Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          KDbh4M23mjo0tqHpvP4f1yDADi5Z8id2lUxZe/AQqM8=
Subject key identifier:   06:49:35:C0:E2:56:29:34:D2:52:B7:33:A3:CE:5E:6D:66:BF:CC:95
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       2BE865F4B0C5ECB8D292F125C50CEF9E1FC0A825
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          0226
Signing time:             Fri 09 May 2025 20:02:17 +0000
Manifest this update:     Fri 09 May 2025 19:57:17 +0000
Manifest next update:     Sat 10 May 2025 22:06:17 +0000
Files and hashes:         1: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: HGdBSKiFk/DeL8vH+MszMy1P4lWK9jQ4lctnfCkuvr0=)
                          2: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)
                          3: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: 4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=)
                          4: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: UeHadeVJurQ6ENd9ZAl6ibI/ZSyvYXfgwwd/iHAfyI0=)
                          5: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
                          6: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
                          7: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: pKSMJeEMTb2QyV3JxmUKld/MKHTNh6Z2JrNphoBC1CM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 22:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:65:f4:b0:c5:ec:b8:d2:92:f1:25:c5:0c:ef:9e:1f:c0:a8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: May  9 19:57:17 2025 GMT
            Not After : May 10 22:06:17 2025 GMT
        Subject: CN=064935C0E2562934D252B733A3CE5E6D66BFCC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:fd:14:58:9c:f5:8d:0b:02:f6:e8:c1:55:
                    0f:d1:d4:96:03:9b:fa:04:36:d6:38:6e:11:9a:d8:
                    ed:86:17:41:ce:9d:94:11:3c:99:46:69:32:48:f7:
                    56:02:a3:c8:4f:02:31:f2:a0:8e:18:67:c9:15:6c:
                    c4:39:20:ce:ed:cb:62:62:d9:f0:db:ec:c5:50:b2:
                    07:fa:63:7a:15:2a:1a:02:eb:ae:31:69:f1:55:45:
                    5f:e1:ef:f1:7e:a1:cb:39:69:bb:b4:21:7d:07:d3:
                    f1:6e:08:24:04:a7:fa:94:1d:2c:e8:5c:76:99:c8:
                    6e:24:06:97:bd:3e:4d:12:82:6f:e2:d4:a3:36:a8:
                    18:e0:5f:21:95:dd:e2:8d:d2:89:36:7c:7a:86:c1:
                    4a:51:4c:cc:08:a5:e9:22:99:77:95:69:00:59:b8:
                    f7:bb:f9:42:1d:07:62:da:4d:5d:f0:00:51:c0:ed:
                    74:5b:a1:27:63:a5:ba:db:c2:cd:ee:4d:31:7d:ce:
                    64:28:7b:cf:90:8f:f1:81:d5:47:cd:28:61:7f:27:
                    aa:36:ac:7a:32:71:65:7f:1f:23:da:3a:bb:42:9c:
                    48:35:bb:d5:1d:c2:84:7b:fa:c6:9b:25:62:06:08:
                    df:58:25:84:ec:88:81:37:a2:8a:a4:d8:ec:89:08:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:35:C0:E2:56:29:34:D2:52:B7:33:A3:CE:5E:6D:66:BF:CC:95
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:cf:ef:20:f6:1c:52:8b:d1:6a:ad:34:f5:e9:e3:ef:2e:
         df:0b:fa:88:95:3f:07:99:5e:df:bd:d3:f2:ff:94:82:5a:43:
         3f:5b:d9:46:8a:46:d4:f2:92:ca:88:56:a0:6f:4c:33:0e:70:
         d9:03:56:2f:3a:d5:69:90:d7:dd:9d:8e:7c:40:48:d1:5a:3c:
         47:7e:c7:03:67:69:11:60:15:bf:32:16:94:9a:92:28:a9:73:
         b5:62:d5:28:06:9f:7b:b3:20:e9:de:b2:1b:68:96:85:34:0f:
         e3:cd:64:e9:c6:be:a3:87:ed:c2:7a:a4:17:56:2a:04:b6:00:
         3f:3c:8f:de:1e:99:18:b5:e5:d3:8a:1f:4d:fd:f5:40:08:94:
         34:86:1a:b9:0c:2c:3a:25:cf:d0:85:93:40:4e:4e:b1:3f:5d:
         f5:d9:bc:93:f6:bf:c9:db:d9:6b:30:54:f7:6f:7a:c1:e3:19:
         69:1d:b4:85:20:9f:47:f5:2d:9d:ad:dc:55:0e:b3:bd:ac:e8:
         4d:b5:3f:aa:f3:42:e1:9c:de:91:28:a1:db:be:72:b6:8a:61:
         07:6b:84:db:46:33:a8:9d:3f:28:b3:7a:cd:6e:34:59:75:30:
         27:e1:24:56:f5:3a:69:59:bc:03:e0:36:ae:9c:dd:d1:08:27:
         96:52:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:50:08 2025 by rpki-client