Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
File:                     9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft (raw, json)
Hash identifier:          XhMu0k+GcxWXlZs+ubZ/tXUAsQVaijc2JsXsdDIqg6Y=
Subject key identifier:   81:88:CC:FE:A2:40:E1:CE:F7:3A:46:4F:C3:41:95:2E:81:2C:45:10
Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Certificate issuer:       /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
Certificate serial:       444A9693ADEF5AACD0E2631755795737A6060F5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
Manifest number:          61
Signing time:             Sat 09 Aug 2025 05:14:47 +0000
Manifest this update:     Sat 09 Aug 2025 05:09:47 +0000
Manifest next update:     Sun 10 Aug 2025 05:25:47 +0000
Files and hashes:         1: 34352e3233322e38342e302f32342d3234203d3e20323731323534.roa (hash: Ox3gkWdk5DFjWVNeLugWW5jte/MOdiHqIifU9RFpraE=)
                          2: 34352e3233322e38342e302f32322d3232203d3e20323731323534.roa (hash: 4llxrZQMqb9Kf3CZxYAurGfSgLAZxRbGkZ3i34Y0i8c=)
                          3: 34352e3233322e38342e302f32332d3233203d3e20323731323534.roa (hash: UKx35fmxi9JfkNyS1Z7JJ73s8up2qsRMi86ZPKe0r8o=)
                          4: 34352e3233322e38352e302f32342d3234203d3e20323731323534.roa (hash: KWtyN99uRkdP5QmZxLBrmQICjrve0tAd8gA6/GzFIzg=)
                          5: 323830343a373839633a3a2f33322d3332203d3e20323731323534.roa (hash: mbiljivRQx8iMNNvSKPbVGsfe/yI75cxkBJOMpgTbsk=)
                          6: 9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl (hash: tewZqjVkQ4iOfcrYnShHP2/0jPJ9CGrlHipR8L1Mb2E=)
                          7: 34352e3233322e38362e302f32332d3233203d3e20323731323534.roa (hash: BCpTeNeXQT1EfTeFL+azl+e6UrL6wbW9CppwvvbgnPc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:96:93:ad:ef:5a:ac:d0:e2:63:17:55:79:57:37:a6:06:0f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Validity
            Not Before: Aug  9 05:09:47 2025 GMT
            Not After : Aug 10 05:25:47 2025 GMT
        Subject: CN=8188CCFEA240E1CEF73A464FC341952E812C4510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:0e:5a:90:b0:a1:cf:52:24:5a:66:5a:e1:
                    7e:6a:89:05:70:93:01:5a:f6:7f:54:6b:ec:26:e9:
                    33:a0:68:ff:2c:33:3f:dc:bf:5f:49:de:7c:f9:d3:
                    e6:66:5c:74:07:d8:0d:ea:7f:2a:a9:03:f2:aa:ee:
                    f0:09:f7:2a:87:eb:93:2e:97:2f:c4:8f:3b:19:1d:
                    d6:34:d9:27:c7:d3:70:b2:c3:33:80:f3:b1:b4:b5:
                    69:9f:b2:ae:a7:94:83:7c:c8:9e:c4:9d:b4:d5:cb:
                    7a:8e:3d:8b:cd:25:81:d3:a5:61:e9:29:d1:db:e6:
                    c5:57:e4:d2:22:77:9e:c2:8a:71:c3:28:be:d2:f7:
                    d6:ce:82:da:0c:5b:7e:fc:f7:bd:0e:9f:59:a2:9b:
                    b4:5f:01:3e:c6:57:3d:00:15:06:b1:59:0c:1c:b5:
                    f1:64:5c:1e:03:47:34:95:ef:82:ee:8f:ff:ff:d9:
                    49:b8:08:e8:2b:5d:a0:0f:3a:83:36:44:10:9a:00:
                    aa:fe:f2:2c:6b:f2:36:7d:75:05:45:92:36:9b:a2:
                    40:fb:4d:9c:b7:1c:11:1f:fa:3a:b4:9c:6e:ab:46:
                    dc:1a:78:fd:a9:0c:11:91:7a:93:ce:78:95:20:66:
                    64:a4:27:43:ef:cf:f4:05:37:b5:39:5d:96:53:58:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:CC:FE:A2:40:E1:CE:F7:3A:46:4F:C3:41:95:2E:81:2C:45:10
            X509v3 Authority Key Identifier:
                keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:b5:75:e5:91:88:bd:7a:5c:b4:ea:92:f0:23:d6:3f:3d:
         0d:e7:ee:b4:b2:32:5a:d7:a5:bc:6c:11:10:3c:1e:0d:39:9a:
         8c:f3:a1:81:03:eb:b3:71:2f:1d:2b:76:ea:8a:20:ea:a2:66:
         6c:82:bf:16:ca:35:cc:b8:85:77:9d:24:89:45:58:d4:4c:a4:
         9d:3b:8f:d0:17:e8:ec:3f:4f:c7:62:67:0a:2e:f3:07:be:56:
         7f:b7:d8:e9:5a:dc:81:76:11:ab:d0:8d:06:36:e9:1c:d7:33:
         5f:d3:77:9c:c9:02:8c:e9:3d:ac:1e:29:58:6d:6c:09:8f:41:
         dc:5a:d4:e4:00:db:77:54:d0:56:ec:04:6f:92:dc:1c:b3:93:
         ad:3c:bc:ee:8d:39:20:fa:c8:57:f8:5c:45:c6:6d:8c:ad:95:
         e8:b6:96:24:6b:ac:39:21:bd:a9:9b:93:11:16:a4:46:ca:c1:
         5b:5e:71:4e:98:c1:65:23:61:da:11:74:e1:3a:36:03:08:65:
         5a:fb:69:f4:7a:53:e1:9d:6a:75:8d:d5:83:bb:f0:96:79:f8:
         18:30:e0:7b:d2:97:3e:d1:28:5e:60:f9:d3:20:4b:c2:56:a9:
         eb:34:aa:96:c3:14:63:3e:f7:e9:eb:fc:11:a7:c7:a3:8a:aa:
         e4:24:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:17 2025 by rpki-client