Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
File:                     D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json)
Hash identifier:          HX8QDB2QfPni+nieUwfZy3GmnzZNzuD9pv9WLkBE62A=
Subject key identifier:   68:27:E0:13:7C:86:8C:3B:8A:7A:BC:80:C6:42:FA:3C:DB:BF:D3:2B
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Certificate issuer:       /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial:       0C0FF9C7155C18118D8170230F6098B4C02269E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
Manifest number:          0248
Signing time:             Wed 18 Jun 2025 10:51:29 +0000
Manifest this update:     Wed 18 Jun 2025 10:46:29 +0000
Manifest next update:     Thu 19 Jun 2025 14:38:29 +0000
Files and hashes:         1: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: l7ubRI200HZWuJcvzpcNbh2Z5fVQ7VTz0BZP5D757FQ=)
                          2: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: V7DnBsCJIuISkVSnruTXr9sSBfm6Q+BYBb5kdZYmrfc=)
                          3: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: 0HtIStJbMsMcPkb3Bpf/zwlv0P5p5WuHdoYgzHMGegQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
                          rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 14:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0f:f9:c7:15:5c:18:11:8d:81:70:23:0f:60:98:b4:c0:22:69:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
        Validity
            Not Before: Jun 18 10:46:29 2025 GMT
            Not After : Jun 19 14:38:29 2025 GMT
        Subject: CN=6827E0137C868C3B8A7ABC80C642FA3CDBBFD32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:f5:66:94:9c:68:7e:37:2e:09:49:08:25:
                    ce:e8:9f:97:9e:a8:bb:70:e1:cc:b8:56:57:8b:fc:
                    b5:d5:e7:df:5e:45:5e:f3:c8:29:7f:5f:b0:81:7c:
                    b4:a4:70:44:b1:84:67:e4:5e:ab:51:0c:0a:90:00:
                    c2:de:4a:19:05:f4:b9:63:96:6b:2b:ed:41:d7:ad:
                    f6:48:18:78:1b:83:9f:92:7a:02:67:09:3b:2a:ec:
                    93:b5:f0:c3:15:d6:81:28:c8:3b:af:ec:f7:e0:b9:
                    3c:88:1d:f4:a7:db:ff:f7:b0:71:fa:a2:35:c6:d7:
                    35:1b:cc:0d:61:17:6f:82:3c:f9:e0:e0:49:77:02:
                    fd:2d:af:ac:18:57:99:d5:f7:df:5d:d9:5c:61:23:
                    fd:76:bf:da:18:c9:ce:0a:12:84:c1:13:da:f9:60:
                    93:93:84:26:3a:19:b1:0d:12:89:43:ed:df:c7:f8:
                    9f:4a:51:4e:06:cd:fd:9c:05:64:25:51:28:3b:39:
                    3a:47:11:fe:0d:76:a2:35:88:5a:b6:cb:e5:65:19:
                    b8:31:12:2e:e9:f6:99:7a:8c:e5:a4:0b:f9:0e:99:
                    e7:37:d7:68:05:96:73:fc:49:f4:bc:46:95:cd:00:
                    5c:5b:99:b0:17:8d:62:0c:b4:ad:51:b1:e2:e4:67:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:E0:13:7C:86:8C:3B:8A:7A:BC:80:C6:42:FA:3C:DB:BF:D3:2B
            X509v3 Authority Key Identifier:
                keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:b8:80:83:e4:0f:63:96:89:9f:a7:bb:87:ec:2b:de:b4:
         6f:e6:ea:ff:f8:93:7b:ee:6c:51:d0:ec:af:a7:ea:5c:6e:a8:
         0c:bd:c6:d5:f3:ba:42:6c:58:99:e9:47:00:57:c3:fa:89:43:
         5e:8b:8e:04:d0:ec:62:fb:f1:ce:80:05:2d:0c:1c:44:ee:f8:
         11:13:9e:1d:62:9b:c1:42:01:ef:58:30:ca:f3:e7:9f:35:a1:
         73:84:d5:43:68:32:94:79:f5:61:05:ba:e8:21:a6:af:d5:62:
         ac:23:3a:f6:66:f9:e2:a8:10:17:2c:39:98:42:73:b6:02:5b:
         8b:76:e5:32:33:be:3e:69:c2:a7:42:86:f7:5a:2f:c4:d1:36:
         f0:f1:33:e4:28:32:67:94:05:4a:3f:23:9e:71:4b:78:7e:2a:
         8d:27:4a:c8:d5:00:c9:09:f8:ee:e7:d9:06:41:94:29:eb:d8:
         f8:91:91:e4:7b:69:3f:e2:40:60:fb:6f:36:8e:4f:37:57:f0:
         fb:fc:83:95:8a:e8:b3:5e:e4:b8:82:1d:85:53:ad:93:04:69:
         99:0f:26:52:0a:b9:1d:72:9c:41:ee:28:95:7b:10:dd:f8:56:
         a3:b5:3b:59:d5:e4:c8:b6:81:bf:5d:72:83:e3:0d:d3:3a:54:
         a7:10:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:15 2025 by rpki-client