Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
File:                     1E25984D718583699E6F98027D46C4F064FED1A8.mft (raw, json)
Hash identifier:          a1tMKlMIK5RsZdf72jFxzPYFvglIR71T71Z4KvIVww4=
Subject key identifier:   AB:C8:4A:FD:F8:F6:44:93:E9:09:5D:D9:02:55:D1:C9:42:C7:16:5F
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       40F57C8EE510EDC20624B524F12F79E7F8ACD31D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
Manifest number:          025D
Signing time:             Mon 04 Aug 2025 06:43:11 +0000
Manifest this update:     Mon 04 Aug 2025 06:38:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:08:11 +0000
Files and hashes:         1: 3139312e3234312e3138322e302f32342d3234203d3e20323633363736.roa (hash: KsCGZvilW2kC2iDS+aLiT9/jItpGpcFtg8+Jo5pFVZ8=)
                          2: 1E25984D718583699E6F98027D46C4F064FED1A8.crl (hash: +IfK4E6v+HIhqd3IFz3ATzGxG36q3aQiskfydwzBt80=)
                          3: 3139312e3234312e3138302e302f32342d3234203d3e20323633363736.roa (hash: OatUzLw/vgJhr0u8r5BV0cwJDcmxLcjXyXvPfSoUmvc=)
                          4: 3139312e3234312e3137362e302f32342d3234203d3e20323633363736.roa (hash: /uqypYomoT7Xbxt0+2mgFAwZGz/9u3SWK8Mzi6KGPqM=)
                          5: 3139312e3234312e3138332e302f32342d3234203d3e20323633363736.roa (hash: splU5BrzdpYm3SBDFGpoXB5ufRP2FNA06B5zDNke9WQ=)
                          6: 3139312e3234312e3137372e302f32342d3234203d3e20323633363736.roa (hash: jnQHK5eaETbEfqDBraayylf/p8pbD5ZITJ0gXzjfAaE=)
                          7: 3139312e3234312e3137382e302f32342d3234203d3e20323633363736.roa (hash: T8627KCWKTD4bEqZKelhpVds0SDDcrmT1lcANX03Kgc=)
                          8: 3139312e3234312e3138312e302f32342d3234203d3e20323633363736.roa (hash: iIEA+un6Vgu61aDe1e2zqt1VX73erk05NJ+59ydsOgg=)
                          9: 3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa (hash: oHIBMHQs1xtXXX+swy+ZY0papz4B88LVvYv3uLNtWk4=)
                          10: 323830343a313137303a383030303a3a2f34382d3438203d3e20323633363736.roa (hash: wxyS/pBRtUhZXjWWjYvUHH6IbGFKMkYauh9TPx/gpk8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 08:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:7c:8e:e5:10:ed:c2:06:24:b5:24:f1:2f:79:e7:f8:ac:d3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: Aug  4 06:38:11 2025 GMT
            Not After : Aug  5 08:08:11 2025 GMT
        Subject: CN=ABC84AFDF8F64493E9095DD90255D1C942C7165F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:c9:87:88:e6:ae:7a:dd:ad:e9:54:ba:ed:
                    3f:31:88:4e:e3:ac:42:ee:70:c9:22:07:8d:cf:9f:
                    89:7f:2c:8e:cc:17:02:bc:b7:12:93:34:b7:f0:b8:
                    14:70:b3:a4:31:7a:f9:f1:eb:47:c9:2d:c9:48:d3:
                    ff:b0:fa:21:92:d8:60:cb:c9:9f:db:31:9a:fc:07:
                    ac:10:bd:44:c3:9a:7a:58:4d:0b:02:c3:f3:69:27:
                    39:ca:71:71:b8:8d:29:62:d5:0f:e7:d7:27:5b:92:
                    8c:7f:19:3a:45:12:80:fe:39:40:61:f4:a5:e8:a7:
                    65:7d:f9:d5:6f:91:c4:68:a8:0f:56:7e:7a:f8:a6:
                    42:7f:26:13:3b:1b:42:6c:cb:30:40:f6:79:bc:d5:
                    fc:c1:97:db:ff:1e:15:36:26:a4:a4:c5:41:cc:a8:
                    bf:a3:2c:a3:4c:ca:b6:ad:0c:6f:a2:80:04:ea:c2:
                    6f:57:81:7d:61:ff:d6:73:2e:fa:ce:2d:77:43:a6:
                    4a:c9:92:4b:88:78:48:f6:53:07:c2:74:6d:44:09:
                    be:5a:bf:12:1a:71:4c:80:c9:d6:e5:4e:24:68:e4:
                    24:c5:d2:e4:80:a8:31:fc:b6:6e:16:e5:aa:88:f0:
                    90:7a:8b:8b:d0:e6:35:17:d9:b7:c8:65:fc:07:2f:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:4A:FD:F8:F6:44:93:E9:09:5D:D9:02:55:D1:C9:42:C7:16:5F
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:58:77:bb:ed:f0:57:08:6f:06:e3:b8:b4:45:0a:eb:b9:56:
         e1:7e:7e:0d:a9:2f:92:9a:46:d2:8a:a6:72:0b:d9:52:7f:95:
         44:a3:ac:16:45:68:43:95:58:a5:48:1f:66:f5:9f:90:a1:f8:
         fc:c7:99:ed:1d:16:e7:36:31:5d:53:b2:56:85:73:9a:e7:00:
         27:7b:d1:21:9d:86:7c:22:d1:99:a9:e5:ea:1b:57:c0:9d:3c:
         40:5d:ee:57:c4:75:24:60:1c:5d:09:aa:d4:93:ae:a7:53:d8:
         9a:50:60:77:17:ea:56:a7:02:af:34:3e:36:64:71:a3:d9:cc:
         14:cf:bf:09:8d:99:c0:a2:f4:38:81:c6:c0:38:cc:eb:01:9c:
         1e:00:d8:60:18:90:17:dd:44:e4:67:96:1f:7e:39:5c:61:e7:
         30:3f:5d:6e:b8:77:67:18:1c:dd:2f:2b:68:4d:fb:73:5d:67:
         a4:51:a8:4d:e7:6a:5e:35:a6:de:64:c3:31:b0:16:26:13:10:
         47:cf:29:18:93:e2:9a:8b:6a:62:c9:8a:9b:e7:f0:f6:a6:b3:
         23:b7:dd:4b:87:8a:eb:d1:6a:7b:08:b2:0e:8d:bc:af:cb:9d:
         4b:5a:e7:49:52:91:56:33:bd:dc:06:ab:b4:0a:a1:ac:d3:c2:
         3c:c4:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:41:32 2025 by rpki-client