Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          F0fyNIA5jnm1soJUa7zK8Ke4Hc5cx8pXrAZSKxtzxDs=
Subject key identifier:   1F:3E:1B:B0:AC:29:99:72:03:DE:28:F1:4F:99:F7:44:1D:BB:A9:41
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       7FC1DC187F24943036E1D30D4DEC0EBFAE6F13BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          8E
Signing time:             Thu 12 Jun 2025 16:48:24 +0000
Manifest this update:     Thu 12 Jun 2025 16:43:24 +0000
Manifest next update:     Fri 13 Jun 2025 17:46:24 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: IbPr0rIsAWB4svovWIetzR/ZEwh+O4SIWL3iJas6koc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 17:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:dc:18:7f:24:94:30:36:e1:d3:0d:4d:ec:0e:bf:ae:6f:13:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Jun 12 16:43:24 2025 GMT
            Not After : Jun 13 17:46:24 2025 GMT
        Subject: CN=1F3E1BB0AC29997203DE28F14F99F7441DBBA941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:9b:f8:46:11:b3:b6:e0:9d:f1:60:a1:ad:
                    44:ca:10:43:0d:9d:cd:6a:1a:50:d2:08:e4:a9:61:
                    e6:57:6f:f6:6a:64:0e:3e:b1:b0:f1:56:e4:47:10:
                    43:e4:e0:06:9c:17:b5:45:73:14:50:40:a4:17:44:
                    ad:ff:f5:bd:82:5f:87:aa:0a:bc:7f:80:5d:85:d8:
                    82:a6:84:cb:3b:e6:20:69:85:4b:e9:60:d9:7d:6c:
                    6c:70:aa:0e:df:a9:a5:d9:af:15:52:67:14:21:a9:
                    ee:8d:1d:1b:10:5e:2b:7f:09:27:4d:79:b4:96:67:
                    03:63:12:3d:43:f5:9a:5a:5c:b4:3f:bd:91:7c:4a:
                    e6:77:df:dc:d8:c3:73:50:41:a3:9d:78:94:9c:76:
                    a1:ec:12:48:6c:15:3e:d6:6a:90:41:bc:36:49:e6:
                    9a:34:ba:c3:d3:f9:53:63:16:c7:c4:a1:8e:f9:7d:
                    b1:40:8c:7b:69:d2:84:dc:1b:2d:b5:cd:f1:e2:7c:
                    c1:0c:a0:dc:d4:3b:52:9e:ca:d1:d2:a4:35:df:02:
                    bc:d1:f6:a1:49:a9:85:22:6f:7e:14:1b:52:03:cd:
                    7c:cb:3d:0a:9c:2f:b9:cf:eb:76:17:16:59:30:fd:
                    59:7e:9f:43:91:e7:32:2c:f6:df:ec:4a:83:a8:e9:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3E:1B:B0:AC:29:99:72:03:DE:28:F1:4F:99:F7:44:1D:BB:A9:41
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:8b:dc:b7:ca:5a:7f:34:5b:4c:ac:e5:e5:55:08:e9:30:
         88:79:72:b1:2d:79:fb:f8:9e:ea:bc:64:bb:e6:13:a9:cf:8c:
         0d:04:cc:7b:19:2b:b4:8a:03:f9:b6:60:d2:4e:d6:25:86:fc:
         27:31:6f:30:11:bb:b7:f4:e4:ac:6b:79:a7:6d:df:74:12:7e:
         68:24:92:54:63:ae:c2:95:bd:7d:25:a0:16:e8:02:76:75:ed:
         cc:41:c2:3b:4b:e0:65:96:44:38:be:19:11:11:c8:05:a9:66:
         f0:18:53:61:25:d7:2c:ab:78:05:4b:a0:c4:71:9a:f6:36:69:
         06:13:6c:55:18:25:b6:25:0d:b7:44:24:6f:42:57:dd:f0:c1:
         be:97:e6:0d:ee:9e:7a:bd:ea:e1:d4:3a:ab:6b:bc:0f:78:29:
         74:6b:ed:05:e8:1f:1c:1b:a6:94:c6:61:38:07:36:47:93:51:
         34:80:2c:24:60:e0:69:05:be:ff:15:11:5b:59:35:a9:d0:1e:
         11:f2:f8:4c:0f:99:66:78:55:71:fc:bf:95:17:ea:91:f8:a3:
         2f:48:56:92:f7:9f:cb:79:b0:63:99:62:47:98:81:e8:96:96:
         50:4f:a6:ca:2b:dd:46:8f:59:b3:dd:f2:1e:04:66:fe:3e:73:
         38:71:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:41:13 2025 by rpki-client