Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
File:                     0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft (raw, json)
Hash identifier:          0JOKbdAhNuOx+9pYlMwfpWyk6GipskutEkvE5A9olnU=
Subject key identifier:   63:BE:4C:A3:18:F3:FC:27:AB:6C:79:7D:4B:20:AE:1B:36:14:3B:21
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       74C4640EB1156FF847EED2EA23F804611F3FEC63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
Manifest number:          24
Signing time:             Wed 20 Aug 2025 10:44:59 +0000
Manifest this update:     Wed 20 Aug 2025 10:39:59 +0000
Manifest next update:     Thu 21 Aug 2025 13:49:59 +0000
Files and hashes:         1: 3137392e34322e3133322e302f32342d3234203d3e20323731313636.roa (hash: nsUixGFLPigSeWiVkcLSWl5yZBG2+UKFwNjxQ5cacTY=)
                          2: 3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa (hash: 6i45KHUsx3IuMwgHojvOYh0ct4E7sfM5OUZ8hxW9JxQ=)
                          3: 323830343a373734343a383030303a3a2f33332d3333203d3e20323731313636.roa (hash: 9c/Vv3pmZ5CXw4NUWRozYcmOTc1afAQ0zUfVqRBq+Pk=)
                          4: 3137392e34322e3133342e302f32342d3234203d3e20323731313636.roa (hash: gC1Zx88Oj+ffmPgCX94pUVv95lctnZo7+2qZD2k3PjE=)
                          5: 3137392e34322e3133332e302f32342d3234203d3e20323731313636.roa (hash: KTcAkgeYiA11ExQN7cxBo03hZTlRZpRR0UNVqAdvMzI=)
                          6: 323830343a373734343a3a2f33322d3332203d3e20323731313636.roa (hash: xj0HXmCi3+nuO9evTuFxKMPwLUzzhbRjUwq9ukBX1Lc=)
                          7: 323830343a373734343a3a2f33332d3333203d3e20323731313636.roa (hash: Tr39WnlN4clRonCBNxfsmOX5oBu6rb58TAmNgtPvMZE=)
                          8: 3137392e34322e3133352e302f32342d3234203d3e20323731313636.roa (hash: rEVRUj+OMOr8ex1XJsMDs+aNuh4znkXFky0YVDXzhcQ=)
                          9: 0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl (hash: O9yeKyX1ZcrL/MMcYpv8ePs/dXV1wh6x0g4PQkiabQA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 13:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:64:0e:b1:15:6f:f8:47:ee:d2:ea:23:f8:04:61:1f:3f:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Aug 20 10:39:59 2025 GMT
            Not After : Aug 21 13:49:59 2025 GMT
        Subject: CN=63BE4CA318F3FC27AB6C797D4B20AE1B36143B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:63:ff:d4:e7:97:0f:57:1b:52:c3:07:83:
                    46:ae:b8:ee:a3:17:d0:04:a4:95:5c:14:08:3b:a8:
                    b4:cf:9a:91:5c:4d:7f:11:ac:82:6c:63:07:ea:f4:
                    07:1c:9f:90:ad:40:50:64:ca:b9:98:16:6d:6d:96:
                    7b:19:b5:1f:5c:8a:8b:21:1f:7a:1d:46:71:e5:5f:
                    99:8d:d7:0f:53:fd:78:9e:b2:51:d2:55:66:b3:e9:
                    b9:b7:cc:9f:b3:c2:0b:3f:52:4c:c5:da:c1:a8:fc:
                    30:9f:32:e2:25:7c:a2:87:a3:f6:1c:ba:01:33:28:
                    80:e0:98:b0:3e:09:06:cd:06:54:19:8e:87:d2:ba:
                    48:7b:5c:ae:37:16:7e:81:86:d4:93:f0:8a:e7:74:
                    50:81:30:f4:e6:f0:32:d4:93:79:ce:b3:eb:53:50:
                    a9:e8:4b:54:d5:c0:84:e3:2b:07:60:f8:05:f7:66:
                    e0:41:ae:5c:3d:f8:81:95:36:5d:83:be:6a:a9:c4:
                    f8:3d:48:04:1b:87:6d:e1:13:60:28:5d:ad:20:0f:
                    41:74:ab:dc:7b:be:73:05:0e:30:9e:15:9d:7a:7e:
                    61:70:97:a3:7e:2a:84:6f:85:39:99:43:a3:08:0c:
                    5a:a0:18:32:a4:4a:f5:9c:a8:00:4f:10:8e:6d:d9:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BE:4C:A3:18:F3:FC:27:AB:6C:79:7D:4B:20:AE:1B:36:14:3B:21
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:07:47:56:31:6f:24:fd:fe:8c:96:55:f3:7f:fc:cb:61:
         91:b6:30:d3:dd:bc:ae:49:ec:01:9d:8c:ba:94:2a:71:07:c8:
         04:eb:57:9f:17:12:3d:82:a7:ef:8a:b3:68:3f:29:a8:a9:33:
         2c:3c:87:14:89:5a:fa:1b:fa:1c:12:91:d9:5e:d1:0d:3b:00:
         d4:31:b2:75:a7:cd:79:86:86:8c:e2:d4:2d:cf:94:6c:55:58:
         12:50:cb:1e:90:34:02:41:54:12:70:67:87:b2:cd:63:79:29:
         70:c3:82:5a:d6:5b:14:6d:3e:da:e9:de:5a:e9:60:9a:5e:bb:
         87:83:26:3c:7f:8e:5d:ad:c7:a4:a7:a5:74:47:0f:06:ad:da:
         c8:63:6c:14:1b:50:bf:43:51:4a:75:96:f3:4e:85:93:b1:2a:
         3a:ff:68:7d:f7:e8:b6:2a:bd:6f:af:53:d2:b6:4e:4a:63:e7:
         f6:97:ef:32:e4:27:45:39:b9:2b:bf:55:1e:5b:30:dc:a8:e2:
         eb:85:cb:5f:fd:6d:e2:45:75:1a:4a:98:99:e6:e2:10:42:28:
         c7:27:6d:57:0a:24:2b:28:04:a1:fb:d9:bd:af:b8:62:af:3c:
         7e:b2:90:5e:b2:b8:82:f5:b9:18:da:a7:d8:8f:2c:42:d9:ae:
         c7:db:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:57:58 2025 by rpki-client