Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          3elZ+IHR6cJRxnBE4g83gg8aUQbuH1owOvN7vT00rw4=
Subject key identifier:   8C:CA:07:B1:63:1F:E0:58:1E:58:44:B0:CC:7E:19:86:71:BB:41:B4
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       3E346F367C06B11480ABD313E7CAF42C94782893
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          8B
Signing time:             Tue 10 Jun 2025 10:13:19 +0000
Manifest this update:     Tue 10 Jun 2025 10:08:19 +0000
Manifest next update:     Wed 11 Jun 2025 13:19:19 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: FfI6shh61uOKF4+Fst4Xh7+Aoaug/AE3aXNq0H/ElIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 12:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:34:6f:36:7c:06:b1:14:80:ab:d3:13:e7:ca:f4:2c:94:78:28:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Jun 10 10:08:19 2025 GMT
            Not After : Jun 11 13:19:19 2025 GMT
        Subject: CN=8CCA07B1631FE0581E5844B0CC7E198671BB41B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:7a:e8:c2:1c:57:76:67:f2:fb:03:84:e1:
                    2c:3b:6c:01:d2:c3:fd:dd:31:9d:f5:fe:cc:06:91:
                    cd:5a:ef:5d:eb:d5:7e:58:15:91:b2:5e:0b:4a:bf:
                    23:f1:50:af:02:61:bc:cb:eb:e4:36:bf:b5:e7:c0:
                    37:1d:9f:10:dd:98:db:06:0d:6f:a7:11:11:53:be:
                    b5:16:49:55:24:e7:e0:2a:9c:4a:0f:32:bd:b8:ff:
                    79:9e:84:f9:3d:c6:b7:eb:d7:7e:58:45:9d:56:d4:
                    4d:8b:9d:65:55:65:b6:5b:c6:ad:ff:70:49:50:42:
                    e1:85:1f:2d:11:82:a3:d2:b0:f1:31:4b:ca:e9:9d:
                    08:1c:42:e2:88:48:10:d7:5b:a7:bb:7c:08:38:65:
                    c7:65:dc:f5:53:1d:78:a7:59:88:eb:f1:dc:e7:28:
                    08:6e:09:07:d4:d8:e3:d6:13:0f:f9:02:69:51:77:
                    36:49:46:27:fc:31:46:5f:cb:f7:9f:7b:3e:e6:e3:
                    84:38:a2:20:9c:84:5e:72:e6:0b:6b:1d:06:2b:af:
                    5d:d8:e6:18:36:a3:b4:d6:87:cd:08:bb:4a:2a:83:
                    43:65:cb:6c:bc:9a:4e:e6:d8:5b:f4:c3:53:04:6f:
                    45:29:c2:37:d1:35:54:61:af:fb:f6:2d:6c:6c:15:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:07:B1:63:1F:E0:58:1E:58:44:B0:CC:7E:19:86:71:BB:41:B4
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:10:d8:5e:21:2c:d0:68:fe:16:f4:bf:be:7b:a2:0e:fc:
         68:5f:f3:f9:59:f5:b2:1e:8c:86:e5:68:71:b5:83:e8:99:13:
         14:3f:3f:56:ac:df:f1:cd:79:94:52:f7:32:ff:36:34:7b:1d:
         49:9f:07:b2:a3:c6:9c:fe:90:9b:c5:e6:f0:91:0d:7e:2f:1e:
         4c:c7:4e:b5:3c:63:4c:7a:66:b0:7b:5a:77:6e:98:e9:fd:f2:
         3b:99:cf:8c:46:1d:f8:6d:c7:3d:68:04:47:cd:ef:ad:4e:55:
         ad:3e:47:ae:98:c7:32:48:e5:57:24:99:d1:b1:99:51:a0:e3:
         d6:9f:73:01:7f:b7:d7:40:a4:77:83:8b:c2:34:d8:63:75:1a:
         e5:95:c3:8b:90:cd:b0:49:79:31:eb:11:1d:6c:dc:42:37:6f:
         78:c3:8d:1c:9a:11:84:c0:8b:80:43:3e:ab:38:65:b5:40:2a:
         d7:37:7e:67:3f:87:b3:45:28:58:d8:c3:07:74:f1:4a:09:ce:
         9b:40:57:25:75:80:2f:ab:58:d1:8b:a2:3e:46:8a:e1:30:db:
         d0:8a:94:70:65:74:e5:c1:40:68:1c:4f:72:7b:f6:ee:6e:64:
         42:65:c6:cf:1c:b3:63:88:94:3d:4e:43:f9:cf:b2:3c:c6:4b:
         a6:f6:a6:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPjRvNnwGsRSAq9MT58r0LJR4KJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE
MEVGQjc4MTAeFw0yNTA2MTAxMDA4MTlaFw0yNTA2MTExMzE5MTlaMDMxMTAvBgNV
BAMTKDhDQ0EwN0IxNjMxRkUwNTgxRTU4NDRCMENDN0UxOTg2NzFCQjQxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUinrowhxXdmfy+wOE4Sw7bAHS
w/3dMZ31/swGkc1a713r1X5YFZGyXgtKvyPxUK8CYbzL6+Q2v7XnwDcdnxDdmNsG
DW+nERFTvrUWSVUk5+AqnEoPMr24/3mehPk9xrfr135YRZ1W1E2LnWVVZbZbxq3/
cElQQuGFHy0RgqPSsPExS8rpnQgcQuKISBDXW6e7fAg4Zcdl3PVTHXinWYjr8dzn
KAhuCQfU2OPWEw/5AmlRdzZJRif8MUZfy/efez7m44Q4oiCchF5y5gtrHQYrr13Y
5hg2o7TWh80Iu0oqg0Nly2y8mk7m2Fv0w1MEb0UpwjfRNVRhr/v2LWxsFRT9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjMoHsWMf4FgeWESwzH4ZhnG7QbQwHwYDVR0j
BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX
SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE
RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85
NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQyoQ2F4hLNBo/hb0v757og78aF/z+Vn1sh6MhuVocbWD6JkTFD8/Vqzf8c15
lFL3Mv82NHsdSZ8HsqPGnP6Qm8Xm8JENfi8eTMdOtTxjTHpmsHtad26Y6f3yO5nP
jEYd+G3HPWgER83vrU5VrT5HrpjHMkjlVySZ0bGZUaDj1p9zAX+310Ckd4OLwjTY
Y3Ua5ZXDi5DNsEl5MesRHWzcQjdveMONHJoRhMCLgEM+qzhltUAq1zd+Zz+Hs0Uo
WNjDB3TxSgnOm0BXJXWAL6tY0YuiPkaK4TDb0IqUcGV05cFAaBxPcnv27m5kQmXG
zxyzY4iUPU5D+c+yPMZLpvamQw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:55:17 2025 by rpki-client