Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          2y7pUUv19OFw3UGgIXO35kQr68Oy4aq0kwnqgVAi1Ag=
Subject key identifier:   8B:B5:08:05:DD:6B:78:4C:38:40:00:3B:AE:DC:B4:76:C0:FE:A1:F8
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       719FA7859278F22E6A61DCB6D4435EDF859180FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          B8
Signing time:             Fri 13 Jun 2025 04:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 03:55:23 +0000
Manifest next update:     Sat 14 Jun 2025 07:31:23 +0000
Files and hashes:         1: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: evBMuZINqcHeHMsP+DE1yiYnYPy8jhxgXpjGL+vMnoM=)
                          2: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: voB/PY68SjzpdHWaw/CO9APbnHreaPcfpMnIshzG948=)
                          3: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: u8Gtg1w64hjHx82cogL9tzISbpLMPGPEPX5tye/1XiY=)
                          4: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: wySWIaPp8P/apsFvr8UGe1iAS4IBMMSJLQ0H95Wfao4=)
                          5: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: 4PPYBpXogJKoB8CdTXQjzX5YQWO69XxPjOg2VgclUPE=)
                          6: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: Yr4E9+z/5F0guiJtesfecuSMeOMmf9ndDDz5FFFAij8=)
                          7: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: zhfAj8up/CxBM6GZnuFFQNzFJjo75wVCc/e6i3AXNbM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 07:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9f:a7:85:92:78:f2:2e:6a:61:dc:b6:d4:43:5e:df:85:91:80:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Jun 13 03:55:23 2025 GMT
            Not After : Jun 14 07:31:23 2025 GMT
        Subject: CN=8BB50805DD6B784C3840003BAEDCB476C0FEA1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:1f:5d:fa:4c:0c:a8:c9:c2:f7:60:9b:54:
                    7c:27:20:61:42:2e:7a:4f:50:2f:c0:5e:dc:90:73:
                    b3:97:06:1a:40:cd:74:ad:60:e0:fc:ea:a4:60:e8:
                    b9:4d:c9:90:6e:82:5f:bc:dd:3f:12:04:7d:87:be:
                    0b:c4:b7:48:99:c0:d2:4a:76:51:6c:3c:d1:ea:e3:
                    64:75:82:20:c9:5b:0f:db:a8:61:47:8d:4b:aa:5e:
                    77:36:3e:68:43:5f:19:15:0b:52:74:11:5b:82:cd:
                    06:48:06:33:af:79:e0:1a:3c:c0:f7:5a:dc:8f:74:
                    6a:cb:43:30:01:a4:73:79:4f:50:da:6a:29:74:bc:
                    4b:48:1e:52:a9:f9:e1:99:58:a9:e2:8c:8c:2e:57:
                    ea:9f:75:91:85:d6:1d:96:3c:d9:da:d4:ea:cc:da:
                    e8:4f:63:30:2e:55:b1:a1:dd:c7:5e:ed:e7:bd:eb:
                    78:7f:8e:d1:45:ca:7f:bd:ed:e2:af:f7:7e:57:01:
                    84:b1:7b:13:1e:50:61:46:b1:3e:ae:57:1d:36:ab:
                    6c:6e:af:11:2c:67:ef:49:46:91:dd:2d:34:c8:4f:
                    9e:1f:9b:a4:2c:e0:7a:1f:0f:52:9d:19:0e:a8:2b:
                    c9:f5:a0:34:ab:4d:20:4f:ff:e7:57:14:e6:4c:58:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B5:08:05:DD:6B:78:4C:38:40:00:3B:AE:DC:B4:76:C0:FE:A1:F8
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:47:49:66:b7:a0:a4:62:d7:41:0e:e8:f0:f1:70:28:95:dc:
         ed:e3:ca:cf:60:04:24:ec:b2:6d:3d:ae:ae:af:16:53:91:cb:
         b9:a4:e9:f3:47:ce:56:17:1c:b7:57:3a:a0:6f:45:28:aa:dc:
         bd:2a:b9:d0:be:33:a8:67:84:ac:0b:e8:f1:3d:8f:fb:e5:da:
         db:06:9e:d1:dc:d4:1f:0a:c5:bc:a2:aa:fd:73:d9:8a:90:71:
         cc:c5:c4:1a:f5:bf:8f:b1:8a:dc:48:93:df:47:c8:00:f4:6d:
         e0:16:85:0c:8c:ac:36:13:10:61:87:d4:6d:98:2b:9a:a1:ac:
         44:a3:65:20:c4:b0:dd:c7:39:38:71:06:97:e0:79:96:29:c6:
         92:99:20:ba:12:98:90:d6:36:b1:db:4d:8e:d6:99:26:67:00:
         82:6c:0a:ed:f9:09:ad:6a:d3:7c:7d:19:65:c0:6e:35:c4:69:
         ec:2a:25:c0:7b:e8:1f:72:ad:8d:6f:45:e4:53:6f:09:b5:aa:
         cd:d7:34:28:4d:73:ef:76:12:76:21:bf:32:e3:8f:58:3b:68:
         fa:30:f5:ac:fc:23:91:81:55:61:72:9e:8b:61:48:b9:95:87:
         7b:48:55:6d:27:da:3a:e8:66:d0:38:73:db:66:b1:a5:5b:1d:
         30:b1:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:28:44 2025 by rpki-client