Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
File:                     09B86DF2675EE46F17CF5F43330433E2F22C8432.mft (raw, json)
Hash identifier:          meuQVb+rcZC1rBrZD9gRw6usb5/DdmjQfCcle6owDeQ=
Subject key identifier:   51:BB:45:10:DA:8D:6D:26:EB:7B:F5:EE:F5:02:F4:60:19:FB:EE:B4
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       4BE18550245B7FCD0144273ED55739004BEAAFEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
Manifest number:          E8
Signing time:             Mon 16 Jun 2025 21:08:01 +0000
Manifest this update:     Mon 16 Jun 2025 21:03:01 +0000
Manifest next update:     Tue 17 Jun 2025 23:22:01 +0000
Files and hashes:         1: 09B86DF2675EE46F17CF5F43330433E2F22C8432.crl (hash: axImDoGs8UrF/g29330Gb58goAoaPHcKPhAsiuMMYVo=)
                          2: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (hash: BDbkIOTo1z+rcsqGg8AzmzwEnhj4V4/lYattEazDYSg=)
                          3: 3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (hash: okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=)
                          4: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (hash: zNH2DTIGS/EMjzSeq1+poV5vX3CbHq/oe6HfJIa6Sww=)
                          5: 3138362e3233322e35362e302f32322d3234203d3e20323632373639.roa (hash: eQtF15LjNj6FDZHZkElJh6Yb4+GcGCOJMj782JJ6GaU=)
                          6: 3137372e3135352e3134342e302f32302d3234203d3e20323632373639.roa (hash: PuvRBmtSfW019bAKsmUe0+rTNxuXw1pFP0looDysGEw=)
                          7: 3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (hash: hsUqcBtrggzHi8XWKiDT4v+VWmLmwqE/MP++GHfCjxs=)
                          8: 3137372e3132382e39362e302f32312d3234203d3e20323632373639.roa (hash: 9cmwa/EjIHXq9mMNpoYQR4n5fw0qKo7hhSMP7U2r66M=)
                          9: 3137372e3132342e3136342e302f32322d3234203d3e20323632373639.roa (hash: fIX1rsqkrEcxfwHxtTnwZrhQYl82JOUf5vdma4FSDSQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 22:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:85:50:24:5b:7f:cd:01:44:27:3e:d5:57:39:00:4b:ea:af:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Jun 16 21:03:01 2025 GMT
            Not After : Jun 17 23:22:01 2025 GMT
        Subject: CN=51BB4510DA8D6D26EB7BF5EEF502F46019FBEEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:e2:9e:80:a7:aa:63:ec:17:a8:ae:66:06:
                    8b:c1:ef:e6:e1:27:bd:03:2f:1c:07:82:2d:a3:79:
                    bc:e2:2d:3e:fa:65:f8:10:09:32:f4:3a:53:e7:7e:
                    bf:7f:8d:b5:85:6d:49:96:7e:75:ec:25:00:35:10:
                    5b:14:7a:65:3e:a7:50:57:30:de:5a:d4:02:f7:6e:
                    12:4c:b2:87:3e:a1:dc:89:02:cb:4d:31:6c:5c:2b:
                    e9:cf:db:3a:27:4a:6c:b5:7b:6e:0d:c0:28:1d:82:
                    de:cc:af:9e:96:5b:da:44:96:bf:75:4f:ca:ac:3d:
                    15:53:3b:83:ae:22:a5:e8:5e:48:db:0e:bb:3e:5c:
                    21:f5:29:f5:f8:54:67:56:ab:41:f1:7c:82:3f:88:
                    c3:fc:eb:02:35:ec:50:04:30:bd:80:60:c0:46:56:
                    9e:e9:af:39:64:65:5d:61:76:05:59:29:48:d3:30:
                    64:d0:90:d1:da:9a:94:b7:ec:06:25:20:7c:ac:1c:
                    be:08:1f:5a:a1:6f:25:0f:6e:00:c5:c1:30:5d:81:
                    ad:a4:92:00:e6:0b:6e:b0:bc:63:74:f0:f7:60:a5:
                    54:67:9c:48:ca:71:a2:98:8d:c7:86:55:28:36:33:
                    97:1f:75:57:32:1b:d4:ab:d9:b4:c1:60:fa:88:f9:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:45:10:DA:8D:6D:26:EB:7B:F5:EE:F5:02:F4:60:19:FB:EE:B4
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:47:9c:24:ce:e0:dc:30:8b:17:c6:f2:65:09:33:58:36:
         24:85:1e:8c:3d:29:49:1d:27:cc:9f:87:ec:15:1b:d6:dd:6a:
         53:8c:1b:c7:29:ac:6b:fe:eb:59:8e:d4:f6:5c:ba:ff:cd:59:
         13:9b:8c:36:a6:9c:b8:43:92:25:fa:dc:c5:7d:24:dd:57:fc:
         3f:74:b7:09:3c:58:ed:e3:73:de:b0:5a:60:b3:62:94:d6:0a:
         83:48:fd:3c:a4:e1:2f:17:f1:5f:01:63:aa:70:c4:43:0a:fd:
         17:9a:7c:77:4d:99:b5:fd:cb:83:13:20:31:e6:be:2b:e1:31:
         bb:8f:f6:f2:dd:66:be:e2:51:9c:d8:46:99:64:dd:62:be:66:
         84:00:0e:37:b5:c7:5d:64:db:5b:69:5b:ed:3b:f0:e6:f9:db:
         3f:a7:ae:64:44:4d:92:d6:b3:b0:32:cf:15:88:37:4c:1e:fd:
         51:23:ee:72:59:30:78:fb:0b:36:b6:78:b5:0c:14:e7:65:be:
         47:c0:bb:53:94:0a:ee:0e:69:00:e1:6f:3a:79:39:a4:a3:f2:
         76:c8:a4:9d:66:f9:84:57:0d:38:7c:15:43:d6:44:70:e8:66:
         21:de:f9:6c:08:de:d8:cc:ee:7d:20:5c:3e:2b:db:a6:f5:87:
         6a:d0:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:24:43 2025 by rpki-client