Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
File:                     95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json)
Hash identifier:          HrM9pl4zdgXHKZ0EzVcG4aPwCOeBCVN8oRRWFDTmN08=
Subject key identifier:   AD:EC:23:E4:F3:94:90:AB:08:62:C3:B4:66:06:D9:B5:62:93:E6:C1
Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81
Certificate issuer:       /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
Certificate serial:       3F5D970F97E686CDE57CEE1D05929BBF82DD1D39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
Manifest number:          8A
Signing time:             Mon 09 Jun 2025 14:38:17 +0000
Manifest this update:     Mon 09 Jun 2025 14:33:17 +0000
Manifest next update:     Tue 10 Jun 2025 18:11:17 +0000
Files and hashes:         1: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: Q1uCgwZfNBNhk73GGmjGIKG7UN4bvWqo7yS4gO0jUSU=)
                          2: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: NZS54D4Yx/nECgXzX0iVf0rcBNKDqJm6eHCWk2FB/ZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl
                          rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 16:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5d:97:0f:97:e6:86:cd:e5:7c:ee:1d:05:92:9b:bf:82:dd:1d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781
        Validity
            Not Before: Jun  9 14:33:17 2025 GMT
            Not After : Jun 10 18:11:17 2025 GMT
        Subject: CN=ADEC23E4F39490AB0862C3B46606D9B56293E6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:00:ab:72:c5:b0:02:a5:3d:9b:74:14:28:
                    85:fd:7f:23:00:17:89:06:4b:4d:91:27:92:b5:23:
                    42:36:cd:af:09:35:71:fb:7d:c9:a1:ac:8f:8e:cf:
                    4c:e7:fe:4d:71:bc:51:25:25:45:a6:7b:b2:b1:29:
                    dd:3a:cd:fd:4c:84:d0:f4:b0:9b:38:8f:30:7c:7d:
                    d5:99:63:61:97:d1:82:57:09:25:81:8f:00:c0:d6:
                    0d:97:84:da:89:09:5d:15:1e:9d:90:13:2f:8d:24:
                    f2:ca:1f:a2:30:df:5b:bc:81:15:a9:fa:8d:f1:fe:
                    7d:47:bb:73:a4:6b:e9:42:c7:55:9c:22:c2:8a:4b:
                    a7:98:36:02:a4:89:0b:1a:c0:75:4f:2c:4c:04:89:
                    69:57:54:5a:7d:d0:f1:99:33:3e:0b:28:e1:9e:fa:
                    2d:8c:93:81:2b:a8:d3:bd:c3:3a:ce:0c:04:7e:70:
                    07:f6:98:93:61:80:bb:a3:06:41:17:9b:a5:d9:cf:
                    b5:df:44:b4:f9:4d:5c:d5:d9:61:f5:01:c2:2f:a1:
                    b8:2f:f0:f4:86:09:f9:a5:04:8a:b3:63:74:b6:b6:
                    84:f9:a5:91:7f:20:6d:dc:1e:5e:22:63:99:1b:7a:
                    40:44:92:2c:bf:8a:8b:d2:59:74:33:90:23:86:56:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:23:E4:F3:94:90:AB:08:62:C3:B4:66:06:D9:B5:62:93:E6:C1
            X509v3 Authority Key Identifier:
                keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:86:6d:35:80:2e:ee:c8:85:fc:6f:ea:63:1c:65:08:49:09:
         45:8d:3e:2f:67:e5:d1:b5:97:af:19:2d:43:88:ce:63:a4:e7:
         3d:b0:17:be:78:3b:97:b2:85:73:bf:b5:7c:2d:1e:b0:c2:77:
         8c:e5:4e:8f:ff:1f:44:2c:b5:c0:56:5b:65:4c:e0:01:de:42:
         ad:46:43:e4:90:f0:f4:ae:e9:f4:f4:05:de:17:68:0c:9c:27:
         53:63:f5:d9:6e:5a:66:75:b3:2a:89:c5:4c:81:f6:b7:2d:14:
         bc:74:64:48:e9:59:0c:27:0c:41:c4:c8:ac:7a:dc:29:7f:11:
         d3:9c:5b:9c:d6:b5:78:2d:8c:fa:70:94:d7:d9:c2:b3:66:32:
         52:ca:30:8d:9f:01:50:d2:7d:a5:3d:42:41:78:16:a6:37:17:
         e8:c5:f1:02:47:ba:75:06:fc:ca:23:b3:1e:c1:23:78:96:ad:
         ee:9e:5f:d6:90:00:c9:dc:e7:c3:ca:87:c4:01:92:6c:1d:ff:
         b2:04:c1:94:bb:3b:79:80:b8:8d:cc:12:30:c3:26:c9:08:20:
         e1:d2:a8:df:34:55:17:b3:1f:3f:a2:98:c4:3d:32:55:e2:70:
         59:a8:8a:67:3b:17:4c:99:70:1b:f6:26:5a:73:3d:eb:fc:32:
         c9:93:64:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUP12XD5fmhs3lfO4dBZKbv4LdHTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE
MEVGQjc4MTAeFw0yNTA2MDkxNDMzMTdaFw0yNTA2MTAxODExMTdaMDMxMTAvBgNV
BAMTKEFERUMyM0U0RjM5NDkwQUIwODYyQzNCNDY2MDZEOUI1NjI5M0U2QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHwCrcsWwAqU9m3QUKIX9fyMA
F4kGS02RJ5K1I0I2za8JNXH7fcmhrI+Oz0zn/k1xvFElJUWme7KxKd06zf1MhND0
sJs4jzB8fdWZY2GX0YJXCSWBjwDA1g2XhNqJCV0VHp2QEy+NJPLKH6Iw31u8gRWp
+o3x/n1Hu3Oka+lCx1WcIsKKS6eYNgKkiQsawHVPLEwEiWlXVFp90PGZMz4LKOGe
+i2Mk4ErqNO9wzrODAR+cAf2mJNhgLujBkEXm6XZz7XfRLT5TVzV2WH1AcIvobgv
8PSGCfmlBIqzY3S2toT5pZF/IG3cHl4iY5kbekBEkiy/iovSWXQzkCOGVrmfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrewj5POUkKsIYsO0ZgbZtWKT5sEwHwYDVR0j
BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX
SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE
RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85
NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkIZtNYAu7siF/G/qYxxlCEkJRY0+L2fl0bWXrxktQ4jOY6TnPbAXvng7l7KF
c7+1fC0esMJ3jOVOj/8fRCy1wFZbZUzgAd5CrUZD5JDw9K7p9PQF3hdoDJwnU2P1
2W5aZnWzKonFTIH2ty0UvHRkSOlZDCcMQcTIrHrcKX8R05xbnNa1eC2M+nCU19nC
s2YyUsowjZ8BUNJ9pT1CQXgWpjcX6MXxAke6dQb8yiOzHsEjeJat7p5f1pAAydzn
w8qHxAGSbB3/sgTBlLs7eYC4jcwSMMMmyQgg4dKo3zRVF7MfP6KYxD0yVeJwWaiK
ZzsXTJlwG/YmWnM96/wyyZNkqw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:44:15 2025 by rpki-client