Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          Y/AmMllukT2GltM5ehxUCplwhURPAbmJuutAEuwYuoQ=
Subject key identifier:   4C:08:2B:B9:0A:EF:85:49:A4:9D:72:AB:52:90:39:53:41:EC:14:11
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       248E0DAC323D724120AE811E41CB404DA77E64EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          01FA
Signing time:             Wed 02 Jul 2025 00:20:29 +0000
Manifest this update:     Wed 02 Jul 2025 00:15:29 +0000
Manifest next update:     Thu 03 Jul 2025 01:09:29 +0000
Files and hashes:         1: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (hash: akSCKp8SsUrYcF+qebEjEWPIh4lrttT3OqJxyv5vkaM=)
                          2: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: vgYb9BAuf4bhVEH5mLObWdzqX7yKTdM1IZvXQBELeKw=)
                          3: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (hash: /9OJ+mF4Wp8Oq0nYxSjBeVHNSoaZV9OizbRzZKYK+qA=)
                          4: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: g19LYQXp6mzNXJgpiLJtMjT9m4+EvOZxxZn8tIle/bY=)
                          5: 3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (hash: sbJHPn3dWUwsi0qmFXwC/ratf8AVvbI/IF2heqXzNBc=)
                          6: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: ZB1Y3VyQC9q7+cIDVuWlotY4lIwGi1hFbOLqaQflIrg=)
                          7: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: KGmtYZg8uieHVYAYvE6AE33X7A1OtlUL7NsP+k1cb+4=)
                          8: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: efJfplOtXb/kewW5M0EnZm0tv7/C2wRazsh3UjKjPTY=)
                          9: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: tEXNEcR0bExFaJvTMGEgjkeXmCinKFhAPvS3B/zBS50=)
                          10: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (hash: 9T/G3KuTkdiWlNuGai6zaRmf1aZny9qMUxrIqDzoBIY=)
                          11: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: M6ER/d26ON15UtTOvFStLwb3bWS5QtDioUQFgvHKQfQ=)
                          12: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: iLF7XIWeMQGgHKMlS6NOBA8V4BCd6yee9E7gqnE/42k=)
                          13: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: /fUvUxnGYQFT7TnAOHiefG6aMWu3Wxtz5KtYwMBbNy8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 01:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8e:0d:ac:32:3d:72:41:20:ae:81:1e:41:cb:40:4d:a7:7e:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Jul  2 00:15:29 2025 GMT
            Not After : Jul  3 01:09:29 2025 GMT
        Subject: CN=4C082BB90AEF8549A49D72AB5290395341EC1411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:2f:3d:27:e8:f9:e2:6b:fc:24:8c:28:3c:
                    ed:2d:24:f3:eb:66:61:b5:32:41:ee:4f:b9:d7:e5:
                    16:b2:22:96:e4:45:2e:47:80:98:6b:7c:f9:fb:83:
                    dd:0c:ab:d1:46:5e:9b:3b:59:f9:f3:36:34:4a:f7:
                    21:fc:b9:db:1c:d2:6c:40:6b:90:85:32:73:23:83:
                    2f:2b:19:1f:cb:07:90:b6:e4:23:0a:33:e4:9c:77:
                    f3:1e:34:c4:cb:62:b5:72:d8:67:3f:6c:95:bd:1a:
                    b0:83:28:85:42:12:33:76:37:bd:84:54:47:78:28:
                    50:32:03:7b:ab:2c:d8:d8:b4:89:36:f9:04:65:a3:
                    38:b1:e5:88:54:c2:3d:a6:83:e9:7c:c5:4b:42:b8:
                    44:5f:d3:4a:ca:af:fe:a7:39:4a:4c:83:8d:eb:fa:
                    93:07:6d:92:49:c3:d8:51:ab:38:87:44:a5:03:5e:
                    a2:c2:60:3a:13:1e:b5:21:b0:2d:fd:2d:90:c6:06:
                    a4:55:ed:8c:96:67:df:64:34:49:48:8c:50:fd:8b:
                    86:42:72:6e:db:a1:cb:cf:ed:79:ee:ee:ce:62:56:
                    85:5a:a8:33:d0:13:37:73:e8:e9:14:ca:cb:03:8f:
                    60:14:e0:40:65:e6:0e:4b:35:16:72:0f:31:d8:82:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:08:2B:B9:0A:EF:85:49:A4:9D:72:AB:52:90:39:53:41:EC:14:11
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:91:fd:c5:44:3d:6e:bf:70:40:cf:84:99:56:75:49:22:59:
         a6:49:95:94:71:94:bd:88:e3:b2:e0:4a:f6:d6:7c:fb:f4:db:
         90:65:31:c4:bd:9c:59:96:e4:1c:c9:8d:b2:08:3f:1b:f3:81:
         34:90:30:5c:89:ba:5d:0b:39:99:8d:7e:68:a6:3f:66:21:0d:
         e1:4a:f2:e1:91:96:d9:75:d9:e6:ee:bc:8b:cc:ec:2d:48:c0:
         53:fe:32:89:a3:e1:77:b3:f4:80:14:ac:04:87:58:4a:c5:16:
         eb:6a:8e:f1:69:ba:a7:26:fd:d5:57:ec:09:d3:8a:ae:bd:bc:
         11:c8:fb:25:9d:10:90:d0:b6:b3:d5:5c:d1:3f:13:bf:5f:3a:
         a5:73:13:6b:f9:81:24:25:24:74:46:6d:c6:87:8b:52:4f:e5:
         06:88:08:3b:0a:ba:09:d3:aa:6c:99:bc:ce:8b:cb:1a:80:bb:
         44:f3:55:fc:9b:30:88:a6:04:ec:b1:85:a8:ba:2e:45:33:c3:
         62:78:92:38:a7:db:f2:15:21:10:78:b7:34:70:38:df:a2:03:
         4c:34:3a:7a:92:5c:8f:6a:6e:19:cf:51:f2:5e:c8:ad:f1:45:
         6e:02:30:bd:37:56:89:1c:56:5a:81:cf:ac:cc:da:93:8d:60:
         5c:73:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:40:33 2025 by rpki-client