Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
File:                     A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft (raw, json)
Hash identifier:          KP55UU48DZ8ivVPV0aqUpuPuB28uvXxCxHe938r36sQ=
Subject key identifier:   D4:08:E4:4A:96:DF:C1:4C:7D:F0:43:91:EC:2C:F1:19:A1:CD:9E:F8
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       03C5CADBE100619EEBC40879290ACB22E47B2FF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
Manifest number:          01EB
Signing time:             Fri 20 Jun 2025 04:48:44 +0000
Manifest this update:     Fri 20 Jun 2025 04:43:44 +0000
Manifest next update:     Sat 21 Jun 2025 06:42:44 +0000
Files and hashes:         1: 323830343a3635383a3a2f33352d3335203d3e20323632353738.roa (hash: HOM+vggoZRZnSELrjnIsiuO8+fswV7/hT/y/Oy3hKw0=)
                          2: 3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (hash: 2hv7hOcuHTKCojMGOziPk14njKLCj3OPF31Osmz5Dd8=)
                          3: 3137372e38342e33392e302f32342d3234203d3e20323632353738.roa (hash: aIMX50++MRvywxLQ3t6jesPjkyDCIsNHIt+MPRF4TTI=)
                          4: 3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (hash: hT/VtbO6bsbMhxy9M8bb/kqOGbx+Q3T9OxevEt6OSGQ=)
                          5: 3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (hash: mqO9e2zGU39a5LLjmEexdBC674EQ9YArU5jggklOzOo=)
                          6: 3137372e38342e33382e302f32332d3233203d3e20323632353738.roa (hash: WQpHptjd4tEPNxwZ9App0sa/zoJNAGRry113QvQ1z7g=)
                          7: 323830343a3635383a653030303a3a2f33352d3335203d3e20323632353738.roa (hash: uJAH6jRkldzjavl3BlQd294900kR7c5mVBFZQMLoFqo=)
                          8: 3137372e38342e33322e302f32342d3234203d3e20323632353738.roa (hash: X0iD1atVsTwMBLm6pc65Td8wKbMN7QvopeldfZjePxA=)
                          9: 3137372e38342e33372e302f32342d3234203d3e20323632353738.roa (hash: VEnB/oVoNxtuhPOMCxDhxUutNWkYQBmYlvSAp4b97uE=)
                          10: 323830343a3635383a633030303a3a2f33352d3335203d3e20323632353738.roa (hash: DkfHQogdGXNjUjZ63waB5D391I/cftZbVcH3UHHgFSc=)
                          11: 3137372e38342e33362e302f32342d3234203d3e20323632353738.roa (hash: TUwlurF2l+qtIryrIkmvQL/NUiisKyzc3i3hncr1EfM=)
                          12: 323830343a3635383a613030303a3a2f33352d3335203d3e20323632353738.roa (hash: iYpaNUeA8J89nt77wG3ZXWX9zpxiaqGElNauL7cNi3E=)
                          13: 3137372e38342e33342e302f32342d3234203d3e20323632353738.roa (hash: qXloB9e8NXgABss8+yUjKHId7pJc1a4r8AzfexCTkpQ=)
                          14: A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl (hash: ewe0SDYOp1yHvDv7w8/A8nSPKCJWoMXpggP8bJhQqIo=)
                          15: 3137372e38342e33332e302f32342d3234203d3e20323632353738.roa (hash: fxp4+r5bI4TwG75ozKbnKtyfWh5TeKLkuULbOZBqhWM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 06:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:ca:db:e1:00:61:9e:eb:c4:08:79:29:0a:cb:22:e4:7b:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: Jun 20 04:43:44 2025 GMT
            Not After : Jun 21 06:42:44 2025 GMT
        Subject: CN=D408E44A96DFC14C7DF04391EC2CF119A1CD9EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:48:4b:3f:a5:23:59:9d:35:6a:ff:8a:e2:
                    bd:0c:fa:70:f0:d8:ad:7e:e9:e3:89:db:b8:ae:e0:
                    9b:35:d9:78:7d:fc:c4:e5:93:d7:a3:36:88:5b:40:
                    d3:93:eb:e6:52:c8:8b:da:48:5c:79:37:7a:e4:24:
                    2d:d1:ba:8e:c4:bd:ab:e4:74:c5:61:7f:32:d5:d8:
                    74:9b:24:96:be:f5:3e:06:8d:31:8c:af:c4:0f:e8:
                    2e:2c:2a:35:dd:e5:01:e8:e7:aa:a5:9c:2e:9d:3a:
                    8b:da:bd:23:4d:09:1b:72:6d:50:31:24:4d:21:db:
                    77:d7:86:77:5e:c4:b7:1b:8b:ae:eb:82:33:2b:89:
                    3b:8c:fc:65:a1:62:5b:5e:af:cf:30:ef:70:e7:a4:
                    9b:f9:98:3a:db:af:5a:ca:01:9e:69:b0:4b:83:03:
                    d8:4c:91:cc:11:81:57:90:3f:d2:a9:5b:58:68:e1:
                    f1:a7:dc:9c:4e:09:42:d9:c3:2e:bd:25:bd:8b:93:
                    a7:6c:95:d9:8b:b5:4f:4f:6d:a2:59:76:2d:bb:60:
                    da:ec:60:4f:24:93:e7:34:c4:56:04:70:14:3b:09:
                    bb:20:3c:0a:a9:d7:bc:0b:6c:42:e3:f7:5f:14:7d:
                    66:ee:8a:83:13:cc:86:11:87:2f:19:6a:05:e9:36:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:E4:4A:96:DF:C1:4C:7D:F0:43:91:EC:2C:F1:19:A1:CD:9E:F8
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:20:cd:ff:9f:c1:5b:0c:35:92:cc:36:ee:5f:af:48:91:
         bd:ce:4a:7b:2a:8d:10:24:ba:3c:fa:a7:37:cf:e1:c7:ef:f0:
         eb:0a:c1:97:93:d3:ed:97:d5:b3:75:0a:69:7e:ed:f3:8d:1e:
         9a:01:c7:62:14:d5:b6:39:db:ac:0a:c5:4b:c1:c6:56:41:c1:
         86:78:72:06:d9:92:da:32:b8:54:54:9f:de:d2:34:e6:fe:8c:
         13:58:e0:33:c8:f9:29:2c:ef:78:d0:98:c5:e3:cc:8e:29:f6:
         cf:d1:31:d0:9c:13:70:1b:19:b1:aa:d7:15:e3:ac:d0:e4:a7:
         0c:11:20:e3:dc:05:d8:db:d2:2a:83:17:6e:6f:4f:01:cc:00:
         58:9d:39:63:7e:e0:c1:91:ac:e7:70:4b:30:5e:79:75:88:f8:
         f7:98:64:ac:62:9f:e4:d7:dd:70:46:63:24:e9:bb:34:d5:38:
         3a:20:84:c4:57:68:c4:df:92:bc:2b:7b:a2:ab:e4:80:ed:00:
         2e:71:e2:86:74:66:6f:57:8a:35:31:ef:2e:68:e5:0b:58:88:
         cc:12:69:c2:0a:7b:64:e6:d6:b8:e0:33:bd:79:4d:98:50:4a:
         99:69:d2:93:a3:9c:8b:1c:18:9f:2e:20:d6:e2:8e:c8:13:aa:
         0d:de:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:04:32 2025 by rpki-client