Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
File:                     8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json)
Hash identifier:          i9eIGoN6oHZRvqJVRTmxrtWVbiRDmQyB34GMsH+qUmQ=
Subject key identifier:   B5:F1:64:AE:70:01:86:46:27:D4:08:A8:EE:8B:B9:C6:84:CF:F0:78
Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F
Certificate issuer:       /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F
Certificate serial:       72B470CD3F676078BC5D64FB71F29BD70619C96B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
Manifest number:          021F
Signing time:             Fri 16 May 2025 09:42:03 +0000
Manifest this update:     Fri 16 May 2025 09:37:03 +0000
Manifest next update:     Sat 17 May 2025 11:51:03 +0000
Files and hashes:         1: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=)
                          2: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=)
                          3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: GkcwP6vZammJ/XW6a3MUzz6eoPWoZQpshKcyuoxKxwI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl
                          rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b4:70:cd:3f:67:60:78:bc:5d:64:fb:71:f2:9b:d7:06:19:c9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F
        Validity
            Not Before: May 16 09:37:03 2025 GMT
            Not After : May 17 11:51:03 2025 GMT
        Subject: CN=B5F164AE7001864627D408A8EE8BB9C684CFF078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:59:0d:7f:9b:27:35:72:10:14:78:cb:f4:
                    a4:5e:cf:16:7a:ea:bc:a6:c4:10:57:94:02:73:e6:
                    84:a6:48:da:98:4a:8e:42:78:86:05:54:67:7b:ec:
                    dd:52:8f:32:57:ba:4f:ef:de:86:5c:7c:cc:d8:72:
                    ff:b8:ba:d3:e4:a5:02:21:05:ae:46:ed:80:5a:ab:
                    36:f2:dc:f3:cc:40:1d:eb:2e:cc:df:e5:74:43:b7:
                    90:56:88:3b:ea:d5:44:f2:12:ae:df:d1:34:3c:c8:
                    4e:15:a7:13:ae:6c:e7:b9:ae:3e:6f:59:8d:08:a2:
                    ef:ca:20:b4:83:39:9e:71:e0:65:d3:19:1a:e4:fc:
                    21:f8:27:0f:32:91:47:31:9a:a9:b9:e6:99:23:01:
                    98:24:1a:80:89:81:f3:1c:49:2e:3a:13:b4:63:82:
                    93:1e:d5:e0:5b:c6:92:7b:67:c7:09:48:9e:ca:bf:
                    cd:75:03:ff:19:2a:0d:11:a0:3b:fd:5f:56:6c:47:
                    98:52:f5:00:87:52:d3:24:3e:bc:b4:c2:92:10:02:
                    66:2f:93:20:66:aa:38:db:2e:70:ee:a0:cb:d0:b1:
                    b7:84:34:aa:2c:83:c5:66:ce:3b:4f:70:c4:93:b3:
                    52:e0:d9:e4:4a:35:a4:2e:fd:7d:0b:33:eb:67:54:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F1:64:AE:70:01:86:46:27:D4:08:A8:EE:8B:B9:C6:84:CF:F0:78
            X509v3 Authority Key Identifier:
                keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:05:0a:87:3f:81:21:25:26:7a:cf:81:ab:32:87:b9:c9:c7:
         9c:73:0e:db:1f:5f:54:59:64:68:b9:6c:3b:03:20:56:b8:fd:
         8b:c4:dd:15:11:8e:e9:d6:c8:1d:18:da:06:86:f1:71:b5:91:
         3c:78:26:ff:13:2d:bc:47:af:2d:87:39:e9:e8:0c:b5:1c:81:
         e4:ae:cc:40:81:14:c4:2b:ce:2e:ba:f3:98:d3:07:95:23:f1:
         63:8a:59:e0:2b:25:34:d8:b4:73:ad:82:43:c2:ce:0b:83:a1:
         a3:d3:b5:b9:7b:6d:bb:bb:6a:38:3e:57:05:b6:78:5f:64:79:
         f9:95:3e:ba:eb:db:48:13:c6:0a:2f:42:31:a7:6c:ea:61:e4:
         35:04:76:e6:72:83:51:6f:03:11:e8:a8:a2:c3:09:75:9b:3b:
         a2:4a:46:e3:c0:86:02:7e:45:25:ed:03:de:c4:55:1e:0f:43:
         bf:dc:b2:c8:20:d3:29:3e:1b:d0:70:6d:a4:d7:0b:ad:f1:c3:
         3b:50:33:e9:01:4e:16:b4:17:25:09:a1:2d:fb:10:c9:72:b2:
         99:f5:f7:3b:a2:20:86:fa:08:a8:b5:1f:75:fd:96:a3:cb:de:
         96:c0:e6:a2:c1:34:b2:4d:51:ce:5c:c8:9e:fe:9f:15:d1:6b:
         93:9a:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:47:36 2025 by rpki-client