Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
File:                     88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft (raw, json)
Hash identifier:          jR3rr/DMFjjizlGOSaVRB2lXLtMoAogHmWnBir9J9WQ=
Subject key identifier:   40:16:95:87:CE:CA:2F:C8:92:68:42:AE:4D:69:CB:7D:CC:D7:CE:3C
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       473CE098684B74F3DE84379A4FF123B9232523EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
Manifest number:          0123
Signing time:             Thu 18 Sep 2025 00:40:59 +0000
Manifest this update:     Thu 18 Sep 2025 00:35:59 +0000
Manifest next update:     Fri 19 Sep 2025 04:01:59 +0000
Files and hashes:         1: 3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa (hash: AlsOpILNDut9Uq7S2qsDodegEwgp5fJF/7EF6g5SYhg=)
                          2: 88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl (hash: JTAp4+9RMqz0Dmuy1Olob6CJ50g/SjF4PIyKCJ05+Io=)
                          3: 323830343a313738303a3a2f33322d3438203d3e20323633313531.roa (hash: Ua4N1Y+zXJALqPQqLfr4TYN8F+d+KkOtpTvusoM2JX8=)
                          4: 3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa (hash: f4pZrHVScZI9OSv+CNCol2+E/xZPM63XNFE+wvHJJdA=)
                          5: 323830343a3837343a383030303a3a2f33332d3438203d3e20323632333733.roa (hash: t3jdFiVwSRO7Ad5euD4aQGfm6lT+BHgHHIvPH74tWVI=)
                          6: 3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (hash: pEQ55vnuzI4a01rOA4B1rNFMJMHsext1maSMKYYBTbs=)
                          7: 3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (hash: PIXO4w8k5ZO1TizrX49ZorX5Atowl5UagglafnQMKIM=)
                          8: 3136382e3139352e3235322e302f32322d3234203d3e20323632333733.roa (hash: 7sWyrI81Z37Z/i+DY8U3ZU+8DlTqXyhk06nFZC1N4dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3c:e0:98:68:4b:74:f3:de:84:37:9a:4f:f1:23:b9:23:25:23:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Sep 18 00:35:59 2025 GMT
            Not After : Sep 19 04:01:59 2025 GMT
        Subject: CN=40169587CECA2FC8926842AE4D69CB7DCCD7CE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:69:e2:25:6f:3b:1b:9b:a5:8e:c7:a2:83:
                    df:78:ba:ad:f8:17:e7:a1:aa:b1:c7:0a:bb:d5:bb:
                    a8:da:98:f6:8f:c7:3d:02:c8:5b:be:3e:8e:65:07:
                    93:32:ad:ff:46:dd:82:05:a8:e9:69:1d:a3:c4:5e:
                    5f:f0:77:b4:43:e0:6c:36:bd:43:c7:57:dc:a5:48:
                    ce:83:47:d6:55:77:4c:a2:9f:6c:1b:db:97:fe:af:
                    af:15:55:f0:fe:a4:74:85:38:16:10:32:09:c1:06:
                    87:e6:1f:8b:61:a2:1d:88:ca:95:13:83:d4:97:57:
                    16:e1:05:5c:8d:58:87:e2:e3:bd:a7:49:7c:ac:10:
                    c3:5e:d6:57:a7:50:4d:6e:b5:69:fd:f6:e5:4c:1f:
                    58:30:f6:99:b0:a1:85:3f:1b:80:87:ee:4f:af:cd:
                    fb:d0:51:ce:a5:bb:35:77:2b:82:63:5c:fb:ef:8d:
                    72:e8:26:26:62:c2:9d:ce:98:21:71:ca:6d:01:37:
                    5c:d8:a6:71:e9:59:9b:ae:76:f3:26:47:d3:46:9a:
                    78:13:3a:97:f9:86:47:23:09:e9:b3:e9:61:84:0e:
                    66:e9:91:b4:94:dc:05:81:f0:92:32:03:81:b6:14:
                    e3:01:92:b8:c1:0d:03:6e:00:9e:7b:f8:eb:78:0b:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:95:87:CE:CA:2F:C8:92:68:42:AE:4D:69:CB:7D:CC:D7:CE:3C
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e1:5f:ae:82:49:48:5f:f5:73:d0:7d:09:5a:cb:7c:c5:04:
         41:5a:52:74:89:54:e7:44:2c:8e:f5:9e:cb:f6:55:a9:1f:7e:
         46:c6:87:3b:df:70:b2:e1:1a:5c:bf:d8:53:65:fd:84:38:a8:
         33:ad:13:cc:d0:07:5c:b1:9e:26:26:ce:17:8b:95:2c:92:fb:
         5d:f2:ae:d6:81:dc:af:8a:c9:7a:7f:2b:b0:13:81:af:64:28:
         38:1c:b8:b5:95:01:17:0b:a8:57:e9:ca:fe:52:64:19:80:46:
         7c:28:05:4a:34:69:59:01:c4:8e:49:cd:22:dc:e9:3e:3a:58:
         3f:cb:6f:91:c2:e9:35:7e:80:e3:4b:3e:a2:e1:1e:ea:e9:6e:
         af:95:ae:b7:36:ef:f7:31:28:ed:02:dd:4e:9e:f5:7d:59:91:
         70:19:26:e1:c6:64:9a:07:0b:d5:85:de:66:c3:26:75:da:6c:
         54:da:ad:7c:a5:a7:2b:8e:28:12:ec:8a:ab:19:1d:28:8d:fe:
         b6:0a:66:2b:99:f1:c5:4a:a6:32:01:69:a0:24:e2:0b:81:2a:
         44:fd:63:fa:19:30:c0:d4:cf:f1:86:6f:1d:12:ad:c0:02:9b:
         3b:6f:94:6b:1b:8e:4b:5a:8f:e3:68:27:91:d2:7f:ec:1e:28:
         51:0f:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:28:14 2025 by rpki-client