Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
File:                     8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft (raw, json)
Hash identifier:          9wFYGWncB8zYFtrYqO1ZfwrUqpORK73x/8p2hKnc5lo=
Subject key identifier:   46:B4:5C:76:EE:19:FC:8F:F5:65:72:D2:E1:79:A7:08:3F:9D:AB:AB
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       4640220956ABB605AA226FDCDBAE2DFD20C6939D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
Manifest number:          08
Signing time:             Tue 29 Apr 2025 02:30:12 +0000
Manifest this update:     Tue 29 Apr 2025 02:25:12 +0000
Manifest next update:     Wed 30 Apr 2025 04:06:12 +0000
Files and hashes:         1: 3137372e38352e3139302e302f32332d3233203d3e20323639343136.roa (hash: 8IvOu4bEDn1ZKYBfX7cGtU0CNCRSegFzEqqyLTYGbno=)
                          2: 8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl (hash: Yy+9JxWvXOAfHnQX3eN6PVP8StbIPLZP+JW7FfbtT/U=)
                          3: 3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa (hash: JGbMdGOe6MaLEkJT7697il984Yx8faF9BDYRI4oqZ4s=)
                          4: 34352e3138362e38332e302f32342d3234203d3e20323639343136.roa (hash: GwWDpf1rZKUh1B9AVJR/AqpPDp5G58lS2ZoCmUcoNSQ=)
                          5: 323830343a363434303a3a2f33342d3334203d3e20323639343136.roa (hash: dqa60ifaVi945I7jS+gGoiiuOlMDCEST7NOiK1kbkhU=)
                          6: 34352e3138362e38312e302f32342d3234203d3e20323639343136.roa (hash: mJND29x3KzPVQJWZn2t8qDk7n7CZ+sYglsfJBLtoiM4=)
                          7: 323830343a363434303a3a2f33322d3332203d3e20323639343136.roa (hash: 0kyCuopAtNf7Aw3oMWm6J5opmOGLx/oPs5YJRmBvM6k=)
                          8: 3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa (hash: N8NGEVHB946x1MgbIiqy89IzxeMOD6XV5d/KzmKIXMM=)
                          9: 323830343a363434303a3a2f33332d3333203d3e20323639343136.roa (hash: Vc2dC3Eac9xHJwzGjtQogGHcQ5usKXZl+5LU+wgqRSo=)
                          10: 323830343a363434303a383030303a3a2f33342d3334203d3e20323639343136.roa (hash: KDlkqU107hUXdXYoo35fRepzG5VFjD+NFFxTFVH44S0=)
                          11: 323830343a363434303a633030303a3a2f33342d3334203d3e20323639343136.roa (hash: SuOCokOyVd4qy54GILLK0wTq8N2+3dyPm61KDBscTP0=)
                          12: 323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa (hash: 9OrqIBcl9BBF4I+KdG10rmbQ+0iJzlS6L7yglnBBudk=)
                          13: 323830343a363434303a343030303a3a2f33342d3334203d3e20323639343136.roa (hash: x4ebov1jOCnwe/u+RbTJnSlD1GmjZTF60iU/ySnndKs=)
                          14: 34352e3138362e38322e302f32332d3233203d3e20323639343136.roa (hash: KEZ+J+fugcym78KxB3PBZrtzf7+dQbZ2E7mwFrDbAg8=)
                          15: 34352e3138362e38302e302f32332d3233203d3e20323639343136.roa (hash: GLLa2NS0SBk/rOHcicj90a8fDimQ028mAVxV47ppOlw=)
                          16: 34352e3138362e38322e302f32342d3234203d3e20323639343136.roa (hash: 5yIKkObxvljSQsgvVM7oUyUgAfpnwY20NlZQZ2fwsQA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:22:09:56:ab:b6:05:aa:22:6f:dc:db:ae:2d:fd:20:c6:93:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 29 02:25:12 2025 GMT
            Not After : Apr 30 04:06:12 2025 GMT
        Subject: CN=46B45C76EE19FC8FF56572D2E179A7083F9DABAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:1d:22:ea:8f:11:62:bf:31:98:5d:89:c1:
                    cc:e2:69:fc:69:68:38:c9:f1:19:e4:cc:d5:78:f4:
                    e0:de:75:e7:da:d8:4a:2b:b2:ea:e3:95:8a:1e:96:
                    47:54:08:7f:a7:c0:45:f1:ca:23:4d:96:44:6c:b1:
                    76:69:9f:bf:39:2c:15:de:75:6a:7b:27:68:1c:9f:
                    fb:20:8e:7a:1a:9b:78:9f:49:14:57:e9:46:94:78:
                    18:bb:28:4b:21:2c:c5:00:08:3c:9f:7a:a3:e1:e1:
                    68:80:2d:07:5c:bd:5c:74:05:01:c4:2e:4e:d8:8d:
                    e8:9d:16:5d:06:93:10:23:83:c3:ad:d9:3f:84:21:
                    a4:95:12:b3:b5:3e:c5:70:cc:5e:de:58:f1:d2:50:
                    63:05:fa:ac:fd:0e:30:58:fe:96:71:a7:dc:22:d0:
                    44:3e:4a:7a:58:9b:7e:85:00:85:6d:d4:1e:17:b6:
                    11:40:b1:3c:dc:f7:c9:f9:fc:37:37:0d:93:23:4f:
                    50:65:6b:e1:06:43:81:05:43:36:39:2d:33:95:51:
                    48:39:00:1e:e7:3a:ef:54:1e:20:5e:c7:83:7b:a4:
                    3b:44:2b:68:96:be:c9:3b:64:f6:ef:65:ce:67:ac:
                    c4:a3:59:a8:1e:3b:79:2c:06:fa:7c:bf:81:4d:63:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B4:5C:76:EE:19:FC:8F:F5:65:72:D2:E1:79:A7:08:3F:9D:AB:AB
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:48:4f:5e:54:45:73:2d:ef:55:de:47:e1:c0:a0:ff:d0:
         fd:f1:a0:fc:61:89:02:60:db:ae:b4:05:f4:8f:32:ff:34:93:
         42:4e:73:3a:92:76:09:5c:d6:17:9e:5c:82:ec:69:04:9b:71:
         2e:0d:2e:c4:75:4d:a6:75:8d:91:c6:71:55:e8:42:2d:23:af:
         a8:f7:18:4e:d9:d6:29:cd:7b:02:3f:28:1a:1f:c8:60:4e:f0:
         0e:8c:14:40:c6:03:79:6c:fa:a0:2e:e6:af:bc:18:91:a9:01:
         7e:d5:a4:68:ad:6b:35:38:06:51:8d:aa:db:81:cb:dd:1e:b2:
         70:bf:7c:e0:20:cc:a6:ef:b0:ce:97:d6:0c:e7:71:01:33:51:
         ea:fa:f8:b7:bb:bb:11:1e:f6:59:23:b2:41:91:fe:a6:c8:04:
         81:34:d5:fb:08:c6:11:b5:01:d1:58:d9:de:82:81:ec:20:2b:
         d2:9c:ae:6d:a0:f7:7d:0f:73:24:1c:f6:85:3b:cc:6e:e6:84:
         73:7f:68:87:26:71:c8:b8:d8:17:7d:b5:dd:8f:27:a3:56:87:
         4f:56:dc:e4:ec:a6:a5:e7:37:81:85:b2:fe:8d:c6:78:b0:b8:
         d8:43:8f:f6:64:17:db:00:2f:17:32:8f:7d:b9:57:86:df:58:
         da:76:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:15:18 2025 by rpki-client