Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          S+Yi//AhEiW2ra0pZK1YmO6FxFEvxS2os1wlafvb9Es=
Subject key identifier:   72:8A:83:CD:F3:70:37:F1:23:35:44:9D:9F:7D:3A:53:1D:D2:69:F2
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       3D54BD6B155E3C0CEA232202BEFF892FECFBC17E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          01F8
Signing time:             Thu 17 Apr 2025 00:48:12 +0000
Manifest this update:     Thu 17 Apr 2025 00:43:12 +0000
Manifest next update:     Fri 18 Apr 2025 01:34:12 +0000
Files and hashes:         1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=)
                          2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: +vTbl9MaVbMo3Ih5V/fEkNrxL7T4SyHhrlusZkrGrVk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:54:bd:6b:15:5e:3c:0c:ea:23:22:02:be:ff:89:2f:ec:fb:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Apr 17 00:43:12 2025 GMT
            Not After : Apr 18 01:34:12 2025 GMT
        Subject: CN=728A83CDF37037F12335449D9F7D3A531DD269F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:1f:89:f9:67:1b:6a:d3:4c:48:72:9b:6a:
                    1d:cd:cf:3f:b5:80:3c:d1:4d:70:8c:e5:cc:d9:f1:
                    8d:40:10:b7:98:64:24:66:fa:94:d1:c0:ee:4c:d8:
                    fd:e2:8a:0a:5c:3a:ef:ef:ac:2d:9a:3d:e5:d4:28:
                    7f:e4:47:f9:86:eb:9e:36:b2:37:c2:fe:1f:89:9e:
                    26:08:d2:ad:55:08:d6:5c:76:24:28:9d:71:6b:eb:
                    3e:d0:b2:9d:0b:28:9c:fa:35:e3:45:8f:f8:e6:05:
                    b2:2d:34:bd:2d:cb:1a:b0:2f:43:b1:9d:e7:da:b5:
                    3a:d6:c7:22:7b:d0:11:ae:57:f8:14:c2:db:45:2d:
                    37:2d:00:16:1d:2d:c9:a1:c6:a3:e3:62:bb:8a:2a:
                    60:bb:58:e4:af:da:e2:24:06:4d:64:31:27:50:2b:
                    de:6e:9b:dd:97:39:6c:a2:12:f4:88:37:36:ff:a1:
                    63:c1:23:6a:7c:e0:14:de:2e:81:13:d7:bd:3f:a9:
                    6f:9e:56:be:90:92:43:bb:2a:c3:b1:8f:bf:65:91:
                    33:ef:8a:57:2a:61:45:94:82:80:45:fc:20:f2:66:
                    99:20:aa:2c:29:54:0b:3e:81:fc:8a:44:97:39:1c:
                    e7:8b:08:b0:5e:8e:f7:ec:37:b4:f4:df:ff:ae:79:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:83:CD:F3:70:37:F1:23:35:44:9D:9F:7D:3A:53:1D:D2:69:F2
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:d9:42:23:97:6e:8a:22:67:6c:f7:bb:51:5b:9c:c7:3c:
         42:f7:75:5e:87:b1:9d:99:2c:1e:24:4e:7a:bf:54:af:02:e0:
         82:e3:1d:18:ac:f0:72:db:bd:4a:fd:de:91:ae:cf:23:7e:62:
         68:c5:05:d8:c7:0b:62:18:0d:ee:a0:6e:90:ae:37:62:eb:e1:
         d9:61:f6:87:03:28:ba:ec:77:65:50:d7:e2:c8:25:be:7c:15:
         d4:dd:62:88:09:51:3a:8b:ff:be:c9:df:a9:97:5c:98:06:4f:
         17:1e:a0:0b:ec:b2:df:33:f6:9a:17:87:2a:7a:13:c4:d3:12:
         97:21:e7:57:f5:67:60:ba:81:29:0d:da:9c:87:8e:b5:31:05:
         15:9f:f0:b6:df:0d:4c:dc:3c:25:84:e6:d8:22:73:bd:02:74:
         c4:36:b5:a9:09:9f:6e:f4:25:19:2c:90:50:63:b7:72:3e:0d:
         7e:e0:74:91:51:bf:14:bb:a9:a5:9f:20:ba:e5:7c:be:dd:f6:
         f9:1c:32:ec:89:12:81:0f:b1:e8:f8:0d:b1:de:01:96:a8:e9:
         79:ab:42:1b:20:80:b8:30:e3:11:be:66:fc:4c:b7:1b:1a:cd:
         71:6d:f1:ee:f2:eb:a8:98:e5:db:a6:1b:13:7f:88:39:99:53:
         19:73:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:29:42 2025 by rpki-client