Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
File:                     CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft (raw, json)
Hash identifier:          PUXVuv4zl2EXdlpHjFWpNURVfODsyu5rSYF/IgjWPb8=
Subject key identifier:   4F:E5:41:55:D5:3C:AB:58:44:84:F9:48:BD:86:11:D5:9B:C8:88:2E
Authority key identifier: CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81
Certificate issuer:       /CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
Certificate serial:       3A23122FF58AC6D4D723DD2031E157DF0CFC0B3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
Manifest number:          023A
Signing time:             Tue 03 Jun 2025 22:41:05 +0000
Manifest this update:     Tue 03 Jun 2025 22:36:05 +0000
Manifest next update:     Wed 04 Jun 2025 23:28:05 +0000
Files and hashes:         1: 3230372e3234382e31362e302f32322d3332203d3e20323731343132.roa (hash: jDQ0DlND8Rsr6n9YVKrhmmVPiw771hTZ4bf+xM35d3w=)
                          2: CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl (hash: G5tjU4ChEaVowXDbRWblafTu0fa3uOmCYiRE5npmX+Q=)
                          3: 323830343a376232303a3a2f33322d313238203d3e20323731343132.roa (hash: 4CuAHBmdX9BkxgLTaapgSSneldTRonJAqWTGCmIBG+E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl
                          rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 23:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:12:2f:f5:8a:c6:d4:d7:23:dd:20:31:e1:57:df:0c:fc:0b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC8A9D2053AFF19B22251EBD605E94A3AF50E281
        Validity
            Not Before: Jun  3 22:36:05 2025 GMT
            Not After : Jun  4 23:28:05 2025 GMT
        Subject: CN=4FE54155D53CAB584484F948BD8611D59BC8882E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:a4:d1:12:2e:8d:56:5d:32:b2:77:9e:df:
                    29:8a:e3:f4:cf:92:d7:12:bb:61:91:d2:7c:bb:8b:
                    3b:0c:da:6c:a1:de:f4:5d:62:02:1b:0b:36:56:49:
                    68:ec:ba:a5:cd:0b:05:49:f1:ee:d6:2e:18:df:8d:
                    c8:9a:42:8d:dc:6f:ed:56:eb:bc:e5:4d:8c:24:60:
                    96:62:f1:dd:04:e1:94:ad:6c:33:3a:1b:60:77:e5:
                    ce:2f:01:77:2a:83:cb:43:5b:f5:d9:be:25:a7:1a:
                    ff:22:57:36:a3:91:23:01:0c:3f:65:46:96:8c:c6:
                    e3:f7:53:c2:1b:c7:89:82:4e:7c:b4:65:d8:3b:dd:
                    64:a7:2b:3a:79:39:4f:03:31:2b:33:f1:6f:f0:dc:
                    0e:75:80:bf:06:de:86:39:c1:f5:a5:7d:2c:fa:95:
                    43:7d:78:46:8a:f1:a6:17:c8:06:86:e1:9f:ed:cd:
                    42:c3:d3:ff:f6:db:8d:33:3e:5a:b3:6d:6d:9b:d4:
                    f8:f4:84:8d:75:24:7c:cb:78:5f:de:2c:b9:f0:9b:
                    06:dd:fa:f0:e5:c5:41:19:66:d2:fd:b8:7e:81:30:
                    0a:1b:08:3b:01:5b:c7:72:f2:6d:ba:e2:1b:c4:e6:
                    51:23:b0:f7:d3:11:06:8b:28:6e:4b:bc:01:95:67:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:41:55:D5:3C:AB:58:44:84:F9:48:BD:86:11:D5:9B:C8:88:2E
            X509v3 Authority Key Identifier:
                keyid:CC:8A:9D:20:53:AF:F1:9B:22:25:1E:BD:60:5E:94:A3:AF:50:E2:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/1/CC8A9D2053AFF19B22251EBD605E94A3AF50E281.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:f0:6d:7d:f3:9e:7a:36:20:6b:ce:e1:fe:06:37:12:5f:
         e8:1e:07:6a:83:2a:18:85:69:30:ea:7a:b7:6a:ad:2c:4c:8e:
         2c:4a:4a:fd:3b:32:ca:25:e4:6f:a2:7d:18:b2:0d:ea:09:b4:
         91:fd:bd:21:03:7c:01:b8:d3:59:94:cd:f8:73:c4:82:44:fb:
         e5:a0:02:61:07:d4:10:24:a7:21:1e:7f:4f:ed:96:b3:06:28:
         d1:b9:7e:27:b1:61:b6:6b:b9:3b:20:7a:56:1a:87:ff:23:8b:
         f9:88:3d:5a:a2:42:fc:44:8e:8c:9c:14:4a:58:46:20:2e:57:
         ee:c0:90:2e:d4:33:6d:83:d6:90:9a:7f:19:07:3f:39:6a:c2:
         d4:42:0d:70:f4:51:0e:5c:6f:de:cb:2f:6d:20:5c:68:bf:94:
         f7:3c:cc:d3:f1:a8:8d:45:ee:05:39:f7:ae:7f:0e:49:84:a3:
         43:40:f7:2e:cf:c7:fb:f4:d1:28:75:0f:26:e5:5a:26:0d:5e:
         04:6e:46:93:b6:64:1b:10:49:45:7b:d4:bc:82:8f:8d:fa:19:
         f8:a0:05:37:08:2c:1c:1a:09:4c:26:ad:3e:14:b2:db:41:4c:
         a7:40:82:e8:2e:f3:96:ad:67:aa:6c:be:a8:da:e7:dd:c1:3a:
         cd:da:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:59 2025 by rpki-client