d:36:c4:5b:d0:40:24:0d:ee:bd:6a:93:52:30:2b:
         1a:eb:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:32:03 2025 by rpki-client