Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
File:                     28C4721E667593A43DA7832F588E6B6B8F57311C.mft (raw, json)
Hash identifier:          +kvnwsOyx1+9/a8V8azI7YxNk2xx3sUcsl7O1D7TyLQ=
Subject key identifier:   3E:AA:AF:1A:20:53:F9:3C:F5:62:6E:15:36:43:EE:6E:2B:25:FE:B6
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       60C373BE1768421D847A2E62571B3A7EA9EDF525
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
Manifest number:          0292
Signing time:             Tue 05 Aug 2025 12:58:15 +0000
Manifest this update:     Tue 05 Aug 2025 12:53:15 +0000
Manifest next update:     Wed 06 Aug 2025 15:50:15 +0000
Files and hashes:         1: 323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (hash: EVa82TOut5bhyMd7GLaEg/VgdZob20eqvkuVXRVI1FY=)
                          2: 323830343a356266343a3a2f33342d3334203d3e20323638383739.roa (hash: yS5epuu0kTOQ+hfUXY+PsX1xwFijGzkaJ1ogGYKiLUo=)
                          3: 28C4721E667593A43DA7832F588E6B6B8F57311C.crl (hash: IETTxaimPx+sEtcp8OzamucYgF7afO9NtveLk2gmlYQ=)
                          4: 323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (hash: vxLC8qKn7Xq7LroxXY7tUXYec/LnOWpHSZXrKhdJk9s=)
                          5: 323830343a356266343a633030303a3a2f33342d3334203d3e20323638383739.roa (hash: 0COV7vOtZdgPK2kQW7xLZ6MbZ32aWAqpwH0wOkfzf6o=)
                          6: 323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (hash: IpnVkhAgUmBhRiQkpwW/64FfC7P4EE6YsX6sQYdrGKM=)
                          7: 323830343a356266343a343030303a3a2f33342d3334203d3e20323638383739.roa (hash: U2mW+S5zpfDN3WT2FcreyBH5AF0U5yoq9mrF6FhjZxg=)
                          8: 323830343a356266343a3a2f33332d3333203d3e20323638383739.roa (hash: eNuxh0FA+i3ffFEHKM5RX+VvNqoRG5W9kGPMcJKZ4nQ=)
                          9: 34352e3137352e32362e302f32332d3234203d3e20323638383739.roa (hash: KY4G1q4kDwgUSZwyPbeDA+2mjxdpYh2W5FKZVYiacC8=)
                          10: 34352e3137352e32342e302f32332d3234203d3e20323638383739.roa (hash: NwcGSrpPTlgvRBomA7U3G9uqF5/dhmtT3nLHS4inwYs=)
                          11: 34352e3137352e32342e302f32322d3232203d3e20323638383739.roa (hash: u6Owpd2UH2zf00+HgEOmMpgEn9LYoO9cFpXaTqvfqbQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 15:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:73:be:17:68:42:1d:84:7a:2e:62:57:1b:3a:7e:a9:ed:f5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Aug  5 12:53:15 2025 GMT
            Not After : Aug  6 15:50:15 2025 GMT
        Subject: CN=3EAAAF1A2053F93CF5626E153643EE6E2B25FEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6e:81:c1:80:62:f3:42:01:68:61:54:e7:cb:
                    6a:b1:a6:16:3c:18:a9:bf:6f:88:e9:fa:51:66:0e:
                    f8:ef:ec:bd:62:42:68:e7:c5:ba:72:9b:d0:6d:28:
                    c8:3a:ce:0b:7f:97:32:18:7f:e7:ed:f4:9b:c3:e5:
                    db:00:87:99:1a:75:2c:18:10:ed:ac:90:23:f3:77:
                    6a:86:b1:04:61:79:6c:3f:3f:13:87:52:6c:ba:2e:
                    38:58:c4:64:5a:f6:06:93:39:e9:0c:b0:65:1d:d5:
                    dc:f1:3a:aa:eb:c4:a3:7e:f9:65:07:b1:fd:13:5e:
                    60:b7:7e:e3:1b:ae:cd:90:6b:cf:f8:32:38:a2:6f:
                    c5:05:6a:cd:bc:f5:5e:95:fa:6f:ef:c0:44:77:de:
                    6b:70:53:ad:b9:0b:e0:3c:ca:4a:06:47:0a:91:1a:
                    ec:c5:b3:7c:a6:b4:6c:cb:15:2c:f2:59:2d:e8:7e:
                    6f:04:74:0b:1d:d5:c4:64:23:de:01:51:e9:b2:13:
                    7e:27:3c:21:0d:86:03:bf:81:3f:99:09:2a:8d:54:
                    78:7f:1f:26:ad:8e:e2:4c:80:49:c4:0a:85:05:f7:
                    e2:51:c6:6e:fc:f3:8d:7c:15:14:e2:ae:f3:dd:80:
                    ad:50:9d:b7:09:56:e3:9d:55:18:a3:b1:ea:85:89:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:AF:1A:20:53:F9:3C:F5:62:6E:15:36:43:EE:6E:2B:25:FE:B6
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ba:46:fb:fc:bd:21:b8:7a:18:8f:ee:8d:23:43:7c:78:eb:
         a3:1c:f3:b5:29:e4:df:f7:6f:f0:ad:2f:bd:d1:f2:58:fb:db:
         c9:bb:d6:f3:74:6e:8e:6d:a9:2b:a6:eb:4e:0d:a9:b1:60:ba:
         0c:cf:2a:6d:49:45:51:c1:71:69:d8:3d:7b:30:f0:e5:b8:9b:
         d7:92:27:9c:4e:d4:57:6e:c4:a4:5b:4f:1d:da:d3:c3:1a:0e:
         6e:df:f3:7c:05:74:87:12:d2:e0:a3:dd:1f:e5:1a:13:bc:a5:
         42:43:01:d5:b3:78:2a:50:47:d8:90:76:71:bc:43:68:08:ac:
         88:1d:ba:6b:dd:4d:bf:c1:d9:7e:2d:d2:eb:dc:ee:40:16:ec:
         6f:7a:7b:c8:7d:0b:99:20:59:a0:c2:c9:f0:a8:f8:35:44:5c:
         4e:5c:e1:51:df:bf:3c:11:7f:e0:d1:62:03:c8:67:c0:9d:9f:
         4e:ac:1c:99:ba:bf:50:0b:fb:c9:1e:d2:ae:d5:2c:8d:f3:51:
         7d:23:60:53:53:b0:87:84:40:e6:6d:0f:af:16:04:37:6e:67:
         98:6e:17:13:a2:05:63:db:9c:d7:df:77:97:42:b0:5f:e4:2a:
         ce:1e:15:61:df:7f:95:65:f2:c5:7e:ff:cb:47:d8:d5:2d:09:
         4f:e1:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:18 2025 by rpki-client