Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          R++gLkrNgU4dUdKi4syZ72N39g+k0tQPn5qgWTQXnz0=
Subject key identifier:   0E:0E:7A:10:F8:3B:94:98:EF:15:D9:2E:93:D7:C8:2C:46:69:34:28
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       20A403EC2B041A8387EFE6FA68A1429C40B7C5BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          014A
Signing time:             Tue 05 Aug 2025 16:48:55 +0000
Manifest this update:     Tue 05 Aug 2025 16:43:55 +0000
Manifest next update:     Wed 06 Aug 2025 19:12:55 +0000
Files and hashes:         1: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: UdG7kbJM/WVCbUaEpLZG+mOcMv/uiRVonmIjQ54ofpE=)
                          2: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: 8P1eaFp0tA8qC8rMxyfqGAMEpI9v3qQCV5zgBFTyZZg=)
                          3: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: hQb+4bJCLueZdw9zMe8maPJ2VFU86LTKiK7lH2fIgzA=)
                          4: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: roCjiwn3BFM68/X9lTNC/eHWHyzOA8loX33ToscVxEs=)
                          5: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 9nEqa5tSdE4U2Bk6FZixssrYslJxLVWNmjZzPYiScQE=)
                          6: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: 89o19WocaUMEG8Mvhg4alyCUTDyw6FScHXfUvRGE+T4=)
                          7: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: pTb4BZBb+vT1N3y2rOEzZTkDwA1MFDS+AauZA2gcMWU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 19:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a4:03:ec:2b:04:1a:83:87:ef:e6:fa:68:a1:42:9c:40:b7:c5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Aug  5 16:43:55 2025 GMT
            Not After : Aug  6 19:12:55 2025 GMT
        Subject: CN=0E0E7A10F83B9498EF15D92E93D7C82C46693428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:34:3a:9f:36:18:36:e5:18:cb:1f:d6:28:
                    58:c6:cc:3d:82:9b:54:e5:f8:ea:6d:e7:2e:87:65:
                    ae:27:cb:ac:c2:97:98:d6:c7:8a:5c:6d:68:7a:5f:
                    31:85:3b:7f:c7:ae:f3:c4:71:da:97:69:a7:2f:2d:
                    da:cf:c2:5d:e8:4f:27:90:e3:e2:1e:82:13:4a:52:
                    29:83:66:b1:06:c2:74:27:fd:80:78:8e:27:8d:b2:
                    ea:e1:35:7b:d2:5b:08:44:35:23:23:4e:a6:cc:a9:
                    91:a3:e6:4b:d1:02:90:10:0f:bf:a0:02:33:32:f6:
                    94:69:04:27:eb:2e:d8:f8:d0:4c:8d:14:4c:fe:bb:
                    45:04:80:fe:25:07:36:f0:94:54:93:d2:bc:5c:49:
                    67:9b:ed:24:fb:b6:42:87:0e:4d:64:07:8f:9c:a0:
                    6a:6c:4c:0f:27:5e:fa:19:dc:68:be:55:85:78:67:
                    a8:1c:b9:30:bc:27:90:d4:57:4e:2e:52:6d:21:b6:
                    b9:d5:3b:82:9c:a2:68:31:47:8b:d5:93:83:e3:b7:
                    35:36:8a:16:89:68:06:3c:b1:04:69:af:d8:c3:db:
                    21:7d:23:79:0a:56:5f:de:26:e1:21:fd:f8:20:5d:
                    b4:f7:c1:83:4e:5c:12:22:9e:43:52:2f:7b:e5:c4:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0E:7A:10:F8:3B:94:98:EF:15:D9:2E:93:D7:C8:2C:46:69:34:28
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:ce:2c:c0:f3:f8:77:80:32:ea:4b:d1:66:9e:84:4c:39:
         62:8b:7d:93:c2:85:e0:f6:75:a9:3d:57:31:d6:96:1f:71:d1:
         86:df:43:50:e2:81:38:76:33:df:ac:a7:9a:72:a5:1e:77:41:
         d4:40:1b:50:3c:05:59:7c:2a:23:91:5b:68:e4:21:51:98:28:
         fc:ac:c0:e5:b9:1b:8e:30:8a:60:68:23:40:81:eb:5a:1c:4d:
         4c:4e:e2:8a:e2:75:6b:c7:23:47:70:39:8f:30:6c:19:7b:12:
         2b:c7:05:16:1d:b7:66:5b:2d:63:18:50:3b:b5:65:31:99:c3:
         56:0d:ed:52:58:f9:c8:a5:35:01:47:62:05:8c:27:8a:33:20:
         d2:41:88:11:90:5a:26:79:02:ea:71:43:ce:f8:25:e3:10:36:
         5b:20:2d:27:6e:f7:13:29:0e:8d:4e:e0:d2:61:b1:f1:83:27:
         61:e8:61:f5:d2:8a:41:0f:b4:08:16:ff:ab:67:1b:c8:b5:17:
         fc:42:39:d2:3a:3f:c7:da:ac:ea:b1:73:35:18:8e:b2:62:aa:
         9b:e2:c7:fe:0c:0b:e9:7a:e1:f2:8e:1f:a1:39:61:6e:b9:88:
         6b:4f:5d:fe:96:70:b9:bd:be:03:d2:e9:9b:40:b5:a4:1b:ca:
         c3:c3:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:30 2025 by rpki-client