Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
File:                     8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft (raw, json)
Hash identifier:          +iiRoELPTN+T8oFJ7nP4rb3Zjhqptv2H4LM0raWbwvE=
Subject key identifier:   38:05:38:93:F4:86:48:FE:F7:FC:31:3A:B7:5C:9C:29:A7:60:47:4C
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       19DF86281A611008E42F46043C93777807A2AA79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
Manifest number:          82
Signing time:             Tue 22 Apr 2025 04:59:17 +0000
Manifest this update:     Tue 22 Apr 2025 04:54:17 +0000
Manifest next update:     Wed 23 Apr 2025 07:12:17 +0000
Files and hashes:         1: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: L9m9fbPrtD0Y/5M8u0dpOeN4zm7LJLcaHkb77JY6ElU=)
                          2: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: 0QXSTautiCyMFupNZxOXq4YJInWZvXr4WcMR6zNjHRg=)
                          3: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: KDgaZGdtg7K4+1b9RJ67m/YG/mumJ77S7kdCF1jA1Yw=)
                          4: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: FwZX4z5zpuXMQ0uyraa36d4EKNR8+PqRDHgBI4WBA1s=)
                          5: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: cXs3CrAvByI3AyasrjvXExTkGUIxlGxV4ZiNkjQ09Hc=)
                          6: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: B9yyPilbit54yuLGAwHx6lBcYI9SLNV/Vu7wzavs0L0=)
                          7: 8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl (hash: 1DbRy5lT5bGfj9lG4hpHpfapJaIryf48V68FCtPeSjA=)
                          8: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: zO4I0qndWmCmnKcO/HqSBUXpHWY4VpaAjJ0Hv1qBqn8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:86:28:1a:61:10:08:e4:2f:46:04:3c:93:77:78:07:a2:aa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Apr 22 04:54:17 2025 GMT
            Not After : Apr 23 07:12:17 2025 GMT
        Subject: CN=38053893F48648FEF7FC313AB75C9C29A760474C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:e4:b2:64:79:14:99:9a:16:93:4d:44:77:
                    e5:3f:eb:72:08:0b:32:45:79:16:73:f3:71:72:a6:
                    94:3c:2a:5e:7d:2d:c9:61:4a:8f:89:76:a9:e7:01:
                    13:3e:1c:54:f1:97:35:43:e8:bf:a1:f2:38:c7:1d:
                    85:1c:99:4c:6c:c1:61:7e:39:49:94:17:45:ea:f2:
                    e4:1f:6a:3b:ef:2d:f1:e1:90:39:a9:93:d3:0b:db:
                    19:51:1b:e8:23:ee:eb:6e:34:f5:40:9f:b5:ea:f5:
                    12:23:6a:69:4b:7c:47:0e:48:db:75:27:51:6d:f9:
                    ab:ad:4f:c5:b3:3c:a9:33:0b:ca:3c:e8:ad:6e:de:
                    1e:78:6f:7c:4a:db:7c:b5:3f:84:43:bc:f9:01:81:
                    72:50:12:97:69:d4:aa:e5:3a:68:3a:06:bb:22:47:
                    dd:78:f9:85:f7:db:47:50:1b:8f:22:1a:00:e9:ac:
                    2f:79:31:bb:33:d4:df:33:0a:cb:5b:57:3f:5f:78:
                    b3:36:59:cd:ed:1f:be:c3:e4:6b:bc:e5:82:95:80:
                    d4:2f:40:c0:4c:62:d4:82:d0:34:e6:1b:a4:16:7c:
                    e7:4b:28:44:0b:2a:30:b0:fb:ce:da:c6:df:9b:97:
                    ff:44:1a:d0:44:06:8a:67:e7:b7:11:bf:3f:80:6e:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:05:38:93:F4:86:48:FE:F7:FC:31:3A:B7:5C:9C:29:A7:60:47:4C
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:bc:b1:78:95:4b:e8:58:d3:db:95:41:92:b1:bd:09:38:
         04:27:56:e2:4a:10:80:9a:f3:6a:f0:d6:44:90:9f:fc:e3:c2:
         0c:70:e7:82:c5:b6:ce:1f:27:72:4d:25:c9:07:af:3c:c0:bc:
         a5:d5:cd:18:e2:b4:ab:8f:9e:f1:d1:6e:52:51:16:3d:1b:d4:
         50:a3:b6:80:46:48:c3:47:0f:36:02:40:79:6d:c0:e8:ef:f8:
         57:d0:64:d2:f0:2b:67:bd:80:1d:91:53:21:fd:88:97:a7:4f:
         fc:9b:06:36:36:72:3a:b2:f8:dd:55:e2:02:0e:9f:c3:92:6d:
         ad:23:f7:8c:d0:98:dd:96:96:8c:73:5d:48:86:8d:1a:e5:32:
         68:d0:c5:55:bb:fd:1f:3a:52:e1:a9:40:45:d1:01:fd:09:98:
         e8:71:b0:96:16:1b:5d:ee:a9:c1:65:0e:1a:7c:e1:28:6d:2c:
         ca:a1:7a:50:a3:b7:af:d7:32:84:4f:46:af:14:31:4a:8f:09:
         10:eb:1b:3d:e7:5d:f9:64:4a:f5:e7:c0:2f:2c:c3:01:a7:c0:
         9d:e7:7f:b3:b4:0b:bf:d4:ea:0a:d9:96:da:d8:3e:4d:9e:40:
         76:ae:e7:69:a3:12:0d:a0:b0:0c:31:32:58:1b:6f:25:31:cf:
         97:9b:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:17:23 2025 by rpki-client