Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
File:                     130DA06C9537B1DF6544F6290A638F863755DA73.mft (raw, json)
Hash identifier:          SX8pvgCWNDpAGukwZbrVGW8TCsoszYE7Fv9FAcSo27k=
Subject key identifier:   F2:12:09:F5:BF:AE:9E:89:A7:D7:EE:FD:8D:44:A6:73:54:E7:95:FE
Authority key identifier: 13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73
Certificate issuer:       /CN=130DA06C9537B1DF6544F6290A638F863755DA73
Certificate serial:       53043BFED06E1841C7E9E790D452DF4155B5BEE2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
Manifest number:          028C
Signing time:             Wed 06 Aug 2025 02:13:23 +0000
Manifest this update:     Wed 06 Aug 2025 02:08:23 +0000
Manifest next update:     Thu 07 Aug 2025 05:53:23 +0000
Files and hashes:         1: 323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (hash: IEUG8tpm8hk0t2b0PVgy9JJ26yNgISfPczlj5pIw9vg=)
                          2: 130DA06C9537B1DF6544F6290A638F863755DA73.crl (hash: y3N8KDahLlUKnsorMhikP1eHTkmJdnubWIK1tujo1DU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl
                          rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 05:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:3b:fe:d0:6e:18:41:c7:e9:e7:90:d4:52:df:41:55:b5:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130DA06C9537B1DF6544F6290A638F863755DA73
        Validity
            Not Before: Aug  6 02:08:23 2025 GMT
            Not After : Aug  7 05:53:23 2025 GMT
        Subject: CN=F21209F5BFAE9E89A7D7EEFD8D44A67354E795FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:38:91:8b:b8:60:ea:6b:6e:f1:17:e8:90:
                    e0:41:73:bd:c7:d9:ca:9e:f6:fc:9c:4c:79:f1:83:
                    e6:1b:98:9f:cf:af:ef:5f:ee:0f:f6:f5:75:16:de:
                    49:75:41:f2:0d:63:95:b6:bb:59:5b:d2:45:83:a0:
                    a2:c5:e3:2c:55:87:80:51:bf:44:56:33:b5:66:e6:
                    f3:1d:d2:c9:1b:1f:18:6a:93:ce:e6:5b:61:1d:00:
                    3d:b1:81:fe:94:0a:c5:79:22:2a:7e:b5:3f:36:b5:
                    c8:8b:79:ab:4d:11:ce:b8:7c:e8:53:62:46:3b:be:
                    d0:e9:e5:3a:ce:cd:f5:52:dc:71:ab:29:b6:8e:b6:
                    3d:d1:a2:e0:24:cb:3d:e3:e1:dd:39:b5:50:20:51:
                    e6:53:4b:45:4f:2a:19:a7:48:c5:27:45:64:fc:ab:
                    cc:2d:63:20:1c:f5:a7:de:88:b9:a5:81:5e:f2:c3:
                    2f:42:ad:7b:b2:84:d3:33:30:0d:e1:8b:f2:03:92:
                    03:8f:ca:8f:dd:12:0b:ef:fa:86:54:5c:63:ba:e7:
                    a6:b0:76:06:aa:25:d2:90:2b:e0:8d:31:fd:e6:26:
                    09:2a:69:94:b9:9b:cc:d0:49:71:2f:1d:26:2c:c7:
                    02:a8:77:91:b7:76:93:24:92:23:13:f9:62:bd:84:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:12:09:F5:BF:AE:9E:89:A7:D7:EE:FD:8D:44:A6:73:54:E7:95:FE
            X509v3 Authority Key Identifier:
                keyid:13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:ad:8a:df:66:c8:c1:dd:07:83:b6:74:0b:39:00:cb:68:
         3f:35:50:28:96:d4:38:21:3e:05:1a:bd:bc:3f:d1:0d:fe:8c:
         7d:fb:86:b2:d6:d2:5c:36:c6:8d:2a:74:50:b0:0c:d0:c2:af:
         2e:6c:dd:77:d4:4a:72:de:6b:97:88:80:ab:58:3e:1c:df:63:
         2a:f2:a4:eb:d2:b0:cb:ad:ae:98:0d:c4:5b:69:0b:e1:18:d9:
         2d:76:c7:5c:98:1c:05:20:78:67:34:da:fb:b2:16:62:a5:23:
         21:4d:01:df:bf:58:0f:3a:d9:63:04:aa:87:73:e1:49:5c:89:
         ab:4c:ca:58:d0:2f:53:14:0d:fc:bc:1e:6e:a4:a1:78:c1:07:
         2c:ea:0d:20:ba:db:b0:02:57:b3:97:75:07:4b:0b:0c:86:60:
         f1:fa:28:cc:9d:51:78:e8:d0:dd:72:5f:af:4a:ae:32:71:c5:
         ed:de:c6:ac:ee:43:21:7d:0b:2b:15:13:46:04:f9:8c:1f:05:
         53:e5:eb:15:9f:58:51:2a:bd:cf:75:64:10:b8:66:b5:45:67:
         91:05:f9:3d:28:2d:1f:9a:98:b7:10:fe:22:62:36:2d:ff:59:
         1b:59:f4:2e:50:6c:15:33:e5:9f:18:15:8f:45:82:1a:4c:56:
         01:fd:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:22 2025 by rpki-client