Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
File:                     11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft (raw, json)
Hash identifier:          zUUN/c1KPGHMyPXVSq95Y0Jb2l8C4soHflR5xuquSCg=
Subject key identifier:   39:5E:49:38:57:96:0E:B8:98:E0:0C:20:CE:9C:A1:E2:88:FE:03:BF
Authority key identifier: 11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05
Certificate issuer:       /CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
Certificate serial:       20DB719EC1BB40B7C7F0F0DD0113C10C48E43582
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
Manifest number:          08
Signing time:             Sat 12 Jul 2025 13:34:51 +0000
Manifest this update:     Sat 12 Jul 2025 13:29:51 +0000
Manifest next update:     Sun 13 Jul 2025 13:34:51 +0000
Files and hashes:         1: 3137302e38312e37362e302f32322d3234203d3e20323636333934.roa (hash: tVRi5JyERJD8r9u9BE1kNJsoDmpAZynHpxJlnRLlL+4=)
                          2: 323830343a333732633a343030303a3a2f33342d3334203d3e20323636333934.roa (hash: N4lEki/B6/0uCIsUsg+P01x6hC/9w7hDRDTzdQZJvS8=)
                          3: 323830343a333732633a633030303a3a2f33342d3334203d3e20323636333934.roa (hash: Ix8eRWQHyNaG97EzmFL826uIb8NIHHIOcqYAMs0HL9w=)
                          4: 323830343a333732633a3a2f33322d3332203d3e20323636333934.roa (hash: MbgmA9xW/wF1uf0e0wQjZ59+KPdVYa3YMQSGd77cPOY=)
                          5: 11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl (hash: tggHZXoPvRx6gNHchbKFexwIkHkiAxgEyCsMG8U0Keg=)
                          6: 323830343a333732633a383030303a3a2f33342d3334203d3e20323636333934.roa (hash: DO7t8qqnPOMb081Z5pUnHwondjUbpyk3mXzqeLj7v5w=)
                          7: 323830343a333732633a3a2f33342d3334203d3e20323636333934.roa (hash: AWcAIcos7JvGJsufxg+H8d0EcS463i6i1K5EMLdZf9c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl
                          rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 13:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:db:71:9e:c1:bb:40:b7:c7:f0:f0:dd:01:13:c1:0c:48:e4:35:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805
        Validity
            Not Before: Jul 12 13:29:51 2025 GMT
            Not After : Jul 13 13:34:51 2025 GMT
        Subject: CN=395E493857960EB898E00C20CE9CA1E288FE03BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:64:b2:c1:d2:8b:9d:31:fe:e4:e0:0a:86:
                    07:a9:d1:40:ff:02:e4:b0:6d:1b:e3:af:d8:6f:38:
                    28:82:fb:81:f6:d2:33:1e:4f:3b:2e:32:66:fd:6b:
                    70:ec:9f:88:f5:6c:d4:5d:07:71:88:5b:b9:b0:7b:
                    e9:73:fb:5b:2c:21:7f:8f:d4:79:c9:79:0f:52:a2:
                    7c:2b:2a:76:3b:71:01:9c:05:6f:bb:f0:96:e1:7f:
                    87:2a:80:c7:b5:90:53:dd:ba:93:e6:5e:c3:e4:cb:
                    91:1a:e5:43:f3:f5:74:fc:53:95:bc:0c:75:ca:e6:
                    8c:c5:7e:70:5a:d1:95:57:33:34:31:9b:13:21:6b:
                    8c:9e:3d:f4:b4:36:dd:2c:d0:0e:6e:c2:cc:26:ae:
                    c3:f1:72:a2:a9:6b:e7:ac:b0:1f:65:65:71:00:fd:
                    99:17:99:4e:c8:21:7c:97:7b:70:36:e4:41:8f:c0:
                    cc:2f:c2:a5:28:fb:5d:42:65:4c:2a:93:67:15:d1:
                    c6:2f:69:d5:e1:d3:a7:eb:b4:96:bf:54:f5:31:fc:
                    0a:2b:65:c9:90:0f:de:eb:78:5f:79:df:e5:84:78:
                    f0:11:bf:8e:aa:ef:b6:3a:90:d3:c3:38:b6:0d:d5:
                    fb:6d:e9:1c:e3:37:fe:74:01:0b:c3:b9:f2:db:7d:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5E:49:38:57:96:0E:B8:98:E0:0C:20:CE:9C:A1:E2:88:FE:03:BF
            X509v3 Authority Key Identifier:
                keyid:11:B1:E8:E1:00:70:47:F5:F5:01:9E:6E:48:EA:C9:CD:FD:E9:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/11B1E8E1007047F5F5019E6E48EAC9CDFDE9A805.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:0e:6f:cb:0c:71:52:8e:e0:8b:51:3f:41:f6:dd:4d:9b:9a:
         cd:b4:19:b1:92:e7:89:35:d7:74:39:a0:e7:5c:40:9a:aa:cd:
         24:df:3e:35:ed:8e:03:5a:6b:bb:89:ba:d7:4c:1b:94:0e:05:
         ef:06:9c:c5:60:8b:27:ab:b3:01:aa:d7:99:76:a3:1f:ea:93:
         df:1f:0d:6f:5b:fe:ab:b6:58:d5:54:f4:7c:7e:20:24:89:04:
         5f:0e:a6:45:d2:ef:a1:ff:76:fd:f6:ca:62:cf:1f:31:9a:32:
         49:a7:50:d0:fd:54:5a:4a:44:2a:fe:93:b3:4b:e1:be:f9:dc:
         4a:3a:5d:74:01:db:91:c4:53:a1:97:fa:9e:e9:bb:6b:b5:15:
         fa:db:cc:ab:fb:63:29:ba:55:bf:75:63:d4:37:c1:d0:cb:35:
         92:44:c0:7f:e4:e7:31:91:8b:02:75:e3:94:35:b0:b7:84:ef:
         f4:17:cb:20:18:be:f6:e2:02:b5:eb:c4:a4:d3:cd:66:88:0d:
         03:2b:4c:9f:10:1f:73:fd:e1:ef:a7:67:6b:3e:3d:b0:4f:46:
         4e:4e:6b:0e:d0:78:11:80:6d:ae:8f:91:cf:96:fd:2f:bb:77:
         b7:98:1c:83:fa:8d:d0:50:08:ab:e0:e1:4b:d2:f4:8d:9c:5b:
         fa:81:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 23:07:11 2025 by rpki-client