Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json)
Hash identifier:          PW5Qa6tTyaIBU9SLmiSIzn9hbkAa/VPzeyAzzzSncpA=
Subject key identifier:   AF:FE:28:0C:88:C2:D0:B4:D4:ED:5A:22:FE:41:5C:9D:7D:24:0B:69
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Certificate issuer:       /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial:       6AD13BE228DB9B2B381B6EC0CE1C12280971CF7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
Manifest number:          0132
Signing time:             Mon 16 Jun 2025 17:27:35 +0000
Manifest this update:     Mon 16 Jun 2025 17:22:35 +0000
Manifest next update:     Wed 18 Jun 2025 08:17:35 +0000
Files and hashes:         1: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: sWCWC2blugwDA5GjLHplzoTjJrDf4ml2mn5K8bTAaT8=)
                          2: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: Mpmomnqa+CW9MYQzkoigBQVCDuEGMWfxqvE1MwxP2Zs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
                          rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 07:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:3b:e2:28:db:9b:2b:38:1b:6e:c0:ce:1c:12:28:09:71:cf:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Validity
            Not Before: Jun 16 17:22:35 2025 GMT
            Not After : Jun 18 08:17:35 2025 GMT
        Subject: CN=AFFE280C88C2D0B4D4ED5A22FE415C9D7D240B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:77:ba:c9:69:86:50:d3:0e:61:43:43:76:
                    69:dd:9e:6b:98:ca:fa:2c:05:2e:13:78:aa:2a:da:
                    a4:64:ad:cc:6d:c2:b3:42:a4:45:93:86:8e:53:4d:
                    e1:39:d5:27:e2:c3:10:61:05:46:60:d1:98:22:80:
                    82:08:e6:4c:3b:4d:05:3c:ad:d1:a0:60:36:a8:85:
                    24:ab:7f:13:55:2e:71:e2:bf:b9:f9:87:ff:05:05:
                    5f:43:e3:06:9c:18:1e:9a:29:56:68:26:43:5f:9e:
                    e3:93:35:be:03:02:ba:2e:87:bb:27:af:1f:8b:b9:
                    7a:9b:56:35:aa:27:95:83:04:b4:6e:c3:78:92:23:
                    02:09:d3:f8:bd:1a:af:10:f3:21:0d:bf:e4:09:9f:
                    d4:7a:bb:f5:a9:ab:73:3d:b5:3f:9f:ef:38:4e:f2:
                    fe:9f:2b:88:fb:b5:66:38:71:ad:85:c9:e3:eb:86:
                    6d:4f:fb:d9:4d:d6:47:83:fc:3a:de:5f:e0:10:45:
                    9f:ca:1b:e7:06:ed:42:bf:59:af:d6:a1:bc:05:3a:
                    83:5e:e6:c0:ba:10:a8:e8:c4:db:68:66:c4:85:a0:
                    3b:22:1e:da:9c:af:a7:d0:b1:b8:27:65:76:5a:b0:
                    2d:54:ec:4a:86:ef:fd:af:fe:93:4f:b1:30:35:fb:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FE:28:0C:88:C2:D0:B4:D4:ED:5A:22:FE:41:5C:9D:7D:24:0B:69
            X509v3 Authority Key Identifier:
                keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:5c:57:27:9f:80:89:e0:07:2f:7f:5c:c3:51:57:42:bb:
         a4:76:cd:81:fe:c5:9c:c6:7c:c3:40:7e:e2:df:69:7a:9a:00:
         fd:12:a0:55:94:a7:fc:81:b2:57:48:51:f6:c2:e3:d5:3e:d7:
         6f:c6:42:3a:b6:a1:51:20:5c:09:43:3c:c4:c1:32:da:30:c2:
         d9:95:ff:11:d2:b2:04:4c:13:70:3c:89:1f:73:5d:f8:a9:4a:
         69:7b:61:02:5a:21:7a:23:2a:65:49:a6:58:77:5d:59:46:d1:
         7e:6c:fe:d7:62:49:e1:f4:ff:23:dd:be:b3:96:73:b2:03:d2:
         77:0b:28:c3:ba:80:a9:c4:ce:a9:fb:bf:c5:f7:bb:c7:f8:da:
         0b:46:da:4b:8c:19:8a:cc:3e:e8:e1:98:02:ad:cc:09:bf:21:
         18:69:5a:df:2b:d5:97:2a:2f:ff:c3:09:a0:e4:c8:74:50:35:
         c1:23:c0:d2:56:51:e8:09:b1:75:d0:d0:95:91:af:e2:cf:47:
         60:ae:fb:6c:09:0a:83:24:9e:3a:bf:39:02:a5:05:32:8f:9c:
         02:56:e5:99:96:0a:f9:a6:9e:d4:e2:0c:a5:35:73:05:5c:7d:
         e4:1c:82:57:c3:5f:90:b7:8d:28:1a:6e:b0:f7:7c:bd:9d:92:
         3e:0e:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:51:49 2025 by rpki-client