Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
File:                     8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft (raw, json)
Hash identifier:          TDzwVPeU1yJOvNwOcmHLUZZgns0Wce076pmXEdn7S6k=
Subject key identifier:   BD:3E:AA:47:9A:47:C7:36:18:72:74:40:16:BD:D4:8F:01:E4:A0:C0
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Certificate issuer:       /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial:       496294DAAC2D9E20F29FC7F668DD379100230DCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
Manifest number:          B1
Signing time:             Wed 02 Jul 2025 07:55:35 +0000
Manifest this update:     Wed 02 Jul 2025 07:50:35 +0000
Manifest next update:     Thu 03 Jul 2025 08:25:35 +0000
Files and hashes:         1: 34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (hash: iS/ogTqX5OTJACfmEC4NjOzeja29UG96aatA0hmvJSY=)
                          2: 8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl (hash: zWEQSe2sAzbq2xLGJwJxEkZ/RFGhWgwr7ezPEOyAv14=)
                          3: 323830343a343536383a3a2f33322d3333203d3e20323636393234.roa (hash: oHzhtrrBpZtFBRqK+gE6zvHm7vswq0S/bokgiom8oNM=)
                          4: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (hash: T6fUIJEUFs+djCyIj60kGutcwlqduxsCNq9XE897EL4=)
                          5: 34352e3232342e33342e302f32332d3233203d3e20323636393234.roa (hash: JABEgsKFctWvQAHlkek04CeyXB9iBebAfk2kUyF1a28=)
                          6: 34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (hash: CG2l1j6d177DyU9Hd/oFyM+BKsJFCer8pflIo2sCkL4=)
                          7: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (hash: 3czZE1a9teLRwGWObSlD9/1IkMx8vF304zvTmw+dwTI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 08:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:94:da:ac:2d:9e:20:f2:9f:c7:f6:68:dd:37:91:00:23:0d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
        Validity
            Not Before: Jul  2 07:50:35 2025 GMT
            Not After : Jul  3 08:25:35 2025 GMT
        Subject: CN=BD3EAA479A47C7361872744016BDD48F01E4A0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:77:38:d7:4c:26:d4:55:69:5f:c5:0a:09:
                    1e:41:48:3d:73:b2:fe:96:44:cd:cd:0c:61:66:f2:
                    c2:79:c5:87:39:2e:f9:5a:63:26:10:fc:f5:77:7f:
                    77:4e:07:e1:3e:99:ca:33:48:88:31:a6:29:11:fc:
                    11:12:52:33:36:f0:2c:a4:5f:ba:f8:a0:32:33:71:
                    44:1b:e9:a2:e9:99:cf:e0:77:53:72:1a:2a:79:0e:
                    c3:94:0b:84:4c:81:4f:c8:65:7a:a4:f8:8e:cc:16:
                    fa:b6:0d:4f:ef:18:93:aa:1b:52:57:6a:51:3e:26:
                    d9:4a:8d:e2:6a:6a:f0:c8:a6:37:c0:ed:68:77:da:
                    d2:48:ef:97:c5:c2:7a:35:70:bb:3f:65:24:50:44:
                    7c:4d:70:92:d4:39:d7:35:b4:94:c1:77:06:54:a8:
                    c0:90:3a:90:f4:95:a3:d6:52:ed:69:d7:5c:77:83:
                    67:bd:57:62:d7:a9:d8:5c:2a:37:e0:0d:68:bc:4c:
                    fb:30:87:a2:11:8b:f0:a5:7f:02:99:0b:74:19:30:
                    d2:27:ff:aa:84:95:dc:d1:ee:8a:77:16:a3:80:7d:
                    d8:ca:80:40:49:50:d8:e1:4f:51:b3:06:d3:91:80:
                    51:bb:52:d8:a6:80:4c:42:9e:27:86:2c:96:72:4d:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:AA:47:9A:47:C7:36:18:72:74:40:16:BD:D4:8F:01:E4:A0:C0
            X509v3 Authority Key Identifier:
                keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:1d:ab:93:d9:53:39:ee:76:58:2e:56:8a:d4:42:0e:35:
         fd:53:06:90:17:76:d2:ef:7f:03:26:7a:ff:8b:8b:f4:9b:7b:
         f9:2e:10:9e:b0:18:99:26:e6:f6:f8:84:8f:50:c8:9e:01:c3:
         c4:05:1e:34:3c:ee:6f:6c:80:f6:ce:49:15:10:70:2b:da:4a:
         13:0f:60:40:ea:39:02:24:dc:b3:3d:59:da:a8:ce:19:0b:04:
         c5:02:11:6d:24:9b:67:6a:79:fd:e9:58:c4:b4:3e:b5:87:c3:
         c9:85:b4:5d:7a:00:fa:c2:e4:24:e5:9e:48:28:fb:d6:4b:ec:
         22:5d:9a:8c:5f:c8:b9:ff:a2:1c:11:4b:c1:df:0e:cc:69:bc:
         b6:dc:55:8d:22:b7:02:72:9c:f9:d2:2d:ce:f0:f8:6e:f3:50:
         f7:ac:1a:95:6d:c3:ae:1c:ea:90:68:06:4f:69:14:7d:13:52:
         0a:ce:bb:4c:49:f0:73:db:9e:d7:29:f3:63:e8:0a:0a:6f:32:
         18:1b:5b:ab:b5:d9:c5:21:bf:00:40:2a:ab:03:55:a9:c9:87:
         16:a0:e3:ab:11:04:d4:a4:a7:2c:0f:9e:a4:41:f1:97:96:aa:
         44:b9:4f:b3:27:c2:e6:6c:3d:a0:26:81:73:f1:44:44:2c:a0:
         9d:d4:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:22:53 2025 by rpki-client