Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File:                     8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier:          yHgcfjq8k74Uu7613z1geifKnAaSdWm/cYeoliRzJdE=
Subject key identifier:   87:B5:A3:CA:DE:18:72:E5:5F:44:3F:27:5E:18:FD:40:CB:07:C5:2D
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       51AD76A5AB1838CEA34BC3B5325E4EF17D6BE6EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number:          0117
Signing time:             Sun 27 Apr 2025 11:18:19 +0000
Manifest this update:     Sun 27 Apr 2025 11:13:19 +0000
Manifest next update:     Mon 28 Apr 2025 13:16:19 +0000
Files and hashes:         1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: ws+8E9axDu1kqGuUlqdgzO93WSBoJ34POHzMLC/y+DQ=)
                          2: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: g+FcDOVV278Yj5cQPiRq08JGG77rDvFavvoSMt51SdU=)
                          3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: E1g78pxOMZ+e7mQ3GX646P7kBmModMb/5TwvR/bnOfM=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ad:76:a5:ab:18:38:ce:a3:4b:c3:b5:32:5e:4e:f1:7d:6b:e6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Apr 27 11:13:19 2025 GMT
            Not After : Apr 28 13:16:19 2025 GMT
        Subject: CN=87B5A3CADE1872E55F443F275E18FD40CB07C52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:97:29:f7:48:55:d8:75:26:8d:9e:e1:69:
                    18:9a:c6:0f:06:70:4e:2e:87:3f:b3:a5:35:4c:0e:
                    5d:b3:f2:b8:1e:c4:d3:5f:42:eb:08:c1:4d:2b:47:
                    1b:73:7e:5e:ae:79:55:5a:9e:68:0b:20:71:41:02:
                    30:dc:e4:bf:71:af:ff:60:34:c4:3d:12:05:e6:43:
                    b1:22:0d:e9:d0:5f:5d:e1:59:d0:98:6a:52:29:05:
                    78:ae:16:82:36:4c:4c:8c:cd:61:5f:1c:78:7b:35:
                    4c:1a:b7:48:d5:23:13:a0:75:bd:21:96:41:48:ae:
                    dd:c1:f4:47:f1:52:1a:8f:b3:3a:d6:34:de:d2:31:
                    69:93:e4:dd:54:de:0d:d0:07:83:b3:f6:95:d0:03:
                    81:2f:3d:38:b1:fe:3f:60:06:32:b0:dc:e0:07:6d:
                    8b:1a:48:db:13:12:58:82:8c:fb:9d:70:14:b9:47:
                    4a:45:d5:ce:74:19:c0:b3:0f:bd:21:1a:23:92:3a:
                    f8:01:f1:62:d2:5a:fd:fd:b4:f1:57:cf:64:4a:6e:
                    b3:98:4f:37:2d:65:b0:f1:fa:b6:75:b9:c3:da:e8:
                    74:32:aa:08:05:57:8a:9f:be:88:73:9d:9a:b5:4d:
                    80:41:b7:45:0e:4d:4a:6d:f8:65:62:ae:91:6b:52:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B5:A3:CA:DE:18:72:E5:5F:44:3F:27:5E:18:FD:40:CB:07:C5:2D
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:97:b0:3c:ae:28:0e:a3:80:5f:d8:6e:82:9d:dd:d8:a0:
         b2:bf:c0:39:30:f7:d0:b2:bd:c6:ff:f6:a4:ee:97:22:5d:1d:
         f5:9c:a1:c4:5e:4a:74:5b:18:ea:d8:bf:aa:58:eb:25:3f:07:
         45:82:98:8c:1d:8d:8b:3f:1a:d7:36:0f:a0:61:92:19:e3:e2:
         78:25:b3:bc:9d:97:03:6e:34:c6:ec:c1:47:86:97:0e:bb:12:
         b9:4b:68:06:75:8d:e8:d7:e7:86:1d:49:c0:c8:59:7c:5c:03:
         34:aa:51:7a:3c:70:89:de:f4:88:f9:50:70:f4:d0:da:da:6f:
         e6:a8:da:d8:54:1f:5a:0e:c0:71:dd:82:2d:b6:a9:b0:5b:ed:
         63:25:fa:f2:eb:dd:64:6f:49:db:6f:cc:9d:0e:ec:cf:50:09:
         b6:a4:21:81:7d:50:d2:fe:c3:31:00:51:bd:ce:15:9d:7c:da:
         b2:1d:53:a5:fe:cc:44:15:2f:73:52:7d:4b:05:79:e5:cb:5f:
         1c:5b:c8:70:6e:2f:4a:64:21:f3:61:4f:75:05:94:0e:5a:34:
         8e:a5:88:01:bb:3a:98:d8:3d:76:77:a0:e3:f4:88:e3:6f:e4:
         e6:b5:7b:62:95:27:30:5e:2c:b1:8d:f9:a0:db:f5:26:8d:f4:
         b1:95:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:47 2025 by rpki-client on console.sobornost.net