Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          GKXJQwE1g2RZCCKnloaQHvv4Z8f6xBCKV3WNM/o+YKw=
Subject key identifier:   8D:AE:57:3B:64:5F:AD:6D:E2:31:61:50:78:D5:F2:11:6B:21:EF:FD
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       600871808C19BB2773943F4B593503C4BFCABC37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          015A
Signing time:             Tue 15 Apr 2025 17:15:17 +0000
Manifest this update:     Tue 15 Apr 2025 17:10:17 +0000
Manifest next update:     Wed 16 Apr 2025 21:03:17 +0000
Files and hashes:         1: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=)
                          2: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: A0iotgGUS76kdcFNrmuqv8f22rbgUXjEazLohuwo++E=)
                          3: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=)
                          4: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=)
                          5: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=)
                          6: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=)
                          7: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 21:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:08:71:80:8c:19:bb:27:73:94:3f:4b:59:35:03:c4:bf:ca:bc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Apr 15 17:10:17 2025 GMT
            Not After : Apr 16 21:03:17 2025 GMT
        Subject: CN=8DAE573B645FAD6DE231615078D5F2116B21EFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:eb:80:9c:ba:6f:7d:bf:7f:62:be:e1:b7:
                    14:3c:97:2f:28:e3:43:07:15:db:48:53:f0:04:d0:
                    94:e6:1c:79:f7:ba:a8:89:aa:01:23:fe:30:70:38:
                    86:48:ef:d6:e1:c1:1a:24:f4:ba:cc:92:ea:64:6b:
                    2f:45:d4:33:27:6a:c6:05:6f:df:b7:af:bf:d1:d7:
                    f6:78:39:a5:11:02:3e:54:f4:86:24:99:99:70:b0:
                    2d:8c:48:17:07:d2:8d:f6:dc:a1:94:99:c4:0f:f2:
                    3f:72:ca:e3:e5:e7:9a:b7:98:56:d2:83:80:55:81:
                    82:2d:41:41:53:85:50:8f:64:9b:13:af:38:aa:b0:
                    0e:55:c9:85:cb:b2:38:16:27:11:25:23:38:fa:91:
                    86:e2:ed:3c:82:13:0e:a6:e5:49:52:85:f9:71:1e:
                    60:3f:61:b2:06:bf:d4:0c:a1:b7:90:cd:76:8b:c5:
                    26:0e:da:cb:f8:6c:4e:d0:c8:9f:f0:9d:9f:56:c8:
                    e0:a1:aa:9c:2d:bc:7a:79:e1:3d:23:47:22:ea:90:
                    a8:9c:96:6e:6a:6b:2c:49:4f:94:1f:3f:28:04:e6:
                    bd:05:c9:80:11:8a:9a:b4:44:9a:05:8f:12:b0:23:
                    b1:22:d1:ab:32:fa:33:d0:73:c5:69:e5:e4:ea:57:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:57:3B:64:5F:AD:6D:E2:31:61:50:78:D5:F2:11:6B:21:EF:FD
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:c7:21:1c:bc:29:f1:d1:78:52:95:0f:c8:fa:50:44:4f:
         a2:84:56:7a:7a:d4:1c:74:73:26:76:16:65:ae:23:0d:e1:f7:
         53:ac:7f:09:b8:33:ae:d4:a0:45:d3:7d:0b:e0:c2:f1:0d:9f:
         23:93:2e:51:8a:ff:8a:26:e5:df:d6:34:7c:3d:f9:4d:e2:8b:
         8d:80:e7:f3:c3:15:a2:c2:f6:55:e4:36:7a:68:f0:78:a9:38:
         99:ec:92:29:5b:f4:cc:a0:b7:4a:63:02:f7:78:a9:41:b6:34:
         56:01:06:39:73:35:79:41:9e:df:0b:46:d3:13:46:1c:93:a0:
         07:2f:e6:be:4d:ac:c1:38:f5:19:14:7a:7e:03:1e:fa:81:df:
         70:e6:c3:50:93:ce:07:fe:4c:4a:ff:bf:a9:57:88:5f:7b:1f:
         1f:b5:8b:e6:ff:5e:82:38:66:28:5f:20:bc:41:ed:48:69:a3:
         1c:49:97:5b:c8:9b:68:f8:43:68:60:fc:62:94:0d:90:35:cb:
         11:2f:d3:90:f8:77:68:4b:f6:dd:92:d6:da:f9:06:0f:a4:3e:
         f2:0d:45:33:25:d4:44:07:2d:5b:9c:73:81:45:32:7e:65:a7:
         75:dd:3f:d0:ad:fc:82:72:de:f1:b6:85:a9:27:86:ef:28:1a:
         85:ac:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:35:19 2025 by rpki-client