Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
File:                     B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json)
Hash identifier:          H+S3RGw7ldsKzVS0EM3l9lJbeMiM/zZBvPsed5prBr8=
Subject key identifier:   B3:96:65:FA:60:E9:BC:37:5E:DE:3D:4F:0E:34:B6:13:91:52:C6:DD
Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69
Certificate issuer:       /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
Certificate serial:       2A2E64CB40E9608FE570958330C9A10AB1F02B27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
Manifest number:          EA
Signing time:             Mon 09 Jun 2025 09:38:23 +0000
Manifest this update:     Mon 09 Jun 2025 09:33:23 +0000
Manifest next update:     Tue 10 Jun 2025 11:08:23 +0000
Files and hashes:         1: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: aNKPk6lbdrFUFDUIw0xV9E2aljVeNbZyoieu7JBIERk=)
                          2: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=)
                          3: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=)
                          4: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl
                          rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2e:64:cb:40:e9:60:8f:e5:70:95:83:30:c9:a1:0a:b1:f0:2b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369
        Validity
            Not Before: Jun  9 09:33:23 2025 GMT
            Not After : Jun 10 11:08:23 2025 GMT
        Subject: CN=B39665FA60E9BC375EDE3D4F0E34B6139152C6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:30:77:e0:0b:59:68:2a:a2:bc:a8:11:4e:
                    bc:fb:e4:ff:93:05:bb:ef:84:99:fd:2d:74:84:28:
                    f7:97:f3:25:80:4a:37:99:f8:82:8e:d9:40:41:8a:
                    3a:25:85:76:d7:8a:4a:dd:fd:39:37:12:4e:7d:c6:
                    84:3a:45:7e:6e:e6:4d:1d:05:94:78:75:bc:3a:d2:
                    1b:6c:d0:89:c4:be:e0:14:dd:40:74:ac:fc:44:19:
                    f0:59:6f:0d:e4:69:e0:46:b7:39:e4:81:65:9e:0a:
                    d0:1f:1b:03:54:b9:23:d1:23:8b:69:23:27:51:af:
                    22:13:5c:70:51:be:07:a6:87:bc:a2:00:aa:ab:dc:
                    d1:4d:b3:41:4b:fa:16:ca:25:df:ff:e5:bb:3f:87:
                    6e:17:2a:b9:fa:cb:4a:79:e2:7c:e2:a8:70:13:b6:
                    98:c2:61:aa:93:f5:a6:8b:45:c1:3a:d4:46:36:01:
                    18:b2:9b:57:42:60:21:6f:2b:76:21:9b:1f:a2:af:
                    44:81:f3:a1:d5:44:c0:51:f5:c4:71:49:15:04:5f:
                    44:06:14:ec:55:32:0b:e9:52:0f:fc:aa:14:01:41:
                    9b:42:0e:44:16:83:43:8c:80:56:d8:07:11:6e:dd:
                    eb:1a:c8:24:f6:16:18:0c:ea:81:88:f1:4f:30:3c:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:65:FA:60:E9:BC:37:5E:DE:3D:4F:0E:34:B6:13:91:52:C6:DD
            X509v3 Authority Key Identifier:
                keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:93:4c:6f:0d:5e:83:8f:ce:a1:ce:22:64:9c:5b:5c:74:c4:
         ce:58:be:7a:b1:1e:b7:3d:f8:fc:53:23:c1:d2:81:52:08:02:
         f9:e9:58:61:0a:c8:19:00:86:7c:85:cd:ad:62:0a:cf:1e:95:
         4f:f3:8d:33:02:ae:8c:e7:0c:1c:f2:f3:01:a0:91:e3:34:3d:
         b5:bd:04:ec:6d:b6:61:66:f3:d8:f9:18:fc:78:0d:88:e5:ff:
         73:63:d5:f8:e1:1c:42:26:7d:01:bc:96:0d:d6:73:89:60:99:
         37:84:75:e3:4d:03:9d:30:ac:bb:a7:e3:88:f5:46:21:d5:22:
         d7:34:d4:5f:7b:f4:58:fa:59:60:c7:a4:6b:33:da:bf:f7:5f:
         1c:50:54:ef:53:ea:3a:60:8f:ad:c9:c6:2e:7f:52:e4:30:c9:
         cc:dc:72:7b:32:30:89:93:4e:e4:71:af:0c:8e:31:82:6e:12:
         25:ee:f3:2d:2b:bd:55:d5:38:d3:b3:b8:90:47:bf:5d:68:f4:
         24:14:bb:83:1d:fd:3b:87:8c:70:3d:96:88:c7:21:a2:ab:4e:
         48:3a:f2:95:41:bd:d5:53:52:ac:ca:24:0f:87:22:e8:7b:77:
         b6:e0:fb:24:a3:a8:6b:95:2c:63:42:5d:ba:52:a8:18:b4:4d:
         79:bb:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:22 2025 by rpki-client