Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
File:                     2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft (raw, json)
Hash identifier:          GOBcvAlBAc+W6hlOyNgSzUrfdmaicHmnWMmJlMXq+Cw=
Subject key identifier:   F2:92:3D:23:6F:CE:B9:AD:F6:29:0F:82:01:2D:44:80:9E:28:D0:97
Authority key identifier: 21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC
Certificate issuer:       /CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
Certificate serial:       5C8C15E87C5B2EF15072F8821BC5F913501B397B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
Manifest number:          16
Signing time:             Tue 05 Aug 2025 23:08:28 +0000
Manifest this update:     Tue 05 Aug 2025 23:03:28 +0000
Manifest next update:     Thu 07 Aug 2025 00:48:28 +0000
Files and hashes:         1: 2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl (hash: XU85JTtLNJGvA23cOi+182EZPlwwctGzHiBSXjjwwnA=)
                          2: 34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa (hash: gAWQ8M9C1wzgTODsoLIiZ6lqQhw33L9/YHKUnfKHE4M=)
                          3: 323830343a363731343a3a2f33322d3438203d3e20323639363032.roa (hash: TGVWsGNJFdug9RaukeBlnbFOq0S5LHWB8/5b2RXmLXE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl
                          rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 00:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:15:e8:7c:5b:2e:f1:50:72:f8:82:1b:c5:f9:13:50:1b:39:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC
        Validity
            Not Before: Aug  5 23:03:28 2025 GMT
            Not After : Aug  7 00:48:28 2025 GMT
        Subject: CN=F2923D236FCEB9ADF6290F82012D44809E28D097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:ee:19:f2:b1:77:87:c5:ca:23:a3:8b:ee:
                    0f:1b:4a:fe:6a:b3:7d:d7:f7:05:a8:e8:3f:4c:6f:
                    90:e5:36:32:d9:5e:9b:f8:92:ff:b4:41:5d:0c:8f:
                    1f:10:70:a9:6a:de:ae:0c:9a:70:63:83:a9:ee:24:
                    05:0c:9f:88:51:8a:cb:10:1f:51:7a:0d:6a:1c:37:
                    54:d6:53:2f:de:7e:77:07:37:63:ce:1a:8b:da:96:
                    15:c6:e3:6e:df:73:a6:3e:da:87:80:7f:f6:6b:4c:
                    0d:6b:82:b6:de:36:61:94:13:a3:f2:75:f8:e4:d0:
                    36:cc:2f:26:af:37:44:61:a8:4e:26:26:6a:30:2a:
                    a2:f8:75:ec:95:bc:99:b7:70:2f:32:96:b3:51:2f:
                    95:aa:8e:76:77:28:a3:c8:da:55:14:8a:99:b7:d3:
                    e8:2b:c2:8a:69:a6:5d:2f:97:81:6b:40:47:8b:a9:
                    ac:be:d0:db:d5:ed:db:fd:3d:df:d8:cd:b0:65:90:
                    59:1e:bc:6d:75:ca:c1:c9:6f:85:c2:b7:30:9c:40:
                    d9:c9:50:de:11:39:13:94:c3:ed:d5:fb:6e:7a:f0:
                    b5:67:6d:d5:e0:e8:26:b0:08:99:e0:03:5f:e5:f7:
                    70:50:0d:76:c9:fb:b6:63:ad:be:54:e4:77:46:55:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:92:3D:23:6F:CE:B9:AD:F6:29:0F:82:01:2D:44:80:9E:28:D0:97
            X509v3 Authority Key Identifier:
                keyid:21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:b3:05:7c:49:4a:bd:b3:f4:91:94:fe:88:9c:ef:3b:c6:
         b2:34:c5:12:f0:f0:b6:d3:8d:31:7d:fd:45:68:d8:4b:13:fd:
         5c:01:4d:7e:c2:17:1e:5b:51:2b:e9:17:1d:4e:d8:30:af:c3:
         ee:8f:30:29:cf:4e:26:86:7c:fc:04:6b:d5:16:fc:96:14:4a:
         61:fb:37:17:bf:2b:b3:d3:36:68:48:3b:6e:1e:3b:d5:c8:b0:
         e5:8e:80:e2:c1:03:0e:b4:a4:bd:43:11:dd:19:96:08:d5:87:
         18:96:3b:42:09:87:e8:fc:d7:70:41:1a:10:03:ac:a1:8d:e3:
         89:1f:1e:13:17:8a:1a:4b:87:47:7c:39:31:78:d1:80:e1:13:
         14:21:6c:ab:39:3c:bd:65:e8:57:90:43:c9:f9:b2:7c:00:3e:
         6e:49:d2:8a:05:b2:db:48:7a:d8:03:28:6b:59:4f:ff:cf:71:
         a7:bb:d4:e8:b4:1d:9a:2b:61:ea:47:e2:8b:aa:10:f1:85:01:
         d3:9e:92:b2:0b:cf:7c:82:91:e8:aa:87:79:a5:ae:b7:d1:8c:
         ce:90:d0:47:f0:62:34:66:4a:ac:f2:60:c5:f0:5b:18:bf:f7:
         da:e6:f7:7e:d7:4c:43:3c:d5:b8:0b:4b:39:a9:7d:db:21:5a:
         d7:43:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:12 2025 by rpki-client