Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
File:                     2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft (raw, json)
Hash identifier:          W+thBd8xacErcpxV9/56zYngERtIECq0ORlxL+nK6gI=
Subject key identifier:   8D:48:F6:C0:BD:5D:3F:56:17:A4:08:C5:BB:6A:C5:47:4B:CB:8F:D5
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Certificate issuer:       /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial:       0F0144ADFC0D4963C13FAC544BFA725BF4C7C480
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
Manifest number:          023B
Signing time:             Sat 07 Jun 2025 20:20:00 +0000
Manifest this update:     Sat 07 Jun 2025 20:15:00 +0000
Manifest next update:     Sun 08 Jun 2025 22:31:00 +0000
Files and hashes:         1: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: rwqPq3e3cIfTJi1yHcLF7YzVNns2BpAaoaon/GDyOgs=)
                          2: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: RDB8qhHDtEJH43hz9XAz3ZX43R7IUeRH/63LhcdomFk=)
                          3: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: iu9KhdvHQ9wBTV5rJlpedJZjb7HAwInZBQdkD2j7ZU0=)
                          4: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: TrStuRI8tf6D7pJ701olCeb0YQELq0gHQuPH4Ji39gU=)
                          5: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: 4i7bGHdxVTMkuS5qYVQ3ZZqO6DS7azDaJ1e2cCNQZQM=)
                          6: 2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl (hash: mXzjM5Y9FGBci5/c5gVntmK8JLM5gGJW/92MJayYt+g=)
                          7: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: iYQXb3D7VJdAmtZ75LPUk4nCA8FrcSl0FcHXsYzDgzA=)
                          8: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: ETxIJeAD+Mu+7r+AWo3Nm9UhNL8Bg/5nxFe6vkKlSOE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:44:ad:fc:0d:49:63:c1:3f:ac:54:4b:fa:72:5b:f4:c7:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
        Validity
            Not Before: Jun  7 20:15:00 2025 GMT
            Not After : Jun  8 22:31:00 2025 GMT
        Subject: CN=8D48F6C0BD5D3F5617A408C5BB6AC5474BCB8FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:d5:be:1b:43:9f:ba:66:69:c6:12:2f:91:
                    97:28:37:37:11:64:90:10:83:ac:0d:7a:41:11:10:
                    61:1e:53:7b:54:95:e4:99:1e:79:fd:ad:08:26:6d:
                    e3:85:22:84:98:a7:76:73:5c:c6:9a:ba:e8:40:7e:
                    f5:de:22:08:d5:38:07:e7:94:c4:e9:3a:3f:39:37:
                    69:6d:3a:1f:d5:b0:32:d6:94:9d:ab:ec:d0:82:e5:
                    e7:ab:7b:a3:52:ae:67:94:cb:de:f6:01:68:06:92:
                    1e:64:73:25:54:ad:38:73:cc:d5:d8:2b:94:06:67:
                    55:b3:12:bf:78:44:59:57:07:3f:22:07:85:58:48:
                    d6:a2:28:6b:ba:4b:3e:91:5e:62:d9:cb:ee:e5:d3:
                    2c:64:58:39:cf:2b:4f:4d:09:77:be:9e:02:08:a5:
                    e6:a1:a1:18:8f:4a:6b:0c:ae:97:d8:43:64:07:33:
                    47:a4:d7:70:46:88:52:dd:35:37:ee:f9:d5:62:26:
                    3a:48:4b:68:fd:ce:80:c0:c3:cd:5e:0c:27:3c:62:
                    79:bb:74:f1:32:cc:2e:66:ef:b0:ff:00:e1:79:91:
                    86:3c:74:de:81:0a:be:a9:32:c0:ff:5a:11:32:c4:
                    ff:9c:55:4d:aa:65:7b:05:7c:ab:0f:45:2d:2c:fe:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:F6:C0:BD:5D:3F:56:17:A4:08:C5:BB:6A:C5:47:4B:CB:8F:D5
            X509v3 Authority Key Identifier:
                keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:62:85:a3:6b:8f:7f:e2:5c:11:17:b0:ad:c3:45:e7:cc:
         5a:5b:58:09:9f:00:71:47:43:93:58:8f:5b:4d:0b:00:d2:ef:
         f2:37:78:04:63:9f:ed:46:5a:96:38:67:71:1f:b5:3a:53:c1:
         d8:13:b6:50:d3:b3:5c:15:fe:2c:75:e4:8f:93:6b:b4:4f:97:
         df:06:29:cc:44:16:d1:6e:eb:f6:b2:7e:88:a9:25:23:66:4c:
         b9:9a:df:5c:a8:52:21:4f:63:3c:df:6f:dc:b7:b2:ea:f3:3b:
         27:a6:5e:05:72:ce:10:5e:d3:67:8a:4d:48:23:e0:0b:6a:d4:
         43:9f:be:74:8c:91:96:a8:0b:29:7f:8d:7f:55:ac:fe:e9:9a:
         7d:ed:b1:2d:a0:f4:10:c4:b5:3b:23:ce:47:1e:e5:1b:5b:26:
         9d:fb:2f:99:4e:21:7c:0e:76:cf:b1:d8:80:df:33:bc:5b:dd:
         e1:30:80:78:20:2a:f8:84:be:e7:ad:88:64:ab:13:cf:8f:a1:
         0b:59:09:a2:a1:0d:a7:37:2b:a6:7e:2d:10:27:9f:6a:89:dc:
         aa:cf:2f:fe:8f:83:78:db:4a:36:b2:97:27:d1:a4:fd:d8:f9:
         1e:7f:5c:6c:2f:35:31:51:4c:75:0a:6c:c5:99:63:27:8f:73:
         dd:bc:dd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:22 2025 by rpki-client