Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
File:                     D79C7E4BAE4953730FE72125E941901AFC590C0B.mft (raw, json)
Hash identifier:          1F640+LVdAxqwxCSVjmH5eYtjN40Nl1OK5zp15H2jQU=
Subject key identifier:   03:C1:70:9F:D2:80:D3:37:68:88:4A:1E:45:05:96:FF:F1:56:67:33
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       496E356524C705F5C785F8A865C01A84719ADEF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
Manifest number:          04D3
Signing time:             Tue 19 Aug 2025 22:08:34 +0000
Manifest this update:     Tue 19 Aug 2025 22:03:34 +0000
Manifest next update:     Thu 21 Aug 2025 01:30:34 +0000
Files and hashes:         1: 3230302e3233332e36342e302f32302d3234203d3e203131393231.roa (hash: qquKsYC9NwmQPROjAC1DFAD0SxS3Z6/TIYOwcKPKvDA=)
                          2: 323830343a313437303a3a2f33322d3332203d3e203131393231.roa (hash: E8Zl8dQUXRnU8bD0t4b63/KZiLD5UTS/WsBPixGZiCM=)
                          3: D79C7E4BAE4953730FE72125E941901AFC590C0B.crl (hash: kZqj+LSvYoLboqqnTTIYo3Q/RoANBM9rp78nP6ww1tE=)
                          4: 3230312e34392e302e302f31382d3234203d3e203131393231.roa (hash: AQPm4QPPk3g9bVRkimMQEtyxzxCARGOHEW2rqe64y/A=)
                          5: 3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa (hash: 9XSDgncglQlNlJ/ZdbS/C99lcLaqLFyOKrWY3lTzquM=)
                          6: 3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa (hash: swO3KlFLEEKvWm+FUWMlf+j0mHBS1dPsBNfmzYcxBDU=)
                          7: 3230302e3139342e39362e302f32312d3234203d3e203131393231.roa (hash: 8N6LtZBXUCvUG0DcYrDLIcjLWOWO1oX8TKnMEdfymYM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 01:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6e:35:65:24:c7:05:f5:c7:85:f8:a8:65:c0:1a:84:71:9a:de:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug 19 22:03:34 2025 GMT
            Not After : Aug 21 01:30:34 2025 GMT
        Subject: CN=03C1709FD280D33768884A1E450596FFF1566733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:46:9a:a5:4e:cb:17:f9:36:3a:b9:43:c7:
                    f7:9a:ae:df:12:22:64:66:40:e1:b1:d9:2b:ae:0d:
                    ac:67:47:40:09:99:87:84:5c:37:a1:3d:de:50:1a:
                    83:16:ee:d9:61:17:4e:8f:4b:31:9a:49:c1:81:02:
                    1d:0c:18:76:81:f1:1d:33:07:34:ac:40:6a:d3:37:
                    7c:4d:bf:c4:d1:0a:ad:d6:55:e4:dc:65:7d:f9:c6:
                    e1:a5:51:90:61:7c:ef:d2:6d:93:8d:df:e7:e8:7d:
                    5d:47:d8:2d:18:e1:02:91:93:81:f8:5a:6f:13:82:
                    e9:15:66:c3:2a:16:29:6c:a1:4a:f1:40:16:f2:a5:
                    03:8c:0e:52:d8:37:42:47:ed:99:44:9b:dd:32:c5:
                    0c:94:d1:5c:1f:a2:c9:f3:26:b6:c9:22:e0:e3:63:
                    2e:10:db:10:c1:5b:e3:db:85:67:60:b9:15:4e:34:
                    bc:33:0c:c2:04:38:df:f3:b4:34:2e:4b:60:a8:0e:
                    ac:5b:ea:81:98:6a:6d:9a:fe:a8:5d:86:d9:2d:8a:
                    19:dd:4c:62:93:76:9a:20:4a:39:a5:15:5d:33:d1:
                    c7:e7:ae:2a:79:a0:5c:68:93:3a:94:39:82:6a:07:
                    3b:33:11:e8:3e:f8:cd:c5:37:6c:75:d4:e1:30:04:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:70:9F:D2:80:D3:37:68:88:4A:1E:45:05:96:FF:F1:56:67:33
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:eb:c2:45:9b:3c:a9:7f:47:16:46:51:9f:95:e6:e1:06:
         5d:8f:6c:40:8d:67:38:a4:b3:05:62:71:eb:2e:e9:cb:2e:96:
         52:05:d7:72:7d:40:2c:c2:d0:d4:7d:62:3a:df:3c:4e:26:ad:
         c8:37:5f:08:a6:55:dd:bc:55:9b:5f:a9:f9:5d:a1:e1:bd:51:
         74:83:db:a8:99:01:db:43:db:07:65:b9:a7:6c:24:ed:71:36:
         aa:8a:ae:a5:a5:e0:a5:d3:df:83:c1:a7:43:5a:cb:23:5f:d3:
         b4:fc:5b:d5:d4:ed:53:af:89:2e:91:7c:43:7e:85:0c:4b:cf:
         d4:7b:bf:32:8b:43:da:73:55:d0:f9:7c:74:17:c5:c9:6c:38:
         ce:16:3a:da:88:09:33:74:5e:56:66:95:b6:4e:b2:ca:f2:01:
         33:ce:b7:a4:ed:97:ab:85:45:64:59:2e:64:06:a3:35:c8:0a:
         8d:c2:8b:4f:ea:55:22:79:9c:66:fe:3e:9f:7e:fb:94:35:d6:
         bc:e9:a7:fd:4f:a4:f7:1b:80:62:bc:8d:14:58:76:3d:7b:5b:
         30:c2:92:20:07:26:df:19:69:3e:b0:8f:ec:a2:2d:7d:15:80:
         af:7c:a0:58:07:46:14:31:cc:91:74:ce:f4:a5:5d:b4:8e:d3:
         be:46:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 16:12:47 2025 by rpki-client