Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft
File:                     C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft (raw, json)
Hash identifier:          dKKBn8Qg/tGOSVJ7HSosZmADm4PvaUqqGxSeXDGTw/w=
Subject key identifier:   A3:24:A6:8F:A8:B1:22:02:52:95:94:FA:E2:4A:4B:58:37:E0:39:DB
Authority key identifier: C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A
Certificate issuer:       /CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A
Certificate serial:       3A8F184EB9B1AC377181005FF5F1607A02BEB4E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft
Manifest number:          01CA
Signing time:             Tue 17 Jun 2025 15:45:39 +0000
Manifest this update:     Tue 17 Jun 2025 15:40:39 +0000
Manifest next update:     Wed 18 Jun 2025 17:41:39 +0000
Files and hashes:         1: 3139322e3134312e35322e302f32322d3234203d3e20323637343433.roa (hash: DAUG0xQ+vuKJ/I2lyRAeXcT4Z1cY6tf1uwUMOmKKJFg=)
                          2: 323830343a343139383a3a2f33322d3336203d3e20323637343433.roa (hash: NfllLyEJp8UoEh4DXohmtE2d8eRTUTW38d9Wu1YXuFI=)
                          3: C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl (hash: BGhO12/pi7FQdHzgCYo/ewz5mHEyFN3ZqglxNzh9+xM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl
                          rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 17:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:18:4e:b9:b1:ac:37:71:81:00:5f:f5:f1:60:7a:02:be:b4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A
        Validity
            Not Before: Jun 17 15:40:39 2025 GMT
            Not After : Jun 18 17:41:39 2025 GMT
        Subject: CN=A324A68FA8B12202529594FAE24A4B5837E039DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:28:2e:eb:6a:a3:be:91:e2:d5:b8:6e:be:
                    ef:0c:45:72:f8:69:f0:0b:44:7a:57:15:44:06:98:
                    e0:e9:1c:e3:6b:c0:9e:90:04:01:ea:54:1c:7d:aa:
                    d1:f2:ce:35:a5:64:c1:1b:40:53:e7:c3:0f:e6:3b:
                    93:6e:8a:c9:cd:b7:94:86:a1:41:a8:0b:b8:f1:af:
                    96:ee:eb:ec:62:53:6c:81:bc:50:e8:76:6b:a2:77:
                    03:e1:48:9c:ca:e0:bf:86:ec:84:c6:4b:6f:82:37:
                    d1:67:17:dc:6b:58:e7:59:e4:fc:71:ed:a8:f7:0b:
                    6e:2a:03:5f:06:4f:55:97:be:ec:66:84:3a:82:73:
                    d4:6b:89:12:53:ac:ea:b1:10:97:96:0b:04:7f:b7:
                    e3:09:df:02:95:f8:00:d9:de:f0:02:7a:c4:1a:43:
                    75:a5:ea:24:eb:b7:59:4a:26:7a:c2:1d:ee:29:10:
                    b0:ff:75:44:7c:16:8e:86:71:0f:d9:0a:52:36:03:
                    a2:c8:af:1a:81:a1:72:1c:82:cc:56:24:3f:36:23:
                    1f:7b:58:32:b0:9a:0e:2e:84:1f:44:06:bf:55:95:
                    66:23:53:6b:8f:02:4c:e1:1c:68:1c:1a:f7:66:85:
                    49:f8:a4:9e:09:f3:ff:ac:3b:a6:35:c5:d1:57:06:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:A6:8F:A8:B1:22:02:52:95:94:FA:E2:4A:4B:58:37:E0:39:DB
            X509v3 Authority Key Identifier:
                keyid:C6:3A:9F:F3:60:45:62:A8:0C:B5:5E:9B:EA:3D:F0:20:02:F5:CA:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D32CmU2p1ypahYViACeZ18VpfT2EeMwcgmTvJazxcjFY/0/C63A9FF3604562A80CB55E9BEA3DF02002F5CA4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:07:c8:07:f0:8a:c9:63:ec:93:ac:3f:77:47:0a:f3:31:
         71:e7:ef:1b:23:91:48:52:d2:2a:ae:2f:0b:e7:13:4b:9a:7b:
         d3:ac:a1:18:28:f2:37:bd:aa:8f:97:08:3e:bd:7d:16:79:53:
         aa:67:f3:1f:a9:78:b8:65:00:e7:59:08:0b:4a:a1:ec:b1:89:
         68:2b:37:57:3b:f6:eb:61:4e:08:2d:1a:40:29:96:69:ad:ed:
         3b:16:ac:8f:d3:dc:bb:04:c4:0a:74:92:b2:c5:f9:2a:1c:86:
         e4:b9:33:3c:25:91:20:0f:45:e3:89:38:09:d1:66:9b:e8:c0:
         8a:9a:d2:2c:b3:f6:2b:62:2e:b1:98:76:c0:de:c3:a8:4c:b4:
         9c:70:8a:3c:04:ae:2b:fe:9e:aa:8a:21:df:52:2d:f7:e9:9a:
         83:c4:0b:66:4d:ea:3b:ac:b5:f8:f0:29:92:0d:a7:fe:5b:90:
         a0:8d:ee:7b:fc:e4:2f:43:e3:db:73:86:42:1b:fc:9d:ec:79:
         d3:20:4f:d4:c0:b8:a5:ab:3f:72:d6:7b:04:fa:da:1b:05:7c:
         51:ee:3d:71:48:e5:38:7c:d6:f4:3a:78:16:ef:0f:a5:47:6e:
         1a:e1:b2:25:fd:fb:f6:ef:42:9f:c5:94:bd:d1:99:1e:8b:f9:
         48:a7:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:22:23 2025 by rpki-client