Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
File:                     8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft (raw, json)
Hash identifier:          FeqOEKgAld6jSi96TJl61xfJCA80KjN6FrBgUT8rO2Q=
Subject key identifier:   B4:C3:1F:D1:76:56:0C:40:D3:9B:BF:F2:6C:78:84:62:49:53:17:0A
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       5799067A8ADB7BE3A68FDCA3619DC77EDCD46B49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
Manifest number:          C1
Signing time:             Tue 10 Jun 2025 09:39:44 +0000
Manifest this update:     Tue 10 Jun 2025 09:34:44 +0000
Manifest next update:     Wed 11 Jun 2025 13:14:44 +0000
Files and hashes:         1: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: L9m9fbPrtD0Y/5M8u0dpOeN4zm7LJLcaHkb77JY6ElU=)
                          2: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: cXs3CrAvByI3AyasrjvXExTkGUIxlGxV4ZiNkjQ09Hc=)
                          3: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: FwZX4z5zpuXMQ0uyraa36d4EKNR8+PqRDHgBI4WBA1s=)
                          4: 8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl (hash: CeH2kKQR44R+UL5YYOJ+6CMaG2D09k4mUWrciKbLJgE=)
                          5: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: 0QXSTautiCyMFupNZxOXq4YJInWZvXr4WcMR6zNjHRg=)
                          6: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: B9yyPilbit54yuLGAwHx6lBcYI9SLNV/Vu7wzavs0L0=)
                          7: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: zO4I0qndWmCmnKcO/HqSBUXpHWY4VpaAjJ0Hv1qBqn8=)
                          8: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: KDgaZGdtg7K4+1b9RJ67m/YG/mumJ77S7kdCF1jA1Yw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 13:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:99:06:7a:8a:db:7b:e3:a6:8f:dc:a3:61:9d:c7:7e:dc:d4:6b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Jun 10 09:34:44 2025 GMT
            Not After : Jun 11 13:14:44 2025 GMT
        Subject: CN=B4C31FD176560C40D39BBFF26C7884624953170A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:b2:76:f2:49:7f:81:85:4f:fa:79:32:df:
                    0f:8b:7b:5f:ca:fd:f8:99:97:26:16:ee:f1:cc:6e:
                    05:06:75:ba:e1:1f:74:c1:1f:91:e6:a1:ec:6a:ff:
                    d5:68:ad:62:c4:ee:86:07:c6:b2:4a:da:24:fe:e9:
                    26:c6:57:8d:77:7c:c2:8a:0a:2c:4c:ca:8e:42:df:
                    e0:ac:70:f5:de:a5:72:5b:17:ce:65:e6:85:c3:7d:
                    70:d0:d9:5b:26:3b:99:aa:f0:79:e2:8c:aa:24:74:
                    36:0d:a1:42:12:7e:e3:30:1e:5e:a0:73:2a:ad:0b:
                    68:ed:5c:be:e7:fa:d5:1e:6a:4c:29:af:72:2a:46:
                    cc:a7:75:d1:18:79:40:2d:c3:cb:54:79:e5:0e:aa:
                    5a:a5:29:a7:f5:1e:af:20:4c:58:60:63:17:92:6b:
                    dc:f3:29:1e:b2:86:38:be:c7:57:b3:1b:5d:c0:6e:
                    95:37:63:8c:e9:4a:b6:96:7c:94:68:76:c8:ae:d7:
                    6f:fb:10:5c:75:d6:60:52:f6:3a:15:0a:4a:cb:c4:
                    bb:46:7f:a6:17:08:17:1f:e8:91:4f:fd:ed:f5:06:
                    d4:46:a1:fa:e5:f0:4d:c2:f3:07:c8:1d:2b:b1:f3:
                    a4:94:61:78:ce:a9:ee:c1:79:38:e0:76:70:eb:b3:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C3:1F:D1:76:56:0C:40:D3:9B:BF:F2:6C:78:84:62:49:53:17:0A
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:70:18:b6:88:ed:c0:d6:9f:e5:b1:a1:fd:99:7b:ff:6e:
         19:eb:d4:3f:f0:99:07:3b:95:93:70:a9:fe:d7:ad:43:7f:c4:
         a7:3c:4d:88:c7:11:bf:b1:6b:d6:f7:8c:d2:bb:78:45:d5:de:
         29:8f:50:8d:8e:ab:8b:aa:af:e7:f8:36:05:e4:9d:3a:17:8d:
         fd:b8:bb:c3:f1:cb:40:fc:45:f0:34:a1:da:e6:57:79:15:36:
         ba:36:32:ff:a1:33:6a:07:66:6c:7b:24:6f:60:87:18:3e:9d:
         f9:1a:60:e2:95:50:ec:e9:61:03:b8:62:20:10:7d:c8:cb:94:
         54:e8:b1:23:d6:62:45:b2:0b:72:aa:26:21:b6:17:60:c5:2d:
         ee:66:51:ab:44:91:7e:d1:bc:1a:a9:d3:70:12:cb:37:13:1a:
         97:f2:ac:a2:7d:e5:92:f7:42:19:6c:1d:51:91:f4:73:3a:38:
         14:dd:cb:dd:bd:d5:bc:5f:4c:6a:cd:54:79:d0:1f:aa:4b:81:
         ec:49:2f:e7:95:21:06:6a:06:47:36:e5:b0:d1:a9:2d:8c:34:
         40:95:ca:ba:26:d7:00:48:38:41:c2:f3:de:10:0e:65:ba:5a:
         f0:d5:4c:c9:bf:23:ea:fe:47:eb:08:bb:ca:74:48:cd:d2:1a:
         ca:e6:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:21:53 2025 by rpki-client