Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
File:                     C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft (raw, json)
Hash identifier:          MYJ9JTEtLmC/EW4HO8inDnFHWtnmzK8uusqY3Vlx1lo=
Subject key identifier:   E1:D5:E3:2E:D0:85:3B:69:FC:7B:AD:B6:13:9D:52:12:E1:9F:4F:79
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       46EA956A619A14CA4110097A953D20CA03D14B16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
Manifest number:          02A8
Signing time:             Wed 11 Jun 2025 08:26:17 +0000
Manifest this update:     Wed 11 Jun 2025 08:21:17 +0000
Manifest next update:     Thu 12 Jun 2025 08:46:17 +0000
Files and hashes:         1: 3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa (hash: fkxMYzlyVr/vReN2u4DD0SnqCheiBB35/Tq7zG9z/jg=)
                          2: 323830343a3863383a613030303a3a2f33352d3335203d3e20323632333933.roa (hash: gLf52+ozj+dPkOZjCLdzZxFH4yEPwfpI1gLgVM7xcNA=)
                          3: 323830343a3863383a3a2f33322d3332203d3e20323632333933.roa (hash: z0w8FVCJ4DS2w5yYqh99pjh5BAMG3JvBPm+NKZzKfWE=)
                          4: 3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa (hash: vBcqdwZytXM0JejF8McZgAXD7lnVliZc+tjvH0jQzZ0=)
                          5: 323830343a3863383a3a2f33332d3333203d3e20323632333933.roa (hash: OrxneSgEcvlRbnaWMw0eP6WsBIXo/UUrOjTjCBwJ/NI=)
                          6: 3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa (hash: wYhhasa/eAZxc/7vLWqfuEkb3J17YzvkRu2Pljxp2m0=)
                          7: 323830343a3863383a3a2f33352d3335203d3e20323632333933.roa (hash: dmo5cPb/7pRc/a4nNJ6ApKn00n6/OXjgMuWweoiEMJE=)
                          8: 323830343a3863383a343030303a3a2f33352d3335203d3e20323632333933.roa (hash: UDKjT4hWz4wzlMX4OlsQM/uIE/3ohHRkaMbqafvXBx8=)
                          9: 323830343a3863383a633030303a3a2f33352d3335203d3e20323632333933.roa (hash: No6Rd9VHGWJVW+wmHQlEIM7ZMFM7MIRSvrdeUEima4I=)
                          10: 3137372e3132392e38302e302f32342d3234203d3e20323632333933.roa (hash: dOPNOtB1wkfgfHnAwNiJQGVlyDN1mhCNDjK52G6zRSY=)
                          11: 323830343a3863383a323030303a3a2f33352d3335203d3e20323632333933.roa (hash: iG9MBxrBIm41u5GGH+CMZZXj4c+DUDay0eUrlH+XD/c=)
                          12: 3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (hash: ck7CfXGQh5CE61lDUEsmbErIeypJ/RP5pNJH0/GVBw8=)
                          13: 3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa (hash: YwZ0VXr025y6xgT7E4Gr5t3TMaFHfEMdFdKJZvg4+JI=)
                          14: 3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa (hash: lrxdz/RpeDRG2OmO/nSLGQkl4Nwxq+s7wlcPX83Cv2U=)
                          15: 3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa (hash: 6qyAbwEW/mw630KepGCLBZ+1dUQD1d41otxfALVdu1U=)
                          16: 323830343a3863383a363030303a3a2f33352d3335203d3e20323632333933.roa (hash: PVW6h9Xco0FwwZrlQk0HuQF3QDt318QJyllbxqUEvcc=)
                          17: 3133382e3132312e3234382e302f32322d3234203d3e20323632333933.roa (hash: cPqfiVXRrgbljn6FeDqd2HyhMyfbYyRWr9elFWlkRC4=)
                          18: 323830343a3863383a653030303a3a2f33352d3335203d3e20323632333933.roa (hash: cBZL/LLfq1QTvV2JCizQa/fL1OhoO6vNKM8GC6oQbjs=)
