Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
File:                     8CC7AC6162CA342188456AA07255F16F88EFB455.mft (raw, json)
Hash identifier:          dAam5h2LXbygoXtygTlAjRyQYdB43GDJ1WXs6VgTfLY=
Subject key identifier:   43:E2:DC:43:DB:0F:1E:CD:C7:08:45:AE:06:C9:E1:DE:8F:FF:3B:35
Authority key identifier: 8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55
Certificate issuer:       /CN=8CC7AC6162CA342188456AA07255F16F88EFB455
Certificate serial:       74919B0A9FF2F6489D0C877F8DD76C1AA817A706
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
Manifest number:          028D
Signing time:             Thu 12 Jun 2025 09:02:00 +0000
Manifest this update:     Thu 12 Jun 2025 08:57:00 +0000
Manifest next update:     Fri 13 Jun 2025 09:02:00 +0000
Files and hashes:         1: 8CC7AC6162CA342188456AA07255F16F88EFB455.crl (hash: EWkwECn0cHRVTj/5DBb6rgFzRtOpcLIaVDzKclii+IE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.crl
                          rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 09:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:91:9b:0a:9f:f2:f6:48:9d:0c:87:7f:8d:d7:6c:1a:a8:17:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC7AC6162CA342188456AA07255F16F88EFB455
        Validity
            Not Before: Jun 12 08:57:00 2025 GMT
            Not After : Jun 19 09:02:00 2025 GMT
        Subject: CN=3082010A0282010100CB52023DB7CED9EB8A47EE5B425FBFA785CCBF37A3E5FEB0A029165B557906EB20CB2B031797C29EEDA40523DD30E39112674D55A0769656C3BA240C422C8D4E554DF53AC247CE2B8B8EC9A4C8662E6540A3BC9643E8DEF5B935CCDB35056ED872CA0480F131843A672FC722F8CFDCC81C39D6788AA09E1FC5F89A194306DAFDFBFB184092B64991847F18C19A83063BD74D0EA53FCE333FAECEEB90737D3977941BE8E26E9C80F3FC2F53D704ED4917A85DFB944941F1C1C8EE1FA27F740CB6D0661AB915486A1A1FE3334BAAA30D938B098848E2C2A577D786E0602F33CE4A9046C73AD34A37118D5615922CDC6209E208EE0B4D3B2C0ABFD7F5AF8F91DA090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:02:3d:b7:ce:d9:eb:8a:47:ee:5b:42:5f:
                    bf:a7:85:cc:bf:37:a3:e5:fe:b0:a0:29:16:5b:55:
                    79:06:eb:20:cb:2b:03:17:97:c2:9e:ed:a4:05:23:
                    dd:30:e3:91:12:67:4d:55:a0:76:96:56:c3:ba:24:
                    0c:42:2c:8d:4e:55:4d:f5:3a:c2:47:ce:2b:8b:8e:
                    c9:a4:c8:66:2e:65:40:a3:bc:96:43:e8:de:f5:b9:
                    35:cc:db:35:05:6e:d8:72:ca:04:80:f1:31:84:3a:
                    67:2f:c7:22:f8:cf:dc:c8:1c:39:d6:78:8a:a0:9e:
                    1f:c5:f8:9a:19:43:06:da:fd:fb:fb:18:40:92:b6:
                    49:91:84:7f:18:c1:9a:83:06:3b:d7:4d:0e:a5:3f:
                    ce:33:3f:ae:ce:eb:90:73:7d:39:77:94:1b:e8:e2:
                    6e:9c:80:f3:fc:2f:53:d7:04:ed:49:17:a8:5d:fb:
                    94:49:41:f1:c1:c8:ee:1f:a2:7f:74:0c:b6:d0:66:
                    1a:b9:15:48:6a:1a:1f:e3:33:4b:aa:a3:0d:93:8b:
                    09:88:48:e2:c2:a5:77:d7:86:e0:60:2f:33:ce:4a:
                    90:46:c7:3a:d3:4a:37:11:8d:56:15:92:2c:dc:62:
                    09:e2:08:ee:0b:4d:3b:2c:0a:bf:d7:f5:af:8f:91:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E2:DC:43:DB:0F:1E:CD:C7:08:45:AE:06:C9:E1:DE:8F:FF:3B:35
            X509v3 Authority Key Identifier:
                keyid:8C:C7:AC:61:62:CA:34:21:88:45:6A:A0:72:55:F1:6F:88:EF:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CC7AC6162CA342188456AA07255F16F88EFB455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5kVn2mnGdMKQ6nnXzhzMD1XQrtYQpSp6icQKRMddxvQ/2/8CC7AC6162CA342188456AA07255F16F88EFB455.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:67:86:e3:00:78:03:a7:72:28:8c:04:f7:a6:c2:cf:9e:2d:
         11:7d:87:aa:6f:6a:ad:54:51:62:82:e7:eb:98:b4:77:6f:75:
         0d:dc:72:fd:9f:af:58:bd:45:4c:f0:5c:65:e8:8a:f8:43:ed:
         f9:bc:23:9f:88:39:d7:65:e8:ea:31:80:06:4b:b1:ad:d2:b9:
         a8:de:f6:7a:72:6b:66:b1:4b:44:4d:95:64:3d:c7:c0:89:b0:
         c8:17:d7:9b:2b:1a:b1:c3:f9:fc:43:c3:02:07:e3:20:07:cd:
         5e:df:fb:ee:3c:bb:40:4a:c3:73:d1:4a:a0:9f:4c:3f:0d:2c:
         1c:4d:64:04:c0:7d:da:28:3d:9e:a9:d6:21:23:16:4e:2d:20:
         e4:01:77:57:94:16:92:14:81:be:5b:85:07:09:58:36:5c:a8:
         83:c2:b1:f4:5e:cf:50:00:46:28:47:5a:08:44:55:4d:e4:45:
         11:2e:82:ad:6c:6a:5a:4f:ba:5d:2a:8f:c7:56:52:27:97:d5:
         97:c2:22:b6:17:7d:68:47:bc:a7:6c:51:37:aa:f5:f7:6b:62:
         bd:40:f8:90:63:6c:03:0f:36:e7:0a:2f:e3:82:12:27:f7:dd:
         78:d5:b9:bd:1a:db:a4:ff:1c:23:37:c9:23:c2:2e:0e:5f:97:
         e3:61:1f:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:01:47 2025 by rpki-client