Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          9EXEjbxoudg98zFj8KRMoR8JlVzH1xXkprecOeaw7Os=
Subject key identifier:   31:C3:D2:88:B1:2C:45:CA:17:33:8D:D8:F1:06:1E:02:26:E4:7C:86
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       7A869C2BDA9731C535E4AB39A10FC42852145BC4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          02A3
Signing time:             Mon 11 Aug 2025 02:37:05 +0000
Manifest this update:     Mon 11 Aug 2025 02:32:05 +0000
Manifest next update:     Tue 12 Aug 2025 03:49:05 +0000
Files and hashes:         1: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: Jt5yBCDcazFPmlm99bqKiSoVaSE8qVxER5l9g5ESP5I=)
                          2: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: +ECSCCH5YRr7klkx2vh85cYXAGDn1UwvbvGNUzVuOHs=)
                          3: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)
                          4: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: JHzROfLUb0Xgu5hfUeR87fLuNRaz7TuN/lPW9TO7Ym4=)
                          5: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
                          6: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: yvz0bncSCI+UJpzByY5mfGy18dE6DAJkqBravnlAWrY=)
                          7: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 03:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:86:9c:2b:da:97:31:c5:35:e4:ab:39:a1:0f:c4:28:52:14:5b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Aug 11 02:32:05 2025 GMT
            Not After : Aug 12 03:49:05 2025 GMT
        Subject: CN=31C3D288B12C45CA17338DD8F1061E0226E47C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:2d:d8:79:9a:67:43:52:d7:eb:65:96:f6:
                    fc:3b:7b:74:3c:45:a6:24:77:b2:2e:86:8a:74:61:
                    75:aa:46:19:e7:9e:ea:60:9a:6d:ee:d8:3f:ca:6c:
                    f3:d1:9a:98:50:ef:d7:18:6b:f8:17:67:6d:8c:7a:
                    7d:f4:17:eb:3e:7d:91:ec:26:6e:57:9c:e4:17:86:
                    1d:a3:fa:5f:b5:83:70:18:4f:ee:36:4c:de:93:40:
                    43:4e:18:f1:55:67:68:e6:97:1d:cf:2c:af:d8:dc:
                    eb:14:1a:1b:39:5c:2b:be:7f:a2:ca:70:59:60:10:
                    58:8e:17:f9:8a:ec:72:a4:79:fb:76:02:23:f3:d5:
                    29:37:27:38:b4:e9:47:21:11:36:aa:5f:cd:44:fe:
                    11:8c:75:d9:da:3c:64:96:4a:ec:88:75:f4:50:00:
                    3c:c7:39:9b:7f:51:2b:c5:92:5f:35:32:fb:01:12:
                    c3:76:c2:db:62:2e:58:3a:93:31:41:4b:2e:c8:cc:
                    52:15:2b:b2:24:09:eb:68:e3:86:32:80:39:f6:1e:
                    9f:81:05:e3:f7:00:6a:47:32:99:b9:a0:09:de:c8:
                    fa:e4:dc:d5:6e:ba:51:23:f1:c2:e9:c8:f1:f2:80:
                    cb:0e:eb:3f:a1:5e:37:ed:90:2e:f6:da:91:14:11:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C3:D2:88:B1:2C:45:CA:17:33:8D:D8:F1:06:1E:02:26:E4:7C:86
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:de:c6:fe:e1:72:24:b8:92:98:68:01:c3:47:0b:a0:3e:
         af:fe:17:28:7a:cb:0c:c9:e2:55:a0:40:93:ae:e1:a5:76:35:
         6f:f6:b3:c6:ac:1a:bb:15:97:d4:57:24:e3:21:57:92:ab:20:
         28:c6:e3:14:f5:3c:1c:e9:1f:a7:f3:72:81:79:7b:3b:18:69:
         6d:73:57:b7:b6:2f:ab:b2:5b:c4:9d:ba:24:a6:0e:eb:49:3a:
         bc:3c:71:55:d9:e5:f0:08:27:23:18:23:ed:ec:f8:07:45:19:
         51:50:e3:b1:6a:7b:14:4f:19:12:da:ec:4c:3b:78:6b:e6:a3:
         81:16:44:e2:55:b1:d5:f5:30:6e:d7:ae:ef:1a:c4:4b:98:f6:
         fd:ab:7d:72:32:65:34:a0:a5:63:63:92:7f:67:c3:8b:0b:5f:
         d9:39:62:54:79:01:ab:f0:d8:17:a7:01:83:0a:f3:e6:89:26:
         66:11:d0:95:cf:c5:73:9b:41:42:ee:e3:c2:12:a2:a2:dc:f5:
         4f:c1:bf:6f:62:0c:c7:e3:19:1b:e6:df:f5:9a:86:f1:14:6f:
         b8:a2:fd:e0:ff:7e:c2:5a:1d:9d:be:52:52:66:a4:cb:81:32:
         64:b7:ba:0d:a9:ca:d9:bb:36:ef:3d:b8:2b:e5:3b:c3:1e:05:
         1e:83:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:42:10 2025 by rpki-client