Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
File:                     31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft (raw, json)
Hash identifier:          5OFxMHqqUn7Z0mm2MoXfQCYACd5F+vKR3G9L6SMgcyU=
Subject key identifier:   2C:C8:D5:35:A3:14:8A:E1:36:27:36:84:D6:1A:78:F8:46:0D:86:ED
Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3
Certificate issuer:       /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
Certificate serial:       34817A6AA7F95CB43DFB4C1EC4F624F1A65BC0F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
Manifest number:          0308
Signing time:             Wed 05 Nov 2025 09:06:01 +0000
Manifest this update:     Wed 05 Nov 2025 09:01:01 +0000
Manifest next update:     Thu 06 Nov 2025 09:54:01 +0000
Files and hashes:         1: 31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl (hash: u1VUs20cwTTGwUbikY5exX/S7LFT+wemrzX2QV9oW84=)
                          2: 3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (hash: Mh6mp2NI59RQVoXN3aFVokMT6fJWu85UdtTFNII0mpc=)
                          3: 3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (hash: sfnLaTHDQS9Ygt/qvSr8vquvrC5x88RVTot0u1y0wjs=)
                          4: 323830343a363966633a3a2f33322d313238203d3e20323730333034.roa (hash: mCWseisLBFmCaMIAICO1RASOUVqA8VtzNh9BsMwSD1Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 09:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:7a:6a:a7:f9:5c:b4:3d:fb:4c:1e:c4:f6:24:f1:a6:5b:c0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
        Validity
            Not Before: Nov  5 09:01:01 2025 GMT
            Not After : Nov  6 09:54:01 2025 GMT
        Subject: CN=2CC8D535A3148AE136273684D61A78F8460D86ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:9a:ac:e6:6d:61:ee:5c:ac:74:f6:eb:6c:
                    7d:f6:26:da:2f:14:7d:79:30:e8:08:bd:06:97:ec:
                    3d:f6:0f:1f:7d:e4:9d:47:ad:37:54:9a:de:00:2b:
                    a2:44:b3:77:02:14:82:77:b4:8c:00:e7:87:d7:a9:
                    68:04:ea:ea:88:91:ef:31:29:af:59:4a:15:e7:34:
                    6b:8f:7f:b9:92:58:6a:f0:48:54:7d:74:03:83:e9:
                    1d:8e:e5:c9:37:be:7d:75:2d:3b:6e:58:6c:b8:2e:
                    8f:a7:3d:11:d8:80:81:68:1b:23:7b:06:13:42:29:
                    72:dd:a4:81:e0:a2:84:e9:3a:44:fe:e8:ea:cd:69:
                    ba:5d:62:5c:de:b1:50:03:d4:be:41:52:9c:18:0d:
                    8b:b5:34:f0:86:44:8a:fc:26:e5:70:89:20:64:8b:
                    64:ac:3c:7e:a0:dd:83:55:49:bc:45:4f:df:0e:d0:
                    f4:77:98:14:35:88:97:e9:2b:50:54:ea:3d:dc:5b:
                    c6:21:63:f9:8b:c5:2e:86:9f:04:96:3a:ea:7d:e8:
                    06:03:26:32:da:4f:a8:20:79:c0:20:67:a9:b1:68:
                    36:35:f7:64:f4:b6:15:96:21:bc:dd:c6:b2:1f:dc:
                    05:df:8e:e5:98:de:b9:16:7a:b5:2f:fa:32:7e:51:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C8:D5:35:A3:14:8A:E1:36:27:36:84:D6:1A:78:F8:46:0D:86:ED
            X509v3 Authority Key Identifier:
                keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:85:e0:ea:f0:b5:17:64:6a:e4:1a:4e:89:bd:e9:58:56:
         58:ee:74:8e:08:aa:75:8f:eb:1c:76:44:af:17:ad:9b:9d:70:
         53:49:a6:e0:63:fa:3b:3b:2a:83:1d:d5:b7:c3:a2:2e:53:66:
         7a:19:8e:cd:14:7b:23:92:c8:4d:44:1a:50:24:6c:b2:07:47:
         0c:d8:28:6e:6e:85:55:eb:ab:6d:62:5a:8a:dd:77:3c:a3:3e:
         e0:6e:69:7f:9f:0a:ce:1c:a3:7a:98:55:c1:46:ff:78:0c:f1:
         63:af:94:09:02:22:fd:f0:c6:75:b0:e4:b5:7e:2d:16:1f:04:
         34:cf:56:b7:c1:9a:ed:82:06:b0:df:40:b7:f9:b4:9f:cd:0f:
         3b:1a:2f:2f:60:62:e4:17:4c:59:3a:db:5c:6a:82:45:13:1a:
         bf:7b:94:32:0e:af:e0:68:b5:75:21:7c:09:33:6f:2a:bb:5a:
         6e:c7:cf:29:9a:dc:ca:4b:a5:f1:88:17:8d:7b:07:01:3e:fa:
         0f:e9:3f:d7:99:f0:8f:4e:df:38:80:e6:97:3f:a6:36:1a:b0:
         d3:f4:94:8e:6b:38:16:b2:84:b7:ba:a9:3a:de:7d:b5:b4:80:
         2d:09:63:25:c0:e5:93:dd:b1:62:6f:3c:87:98:0b:bf:8a:cc:
         06:0e:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:34:41 2025 by rpki-client