Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
File:                     DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft (raw, json)
Hash identifier:          B/l/X4uj64lZMDCLw5Rzzv99aU9dYt0vNcEzqvRwhgk=
Subject key identifier:   A8:F7:54:6D:01:CD:BC:3E:D1:BD:08:0C:01:2C:3B:BA:60:4F:33:BF
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       7396F179BBD0D923D4F0B79FE4DAB7CF486A2057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
Manifest number:          021A
Signing time:             Thu 15 May 2025 01:17:05 +0000
Manifest this update:     Thu 15 May 2025 01:12:05 +0000
Manifest next update:     Fri 16 May 2025 04:50:05 +0000
Files and hashes:         1: 323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (hash: L9M53YB4o7JNc7dDg3XjTGRgx6YePRqEVkPp8+b2wk4=)
                          2: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl (hash: QzFGWh5bOG08AadYTDqo+Id63JumTM3B1T2daYT9IUg=)
                          3: 323830343a343666633a3a2f33322d3438203d3e20323637303234.roa (hash: 0NBW+l9oQvgut+Wpp8Bb1HAjDdw9+mIwXXr8N5HctTA=)
                          4: 323830343a343666633a353031303a3a2f34382d3438203d3e20323637303234.roa (hash: DWL3wU1j9/tLvHYS1dyFWxVgwqL+A2vsmPkeTD1xNuA=)
                          5: 323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (hash: ZpGbXyZPQV1RAhEmtqOTxYMrUDE2M/wfiHPg1NwBBUg=)
                          6: 323830343a343666633a363030363a3a2f34382d3438203d3e20323637303234.roa (hash: 7gX4nW50jeu8Gj9fE88BAIsPqLu+xcmsC18pJl1XV/Q=)
                          7: 34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (hash: Ev7k/0Z/euV4Q2GhoimUlecZQe8xwwzmeRYzoYIJnXA=)
                          8: 323830343a343666633a363630303a3a2f34302d3430203d3e20323637303234.roa (hash: GNGQttzmJcudreL/5tnOmzIRIQeCdkDFJkbGS5ZFna0=)
                          9: 34352e3232372e3131322e302f32342d3234203d3e20323637303234.roa (hash: NbuMp6zwIPF0O7p39k96W67CEvlo0InSX/oh1MCa9MM=)
                          10: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (hash: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=)
                          11: 34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (hash: oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=)
                          12: 323830343a343666633a3a2f33342d3334203d3e20323637303234.roa (hash: JmbvOjVKbR/XYJut5SHfgiOn1lqjtci9jd0EVLJXXL0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 04:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:96:f1:79:bb:d0:d9:23:d4:f0:b7:9f:e4:da:b7:cf:48:6a:20:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: May 15 01:12:05 2025 GMT
            Not After : May 16 04:50:05 2025 GMT
        Subject: CN=A8F7546D01CDBC3ED1BD080C012C3BBA604F33BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:ea:d2:a0:1d:c8:c4:6c:45:90:5b:bd:4a:
                    41:aa:3e:36:82:27:09:56:0c:d3:51:18:ba:f2:fb:
                    c4:79:f3:fc:37:a7:95:86:1c:53:9f:90:71:68:e0:
                    73:cc:05:1c:24:46:4c:82:4a:31:e0:3d:12:b8:53:
                    4d:8e:f5:fa:a9:d6:8c:b5:8b:2a:1b:10:d7:cc:08:
                    45:e9:eb:f6:e2:89:d0:2e:dc:58:52:ae:e0:35:6a:
                    94:51:1e:38:ff:36:3e:83:66:80:79:d9:2a:24:0a:
                    8e:f9:04:aa:bc:e8:9d:b8:74:d6:dc:ee:4f:43:ff:
                    f6:48:4b:5c:b8:ac:17:91:ad:86:04:6e:9d:3d:8e:
                    c4:d6:19:4c:53:ea:57:8a:07:38:df:8b:81:cb:b8:
                    83:b4:0e:27:24:92:c9:ff:5a:10:c4:7d:e4:1c:fa:
                    e0:39:e2:5f:aa:34:ef:a4:6f:36:ae:14:c3:5e:87:
                    ae:73:47:07:9d:b0:6e:b8:b4:66:ec:1c:18:4b:9e:
                    7b:5d:b1:5f:82:32:f9:10:e8:a9:1d:59:9f:25:b7:
                    29:8e:2b:50:77:59:07:38:34:39:08:f9:b6:4a:95:
                    cc:bf:2e:1d:17:6c:d6:85:d9:cb:19:73:ce:c5:96:
                    32:92:ae:5e:c7:d1:b0:86:6e:8d:68:ee:4f:0b:6d:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:54:6D:01:CD:BC:3E:D1:BD:08:0C:01:2C:3B:BA:60:4F:33:BF
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:21:54:ae:29:14:6f:cd:4b:17:ee:f2:64:14:24:38:75:
         e1:51:29:2c:17:d0:f1:cc:56:1a:50:42:7a:b9:9c:f0:1c:57:
         af:cf:b1:b5:fa:45:bf:a5:35:41:4f:bb:0f:78:d0:c6:0f:14:
         9c:59:dc:4a:1e:56:07:b5:14:c4:7d:30:2f:5d:46:ba:34:55:
         ca:b4:23:b8:39:9c:1f:e1:49:c9:0d:33:0e:c6:e2:19:08:5c:
         2f:3e:29:14:00:96:bd:a1:dd:e4:59:56:01:a6:a9:53:03:6f:
         46:f5:94:6c:90:56:bd:87:aa:84:25:95:b4:3b:89:1d:04:55:
         e0:1b:80:23:11:61:21:20:80:ab:3f:b6:cd:7a:e2:74:c9:f5:
         ce:42:7e:de:ad:f1:b7:c6:95:e8:42:a2:ea:1a:5c:ae:b5:29:
         03:c2:a0:d9:31:24:79:df:62:fe:6c:b7:d2:d9:3a:3f:28:57:
         bc:7a:e6:30:6b:09:ed:77:14:19:1f:75:b2:0f:13:d6:15:8b:
         42:e4:8a:cb:01:1a:06:95:ed:91:18:68:6d:4d:31:f5:49:df:
         99:78:f7:be:96:fb:d1:1e:4d:f5:e1:da:c3:54:8d:ce:05:58:
         79:0a:72:e0:6b:fe:70:88:be:d7:fe:95:eb:22:7d:6d:80:50:
         b3:50:40:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:10:33 2025 by rpki-client