Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
File:                     8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft (raw, json)
Hash identifier:          GXOrYlr6++Dix8ySbyZ1lg33NNHqI7Hm5eUgYV0mUfs=
Subject key identifier:   DC:61:64:ED:3C:2B:B1:01:A1:5C:94:85:74:5F:02:9F:49:91:DF:77
Authority key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E
Certificate issuer:       /CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
Certificate serial:       086D534FC1DEB4C1360B336CCEE040CBFC045CC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
Manifest number:          60
Signing time:             Wed 23 Apr 2025 01:18:33 +0000
Manifest this update:     Wed 23 Apr 2025 01:13:33 +0000
Manifest next update:     Thu 24 Apr 2025 04:21:33 +0000
Files and hashes:         1: 3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa (hash: Wb+WuvHROnn98V+DXmZg5GpY86IRJxhSib+jCecdO8k=)
                          2: 3136382e3139372e3138322e302f32342d3332203d3e20323731323637.roa (hash: oRHIQDMMtF+6qCZ9MwanXbBxIwzaAF4Xvhw9MIhCqy8=)
                          3: 3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (hash: ANkhM7kd0YYJopgeylhIk1/HBd/BR/CZz2x9WOtYdZ8=)
                          4: 8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl (hash: Ko1EbZ2s2laZsTaYH3SPozhHdLSMWQ1B+OPU/dLjKek=)
                          5: 3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa (hash: ErJC7rrC72xAfCJYtaFbQZjemC++rLdpFmo07qy+FlQ=)
                          6: 3136382e3139372e3138312e302f32342d3234203d3e20323731323637.roa (hash: NbdPGvGkRht/UKZlmwsQ7vzJTbNQVNg78BauKV8Ezlg=)
                          7: 323830343a373864303a3a2f33322d313238203d3e20323731323637.roa (hash: 200k2U6xETPUXwy7eSmBurBZpN5pAdzzvml9hy+hpYE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl
                          rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6d:53:4f:c1:de:b4:c1:36:0b:33:6c:ce:e0:40:cb:fc:04:5c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E
        Validity
            Not Before: Apr 23 01:13:33 2025 GMT
            Not After : Apr 24 04:21:33 2025 GMT
        Subject: CN=DC6164ED3C2BB101A15C9485745F029F4991DF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:39:90:40:bd:20:fc:46:55:c2:e3:15:4a:
                    21:2b:a5:d1:8f:b0:80:8c:5f:cb:78:88:b1:c9:39:
                    80:3c:d0:a3:8b:24:1c:90:3e:28:81:f8:e1:c9:7e:
                    b3:9d:71:f3:3f:78:a2:1d:7e:f4:aa:ae:f3:f3:b7:
                    0b:3a:24:03:ea:6e:72:37:dc:f5:2a:33:24:c3:26:
                    4e:0b:fd:c4:2d:4a:dd:7e:21:64:f3:22:cf:b6:6f:
                    99:0a:76:dc:d2:fe:34:68:12:65:2f:c4:50:f6:64:
                    46:5f:ee:ac:df:b9:dc:58:b0:a0:db:2a:3e:d1:c2:
                    c3:59:14:bd:e3:e6:8f:d5:4e:56:ce:22:90:3a:c0:
                    7b:f1:77:d3:46:e1:72:1f:15:f1:be:17:a4:81:a1:
                    68:83:eb:c9:f5:94:5e:ed:34:bc:93:21:84:3a:d0:
                    52:6d:b9:6b:18:8d:23:8d:18:01:84:b9:ed:b3:af:
                    4e:f5:56:c6:2a:f9:76:a8:1e:54:17:b6:8d:31:e4:
                    3c:41:c1:1c:a2:e3:5c:b8:8b:c2:32:fc:d0:8b:86:
                    a6:ea:0d:47:c6:42:69:67:6b:04:55:ad:96:34:2b:
                    48:41:15:52:92:d8:e2:ae:7d:24:86:f6:d1:21:27:
                    0e:d0:20:fd:e6:9e:74:aa:86:5a:bc:19:ce:e7:94:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:64:ED:3C:2B:B1:01:A1:5C:94:85:74:5F:02:9F:49:91:DF:77
            X509v3 Authority Key Identifier:
                keyid:8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:d1:a3:7a:94:01:1f:bc:4f:a3:68:d5:e8:42:a7:39:39:
         37:9a:5f:bf:b1:6d:e8:32:0f:a1:14:1e:e5:97:49:55:9f:4d:
         3e:c6:4d:72:50:7b:89:05:da:8d:6c:07:1d:43:2e:3a:aa:85:
         f7:b1:53:b1:af:c8:12:b2:c6:08:8a:d8:29:f7:8e:e6:09:53:
         a7:72:e5:49:bc:99:cf:c0:28:e5:5b:a3:cc:11:06:ca:5e:3d:
         7c:e1:d2:96:a2:29:17:34:d7:46:b9:7d:1f:52:e6:4d:fc:d4:
         7d:54:af:a0:10:35:27:94:51:32:96:41:10:25:a7:f8:a1:18:
         fc:7e:31:4c:a8:b5:51:68:00:e2:c8:00:27:c7:ca:56:44:4f:
         7c:35:07:97:94:2d:ba:aa:f4:57:1a:d7:1c:ff:d6:eb:5e:08:
         98:61:5b:7c:ac:d3:a9:a8:e1:26:f2:fd:1e:a4:80:36:07:54:
         8b:95:7d:c6:db:58:37:4a:8f:bb:7c:9c:b8:02:92:ac:77:19:
         d7:cd:37:d4:32:d7:15:66:d4:e3:95:24:ea:77:53:ed:4d:77:
         ec:b4:39:d2:0f:e4:5a:26:6a:85:1e:09:e4:6a:59:39:04:b6:
         22:b4:b1:ec:96:c7:87:d2:83:46:83:40:6f:84:ca:6d:c4:61:
         4c:91:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:05:54 2025 by rpki-client