Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft (raw, json)
Hash identifier:          jMgGqLfhlYx2IwrTh6ouXt+WGviRXXb7WodjG2J52/A=
Subject key identifier:   DE:5D:DB:07:F1:0B:00:F3:B4:B7:08:CC:64:91:A6:07:1A:D4:2E:5D
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       6BB3B8ECDF9B7D23A54F4A123793C37E01ECA4EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
Manifest number:          0238
Signing time:             Wed 04 Jun 2025 00:21:20 +0000
Manifest this update:     Wed 04 Jun 2025 00:16:20 +0000
Manifest next update:     Thu 05 Jun 2025 00:31:20 +0000
Files and hashes:         1: 3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (hash: LwI+QB/TjMVf8G/QgSFG16qXD7El/5C8Z42mnNFNJW8=)
                          2: 3231362e39382e3231362e302f32322d3232203d3e20323636323236.roa (hash: 8MHZYB00jpMu9bL7PENSCmahv8upOnDcw1afAo+avdg=)
                          3: 3231362e39382e3231392e302f32342d3234203d3e20323636323236.roa (hash: ub2IS8OX6EgFlZitQTXImnYH+e5QN9q11+sChOE1i0k=)
                          4: 3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (hash: Y7E29OoCqFM/hqqVdQrAoirWKWxxLcQQ3MY1P2Z3x5o=)
                          5: 3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (hash: jMCfjQXfLwdkIBOBUjFghP/CT/oRuuuewuH/syABSL0=)
                          6: 323830343a336361343a3a2f33322d3332203d3e20323636323236.roa (hash: nIFOFKBY50PKkmeqOio9qj007zeZ4Ka0UUBHwcKFUW8=)
                          7: 049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl (hash: M5RXjsubCucWTWwON4iZypwE0cqBUIb8CYJnKU8ak0g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 00:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b3:b8:ec:df:9b:7d:23:a5:4f:4a:12:37:93:c3:7e:01:ec:a4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Jun  4 00:16:20 2025 GMT
            Not After : Jun  5 00:31:20 2025 GMT
        Subject: CN=DE5DDB07F10B00F3B4B708CC6491A6071AD42E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:82:91:ca:b3:58:88:c9:d7:0d:39:3a:e8:
                    71:87:7a:5b:9e:da:00:15:ae:1e:ab:40:14:e5:51:
                    6a:96:a6:74:a0:65:77:d0:cf:9c:8d:2c:4e:71:26:
                    d2:70:af:a2:55:db:94:bf:1e:b2:d2:0d:09:ef:e6:
                    95:bd:87:67:b8:36:85:95:9a:11:42:05:e0:2b:0b:
                    79:cc:90:ed:e7:ee:15:41:31:c7:0c:b3:12:57:83:
                    b1:2d:ec:6f:bd:a2:a9:be:bb:c0:d5:77:39:31:01:
                    35:9d:43:07:2e:59:82:d5:4b:01:07:78:59:3f:83:
                    6b:b1:9b:09:43:13:e3:81:19:7b:b2:5d:f7:cb:b1:
                    14:c9:1f:be:4f:e6:4c:4f:e1:d3:7d:31:63:63:70:
                    53:df:5b:b9:9c:c1:0a:f6:0e:44:55:a3:49:fb:5f:
                    89:5a:bf:37:b1:12:d7:06:cb:18:3f:f1:a5:c2:07:
                    b6:81:ff:62:74:b1:2e:3e:aa:5d:c3:cf:08:e4:c5:
                    49:3d:9f:ed:7b:bf:b7:ef:4f:5f:d7:46:08:0b:2f:
                    7a:61:b9:56:9a:7a:4d:be:b4:e2:e7:6f:32:90:d3:
                    b6:e8:ae:d7:1e:1f:2b:81:40:88:40:a6:35:6a:10:
                    14:ed:0d:b2:7e:0a:e5:9c:69:bc:c7:c2:61:3b:51:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5D:DB:07:F1:0B:00:F3:B4:B7:08:CC:64:91:A6:07:1A:D4:2E:5D
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:69:98:e8:b6:50:b6:44:2c:49:50:af:f2:26:ac:85:99:1d:
         d1:98:2d:f8:a9:9a:0a:72:59:b0:e4:e7:16:02:97:6c:0f:c3:
         dc:4e:14:ec:3d:46:f3:7b:a7:13:6f:fb:81:71:36:86:03:a9:
         88:35:23:ad:53:cf:75:3e:94:c3:85:be:32:d5:d0:94:b6:2e:
         bf:b2:d5:8d:c0:c6:81:3e:9b:9a:74:f8:67:d3:5a:27:32:32:
         9b:ef:12:d1:f1:7b:78:83:90:cd:c2:54:48:7c:ab:c9:0d:aa:
         fa:51:2f:e8:fd:53:f8:85:49:86:cc:37:71:11:11:fb:c1:c7:
         f2:e0:de:d6:83:2c:29:26:54:56:0e:c6:d4:3b:ec:46:30:4a:
         fa:3b:04:2b:75:59:52:48:aa:79:f7:99:d9:8b:3a:ac:84:a6:
         6c:18:c2:77:bd:06:40:6e:5e:05:b7:6a:a4:60:dc:75:cf:59:
         ff:e0:a1:a8:0b:d0:e8:e7:b6:d1:5f:5b:4e:94:f7:a4:cd:c6:
         f2:6c:c9:bf:45:e2:b4:91:5b:c8:ea:e4:86:06:05:b8:ac:c0:
         5c:51:0f:44:7c:3e:5e:38:98:1b:b3:dd:58:44:76:cd:7d:3b:
         d0:9c:d7:83:e2:ed:76:6f:91:ef:77:69:cd:c7:a6:64:cf:9e:
         ca:05:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:34:55 2025 by rpki-client