Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
File:                     8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft (raw, json)
Hash identifier:          IArRN1OQoZyaEIERzaShYYTnL5Ek6F3nJCGQ1kD2XxU=
Subject key identifier:   41:E8:28:C7:74:EF:A5:6C:42:DB:6B:0D:4B:B7:57:AE:E8:95:A6:86
Authority key identifier: 8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE
Certificate issuer:       /CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
Certificate serial:       015CBB0857B905A2EF0894889D1AE85EA6366C18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
Manifest number:          2C
Signing time:             Sun 11 May 2025 14:20:19 +0000
Manifest this update:     Sun 11 May 2025 14:15:19 +0000
Manifest next update:     Mon 12 May 2025 16:10:19 +0000
Files and hashes:         1: 323830343a333664383a3a2f33332d3333203d3e20323636333736.roa (hash: imLmjWhpkf30wGzPX/N45CUVRfunQ7KprlutiBc0u3U=)
                          2: 323830343a333664383a3a2f33322d3332203d3e20323636333736.roa (hash: 1dHLraw04NFJxymzqkFkO+vYJ3VgTas762b7elmsJEQ=)
                          3: 3137302e38302e3131322e302f32322d3233203d3e20323636333736.roa (hash: YxGDFGjpklq7NFQRfiXG1b50N9KQp8XlcoAx6rQCY8U=)
                          4: 8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl (hash: bdtMeCPxDR8c0bZ3jFFXI+IpEFOIgnSn+6YvSvFNP1s=)
                          5: 323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (hash: kuOigvHk9xrkKy8rgef0si8YwKYGpZnUjEE9PLDNCZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 16:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5c:bb:08:57:b9:05:a2:ef:08:94:88:9d:1a:e8:5e:a6:36:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
        Validity
            Not Before: May 11 14:15:19 2025 GMT
            Not After : May 12 16:10:19 2025 GMT
        Subject: CN=41E828C774EFA56C42DB6B0D4BB757AEE895A686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:c4:4e:25:68:f2:ec:3c:3a:6f:40:51:b8:
                    96:ad:a5:1e:21:30:40:1e:df:99:b4:3a:66:42:d7:
                    39:cb:11:03:bf:00:ea:3d:9b:7b:d3:87:ee:ca:fd:
                    52:91:d3:dd:93:79:cd:67:ce:dd:c5:24:7b:7f:93:
                    dd:98:ff:f0:88:e2:67:f0:af:14:bf:55:02:0b:69:
                    58:6a:8f:8b:06:d6:9f:54:c5:49:47:0c:5b:17:43:
                    a1:13:d7:4a:72:88:10:1c:cc:83:42:4a:5c:5a:19:
                    18:73:5d:c3:2d:50:99:90:b3:3c:f9:66:37:70:b6:
                    8a:3d:4d:f0:c6:bd:99:6b:62:12:54:09:4c:2f:df:
                    e2:ad:73:ba:bf:4d:8c:bf:55:25:71:37:fb:f9:b9:
                    66:76:ea:fb:8b:e4:9d:46:6c:57:be:39:46:cd:74:
                    fe:4a:7b:df:a4:20:c6:f7:cd:b8:f7:b5:26:c1:6c:
                    2a:3c:e1:d0:21:59:db:f5:d9:9d:96:06:31:9c:55:
                    ad:f1:a4:c8:7f:90:ca:fd:f1:e3:61:7a:91:d3:88:
                    59:2d:a9:78:f3:f3:cd:be:41:86:9d:a7:92:60:1f:
                    66:b7:29:02:28:2b:77:93:4f:b7:1a:25:59:ca:43:
                    55:f2:a6:23:6d:35:da:6c:6b:71:75:9e:44:89:cf:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:28:C7:74:EF:A5:6C:42:DB:6B:0D:4B:B7:57:AE:E8:95:A6:86
            X509v3 Authority Key Identifier:
                keyid:8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e9:35:db:db:7d:1a:5e:a5:d9:e8:9b:79:43:72:c9:b4:92:
         db:aa:ce:1b:66:14:49:bc:45:22:29:aa:66:d9:05:14:ab:9c:
         d4:0d:31:d7:90:5b:20:3f:cd:12:6d:33:29:27:05:21:6d:9a:
         48:a4:ed:f8:b8:2b:45:dd:57:21:0f:90:e2:76:96:c5:c8:1c:
         32:3e:fa:27:53:d2:76:6c:ba:4d:bb:68:4b:91:a6:0a:21:6f:
         e5:4d:cf:ee:f7:8a:41:2e:66:19:59:fd:05:80:ec:78:49:98:
         7b:30:5b:e8:88:4a:31:fc:cc:3f:82:56:dc:33:b4:c9:fc:99:
         37:fd:dd:b8:72:65:83:7c:7e:f7:09:e6:58:d1:f8:98:9c:6c:
         a4:7f:af:95:ce:eb:a9:d0:44:f8:6a:88:30:7f:6b:da:8a:69:
         cf:ae:80:f8:9f:20:09:82:70:4e:51:62:a7:25:01:d7:df:3e:
         98:a2:ec:dd:7f:47:f3:e2:8e:d0:7d:89:7e:b1:e2:c2:4a:ba:
         a6:a7:57:f6:4c:3f:b6:03:a1:9a:02:55:96:2b:e0:f1:b0:31:
         0d:d4:5c:d0:79:2b:d5:c7:64:6d:c8:6f:23:70:56:b6:68:a0:
         14:ea:e0:d4:d8:38:00:a2:67:e0:0c:04:65:d7:e5:20:de:87:
         92:f7:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:52 2025 by rpki-client