Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
File:                     970A597B9FBB9D768A57AC58C4580E0C21651B91.mft (raw, json)
Hash identifier:          MngDpmYWyXqQhAtLVccoC4RV74Tc+S/AXbWXRWe06Uk=
Subject key identifier:   8F:DC:FB:85:9D:9F:4C:BD:2E:2E:6B:EA:35:03:BC:DF:A1:F8:90:A0
Authority key identifier: 97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91
Certificate issuer:       /CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
Certificate serial:       23EEE0EF681BF6394A6510230FDFC1BCC38FA91E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
Manifest number:          1A
Signing time:             Sun 10 Aug 2025 10:06:57 +0000
Manifest this update:     Sun 10 Aug 2025 10:01:57 +0000
Manifest next update:     Mon 11 Aug 2025 13:28:57 +0000
Files and hashes:         1: 34352e3136352e302e302f32322d3332203d3e20323638363635.roa (hash: dYY3MlgnhnOml7GIjRRHei2QhjXTZquLadyZnPbyIyg=)
                          2: 970A597B9FBB9D768A57AC58C4580E0C21651B91.crl (hash: YVq9Uz1I/E1F8v0hjegnWGftNCWUH58W16PVSXuwOpk=)
                          3: 323830343a353462303a3a2f33322d313238203d3e20323638363635.roa (hash: 613mbXkb9wniobS2aXA4uFw6FMTpLa8dAExRI3B3X48=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl
                          rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:e0:ef:68:1b:f6:39:4a:65:10:23:0f:df:c1:bc:c3:8f:a9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970A597B9FBB9D768A57AC58C4580E0C21651B91
        Validity
            Not Before: Aug 10 10:01:57 2025 GMT
            Not After : Aug 11 13:28:57 2025 GMT
        Subject: CN=8FDCFB859D9F4CBD2E2E6BEA3503BCDFA1F890A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:e8:04:cc:39:f5:da:76:11:1f:d0:25:de:
                    30:ae:15:d6:a1:2e:c8:34:48:46:77:94:2d:2c:02:
                    14:5c:6a:41:76:2c:6c:c9:cd:e6:15:45:4a:75:5b:
                    6c:80:41:41:ba:2e:92:26:11:72:d4:81:7c:bf:d8:
                    79:9c:52:d6:34:cf:d0:49:5c:95:fd:c0:9a:24:32:
                    e4:5c:52:03:94:0f:9f:de:65:c1:ce:a1:0b:95:66:
                    8d:05:b2:cf:63:ea:e2:55:e4:58:28:f8:c2:81:0c:
                    c5:15:bf:e2:be:e8:65:f3:0f:ca:77:f1:bd:83:4f:
                    21:33:be:ef:d1:1f:54:44:37:a2:f9:20:34:69:7d:
                    49:89:a7:01:00:88:7d:dd:ae:4d:f0:3d:75:80:4b:
                    a1:2c:a8:f9:68:e4:83:d8:84:d0:78:22:e6:52:59:
                    fc:c9:05:72:61:48:cf:2c:0c:8c:fc:3b:18:ad:dd:
                    1b:ca:34:e4:7e:f0:8a:73:25:88:db:e9:b3:56:29:
                    c2:4a:73:11:9d:85:f1:3f:64:f3:8c:d8:46:ca:30:
                    1d:fc:ed:f6:45:0f:d3:53:58:9b:4f:6d:17:4b:61:
                    f2:38:7d:76:d3:89:dd:c2:d6:6d:1a:8c:fe:7d:92:
                    a5:80:dc:66:bc:a7:0b:14:18:1b:8a:e1:d5:4d:c6:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DC:FB:85:9D:9F:4C:BD:2E:2E:6B:EA:35:03:BC:DF:A1:F8:90:A0
            X509v3 Authority Key Identifier:
                keyid:97:0A:59:7B:9F:BB:9D:76:8A:57:AC:58:C4:58:0E:0C:21:65:1B:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970A597B9FBB9D768A57AC58C4580E0C21651B91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/970A597B9FBB9D768A57AC58C4580E0C21651B91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:6c:26:3c:a1:46:b1:73:47:d9:6c:20:1b:1b:f4:44:3c:
         c7:9d:77:68:ab:cd:ad:3a:75:3a:85:64:5a:ab:2d:6a:dc:c6:
         6f:1d:d0:ca:d7:2d:f8:c1:1d:cd:54:f9:ff:fc:1a:99:b5:bd:
         58:27:7f:7a:ba:6e:a8:02:f8:70:1a:fc:0a:98:d2:94:f7:a8:
         00:1e:c0:0f:be:8f:56:70:2b:76:2a:1c:d2:6b:27:07:f1:86:
         ef:f5:d7:98:e8:d3:cf:64:bc:10:19:80:00:34:d3:ac:a6:6f:
         2f:f6:e2:e7:7e:8f:30:b7:59:cc:1e:de:58:81:0f:e6:90:40:
         56:e9:70:44:34:bd:5f:ac:d9:fb:bd:f9:c2:fa:d3:4a:6e:3a:
         f5:00:a3:a8:f2:7a:4d:1f:fa:c6:c7:75:0a:00:6a:ae:a9:5b:
         ad:d6:f3:7c:81:7a:55:70:90:7a:71:55:04:a8:c6:77:0c:27:
         6f:16:54:ed:ff:a2:79:cd:4f:bd:77:a5:30:bc:81:58:a8:f7:
         ac:e4:11:40:1d:7a:d0:48:85:0a:4b:a7:fb:25:4b:1d:bd:1a:
         c0:00:f5:9f:df:5a:3f:20:81:e3:d1:62:5c:0e:d5:73:a1:00:
         f0:f9:33:69:31:18:74:3c:2f:8d:2d:b6:9e:de:86:b5:15:cd:
         3b:d7:76:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:14:27 2025 by rpki-client