                          19: 3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa (hash: 1wGGMCtw1Q5Wd3YmeyKSX5AT95EFmYwTRVWbuQpzg1k=)
                          20: C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl (hash: u1SqNf5/LNAiYpLDPNUi3RbwZ41aSfhgobj1AyBeDLo=)
                          21: 323830343a3863383a383030303a3a2f33332d3333203d3e20323632333933.roa (hash: Z9+oPMdn9Mf5Dy0Q1T4rtylqO2k9ySVGZNH61FdzMSc=)
                          22: 323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa (hash: KmfoJnA+m+lIIb/f7v2HReLl/jpaS6ANmcaCEAuHOLc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 08:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ea:95:6a:61:9a:14:ca:41:10:09:7a:95:3d:20:ca:03:d1:4b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jun 11 08:21:17 2025 GMT
            Not After : Jun 12 08:46:17 2025 GMT
        Subject: CN=E1D5E32ED0853B69FC7BADB6139D5212E19F4F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:17:e9:14:88:41:28:de:f1:d2:c7:39:0c:
                    f7:7e:a6:f8:6f:a0:77:94:07:cd:2d:89:f9:ba:39:
                    c7:e0:ea:3f:37:55:9b:4f:7a:9c:94:2f:e1:09:12:
                    21:32:a1:27:a7:10:99:18:3a:8d:5b:16:b1:fa:70:
                    ae:88:cf:c5:61:ca:ea:f0:7e:16:96:b5:01:c0:64:
                    d0:07:7e:55:cf:94:2e:a0:73:ac:f4:9b:63:c0:27:
                    06:f7:25:d7:ae:90:b5:34:ae:e1:bf:77:e4:75:91:
                    38:75:7c:c3:a0:17:fb:6d:ce:08:70:96:5d:7f:67:
                    f4:03:0c:f0:97:c8:68:8d:1f:a8:21:bc:fc:e5:3e:
                    cd:af:1d:70:90:77:4e:32:12:85:26:dd:e7:7d:a9:
                    ce:1b:0f:31:5d:e8:76:df:12:e7:b4:19:31:2d:cb:
                    20:81:b7:64:a6:74:29:ce:86:cc:67:cf:2f:1b:a9:
                    45:7b:24:c3:bb:26:a7:55:30:29:7a:9d:17:31:16:
                    a6:e5:d5:92:20:12:17:1e:60:dc:fa:72:aa:b3:df:
                    9e:d7:8a:ae:4b:64:ac:6e:8e:49:72:48:9b:b1:87:
                    6d:9b:51:ea:76:1b:5f:e3:e3:3b:83:d4:0f:18:a8:
                    c2:fb:01:92:4b:1c:54:ed:89:cc:f9:94:cb:09:e8:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D5:E3:2E:D0:85:3B:69:FC:7B:AD:B6:13:9D:52:12:E1:9F:4F:79
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:3c:11:b7:60:e9:6e:d5:f6:0e:39:7b:1d:87:9c:2d:b6:
         ed:90:a2:02:25:8d:f3:94:4c:14:19:b2:e5:f2:58:d0:9b:53:
         d5:30:6b:e7:df:2f:a3:aa:84:89:8c:1c:a1:ce:9c:ba:6c:e7:
         0b:ee:07:3b:00:57:69:8b:71:42:07:9c:19:a7:0f:1e:45:57:
         b6:13:cd:ea:30:70:12:40:48:0b:3a:34:9e:06:93:45:d9:50:
         0e:3e:67:77:6f:42:37:60:dc:93:6d:04:37:fa:3a:d6:e7:98:
         5d:9c:64:b3:4a:52:ff:bd:ea:0f:cf:48:0e:5d:5a:97:cf:48:
         c1:9b:87:26:d1:bd:fb:f3:99:97:07:a6:7b:ef:91:d1:c0:c5:
         93:47:35:fc:99:ca:3a:d3:dd:57:28:6b:41:49:81:33:b2:77:
         8a:88:13:f2:c0:ac:71:11:d9:98:e7:35:84:9d:97:7e:f1:37:
         d1:ac:46:3d:e2:9d:6e:15:bb:d5:d9:09:1b:98:25:c5:0e:1a:
         da:c9:b9:d7:c5:99:c8:83:64:a5:21:f3:f9:11:e4:fa:87:b8:
         34:a7:60:e8:8c:14:00:15:80:49:9d:d2:6e:b2:7d:6f:44:8e:
         d4:af:c3:44:ab:54:31:8d:96:4c:ca:2b:66:b6:38:2b:14:af:
         76:b5:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:12:18 2025 by rpki-client