Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
File:                     8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft (raw, json)
Hash identifier:          Rnx1sUnVgjYUgja91KbU1uoBbnWQBkqFCgVXxwRL4vE=
Subject key identifier:   52:B4:84:88:5E:4E:D9:3E:42:46:F3:08:B5:70:89:CA:07:31:E0:FF
Authority key identifier: 8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67
Certificate issuer:       /CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
Certificate serial:       5BC3BA6849829A137FF833ECCB62CA8D5C4DB59C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
Manifest number:          01AD
Signing time:             Sun 27 Apr 2025 11:23:30 +0000
Manifest this update:     Sun 27 Apr 2025 11:18:30 +0000
Manifest next update:     Mon 28 Apr 2025 12:47:30 +0000
Files and hashes:         1: 34352e3138322e3130382e302f32322d3234203d3e20323639323233.roa (hash: djLmeQyjsdwlQd3G+GSCtqQUIUUhCf23zqDJfDaoPrw=)
                          2: 8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl (hash: QrY50HjB5OaiM9FIWdxpv/jc0Avhskrx3KxF/n/zpWU=)
                          3: 323830343a363134633a3a2f33322d3438203d3e20323639323233.roa (hash: M9hzdL9O7mau2v9hDzhxsfzYlL0LmYyuRbqFntXA6hg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl
                          rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c3:ba:68:49:82:9a:13:7f:f8:33:ec:cb:62:ca:8d:5c:4d:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
        Validity
            Not Before: Apr 27 11:18:30 2025 GMT
            Not After : Apr 28 12:47:30 2025 GMT
        Subject: CN=52B484885E4ED93E4246F308B57089CA0731E0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:bf:38:e3:7c:d2:df:78:96:96:6a:2d:59:
                    f4:54:17:99:84:37:62:75:3a:4c:38:8d:40:64:b7:
                    51:ae:f3:99:e8:c4:7c:3c:b7:0a:cd:cd:c0:fa:b9:
                    9e:4f:bd:fc:28:83:2e:02:28:33:f8:9b:f5:6c:b5:
                    79:22:fe:f8:3b:21:a6:03:06:a1:c5:59:0e:2a:fd:
                    77:78:ca:2f:4b:5f:a1:89:b0:b9:c1:d4:e8:3b:4a:
                    b7:f5:c5:a4:80:ea:ed:96:a0:15:9e:b4:7a:d8:ee:
                    f7:e1:c5:16:04:63:70:c7:f5:25:ff:42:16:c1:e8:
                    e2:19:42:18:50:a9:4f:f1:21:3d:0a:82:a2:b4:00:
                    72:7f:8b:6f:9d:83:fc:d0:a2:1d:87:2f:6a:81:e8:
                    cc:e1:ee:34:de:dd:4f:f4:53:cb:62:e5:3c:3e:09:
                    83:d0:31:e9:ce:a7:14:5e:90:bb:ec:2f:e3:e6:7c:
                    51:1f:79:21:66:68:4f:68:5b:f6:c7:d2:59:5e:9e:
                    e4:1b:1a:ea:5e:6b:3d:aa:4a:e6:b7:0c:b8:69:2d:
                    ba:4c:6e:a8:43:0d:bf:17:78:3b:9a:fd:c6:d9:ad:
                    30:3d:85:b3:0f:02:10:95:76:88:ee:5b:c2:37:c1:
                    0b:bd:90:eb:b8:1d:c0:b8:26:77:b9:70:dc:6d:d5:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:84:88:5E:4E:D9:3E:42:46:F3:08:B5:70:89:CA:07:31:E0:FF
            X509v3 Authority Key Identifier:
                keyid:8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d3:22:d6:b8:1c:71:2e:da:d3:3a:3c:cc:d6:c9:f7:2b:fb:
         ab:63:2a:34:95:08:40:57:3e:cd:91:e2:e8:bb:7d:e6:58:67:
         e0:31:82:fc:8a:5e:cd:88:e1:45:98:eb:08:b1:5c:0b:72:4d:
         3b:14:89:ac:d3:1c:86:db:2d:65:59:4e:b3:42:15:be:c1:49:
         39:88:18:67:e7:dc:1e:5d:a9:0f:28:39:3a:3a:5c:73:a5:3a:
         43:7c:fa:64:d6:b2:cf:5c:06:7c:e9:cc:bf:69:96:31:a9:56:
         ab:5a:e9:ba:12:eb:c9:6a:b5:cd:f4:65:a0:86:af:ae:60:60:
         fb:6c:81:15:55:09:57:7a:bb:dc:b1:81:a8:68:08:65:c3:9c:
         df:c0:2a:c6:12:ac:19:ea:a8:1b:20:19:b9:8d:2b:37:f2:31:
         2e:5c:92:33:a4:06:7a:c5:92:0d:48:c9:93:f8:d7:7d:ea:9c:
         67:e6:cb:98:32:2b:9f:3c:bf:9b:46:75:4c:d0:ba:2c:42:f0:
         ec:40:a8:0c:bd:60:55:91:bd:74:1b:1e:de:9d:55:03:f9:5a:
         64:b6:bb:b1:67:dd:55:6f:e0:26:93:2d:4e:7d:14:6c:c3:57:
         5d:9e:68:3a:fc:f1:21:b2:6c:70:16:c7:a6:49:68:b4:b5:9a:
         66:dd:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:24 2025 by rpki-client