Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
File:                     4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json)
Hash identifier:          hOTkEUThK3v5f2eqKhaP7T8fyfLC6y4ywCmr5HBaXdA=
Subject key identifier:   94:65:DB:39:52:C0:00:1D:6A:90:26:1B:91:AC:56:51:F1:A9:EB:06
Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
Certificate issuer:       /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
Certificate serial:       04CEE1503E1E87C9BAD8884363B008CD3F28286C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
Manifest number:          027F
Signing time:             Tue 29 Jul 2025 10:02:15 +0000
Manifest this update:     Tue 29 Jul 2025 09:57:15 +0000
Manifest next update:     Wed 30 Jul 2025 11:51:15 +0000
Files and hashes:         1: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=)
                          2: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=)
                          3: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: aCk60rh/evSahfqrt+g2Fnwv2lZlvxV+7pa22scIf10=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl
                          rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 11:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:e1:50:3e:1e:87:c9:ba:d8:88:43:63:b0:08:cd:3f:28:28:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
        Validity
            Not Before: Jul 29 09:57:15 2025 GMT
            Not After : Jul 30 11:51:15 2025 GMT
        Subject: CN=9465DB3952C0001D6A90261B91AC5651F1A9EB06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:6d:2f:82:43:e3:a6:31:4e:dd:b1:ac:b1:
                    3a:a4:e8:09:40:e1:67:cd:42:6f:67:02:4f:dc:35:
                    39:a4:98:e1:77:ac:10:30:de:ec:b2:0e:6a:31:61:
                    fb:25:dc:cd:ab:0c:ac:c4:a5:3c:dc:1f:3b:86:c9:
                    00:86:3e:b8:33:3e:f4:b8:1f:31:e9:a6:f4:3e:d4:
                    e3:28:3a:17:64:1f:51:08:9a:e3:b6:6f:11:95:72:
                    5a:2f:4f:8e:58:6b:59:d5:e5:ce:7e:08:7a:e9:20:
                    ac:13:82:2f:04:c0:7a:ed:3c:fe:bb:bb:26:bc:0a:
                    46:b3:d2:ab:a6:e6:5e:af:f7:ca:33:99:eb:d3:af:
                    82:30:f8:22:20:d0:6a:4f:04:2b:72:92:85:9a:d3:
                    b1:04:4d:6f:9e:59:64:4b:80:b5:64:f5:9e:5d:56:
                    e5:7f:ea:42:c3:5b:97:ab:e7:59:09:fa:13:ac:0d:
                    8e:4c:f2:98:f8:f6:25:a5:cc:20:21:3e:97:2e:5e:
                    98:a8:c9:e6:c4:f4:b6:9d:3d:64:c6:79:d6:1c:4c:
                    88:51:9f:a8:44:11:fa:bf:cd:82:45:af:7d:78:de:
                    6e:ae:96:00:c5:1f:74:e9:a9:b1:fd:3c:2a:63:a8:
                    a7:d8:b9:43:cb:11:2b:dd:69:a6:89:84:77:88:70:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:DB:39:52:C0:00:1D:6A:90:26:1B:91:AC:56:51:F1:A9:EB:06
            X509v3 Authority Key Identifier:
                keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:62:09:62:73:0e:6b:1a:9c:50:49:09:89:70:83:8e:5d:
         aa:f4:ec:8c:5e:e5:2a:3f:ff:d7:63:94:94:1a:4c:d9:87:c3:
         2b:70:c8:a9:5a:b7:6b:c0:12:4a:34:37:df:5d:78:55:99:b2:
         4d:9c:58:b6:ed:26:fd:0e:39:a5:54:76:01:f0:b0:56:86:97:
         a0:a8:06:e4:e3:ac:43:08:66:30:cb:49:9f:d5:0c:3c:50:82:
         e0:fa:d4:31:86:54:a1:bd:3d:7c:2c:fb:44:5f:b4:3d:31:35:
         5b:79:17:04:26:a2:9a:b9:e1:07:7d:71:bc:bc:cf:23:a7:ad:
         30:18:1c:bc:21:6b:02:c8:83:4d:d5:82:ea:19:17:37:54:ec:
         a5:92:39:f8:8f:45:28:6e:3b:29:62:a4:f5:cc:58:29:7a:9f:
         c6:f1:b8:5d:0d:b8:be:d1:b1:ea:c6:45:25:fe:63:4d:d8:f6:
         74:8b:ff:fd:c0:0f:b4:e1:d4:bb:47:0f:31:e9:28:a4:68:47:
         9b:8c:59:c0:a5:97:89:31:4a:4f:ca:89:e4:d5:80:14:73:c9:
         32:ad:65:d2:e3:4c:14:8a:32:ec:be:34:0b:33:ee:81:9f:11:
         d3:e0:a0:47:8d:8e:5e:28:f0:d8:0a:01:33:07:f8:72:95:ae:
         9d:88:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:28:59 2025 by rpki-client