Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File:                     B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier:          Q6qX05TxQjhH2E1uUzBfcSXMqwJMqBdQlLipijGtVp8=
Subject key identifier:   0E:C7:71:8D:08:2E:A0:FA:C5:33:9A:8F:79:2C:11:EC:01:7F:79:CA
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       7A38BF90A5A63C29EFBE1E7AF7D32B4D3E93FBEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number:          01F8
Signing time:             Sat 05 Apr 2025 06:55:26 +0000
Manifest this update:     Sat 05 Apr 2025 06:50:26 +0000
Manifest next update:     Sun 06 Apr 2025 07:33:26 +0000
Files and hashes:         1: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: UeHadeVJurQ6ENd9ZAl6ibI/ZSyvYXfgwwd/iHAfyI0=)
                          2: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: 7+H6DoktLz7KhGVZBRZ3dT68FXeGPu7WNvy31cbZQIQ=)
                          3: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
                          4: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: 3m6deiNIWH8marGu+EF5nE3sSOyMxJnVZnTqukdEVaI=)
                          5: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: HGdBSKiFk/DeL8vH+MszMy1P4lWK9jQ4lctnfCkuvr0=)
                          6: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: 4zy1wfhCDfCEc1joqTfUw3AH6G7CAwgUFDHcwplid3k=)
                          7: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:bf:90:a5:a6:3c:29:ef:be:1e:7a:f7:d3:2b:4d:3e:93:fb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Apr  5 06:50:26 2025 GMT
            Not After : Apr  6 07:33:26 2025 GMT
        Subject: CN=0EC7718D082EA0FAC5339A8F792C11EC017F79CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:cc:fe:23:41:a6:f2:28:75:90:fb:3a:8b:5a:
                    d8:9d:9d:c4:90:75:57:21:33:32:af:fd:aa:7d:e3:
                    ca:f9:03:5e:38:02:49:d3:83:82:79:56:df:30:61:
                    68:21:2c:11:21:9d:8c:46:d3:8c:1f:39:63:cb:3b:
                    d9:20:35:f2:30:a9:03:3c:66:44:41:e7:12:ef:81:
                    9f:37:d7:d2:11:3f:ec:ce:ff:ed:47:d9:75:39:e5:
                    02:0c:c8:17:bf:0a:e2:61:19:6f:2b:81:3e:49:82:
                    ba:4b:fa:ea:ec:1a:67:af:f2:c6:d1:f9:17:17:bd:
                    ba:0a:7f:97:7d:db:aa:31:e9:64:8b:e1:d9:d4:d7:
                    64:36:53:70:df:e5:53:6e:ad:21:56:be:c8:9e:b4:
                    4b:0f:bf:9b:cb:12:70:ee:c5:ab:90:3d:d0:41:85:
                    d0:c8:73:8f:ad:a7:e4:ae:eb:1a:6c:a0:a9:93:35:
                    db:67:7a:61:d5:19:b3:12:49:4b:5a:40:ca:ab:d6:
                    69:00:dd:79:10:2e:c9:a9:94:e2:42:1f:3b:25:7b:
                    d1:95:90:76:9d:69:fd:17:0b:2b:4c:73:e8:28:41:
                    da:9a:a4:f7:6e:5a:c1:b5:b1:d8:bf:1c:ef:85:92:
                    97:7f:fb:c2:92:b4:b3:53:bd:03:9b:74:43:34:d4:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:71:8D:08:2E:A0:FA:C5:33:9A:8F:79:2C:11:EC:01:7F:79:CA
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:2d:d9:d9:66:6b:2a:ca:dc:79:d1:19:23:93:1f:7f:f9:
         8c:78:c6:14:b2:4c:dc:16:73:0c:cd:32:89:cc:38:41:c2:5c:
         02:14:e4:72:76:06:d4:63:3a:4c:50:19:b8:9b:dd:07:eb:e7:
         92:7f:66:b6:75:64:2b:d9:b9:80:96:2c:73:25:2f:07:b5:46:
         d9:f5:03:1c:88:7c:bf:2e:5b:c1:1b:7d:c0:77:1b:63:a7:5a:
         b6:89:36:26:b5:c8:2e:da:b9:66:f3:c7:cb:be:c7:d3:44:ff:
         c9:1b:81:a1:d5:e2:eb:dc:96:3b:f1:d1:94:3d:78:5a:a8:5c:
         91:5a:1b:3f:93:c4:08:0c:07:de:6e:e8:cf:0a:42:c4:02:15:
         e9:7d:41:1d:17:ab:61:ee:f1:22:86:ed:4a:0f:db:05:3b:f5:
         cc:b9:d5:a1:6e:24:74:dd:ae:c6:3d:16:98:2e:95:4f:ef:68:
         b5:b0:34:4c:be:cb:34:ba:f1:9f:3b:d3:c2:ab:b0:4c:2b:78:
         9d:45:04:cb:77:d5:b3:32:07:3f:2d:b2:17:19:67:02:32:6e:
         4f:16:50:f1:5e:c5:ba:11:30:61:93:b6:09:5d:05:7d:8d:e0:
         a0:50:9c:52:de:00:c4:f5:3f:12:ca:6d:60:92:32:1d:bf:95:
         4c:ba:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:29 2025 by rpki-client