Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft
File:                     8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft (raw, json)
Hash identifier:          LyZcoStcnfRdI4Hc/87hgGSTIju6BNkcwy6UI5hFLXI=
Subject key identifier:   A2:BE:E0:AC:8A:79:8C:56:6A:66:D4:2B:D9:9C:BF:29:4F:44:5E:10
Authority key identifier: 8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C
Certificate issuer:       /CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
Certificate serial:       1EE848DBEF67EAFE9FCF92378E10A5FBE2128325
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft
Manifest number:          40
Signing time:             Fri 11 Apr 2025 20:22:46 +0000
Manifest this update:     Fri 11 Apr 2025 20:17:46 +0000
Manifest next update:     Sun 13 Apr 2025 00:08:46 +0000
Files and hashes:         1: 3138392e38352e3132302e302f32332d3332203d3e20323733353930.roa (hash: ZEQU3eLw5Bh0aBVtys9bm6d9YxEOwYno7TCTK6cR+a0=)
                          2: 8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl (hash: 6CbGNyRHv5DESW3RpKaThnjTGiTA+h7qixPMxyB7a0I=)
                          3: 323830343a383933383a3a2f33322d313238203d3e20323733353930.roa (hash: 58zrphx8OB2kHzhfFR5IFZLa+vWoMvsx3gGMHSrMUQM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl
                          rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 22:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e8:48:db:ef:67:ea:fe:9f:cf:92:37:8e:10:a5:fb:e2:12:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C
        Validity
            Not Before: Apr 11 20:17:46 2025 GMT
            Not After : Apr 13 00:08:46 2025 GMT
        Subject: CN=A2BEE0AC8A798C566A66D42BD99CBF294F445E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:68:7a:21:e1:08:bc:6d:7a:b5:96:d6:95:
                    6c:f5:5a:5b:09:f6:ed:01:36:ab:90:bd:e7:bb:14:
                    ac:fc:d8:dc:b4:8d:b5:2b:f7:2c:07:ac:d7:c5:52:
                    95:e0:e3:a3:88:54:55:5a:0b:cc:56:8a:cb:b2:e3:
                    72:77:c0:e2:cd:20:50:60:f3:1f:12:4c:8c:84:1a:
                    d8:eb:75:55:fb:b2:07:53:c5:17:ff:80:14:aa:f0:
                    c1:1b:fb:da:e8:1e:b7:32:1a:d9:6f:2f:81:47:6c:
                    8f:db:d4:09:44:a3:e8:0d:8c:4c:87:e6:eb:d1:3f:
                    b7:bb:dc:7a:af:d0:8c:65:07:10:f5:bc:98:b9:b1:
                    01:f0:45:56:7f:c3:38:49:f3:7f:ff:3b:25:9e:24:
                    e1:f2:95:7a:5b:55:99:72:f5:25:86:ca:7a:93:0e:
                    b2:b2:49:29:34:94:b3:9c:b5:02:f4:74:2d:6b:36:
                    dc:2e:76:09:0e:84:41:53:e1:dc:d8:e0:9e:09:30:
                    cd:de:f7:b2:a2:76:48:e6:3a:12:2a:b1:ad:9c:7a:
                    ca:42:51:ce:ed:d8:d2:cb:52:0b:df:dc:a9:19:bd:
                    9b:92:70:e4:da:3d:c0:a9:1a:37:19:0a:d8:cc:3e:
                    a7:d1:2a:da:19:a4:61:f5:84:6e:97:3f:8c:5a:b7:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BE:E0:AC:8A:79:8C:56:6A:66:D4:2B:D9:9C:BF:29:4F:44:5E:10
            X509v3 Authority Key Identifier:
                keyid:8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:df:2f:b7:f8:7b:c7:dd:e3:e1:fe:58:74:73:47:c8:7d:
         7d:eb:0f:75:84:39:22:a9:e2:a7:32:87:8e:e5:b8:47:44:4c:
         9e:ee:6a:06:d0:1f:69:d8:4e:55:7e:42:65:91:96:b3:76:6a:
         9d:b3:5d:7d:c3:cc:51:10:38:40:df:f3:3c:6d:a4:e5:c4:ce:
         8d:a3:f2:49:01:dd:d1:84:ae:0c:ad:dd:d2:d2:f0:f1:4c:13:
         db:ba:5e:86:61:d9:1a:89:a9:1d:3f:0a:c6:47:a0:85:0d:55:
         0d:f2:d1:49:cb:fc:08:76:ad:14:8e:cf:2a:d3:d2:49:4c:4e:
         68:3f:b8:30:67:00:d8:cc:12:ad:cc:9f:0c:9f:e7:5a:4d:25:
         9d:f8:ee:14:42:dd:fa:18:d7:b8:d9:af:f3:66:f2:99:7d:e0:
         69:f5:21:bd:33:3c:74:e0:24:79:b6:21:42:c2:fc:6f:2b:df:
         d4:3d:70:06:f6:6f:a5:83:2c:38:91:a1:a2:a1:f9:19:43:4c:
         9e:f6:cb:49:62:cd:c7:73:39:16:70:06:0d:b5:4b:cd:94:42:
         1c:54:44:e7:ec:18:43:f3:73:85:9b:27:21:6e:94:6d:b9:89:
         37:70:d4:12:16:12:de:41:39:7c:01:62:ca:2f:14:f8:7e:b1:
         8a:27:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:32 2025 by rpki-client