Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          nsAThypvuBIqXaqsNB60Bm2uoJo5jrugqwF1OKA3G/I=
Subject key identifier:   3A:8B:5D:33:94:C5:F2:1F:CD:2B:41:61:80:1C:DE:19:24:C8:C5:50
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       191F45CF3A40C1A2A9203402B0B1DA5168F1D844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          01A3
Signing time:             Tue 10 Jun 2025 03:42:30 +0000
Manifest this update:     Tue 10 Jun 2025 03:37:30 +0000
Manifest next update:     Wed 11 Jun 2025 03:48:30 +0000
Files and hashes:         1: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          2: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
                          3: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: ghFhoa0sNQ18qASDGBZNY0PXNzv5/UhNVycdNEdUO/0=)
                          4: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          5: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          6: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
                          7: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1f:45:cf:3a:40:c1:a2:a9:20:34:02:b0:b1:da:51:68:f1:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 10 03:37:30 2025 GMT
            Not After : Jun 11 03:48:30 2025 GMT
        Subject: CN=3A8B5D3394C5F21FCD2B4161801CDE1924C8C550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:b0:53:29:3c:d0:10:1f:92:3d:cb:34:85:
                    8f:94:19:c8:97:9e:36:42:f1:23:f9:6d:b4:39:94:
                    37:9c:2d:c8:de:51:61:ec:95:23:fe:9b:22:f7:87:
                    cd:8a:6a:f3:e0:f5:47:18:73:3a:05:ce:36:bb:e0:
                    fc:e3:aa:db:22:6e:7e:65:b0:31:b9:6b:8d:10:69:
                    c6:23:8e:12:ab:6b:3e:7d:79:d0:5d:68:1e:a6:55:
                    09:fc:b2:41:f5:f8:8f:b7:0a:de:25:d7:49:d4:6f:
                    db:89:48:17:07:33:bf:0e:0d:42:04:49:49:fa:f3:
                    dc:f9:85:94:b2:8a:cc:1a:90:6b:9d:f2:80:8c:dd:
                    92:46:1a:58:74:cf:01:58:16:e3:7c:35:74:59:bf:
                    d4:b1:4c:da:10:4c:e7:ca:6a:23:aa:b3:5a:26:40:
                    bb:2c:dd:ad:fd:ce:b8:b5:11:38:fd:00:c6:bb:59:
                    fd:f2:e6:c1:00:ee:f9:25:fd:fa:bb:0d:25:f7:d7:
                    97:f9:07:fb:45:3a:53:46:d5:0e:85:40:3a:d3:5e:
                    bb:ec:bb:b8:d6:6a:2c:8d:d5:8e:1d:e3:0c:56:c3:
                    eb:55:47:a7:4f:e6:8f:44:9c:8b:b1:f9:a9:cf:85:
                    09:9e:32:4c:bb:7d:e7:51:69:c1:76:48:91:67:f3:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8B:5D:33:94:C5:F2:1F:CD:2B:41:61:80:1C:DE:19:24:C8:C5:50
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:bd:e4:79:7a:74:5d:a6:e1:d5:de:dc:09:ed:57:be:22:
         0a:4a:67:fb:b6:0b:ce:da:bb:d0:46:bc:86:70:d7:67:b6:6b:
         60:2c:40:2a:2d:e4:0a:f0:9d:d2:ab:66:72:b7:de:ac:6b:29:
         06:8b:63:d5:19:0a:a4:6a:a7:6e:f6:84:4d:d1:f5:05:b7:b6:
         6c:a3:9b:a7:86:4f:92:c0:45:45:75:80:29:fa:30:30:57:ce:
         ec:19:1b:43:6e:ef:53:82:56:97:2d:4b:8b:e0:20:aa:00:76:
         1f:9d:d2:f3:05:ee:4d:ed:03:1f:ab:a9:2b:c6:26:5b:78:29:
         72:d7:ac:f3:d4:4a:9e:8f:56:25:77:9b:3f:5a:b2:ec:48:bd:
         0e:6d:d3:26:f3:73:fa:ee:db:34:2e:6a:f0:0a:b0:c0:05:c3:
         65:10:c9:9b:be:b6:85:71:37:87:1c:88:a8:0c:62:fc:f6:5f:
         b8:60:5a:c8:18:4a:27:df:5b:0b:4d:0a:56:07:f1:e5:d5:a9:
         e5:e3:ab:ea:8b:5a:d2:ff:7b:6e:8b:9b:73:9e:d9:ce:6a:28:
         50:b0:f4:d8:78:5d:fc:bb:f4:e0:fe:19:33:53:30:66:9a:58:
         4e:3d:81:b1:b5:9e:2d:35:93:ee:0e:5b:5f:a5:cd:26:6e:6d:
         6c:c7:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:03:59 2025 by rpki-client