Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
File:                     BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft (raw, json)
Hash identifier:          anmxVPx4x+18G7TXDq3uDJgdV95xxRd9mOxiqqnjPII=
Subject key identifier:   5B:B6:BD:C2:10:53:B7:F9:ED:1B:FC:F4:87:5B:F7:65:58:1E:BC:20
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       5C6A8DEC858D77B991055A5D062814D3DDD2D05C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
Manifest number:          021B
Signing time:             Fri 06 Jun 2025 08:26:19 +0000
Manifest this update:     Fri 06 Jun 2025 08:21:19 +0000
Manifest next update:     Sat 07 Jun 2025 10:32:19 +0000
Files and hashes:         1: BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl (hash: wUSdpgNWJ9X+KemoeB4nU+5gICaREIRU2o1TON5/AWE=)
                          2: 323830343a6131383a3a2f33322d3332203d3e20323633303232.roa (hash: hHzj/1U34Hb14mhLSmOaJOe36Adh6w5jMwEAPr+/2MQ=)
                          3: 323830343a6131383a3a2f33332d3334203d3e20323633303232.roa (hash: QGn1e741uH3SxLWvJiXHqYPk6n/umppkhESLNY0qUs8=)
                          4: 323830343a6131383a383030303a3a2f33332d3334203d3e20323633303232.roa (hash: g2G67ufeop6TzLj8bz5NkpBU2ApyMKCoqz/NfsR154w=)
                          5: 3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (hash: DOeYQ0dwoH/3lYRpTBMHS7pBOmoWUaYPPxSXnT1ujb8=)
                          6: 3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (hash: bmC09WGeYdDECssoZBHMb30dnaKneoeEZK+KTVFyCK0=)
                          7: 3138362e3234392e31382e302f32332d3233203d3e20323633303232.roa (hash: loRifbaEiE0t81ck7mBypgpiHRitrR/IadRIzPn7m+Q=)
                          8: 3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (hash: 23O6JYPEmUAOy+JqpCN+UO5DD1jtlLi18ehB1exk55g=)
                          9: 3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (hash: hRxGZ4Jal3c/Na8Cz3p5NhOihShNL3T7sJasYUPCz5w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 10:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:8d:ec:85:8d:77:b9:91:05:5a:5d:06:28:14:d3:dd:d2:d0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: Jun  6 08:21:19 2025 GMT
            Not After : Jun  7 10:32:19 2025 GMT
        Subject: CN=5BB6BDC21053B7F9ED1BFCF4875BF765581EBC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:af:a7:42:3e:af:57:d7:96:35:7e:1f:b2:
                    15:dd:4a:d1:23:d0:c3:c9:22:71:c9:92:4b:ec:80:
                    05:0c:e6:ae:b1:1d:f1:0f:da:be:60:af:b8:b9:b2:
                    c2:4d:7c:9c:19:cd:14:3b:dc:b3:5f:5c:04:2f:d9:
                    d6:e5:86:0d:4f:68:17:22:0b:c2:b0:c9:e2:da:92:
                    87:85:17:2e:c7:2a:90:ce:54:e1:9e:54:48:7d:16:
                    7d:7a:ce:e9:fd:df:8a:ed:d1:a2:a6:02:0c:08:9d:
                    c6:7c:e6:7c:79:26:bf:b3:f0:47:2f:84:df:dd:fa:
                    e7:b7:02:13:eb:5c:99:74:8c:b2:73:02:5b:bd:d4:
                    9a:ad:0b:75:98:d4:b9:d8:8e:50:53:5d:94:88:f6:
                    1a:91:1c:41:58:b1:c3:5e:22:81:bc:16:70:86:97:
                    d1:b6:2a:bd:ff:eb:4d:f5:f3:94:6b:31:42:a8:a9:
                    b7:3e:5b:c6:2d:ab:ab:1b:89:d7:11:9a:59:98:00:
                    dc:2f:a2:ac:22:85:9d:03:33:df:07:e2:f1:92:b0:
                    9f:a1:87:2d:d5:f6:a5:95:15:69:67:35:10:6d:8f:
                    06:34:1a:cb:57:1e:ae:82:1d:7c:87:0d:72:25:de:
                    03:a4:e0:b2:d6:82:66:2a:e2:1c:8d:dc:63:89:00:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:BD:C2:10:53:B7:F9:ED:1B:FC:F4:87:5B:F7:65:58:1E:BC:20
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:65:cd:2c:96:7b:6d:81:11:42:35:0b:e1:33:f5:c7:dc:
         d9:cf:28:77:b5:6b:78:64:d7:9c:e8:8b:92:21:52:5b:f4:26:
         e8:4b:8b:a1:69:e1:d2:dc:d9:86:96:ff:95:a0:26:46:10:ff:
         ec:78:6f:97:a3:85:81:9a:9e:ac:5b:3b:51:81:8b:05:ae:33:
         fc:1b:5e:5c:28:e3:e0:dd:fa:46:32:11:67:98:83:0f:57:04:
         2b:46:b6:57:1e:c8:33:ac:fc:67:6c:21:98:96:b4:26:66:33:
         69:12:ca:79:aa:21:b1:1a:c8:87:7b:eb:1a:b8:3f:c6:7c:43:
         ae:d1:6c:8a:39:ee:6f:3e:6f:95:d8:ea:5e:e7:b5:db:67:75:
         b1:e4:9f:6a:1e:96:c4:fa:5e:bd:41:78:fc:4c:3d:b8:9e:b4:
         fe:d4:8b:b6:1a:c2:3d:42:7c:41:8a:62:e7:53:0d:50:70:01:
         ed:07:61:ea:8f:8d:a5:25:8d:5f:37:19:11:60:e3:44:5e:89:
         58:86:46:e0:8f:72:4e:b1:69:ae:db:55:a8:39:02:85:3e:9c:
         ed:b1:96:a5:dc:be:ea:c2:a9:5a:0c:3e:ad:3f:fa:a5:5a:41:
         99:12:5a:25:e5:f7:fa:22:86:b9:81:a9:52:d1:3c:c1:98:77:
         7f:3d:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:21:52 2025 by rpki-client