Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
File:                     28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft (raw, json)
Hash identifier:          u+LIjLWRfQ2ULVShUsW3IvDg9E3IQeXlczdIRzMEnGA=
Subject key identifier:   A5:AD:83:15:FC:82:03:34:CB:65:A5:0F:19:C0:3C:47:34:91:D9:B9
Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F
Certificate issuer:       /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
Certificate serial:       2B3A2A7F7FCD72C6DB90856443A921EF9BEE38CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
Manifest number:          0253
Signing time:             Fri 20 Jun 2025 21:53:43 +0000
Manifest this update:     Fri 20 Jun 2025 21:48:43 +0000
Manifest next update:     Sat 21 Jun 2025 23:20:43 +0000
Files and hashes:         1: 3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (hash: PHVv4PIlZsM6FmxSWZcGgOlUBhKlOEExQFtv/2NmXPE=)
                          2: 323830343a316331633a3a2f33322d313238203d3e203631363338.roa (hash: MW6D1TWTaqE5ugVGSDjlPBOjqpt8b8XpMBag0scWZ0M=)
                          3: 28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl (hash: Wc/Ix1jCmU7hvgcwOTW7lEIdohkHEpDd5ko6CqR8JNA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl
                          rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 23:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3a:2a:7f:7f:cd:72:c6:db:90:85:64:43:a9:21:ef:9b:ee:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
        Validity
            Not Before: Jun 20 21:48:43 2025 GMT
            Not After : Jun 21 23:20:43 2025 GMT
        Subject: CN=A5AD8315FC820334CB65A50F19C03C473491D9B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:08:3b:e8:b9:ee:3d:c7:13:e0:04:fd:1e:
                    36:cd:99:9a:03:b7:19:1d:53:69:2f:30:b4:2a:88:
                    2d:45:6a:17:95:6f:e5:ab:81:21:20:d7:8c:c1:85:
                    f0:3a:bf:4f:b6:f0:10:bb:7f:96:f4:ad:7b:02:e8:
                    e3:b5:21:fe:ad:c8:1b:df:c7:03:4c:59:04:98:34:
                    81:3d:9c:48:ac:55:04:d5:93:57:30:fe:20:2c:ff:
                    01:75:f7:9f:10:7b:26:51:5e:b2:95:56:85:ef:4a:
                    16:bd:a3:74:f2:12:5d:21:30:4c:4b:20:25:15:f2:
                    62:98:31:94:1a:13:bd:fb:73:49:9d:5f:58:45:4a:
                    0e:e2:1a:aa:11:e0:3f:8d:14:f1:4a:bb:da:1f:48:
                    fa:2c:d1:87:59:92:2f:82:2c:ab:4a:ac:f9:f2:f7:
                    0c:c2:de:68:ca:f0:9c:32:bd:c3:d3:31:10:ae:c9:
                    e4:64:b0:ad:fd:00:09:07:18:4d:e4:7a:60:6c:12:
                    84:48:3a:0f:04:5f:88:01:c5:62:35:fd:94:5d:bc:
                    d5:c5:cc:80:f4:a9:d1:99:4b:69:5b:76:e6:2b:b0:
                    12:19:7b:2b:eb:04:c6:e6:bc:04:b7:b7:40:6f:d4:
                    29:76:1c:42:ee:16:7b:a0:f8:bf:3b:3f:18:51:7d:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:83:15:FC:82:03:34:CB:65:A5:0F:19:C0:3C:47:34:91:D9:B9
            X509v3 Authority Key Identifier:
                keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cb:7a:63:aa:27:d1:06:61:23:a6:2a:37:2e:33:6c:6b:72:
         d8:36:93:51:e1:4c:2f:cf:c6:76:fc:36:ce:02:f5:18:10:f3:
         9b:64:d9:2b:19:ae:9e:12:c4:fb:22:b5:4e:ec:83:53:9e:38:
         7c:68:c4:07:0b:55:32:14:bd:da:4c:c2:46:c9:2b:ef:9b:42:
         83:71:d9:78:40:66:90:50:9e:54:6f:8d:b7:c1:1b:67:bc:8e:
         68:9a:6b:c7:fb:30:3b:7e:a3:46:6b:00:b5:68:f1:cf:c6:a9:
         ce:0e:02:b6:49:c7:42:e8:7e:67:55:f5:22:5c:8d:d9:86:b6:
         e1:9d:03:b9:74:a7:c8:22:3d:a8:85:a4:08:ee:bc:85:6e:6d:
         a4:52:dd:a6:ce:2c:b4:35:74:57:8c:37:b1:13:a5:8c:8d:ef:
         c9:4a:19:59:39:2a:93:37:3d:98:30:8d:6b:7a:50:26:b4:6a:
         28:74:57:67:22:0a:60:d7:af:9c:18:d9:b5:dd:3e:75:fe:64:
         b0:3d:0a:53:e3:fb:3b:f8:ca:15:27:43:03:7c:0a:0f:0e:29:
         b1:e7:bc:04:47:68:1c:97:80:fd:7c:57:9c:8e:d3:6f:39:e4:
         ca:a7:71:c5:73:42:6b:76:e6:ec:c4:50:42:e0:1e:ee:a3:d1:
         f0:f5:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:47 2025 by rpki-client