Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
File:                     25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json)
Hash identifier:          l+VXb3Uo/jbHVUsw0u4UWuSw+ewDCcRqDIPwABFJFSo=
Subject key identifier:   0C:C3:75:2E:84:03:A4:84:6D:F2:1C:6F:B2:68:83:A9:56:72:F7:5E
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Certificate issuer:       /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial:       2FD98C3AC6D343F7CD430BACC398362707362778
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
Manifest number:          028F
Signing time:             Thu 07 Aug 2025 06:12:39 +0000
Manifest this update:     Thu 07 Aug 2025 06:07:39 +0000
Manifest next update:     Fri 08 Aug 2025 08:52:39 +0000
Files and hashes:         1: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: stP92oJ4IE5MiAZ9P5AQoFIryaIIHVovcUqJt+GD6Mc=)
                          2: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: VdRdNJPGOuzICrsBsI/vNBoJziaXW8EXJ3c5VSEkYFQ=)
                          3: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: hVK/GH5J5gESoNpOj4BeuJw0gt9hYssVFQjGwQ3BqNw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
                          rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 08:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:8c:3a:c6:d3:43:f7:cd:43:0b:ac:c3:98:36:27:07:36:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
        Validity
            Not Before: Aug  7 06:07:39 2025 GMT
            Not After : Aug  8 08:52:39 2025 GMT
        Subject: CN=0CC3752E8403A4846DF21C6FB26883A95672F75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:dd:de:1f:d0:0c:be:1f:30:34:71:75:ed:
                    32:0c:0c:da:a4:8b:29:9c:10:f4:15:93:ea:24:19:
                    54:b2:b0:1d:0d:4c:5b:a2:f4:ee:9b:cc:d7:59:7b:
                    54:ef:3c:46:cc:37:08:6d:e8:e6:4e:47:6c:80:dc:
                    aa:f6:dc:71:34:78:0e:87:45:f8:f9:48:3a:a7:b8:
                    79:f2:d2:76:1e:b3:a8:a7:b0:be:3a:78:cc:ca:ba:
                    b1:e8:57:d2:e4:58:79:d4:ce:f4:b0:a5:ed:1a:76:
                    ba:14:a3:19:c1:db:30:fb:85:52:95:43:40:ad:9d:
                    78:f1:9d:38:d1:3d:0e:fc:1f:42:26:a1:55:f1:5b:
                    b1:52:69:9b:c2:3c:e7:1d:4d:e9:04:be:5d:fe:0b:
                    2e:17:b1:fd:ec:7e:7b:a3:50:a4:f1:50:f9:5c:c0:
                    5b:9a:23:7e:ed:2c:6a:b0:a4:90:9f:fa:76:1f:c4:
                    3d:52:41:2c:d0:43:41:0f:de:94:67:c2:b5:9b:d1:
                    ed:2a:ff:df:49:5d:9b:aa:50:08:1b:58:50:fb:de:
                    c2:1e:a3:e4:73:dd:08:b2:81:7b:34:28:80:06:e6:
                    9a:03:f5:d5:88:ca:ff:52:45:2b:7c:9a:3c:d2:c1:
                    b6:97:4b:f9:70:e2:a2:0a:95:b2:78:07:2a:8a:a4:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:75:2E:84:03:A4:84:6D:F2:1C:6F:B2:68:83:A9:56:72:F7:5E
            X509v3 Authority Key Identifier:
                keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:32:d6:3a:f7:17:57:6a:a1:6b:7f:55:7a:9f:cf:43:aa:
         20:d7:33:54:3c:e4:e2:56:32:3a:74:16:ce:01:45:f0:3c:61:
         2a:aa:a4:ec:e1:38:36:9a:b7:23:b3:19:dc:9d:33:33:75:bf:
         6b:b7:92:4f:a1:2a:c4:c3:f4:c4:9c:fb:14:f7:a6:a5:6c:18:
         ff:32:a8:97:2b:d1:1b:e8:28:6a:d6:b8:c2:d7:7a:2f:9f:39:
         24:db:ad:23:10:dc:74:86:e0:5b:12:83:ee:8c:6f:4b:8c:72:
         b8:70:e7:c7:a2:3b:20:c6:8a:ab:d6:de:68:78:c2:37:45:28:
         62:71:7a:67:cd:c9:a2:e8:1c:68:f0:e4:65:d0:c0:f3:f0:96:
         a5:55:84:0d:53:b5:48:b7:ac:a9:44:d8:e7:8a:49:f0:ca:6d:
         cb:7f:6e:a0:9a:a7:4e:23:de:92:d4:58:23:7d:bc:df:8d:f9:
         36:8c:27:94:09:09:7e:68:8d:04:5c:79:66:1f:5a:ca:15:04:
         a4:0f:43:7b:cf:33:64:d8:eb:fb:c7:f9:dc:18:58:9a:de:ce:
         40:ce:30:f6:af:43:20:3a:4a:98:94:87:f6:7e:cf:3a:60:8d:
         6c:d1:25:3d:eb:32:ea:9b:74:05:86:42:b7:57:25:0e:61:58:
         ef:5c:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:35:03 2025 by rpki-client