Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
File:                     AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft (raw, json)
Hash identifier:          FHj8j3yOWN4++Oz3tntD/FT8pR9AARolB5PXtU3JIJs=
Subject key identifier:   3D:C2:76:4B:6A:B0:03:EE:A0:06:8F:76:AB:CD:E8:AC:A0:A8:BB:C4
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       730B22D40E2808D1B1B77C789BE24A781F1DBDFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
Manifest number:          0295
Signing time:             Wed 06 Aug 2025 01:14:00 +0000
Manifest this update:     Wed 06 Aug 2025 01:09:00 +0000
Manifest next update:     Thu 07 Aug 2025 03:22:00 +0000
Files and hashes:         1: 3230312e32302e3136302e302f32302d3233203d3e203238363036.roa (hash: muT0E/jtcLGXPA1TxIYw04xzIcEDfj3pY0zEHTmt0no=)
                          2: 3133382e35392e3131322e302f32322d3234203d3e203238363036.roa (hash: PD3w4WnjFbM/fdsrpbeC54QTxA2zTd5rahKKxoLLpdQ=)
                          3: 3230312e32302e3136302e302f32342d3234203d3e203238363036.roa (hash: 15AExHLJbYfnkP2MaQjFBIzIC7WAATi3NwRP07bUBdE=)
                          4: AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl (hash: 857mSbiyBMEM8rn2et6OnHQ/ZqR8cpNrYPzM+/mVnbU=)
                          5: 323830343a34343a3a2f33322d3332203d3e203238363036.roa (hash: qa/VVhxguIpZ2tUnPquOwpqbPuCDAs2WExDmWbxgKrg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 03:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0b:22:d4:0e:28:08:d1:b1:b7:7c:78:9b:e2:4a:78:1f:1d:bd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: Aug  6 01:09:00 2025 GMT
            Not After : Aug  7 03:22:00 2025 GMT
        Subject: CN=3DC2764B6AB003EEA0068F76ABCDE8ACA0A8BBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:45:74:0d:53:5e:d3:ef:bc:ad:58:77:e8:
                    35:e7:b9:7e:1c:8d:c1:8c:87:5f:6a:db:25:19:be:
                    7d:dc:e7:d0:78:1d:74:b3:dc:6a:21:e3:6f:18:5c:
                    6d:e9:58:41:04:80:a4:ef:d5:99:b9:fd:9d:fa:d9:
                    0e:31:06:63:21:7d:2a:02:ae:bb:a7:1e:1d:b3:3d:
                    fe:ba:4b:42:95:e9:c6:de:33:d2:7b:48:a8:2e:73:
                    af:60:ff:6d:f1:69:66:52:cd:4f:32:67:92:58:bb:
                    1d:27:a3:36:7c:4c:86:29:43:f7:a5:a2:c9:00:e9:
                    d6:f9:1b:00:f9:6b:9a:22:d9:66:0b:c0:d0:e3:82:
                    3f:e1:ce:1f:72:be:e3:18:f3:a7:e9:e3:ae:7c:a5:
                    d0:42:3e:9c:9c:21:c5:29:ff:27:a3:b8:c7:77:06:
                    6e:31:65:88:b9:3e:d4:1b:27:c5:ac:ec:f2:3a:63:
                    a3:d1:4e:ac:59:5c:6f:c7:2a:3f:de:d8:c6:f1:03:
                    fc:85:39:fb:27:46:ee:31:e4:f4:52:7b:20:16:b5:
                    19:fc:93:82:aa:1f:fe:c8:b5:57:13:f9:aa:c9:83:
                    d6:ce:de:56:d0:6c:45:17:f0:5f:50:99:12:21:dd:
                    53:21:7c:43:79:d2:fd:23:5c:02:fd:ac:d7:bb:0a:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:76:4B:6A:B0:03:EE:A0:06:8F:76:AB:CD:E8:AC:A0:A8:BB:C4
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:41:a5:8e:b5:1d:7f:a9:59:0c:aa:62:9e:1a:a7:4d:ff:6f:
         56:90:66:ae:b6:a4:60:5b:bc:6e:bc:b2:16:35:39:97:05:3a:
         18:21:60:28:15:34:c8:14:e1:18:3a:17:fa:57:47:74:10:ac:
         fe:b1:48:cd:42:bf:ea:72:98:8a:85:08:74:69:85:22:71:b3:
         72:ae:6b:6d:65:03:61:f3:cb:58:17:6d:ee:c2:48:5e:e0:b7:
         29:18:1e:5a:30:ce:d7:bc:bd:ba:84:3a:90:df:50:01:da:0e:
         76:79:e3:7b:7e:07:b5:0b:da:22:9b:4e:09:8c:07:9c:e4:89:
         63:6c:cd:d4:74:d3:28:31:0e:27:40:8c:cd:d4:a6:70:82:e9:
         6a:73:30:01:98:75:16:a8:3f:2a:95:f4:b4:7d:47:65:09:5a:
         d1:a5:56:ee:ac:00:74:4c:1f:f6:76:0d:33:df:6f:5c:41:6e:
         b5:66:09:ce:12:d0:7d:51:e8:48:ca:1f:9e:10:39:65:41:d5:
         b8:3a:fd:58:b9:26:fb:23:05:97:71:18:82:5a:8e:07:a8:6c:
         9f:d0:c6:3f:6c:8f:f2:8a:25:ec:c9:65:cb:cc:a4:91:d9:ac:
         31:45:a2:1c:a2:a9:93:21:12:06:f2:01:e9:2b:4c:9b:9a:34:
         9e:8d:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:25:02 2025 by rpki-client