Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          CqW3bmyjmUPGGiJsDPcSClbkmLh2u3wGzBHGBlhWQpw=
Subject key identifier:   12:A4:67:1E:52:09:DD:65:46:34:62:F3:9E:A3:1F:1D:4C:F5:58:1F
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       1952AA62B6A86B4D9C6A3EADCE13081FEBA96133
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          0247
Signing time:             Tue 03 Jun 2025 15:53:11 +0000
Manifest this update:     Tue 03 Jun 2025 15:48:11 +0000
Manifest next update:     Wed 04 Jun 2025 19:50:11 +0000
Files and hashes:         1: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
                          2: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: 6MLhk56rx0mPU7yQK6odtAnHafv1OEB3UVzJqEvxFhs=)
                          3: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
                          4: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)
                          5: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: UeHadeVJurQ6ENd9ZAl6ibI/ZSyvYXfgwwd/iHAfyI0=)
                          6: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: 4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=)
                          7: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: HGdBSKiFk/DeL8vH+MszMy1P4lWK9jQ4lctnfCkuvr0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 19:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:52:aa:62:b6:a8:6b:4d:9c:6a:3e:ad:ce:13:08:1f:eb:a9:61:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Jun  3 15:48:11 2025 GMT
            Not After : Jun  4 19:50:11 2025 GMT
        Subject: CN=12A4671E5209DD65463462F39EA31F1D4CF5581F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:f1:4d:74:00:13:5f:6c:0d:30:32:a0:92:
                    18:0b:99:f3:f5:01:7b:e5:a4:f1:46:b9:9c:d2:64:
                    22:9a:38:04:b0:df:ad:20:dd:21:7c:81:7a:69:5a:
                    d1:89:59:ef:4d:ff:40:61:dd:50:56:99:f2:6a:05:
                    e6:df:d9:94:3a:5c:b8:68:d6:4b:1b:8e:ba:2b:c4:
                    1b:95:dc:6d:d9:4f:1c:d2:6f:f8:a3:8b:ec:68:c1:
                    8b:d9:a6:4a:4c:8e:88:be:9b:80:43:2c:09:4f:a5:
                    84:0b:11:63:82:96:6b:73:31:34:b2:a8:1e:1c:6e:
                    2e:61:24:9f:24:0f:3a:49:f3:62:00:2e:2f:78:c0:
                    22:c7:3d:6e:04:2e:85:41:65:50:33:5f:ca:92:2f:
                    44:0e:16:84:05:9a:e5:23:52:22:9e:61:9b:73:8f:
                    08:ed:f7:30:52:55:f4:79:ac:43:c4:b4:ec:78:f4:
                    89:89:84:7c:5b:8a:6b:84:8d:cf:76:0c:dd:8a:6f:
                    84:ed:ed:0f:13:ce:70:67:2f:85:17:b2:de:18:ff:
                    6a:c3:79:ef:a6:a8:e1:5c:1e:a5:98:72:54:c9:b2:
                    63:7b:2f:9f:34:c9:28:74:cb:64:64:3c:02:65:b5:
                    8f:38:5e:cc:f4:a0:09:f1:e6:2b:5e:21:fd:62:cf:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:67:1E:52:09:DD:65:46:34:62:F3:9E:A3:1F:1D:4C:F5:58:1F
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:d4:27:40:03:4f:bb:6a:b1:3e:eb:f0:76:a6:fe:89:fc:
         c5:16:d3:d2:2c:47:e4:f1:64:cc:3e:e9:df:d5:73:01:22:ca:
         8c:f9:f3:23:22:63:25:d8:37:2d:10:9d:55:00:bd:14:98:9d:
         41:d7:c3:88:59:97:bd:61:f4:82:95:ed:8c:06:6c:17:bc:8c:
         e3:b9:aa:d2:cd:89:b9:1d:76:a0:9f:62:db:cf:3e:de:20:6b:
         2d:40:08:4b:20:3a:b4:62:0e:21:92:ef:23:82:02:72:f6:e5:
         d3:21:44:f0:10:da:8d:5f:33:47:67:e4:c7:da:b0:ae:f8:ec:
         a8:9d:5f:e3:7a:f4:00:42:b4:a0:27:7d:44:2d:58:10:12:98:
         71:9f:ba:32:be:26:4c:43:04:15:5a:c1:76:f3:a0:5b:ea:7f:
         78:10:64:a5:d1:0a:d7:2b:47:75:0b:02:cc:d0:06:79:20:f6:
         5f:12:d4:dd:04:0e:3d:9d:3f:04:ec:2c:87:d5:4a:9f:79:9e:
         be:21:b2:46:a5:16:23:ef:2a:bd:eb:31:53:9a:b6:29:78:08:
         63:f2:24:e3:b6:e1:16:fc:91:c3:4b:ed:d0:38:ee:63:ff:51:
         03:bf:3e:c8:91:6d:77:6e:26:8d:9c:0b:d7:71:37:16:ed:e4:
         db:c2:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:33:19 2025 by rpki-client