Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
File:                     8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft (raw, json)
Hash identifier:          gnMUVgemAm1fqenBX1J+9gFb9n4I0tWbV8pz9beqTuE=
Subject key identifier:   0C:D1:7F:0A:8F:5D:13:17:3D:34:9A:9D:0C:FF:AB:27:5F:F7:94:88
Authority key identifier: 8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62
Certificate issuer:       /CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
Certificate serial:       53323CDF9B00C1D8EAF89DAD2CFCB9A97CCD2309
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
Manifest number:          01E7
Signing time:             Sat 05 Apr 2025 20:04:36 +0000
Manifest this update:     Sat 05 Apr 2025 19:59:36 +0000
Manifest next update:     Sun 06 Apr 2025 21:35:36 +0000
Files and hashes:         1: 34352e3233322e3134322e302f32342d3238203d3e20323637333239.roa (hash: QbbfzTIDD/ekVkiR05upobcgp75c/RPMRMFYJyzZU9o=)
                          2: 323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa (hash: VWq3avCqfTgBsrBPkA1B28GpXgCsTRu36GzPPx8jFCE=)
                          3: 323830343a346263383a3130303a3a2f34322d3432203d3e20323633343135.roa (hash: b5hV0jul+0k9L5pFDdLGvt2ne9JWG+LboIh7XsHQV7U=)
                          4: 34352e3233322e3134302e302f32322d3232203d3e20323637333239.roa (hash: lx57QXPzhQ0rZ8eHYKwzl7zsoO3m/FvVC0DWk9sXkJ4=)
                          5: 323830343a346263383a61613a3a2f34382d3530203d3e20323637333239.roa (hash: Rg4J4Icl3rAVoxFkp1tebtOrC9t7NZlQrUFrL53ca0o=)
                          6: 323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa (hash: PQLtmREPgD0p5ijQwb/gWee6FfUaVmyzEiP6jd7ZlUA=)
                          7: 8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl (hash: 20RhpHs9iDzthTmh2OK+8ucL6NIE0HcrX3LpGcap7/w=)
                          8: 323830343a346263383a3a2f33322d3332203d3e20323637333239.roa (hash: nPVwqefAnVacqbFqKvhWKiq8elBCfmRuzNc3Ga6mYNU=)
                          9: 323830343a346263383a6130303a3a2f34302d3530203d3e20323637333239.roa (hash: 9gPOPEl0htqx+dvl8arsbTKEsGUR1zXX+QrNRYgdLYE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:32:3c:df:9b:00:c1:d8:ea:f8:9d:ad:2c:fc:b9:a9:7c:cd:23:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062
        Validity
            Not Before: Apr  5 19:59:36 2025 GMT
            Not After : Apr  6 21:35:36 2025 GMT
        Subject: CN=0CD17F0A8F5D13173D349A9D0CFFAB275FF79488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:0e:d5:15:6a:3b:48:25:c2:eb:14:5c:be:
                    cd:75:f9:1d:92:03:9d:c1:b1:88:9b:22:7b:99:f2:
                    b8:5b:0b:ca:ca:3e:e5:a2:16:46:f6:21:13:1b:b3:
                    85:9e:a4:67:3d:91:32:36:93:f2:22:de:e0:0d:32:
                    8a:ed:24:fd:16:89:25:19:ef:eb:84:3b:74:a7:7b:
                    cf:d1:ae:28:97:6f:f7:a6:b7:b5:c2:00:b6:4b:2b:
                    2d:30:8c:df:77:f3:9e:b4:c2:08:b8:1b:c7:b0:b6:
                    50:4e:46:0f:a7:14:3b:3e:5e:70:28:73:5f:b7:4f:
                    03:a8:1d:81:20:f6:e8:bd:57:9b:82:8f:b7:d0:03:
                    f3:2e:26:40:2d:30:56:6e:a8:a6:f0:4d:29:76:56:
                    e0:37:df:e8:d0:58:dc:f5:2e:5d:79:ad:4a:a8:84:
                    b4:f0:ac:d8:4a:b9:77:ec:4f:38:7a:56:99:bf:74:
                    94:2e:c2:87:52:92:9f:0b:cd:6a:ac:6b:a8:4a:31:
                    76:5c:0c:f1:93:3d:b0:21:c4:c2:dc:cb:7c:3f:a5:
                    86:b1:86:3d:5d:ee:85:6f:8e:44:53:c2:f7:16:fd:
                    4c:a6:b5:7f:47:1b:ab:4c:13:45:9c:a0:9f:1e:6b:
                    00:5a:e0:8c:bc:3e:6d:22:5b:8a:da:d4:bf:cc:37:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:7F:0A:8F:5D:13:17:3D:34:9A:9D:0C:FF:AB:27:5F:F7:94:88
            X509v3 Authority Key Identifier:
                keyid:8B:C9:F7:AD:42:F2:2B:9F:05:99:DE:DE:F7:DF:60:71:8D:CE:10:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/1/8BC9F7AD42F22B9F0599DEDEF7DF60718DCE1062.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d0:0b:5d:fd:97:4e:22:b4:2c:8a:46:26:9b:f5:d2:f1:90:
         8f:d5:ce:af:26:fe:86:0c:91:50:f8:f8:b9:e5:92:f7:3a:96:
         84:57:e3:d8:74:5e:b5:19:1b:29:39:93:5f:37:fc:34:9e:59:
         f2:0a:37:82:8c:c6:6a:30:b2:b2:18:6d:43:b0:4e:d3:36:92:
         a7:06:0a:cb:34:2f:a7:63:c2:a0:82:69:16:17:99:65:d1:4c:
         b4:0b:fe:25:bd:ba:dc:c2:11:fb:32:04:37:bd:7b:df:fb:57:
         8b:42:67:a2:0b:b3:cc:83:45:1a:72:7f:17:5f:ad:5c:fb:5c:
         8d:77:fa:6e:23:cd:6f:2a:02:87:4d:6f:c9:fa:eb:2b:9f:cf:
         48:d5:b8:c5:d8:d6:9e:e9:46:d6:c0:47:19:c7:8a:b5:fc:00:
         d1:b1:89:c4:6a:5e:a9:4d:55:17:8d:23:8a:61:e4:47:8a:4b:
         21:68:b3:d1:2e:c1:08:3e:4d:fa:c2:42:c4:2f:cd:0c:26:6d:
         91:92:83:ba:f7:21:83:d4:04:aa:17:ca:c9:a4:20:e8:11:f6:
         90:2b:0a:b1:e1:6f:b1:02:76:3a:bb:85:30:3c:b5:89:97:82:
         77:ce:82:80:6b:1f:e6:a5:dc:69:af:20:e3:4f:62:13:6a:03:
         49:23:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:59 2025 by rpki-client