Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          BIPnFShdD+5IpCfJShSvzkA6MVI+aXYQyZL7Bc+L0cE=
Subject key identifier:   46:90:BF:11:A9:72:97:05:A8:21:4A:A9:26:C2:A2:57:AF:D0:3F:02
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       462F6DD6ADA1A5008C610A75062DC8F8996E4494
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          02DE
Signing time:             Mon 04 Aug 2025 10:10:00 +0000
Manifest this update:     Mon 04 Aug 2025 10:05:00 +0000
Manifest next update:     Tue 05 Aug 2025 10:10:00 +0000
Files and hashes:         1: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: jNre954ylBKqBfqOR7sW+4P/02andW5wroDJrSD+LJw=)
                          2: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: +MxwWMlz9S9ev8gjiYaaRI7n12W9bpBHWTXxklmRXcg=)
                          3: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: K0rfKHGQc5HsEaKOCmpwk6aoyaHETi0KU/aeB9II690=)
                          4: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: w5Aup+NkUiSPGJOkgm0D2pt62dq35BDv6u3R+EXF5Y4=)
                          5: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=)
                          6: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: K6MwIK+3msfBTjd+nDj6vx1bhEf6yAKnBKiZuf/G4hg=)
                          7: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: wBg7OLAC+U5rb0dz2JZauuXhMzmWVbds76u/zhua/YE=)
                          8: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: PsG/KbNUa3nKz87y+qnxaBmbAh/4v58jK3L06h+VOiI=)
                          9: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: YkiMOKlXUfp39jAbnOanM0KLPuwUcDBAVWsGF1xqc/E=)
                          10: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=)
                          11: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: 7z7st9VExUOxO1HPQ6IHGyHiaeWv0sgAdWNGW8vEHnI=)
                          12: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 8tcPtbeFADqn7j5wPgEV/xkungZIxf0p1KKa9Fv9kro=)
                          13: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: MuLCu/ebtGTRQdFTtxwflEFsRUPY8b2YKd2KzoWHrGI=)
                          14: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: YHcOeZAppI0yBQHU5VaAv9v49jpZW7BbBaBFcagKeAo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2f:6d:d6:ad:a1:a5:00:8c:61:0a:75:06:2d:c8:f8:99:6e:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug  4 10:05:00 2025 GMT
            Not After : Aug 11 10:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:e4:31:07:de:6a:72:cd:52:d2:65:e6:4a:
                    4c:56:66:58:3b:7b:3c:42:59:3d:81:65:fa:1b:91:
                    17:1b:3b:4c:58:b0:51:ed:d4:f6:e0:d5:d8:f2:41:
                    71:2d:1a:2c:1b:1e:b2:98:1a:83:d1:3c:8c:24:30:
                    05:e7:34:6a:73:9b:24:13:0b:16:ff:86:bd:5f:7b:
                    18:85:53:02:ba:bf:6a:df:3e:52:42:2a:bf:21:43:
                    bf:17:88:8c:77:dc:fc:c8:25:e4:e6:26:cc:75:63:
                    68:a3:ae:3c:3c:03:ab:f0:69:3b:79:38:e4:89:d0:
                    2c:ac:e9:0c:3b:29:fc:12:90:af:0b:8b:a5:e4:70:
                    09:f1:d3:cd:ba:00:1f:06:d1:4f:8d:93:bf:6f:86:
                    82:92:86:60:8d:05:36:b4:f8:1b:1e:03:a1:b9:15:
                    9e:22:bd:e1:0d:ed:d6:9c:e1:16:3d:7d:a5:e2:e9:
                    15:3d:49:ac:2b:25:10:4a:ed:9f:cf:74:43:d2:34:
                    4d:c0:42:9e:0e:72:03:8a:e4:ed:4a:51:f9:f2:9f:
                    4d:e3:bf:81:b4:2c:ae:7b:df:a0:9c:08:b5:b7:42:
                    c8:70:cb:dd:b9:a0:2a:1f:4e:9d:99:be:25:1b:28:
                    11:c2:29:de:93:22:0c:b5:bd:4c:97:94:bf:04:0b:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:BF:11:A9:72:97:05:A8:21:4A:A9:26:C2:A2:57:AF:D0:3F:02
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:03:5c:ad:66:93:c8:f0:62:69:2d:fe:20:44:62:02:8e:d0:
         28:f1:74:42:30:6f:ce:77:f1:a2:d6:e3:61:c3:bc:2f:6a:23:
         26:6c:52:58:bd:c0:08:b8:10:e3:2a:68:42:05:65:47:34:58:
         ab:d9:74:72:40:6e:65:a6:bd:63:47:a4:02:e3:50:e6:07:a6:
         56:d0:0f:ca:97:dc:03:a0:a9:2c:a7:51:55:c1:74:73:ff:a5:
         a1:d6:f8:24:19:06:f3:9e:d2:27:24:52:ba:1f:bd:13:4c:d7:
         e6:58:54:e5:e9:e0:be:b8:12:8f:0d:33:9c:5e:b1:99:23:28:
         cd:d9:23:dc:38:f7:4a:b0:28:9c:e8:1d:bb:d7:cc:1e:7b:5e:
         3d:aa:5b:7b:64:ff:ff:80:bc:0a:8b:bd:1b:c6:fa:fe:93:95:
         0a:d5:6b:54:ca:d4:0e:ab:73:ef:cc:e6:5a:08:03:6e:58:ac:
         fd:0e:fe:42:53:9a:fa:fb:1c:81:d9:40:b4:bd:00:90:69:90:
         b5:38:de:19:ec:09:f9:1d:2f:ba:cf:0a:17:3f:93:33:21:7c:
         a6:86:4e:1f:78:be:bd:6f:c4:06:3e:89:72:49:02:61:aa:a9:
         b8:e7:bf:4f:13:25:10:04:bd:bd:b0:1e:82:ee:46:74:9a:cb:
         02:77:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:27 2025 by rpki-client