Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          HXoMmNdatVswmZ7i3a9F6bmBItGl5/TmBb1w8+QrXaU=
Subject key identifier:   36:52:07:53:FB:55:06:90:98:DD:55:F8:3B:2F:BF:E8:3D:39:DD:4F
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       6332464F8FF218A7816C49E4E744607BF357A608
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          01A4
Signing time:             Tue 10 Jun 2025 19:52:34 +0000
Manifest this update:     Tue 10 Jun 2025 19:47:34 +0000
Manifest next update:     Wed 11 Jun 2025 21:04:34 +0000
Files and hashes:         1: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          2: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          3: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          4: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: sHcR6g2vEfC5ACwFkOfyhKjZMUlR2RXdAFLN0bC2sIQ=)
                          5: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          6: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
                          7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:32:46:4f:8f:f2:18:a7:81:6c:49:e4:e7:44:60:7b:f3:57:a6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 10 19:47:34 2025 GMT
            Not After : Jun 11 21:04:34 2025 GMT
        Subject: CN=36520753FB55069098DD55F83B2FBFE83D39DD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:f6:11:e5:14:8d:f3:e4:9a:a9:30:3e:f0:
                    41:ba:e8:ca:32:72:fe:c3:84:c9:eb:4e:ee:37:67:
                    aa:0c:e3:df:71:ee:c7:76:14:bc:6b:4b:18:d7:d6:
                    01:c4:24:84:43:c1:eb:ad:ba:59:10:18:bf:71:65:
                    09:e1:af:9b:c1:1c:96:7a:e1:28:c1:91:ef:96:63:
                    30:a4:be:1e:b9:a8:79:a5:75:4c:56:9a:0d:a6:3b:
                    4a:b0:ab:aa:87:3e:b1:60:f4:ca:db:f6:b6:70:47:
                    ef:bb:9e:63:9e:af:56:d4:f6:58:30:a6:37:f6:a7:
                    a9:1d:90:64:bb:c3:5e:e4:d2:52:12:dc:14:33:42:
                    c0:2b:cc:32:b4:d8:13:90:1f:9c:8f:84:63:d9:6f:
                    d7:47:8d:40:d5:a7:05:91:8d:cd:0b:d4:af:e4:a3:
                    d5:aa:a3:06:dc:71:11:78:c6:61:15:73:6e:1a:38:
                    35:a2:9a:4e:4b:16:58:0a:4d:91:7b:7c:a4:75:36:
                    0d:22:35:80:c2:10:e4:de:5e:46:03:5a:c1:3b:8a:
                    65:ad:54:a6:f6:30:84:7c:0e:99:ad:95:06:ff:12:
                    53:3d:34:f7:e5:81:a9:35:f4:68:49:2f:a6:9c:99:
                    18:8d:34:2c:30:b4:51:25:70:ab:86:73:59:c8:41:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:52:07:53:FB:55:06:90:98:DD:55:F8:3B:2F:BF:E8:3D:39:DD:4F
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:ff:4f:a9:7a:61:a2:8a:19:41:32:b1:bc:03:d0:5b:46:
         04:cd:82:f5:79:a1:24:7e:22:43:d1:e4:6d:61:ca:92:c7:16:
         b0:0b:46:7d:54:1d:30:e4:aa:33:69:c9:53:4c:85:24:c7:6b:
         37:0a:0c:dc:15:d7:72:c8:eb:9a:62:d2:c5:71:ea:1d:e4:90:
         c9:3e:fa:be:32:b0:a1:a1:21:31:cd:b2:b4:8f:22:0c:6d:7f:
         c4:ae:72:82:ae:4b:78:33:14:d9:35:2b:0d:a2:58:16:8a:d9:
         93:b2:64:49:03:6e:91:18:f3:39:6a:35:4e:ef:67:7d:0c:07:
         53:95:62:8d:54:fe:fe:5e:80:e1:75:51:58:25:34:8f:ae:23:
         5f:8a:af:f4:71:62:5c:c4:70:12:43:96:e7:12:00:f9:3c:e0:
         2e:13:43:ea:db:6a:7d:2f:59:1c:db:a0:3b:34:2b:bd:31:bf:
         cc:bb:f3:3c:5b:87:ce:36:d3:34:b6:85:95:76:3a:bd:b0:41:
         87:69:b1:04:0d:10:33:11:25:1a:94:c4:82:d5:11:0e:f3:05:
         73:29:2a:3c:15:9c:3e:c6:1d:d1:43:29:b9:a4:22:83:1a:60:
         51:20:3a:44:47:58:05:11:03:16:47:d7:6c:4b:10:2a:32:aa:
         33:82:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:57:24 2025 by rpki-client