Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
File:                     48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft (raw, json)
Hash identifier:          r/W73AYK76jgoqRWWPxZc6fXG56OVZiTWKwZcQ+qz7o=
Subject key identifier:   18:49:98:D9:8D:5A:63:E0:77:3E:D1:DE:81:9F:4C:9B:CE:ED:8B:16
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       214951C208202E9E3091B2362B4C0FFB9C9681C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
Manifest number:          0257
Signing time:             Mon 16 Jun 2025 15:48:12 +0000
Manifest this update:     Mon 16 Jun 2025 15:43:12 +0000
Manifest next update:     Tue 17 Jun 2025 15:59:12 +0000
Files and hashes:         1: 3137392e34392e3234382e302f32322d3234203d3e20323731323231.roa (hash: Dv6hxsDroS4vlXUuIA9sQTKVJgCR9NtSdnPeeNt1eEk=)
                          2: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl (hash: FavBDjCAXFy2vYHa3HqOh2wmshS9RC9gSa3gQp8N0Eo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl
                          rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 15:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:51:c2:08:20:2e:9e:30:91:b2:36:2b:4c:0f:fb:9c:96:81:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: Jun 16 15:43:12 2025 GMT
            Not After : Jun 17 15:59:12 2025 GMT
        Subject: CN=184998D98D5A63E0773ED1DE819F4C9BCEED8B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:dc:12:77:63:78:85:a3:5e:55:b7:f9:6b:
                    b1:03:d4:f5:3b:f6:40:fb:e8:81:4a:88:88:17:62:
                    e3:49:b6:35:ad:dc:8f:b3:5e:f1:7c:d6:9c:c6:2a:
                    c4:54:3b:c8:ff:a6:8e:b5:3c:b0:d3:da:40:dc:64:
                    6a:ff:c1:80:42:a3:03:0d:a4:da:84:70:b2:27:af:
                    72:29:1e:1d:e3:40:6f:cf:2a:a9:2f:12:a7:93:9b:
                    36:4c:84:46:55:44:9b:d1:94:3c:dc:04:9a:9d:a1:
                    5b:63:98:e1:38:58:0d:65:da:c1:76:35:0e:1e:53:
                    94:6a:bc:8e:c6:69:e5:96:63:6a:a4:c1:80:05:c8:
                    6a:32:3a:70:86:6f:26:bd:c8:8f:a3:a5:c0:17:42:
                    36:ca:da:af:d0:b4:89:73:21:00:55:eb:31:cb:5f:
                    d1:17:cc:60:f6:80:ee:2e:d7:47:34:d6:79:46:e4:
                    08:c3:38:96:a9:ec:b1:49:c1:52:cc:9f:02:b6:ee:
                    a8:22:8c:fb:bd:28:b6:b6:a2:6c:13:f4:3c:de:7b:
                    0b:38:71:ee:3a:8d:cd:b9:09:bd:b1:e8:52:ee:b8:
                    15:13:05:f0:de:8f:36:7b:c5:04:2f:80:21:12:09:
                    bd:b8:2c:fa:b5:c5:2f:84:3a:f4:dc:ab:0c:03:34:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:98:D9:8D:5A:63:E0:77:3E:D1:DE:81:9F:4C:9B:CE:ED:8B:16
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:43:63:d2:8e:15:ed:e6:cd:30:4d:68:43:97:de:9f:7c:
         05:bd:4d:dd:31:30:f2:4a:a9:9f:cd:0d:c7:16:20:51:08:a1:
         d5:e6:69:b5:47:70:12:5e:d9:52:e0:6f:e6:9e:13:77:d2:ac:
         a3:9c:93:7f:c3:8b:20:98:76:91:4c:85:a1:46:4d:83:89:11:
         5a:0c:fb:9d:67:a5:e7:91:c1:fe:69:6c:02:c7:bb:8d:84:66:
         28:9b:a4:1d:ef:f9:33:cf:a9:a2:a1:fe:39:76:be:1a:98:24:
         66:01:1d:1d:b3:6c:6f:6c:21:50:72:59:44:ff:27:15:58:c1:
         a8:7c:19:5c:81:20:72:9b:09:e2:7d:93:89:71:27:f0:9c:71:
         52:c0:66:7f:d1:d5:82:7b:0d:1d:b2:80:6f:1d:d2:9c:4a:7f:
         57:89:ad:81:d7:83:19:c7:72:6f:c1:8c:4c:67:2d:9c:e9:dc:
         02:b6:41:b7:9a:a0:7a:4a:81:1d:61:16:d4:be:d3:db:b0:92:
         71:f5:a6:82:c0:f7:25:c3:69:03:08:ff:29:fd:ea:d1:05:e6:
         cd:90:b9:4d:23:fd:c4:18:c9:41:f0:51:aa:f9:c2:84:2e:1a:
         d3:ef:aa:8e:55:83:6e:e2:8f:8c:39:6d:07:b1:6a:4a:ae:d7:
         b5:b6:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:10:57 2025 by rpki-client