Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
File:                     8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft (raw, json)
Hash identifier:          wjOrD9kQZO/ULTb9Wx8e42NHfYqJULapq3HQTeDHa1o=
Subject key identifier:   BD:11:A4:A1:85:14:E6:78:A2:6F:27:BA:F3:33:ED:0B:12:31:17:B7
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       728F8FD6AD5FD28E303BCF532586B2F42E2789EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
Manifest number:          8B
Signing time:             Mon 28 Apr 2025 17:02:25 +0000
Manifest this update:     Mon 28 Apr 2025 16:57:25 +0000
Manifest next update:     Tue 29 Apr 2025 18:34:25 +0000
Files and hashes:         1: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: B9yyPilbit54yuLGAwHx6lBcYI9SLNV/Vu7wzavs0L0=)
                          2: 8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl (hash: yYSvPf+zdVv+LHrMp5CAZXKhDIlF+nSjuzKCVHppcdA=)
                          3: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: KDgaZGdtg7K4+1b9RJ67m/YG/mumJ77S7kdCF1jA1Yw=)
                          4: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: FwZX4z5zpuXMQ0uyraa36d4EKNR8+PqRDHgBI4WBA1s=)
                          5: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: L9m9fbPrtD0Y/5M8u0dpOeN4zm7LJLcaHkb77JY6ElU=)
                          6: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: zO4I0qndWmCmnKcO/HqSBUXpHWY4VpaAjJ0Hv1qBqn8=)
                          7: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: 0QXSTautiCyMFupNZxOXq4YJInWZvXr4WcMR6zNjHRg=)
                          8: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: cXs3CrAvByI3AyasrjvXExTkGUIxlGxV4ZiNkjQ09Hc=)

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8f:8f:d6:ad:5f:d2:8e:30:3b:cf:53:25:86:b2:f4:2e:27:89:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Apr 28 16:57:25 2025 GMT
            Not After : Apr 29 18:34:25 2025 GMT
        Subject: CN=BD11A4A18514E678A26F27BAF333ED0B123117B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:72:a5:50:47:d8:d2:af:cc:5a:ca:e8:1f:f2:
                    78:c6:6d:20:47:0a:b4:bf:00:b5:e0:fb:97:b5:cb:
                    2b:4d:1d:20:21:6d:a6:94:5f:b2:9b:20:86:3f:64:
                    65:c0:3a:d3:ac:6f:bd:e5:1f:2d:2a:db:55:22:15:
                    52:02:62:2b:49:23:72:86:fa:f9:9b:93:fa:fe:2f:
                    e3:bb:cb:61:a6:be:66:76:19:9b:0a:61:ad:6d:e9:
                    85:cf:da:e2:f8:97:42:9d:d2:2b:af:85:2f:f5:96:
                    78:78:bd:7b:16:e6:65:a4:85:74:cc:c5:38:f6:84:
                    a7:af:3c:16:ac:ce:93:b4:1a:bd:7f:87:3a:42:c6:
                    7b:d7:28:37:a7:5e:6c:c0:cf:0f:85:57:aa:69:72:
                    de:f5:29:ac:5c:04:9c:bc:80:74:4d:a9:8c:47:94:
                    ee:35:4e:5e:9f:ab:0d:c6:68:45:1d:4c:32:07:71:
                    85:c7:40:64:93:0c:ec:af:86:57:b9:08:7e:61:f9:
                    76:41:95:65:be:ce:db:8c:7d:09:8f:87:41:59:22:
                    1e:c4:f5:02:50:2c:ab:ea:5f:fc:f5:c1:41:7f:f2:
                    89:06:88:95:2f:09:d6:f4:ef:b1:d9:9e:00:86:ad:
                    3f:3a:0f:a6:74:f8:06:29:30:4d:ea:33:90:4a:d1:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:A4:A1:85:14:E6:78:A2:6F:27:BA:F3:33:ED:0B:12:31:17:B7
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:e6:0f:4a:85:d4:97:63:16:17:d7:95:ef:fa:95:92:b9:
         f0:0a:d2:bb:71:c9:7c:0a:e4:6d:c3:eb:16:59:40:23:5d:7a:
         de:56:bf:f4:b2:9d:f1:79:35:ec:2d:69:f2:72:35:34:51:61:
         36:1d:09:71:42:c0:7f:c6:01:ee:c6:c1:56:1a:b0:5f:c1:04:
         6d:58:f1:27:b4:6a:b1:97:e7:8c:bc:f5:c5:d2:a9:c8:f4:e0:
         0d:71:a9:51:78:1c:08:d0:d0:50:38:7b:04:f7:18:59:38:99:
         e1:38:1e:f6:18:68:ca:41:e5:29:25:ff:1b:f5:e5:c0:4a:a7:
         12:6a:d4:05:9b:72:40:27:08:fb:83:bc:4c:4d:c1:e6:39:e2:
         00:57:5d:35:2c:6c:4b:94:01:3e:03:eb:fb:d5:7c:79:ae:1e:
         47:b3:91:e7:4c:b4:34:f0:7d:49:31:c7:dc:52:9a:18:fc:6d:
         87:1c:8f:ab:21:91:5e:ba:03:8b:d3:e4:69:8d:76:f3:37:c4:
         37:ce:2f:6b:25:a6:87:8d:45:62:17:a1:3c:5b:43:be:11:05:
         fc:39:9e:9a:48:94:41:0b:0f:f4:67:c3:63:ad:f9:ea:c7:7a:
         a6:e4:a9:a7:18:1c:39:7b:2b:a6:d4:c5:99:02:d9:56:c3:4e:
         c1:4c:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net