Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          avB8zTHLaBYQKTINARWsxf1EeU6PI4lbxK6e6tShinE=
Subject key identifier:   19:03:C7:81:57:42:B2:24:CC:09:BA:5D:82:8D:83:5E:AB:41:FE:07
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       3F3E30B975D8F39607BF1D31D5FC913176DD908D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          01A5
Signing time:             Wed 11 Jun 2025 13:07:36 +0000
Manifest this update:     Wed 11 Jun 2025 13:02:36 +0000
Manifest next update:     Thu 12 Jun 2025 13:38:36 +0000
Files and hashes:         1: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
                          2: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: hQXnORelL6jp1tj4m6Vr+ru+LU1diTgOB3DLRyBdwRw=)
                          3: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          4: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          5: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          6: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 13:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3e:30:b9:75:d8:f3:96:07:bf:1d:31:d5:fc:91:31:76:dd:90:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 11 13:02:36 2025 GMT
            Not After : Jun 12 13:38:36 2025 GMT
        Subject: CN=1903C7815742B224CC09BA5D828D835EAB41FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:2d:46:ae:f0:df:8c:56:b6:2e:29:01:61:
                    a1:7f:d9:db:17:f2:56:2d:9d:0b:a2:dd:13:a2:04:
                    6a:45:32:0d:3a:ef:94:18:d1:7c:78:cd:43:af:eb:
                    7e:cf:c2:f6:21:92:f9:58:79:ab:8a:3a:9d:18:dc:
                    d4:ac:61:d8:bc:0e:1f:07:e7:66:8e:6e:28:67:f7:
                    82:7f:d7:eb:64:6c:15:7a:94:48:28:87:ae:6e:71:
                    28:06:e6:06:2b:1e:be:37:91:d3:5d:30:c4:32:89:
                    d0:c9:2a:59:6d:86:42:dc:50:58:35:e3:61:89:3b:
                    d3:bf:ee:31:d2:f3:40:89:85:2e:ac:30:02:da:a7:
                    2d:17:41:11:76:6d:a3:69:fb:e2:81:03:b1:b8:3d:
                    fe:57:e2:f3:3f:fb:51:33:b8:6b:d7:70:70:f2:d1:
                    cd:d1:b0:f5:43:14:bf:f4:39:f7:8e:81:f1:48:d7:
                    da:22:63:ad:8f:39:73:f7:65:4b:ac:b1:53:cf:41:
                    97:63:ee:7d:79:81:d2:7f:66:85:ed:44:7b:34:4e:
                    db:6f:b4:61:7f:e9:d8:75:0a:70:ce:81:89:23:5f:
                    ae:7f:f7:e8:0f:e8:34:0d:a7:f4:a6:63:c1:33:0f:
                    f2:e5:f2:23:5a:5a:cd:86:49:d2:da:26:3e:bb:2b:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:03:C7:81:57:42:B2:24:CC:09:BA:5D:82:8D:83:5E:AB:41:FE:07
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:78:97:4c:02:fb:da:44:76:a1:79:01:5d:df:b3:7e:5d:fa:
         c5:45:85:de:61:0b:b8:e5:5c:49:b2:d6:b9:02:52:6c:c7:45:
         a1:70:99:90:1f:8e:4b:ca:74:9f:e2:88:89:de:25:53:1f:91:
         4e:82:c5:bb:e0:85:94:bd:0e:c4:b9:4e:71:61:53:e6:72:85:
         b9:f5:fc:f0:f6:30:f7:95:dc:2c:f4:d7:6c:4a:74:87:7b:fe:
         43:ca:f5:78:20:5e:f2:9b:a3:f1:54:95:8a:3b:de:aa:7d:76:
         cf:fd:fd:7a:85:16:db:b4:3b:0f:b9:b8:c1:0b:bd:88:e0:87:
         d0:f1:f9:23:d1:cb:19:0b:67:63:da:ef:fb:82:16:f6:dc:be:
         f0:17:ac:09:5a:fb:f9:ea:39:20:ea:78:c5:35:ad:d1:39:2e:
         00:c0:3f:57:a1:9e:68:a7:1c:4e:77:f6:97:87:97:d2:2a:ef:
         09:93:e9:d3:02:a1:6b:02:66:15:dd:19:9f:1b:d6:07:e2:f2:
         5f:b0:52:0a:14:68:38:36:3b:53:08:ab:a5:e0:c3:c5:ca:54:
         f3:3f:24:fc:86:51:16:74:2a:d7:5e:db:72:38:62:0a:97:85:
         91:4a:6c:3c:de:a4:02:d9:1b:81:52:44:32:26:a4:7c:6b:c7:
         d1:a6:6e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:28:49 2025 by rpki-client