Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
File:                     0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft (raw, json)
Hash identifier:          zduJH4RA3WI/g5JGnSRx6zmOmc5F2yhO7YzIad6W3Os=
Subject key identifier:   16:15:BE:CA:08:F1:1A:B1:D2:7B:42:3B:F4:59:E6:53:2F:94:84:4B
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       3B469F88140D3FB2B6C8B989FFBD18A7AE9C41C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
Manifest number:          024A
Signing time:             Sun 15 Jun 2025 23:27:03 +0000
Manifest this update:     Sun 15 Jun 2025 23:22:03 +0000
Manifest next update:     Tue 17 Jun 2025 01:48:03 +0000
Files and hashes:         1: 3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (hash: E5qoBXr4oTY6QTX7EYkjyrfuGgD2aWcgq+lD1ik24wk=)
                          2: 0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl (hash: y512/hlYs902rUzo4RhEMTBlvx0oNZ2pZ0GeTIZxIu0=)
                          3: 323830343a333464343a3a2f33322d3438203d3e20323635343833.roa (hash: yLrtH58xC+1jIEbmKu34Mf1Eyz2Ki/HA5JUGdH+ENgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 01:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:46:9f:88:14:0d:3f:b2:b6:c8:b9:89:ff:bd:18:a7:ae:9c:41:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Jun 15 23:22:03 2025 GMT
            Not After : Jun 17 01:48:03 2025 GMT
        Subject: CN=1615BECA08F11AB1D27B423BF459E6532F94844B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:bc:df:8c:fb:2b:fc:86:6c:72:d0:f7:13:
                    bd:d2:6a:29:da:ea:3f:de:da:fd:95:a8:22:a8:9d:
                    bf:c0:05:53:be:2f:76:20:52:91:b1:e7:c1:95:9a:
                    9a:44:27:a6:1f:23:fa:e9:92:33:15:b1:ef:d4:dd:
                    f3:e2:a0:fc:17:02:6b:4a:be:1c:b2:92:c5:1b:1f:
                    13:4e:a8:7a:04:3c:4b:48:ef:c7:b1:77:9b:9e:c8:
                    56:1c:59:b9:41:b0:20:71:d3:c2:61:47:2e:aa:56:
                    c9:88:30:35:ff:b4:24:77:00:83:78:e6:67:82:5f:
                    c6:fe:6d:a1:f6:72:43:0d:3a:b7:bb:8c:9c:2c:b1:
                    c8:c4:8a:6e:60:b4:ce:a6:57:a9:51:6e:9c:a4:f3:
                    f7:b0:73:5f:8c:0e:f1:4b:8f:2b:c2:17:f4:49:52:
                    96:3c:14:e1:d9:89:13:2a:ce:f6:d4:f5:64:f6:69:
                    b2:98:11:86:33:51:d6:64:3f:7f:90:01:7c:08:18:
                    21:ca:c4:f9:c7:aa:a1:21:0e:f4:b0:0d:4f:6b:3d:
                    72:71:fc:8f:db:c6:cd:fe:3e:ac:cb:b7:b1:23:c3:
                    a8:e3:7d:45:06:c6:ac:75:8c:5b:46:cb:b2:03:3d:
                    9e:47:56:c0:38:17:b7:24:64:9f:9e:24:42:5b:2e:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:15:BE:CA:08:F1:1A:B1:D2:7B:42:3B:F4:59:E6:53:2F:94:84:4B
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:78:f0:7b:cd:57:2f:26:21:86:19:44:63:d8:ea:6e:f7:52:
         c3:36:aa:ab:3b:00:b4:17:d2:fc:1b:6c:3a:98:26:31:28:08:
         ca:30:2f:8b:e0:1b:c0:57:4f:ee:47:16:6d:45:b8:56:51:39:
         28:b3:fa:76:10:95:cb:94:ac:81:87:d5:78:92:25:c2:1c:b9:
         f7:02:29:b6:ae:cf:f2:c0:fc:2e:ef:22:21:24:88:ac:89:b2:
         f3:db:a1:68:fd:b6:b8:ed:5f:f8:ba:8e:eb:e2:c9:31:e8:7b:
         f9:c7:1c:fd:00:97:b7:cb:d2:be:11:dd:f2:a0:47:01:e5:37:
         f2:d6:7e:f6:bc:19:e6:80:82:b4:9c:cd:ac:81:22:35:dc:ba:
         a1:0f:e0:22:cf:09:e8:e0:b3:31:c3:ba:4e:55:59:48:5f:27:
         dc:41:d0:b1:d7:64:71:47:ee:51:b6:74:73:84:e4:a5:cb:b1:
         0d:c4:0b:ca:1e:89:ef:db:22:21:c9:20:fb:6e:bf:c9:b9:f3:
         63:cc:6a:1c:0e:bf:95:93:1e:ec:46:37:53:16:13:c9:62:02:
         ca:4d:87:21:85:43:10:ff:e7:f8:bb:fd:f5:30:ee:49:c1:21:
         f9:7f:b5:c7:b1:c7:84:7f:6b:09:3e:b6:af:c7:2b:4f:ae:4c:
         b5:30:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:04 2025 by rpki-client