Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          ysT6wg+g6QfcxzkJxKQEE69JiZtyNac0Zgc1bbd+NbY=
Subject key identifier:   2A:94:59:B2:BE:D0:D6:54:3D:E8:77:92:59:0B:2F:A5:FD:59:2D:22
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       3FA2F139E876AAAD190F06E11DEFE15FFBB8817C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          029D
Signing time:             Fri 22 Aug 2025 21:32:19 +0000
Manifest this update:     Fri 22 Aug 2025 21:27:19 +0000
Manifest next update:     Sun 24 Aug 2025 00:03:19 +0000
Files and hashes:         1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=)
                          2: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=)
                          3: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: acH+FKQaUGaxGiLM5/8Cq4OkYVoGc6HE1ejlognmYFw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 00:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:f1:39:e8:76:aa:ad:19:0f:06:e1:1d:ef:e1:5f:fb:b8:81:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Aug 22 21:27:19 2025 GMT
            Not After : Aug 24 00:03:19 2025 GMT
        Subject: CN=2A9459B2BED0D6543DE87792590B2FA5FD592D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:a0:bd:e3:d1:a1:08:6f:e9:d2:3b:ee:c8:
                    5a:25:ee:a0:b0:7d:d8:c9:69:3b:2f:25:f7:11:bb:
                    ae:5f:ca:f5:ea:f4:a9:b2:e5:4b:9a:77:62:ec:8a:
                    fc:23:97:a4:8c:cc:f1:5d:6d:9b:ff:d9:ff:10:60:
                    fe:65:23:42:36:2b:4f:d8:0c:05:10:a6:2e:4b:6b:
                    f3:3c:4d:4b:7e:1e:02:db:30:98:98:5a:80:04:8d:
                    ac:cc:96:1b:b1:5d:1c:22:ff:95:b0:05:47:fe:81:
                    12:2b:e9:19:33:13:2c:72:41:e7:10:f8:2c:30:51:
                    83:3e:de:51:a3:1b:fe:b5:57:16:e2:70:58:77:64:
                    d5:1d:03:f5:1b:c2:56:15:9d:93:77:ad:4a:5c:7d:
                    20:e6:f2:1f:4f:74:a0:3d:ea:d3:00:9a:3e:ea:de:
                    27:46:97:63:9f:7b:de:9d:29:6d:a2:71:3e:7a:d1:
                    3e:b0:04:66:d9:17:fc:94:23:b7:ae:ff:c6:ba:01:
                    b5:18:14:5a:ac:c1:b5:d6:dc:0f:80:a7:b4:7c:47:
                    68:16:f1:e0:51:d1:32:63:8b:6d:28:19:50:52:69:
                    5d:c9:62:42:1c:d6:63:f3:96:a5:2b:d5:3c:3c:70:
                    eb:5d:fb:36:5b:80:7d:f2:97:ef:45:ff:ee:14:1c:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:94:59:B2:BE:D0:D6:54:3D:E8:77:92:59:0B:2F:A5:FD:59:2D:22
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:a8:0f:36:3e:27:bf:23:06:f1:87:6d:cc:e2:ad:70:fd:
         78:4e:de:50:77:9e:1c:9c:3b:4e:01:42:96:77:7a:ad:3f:ed:
         11:6b:f2:ee:59:a3:42:99:cc:83:3c:ee:f1:94:19:3d:99:59:
         f7:cb:48:24:85:f0:c9:89:51:d0:2e:fa:0d:73:f5:e3:81:ea:
         02:e5:23:af:94:4e:12:d6:95:8a:89:6c:59:c7:9d:4c:ef:8d:
         0c:cc:fe:6d:db:5e:ba:0b:0d:fa:5e:a1:9d:3f:34:4f:dd:fe:
         d1:0c:20:42:f6:44:fa:85:d4:8a:d3:69:04:76:4d:0a:d7:2b:
         6c:38:16:cb:96:24:65:45:3e:31:ac:7d:26:5a:dd:cd:70:38:
         41:9c:dc:8e:f3:ae:db:1f:59:c0:64:b3:bb:bb:f0:b5:fb:74:
         1d:ad:6f:6e:2f:6f:c1:53:99:d7:8b:34:48:b7:27:06:b1:ae:
         c0:f9:bb:ce:f3:4f:57:10:bb:9a:6d:23:1b:8b:49:bc:f1:c3:
         3b:f1:27:ae:74:b7:2c:c7:03:66:6a:c1:d7:02:28:18:99:0f:
         93:0b:1a:1f:38:40:a3:79:75:22:32:29:bb:3e:d7:fe:05:74:
         0b:c2:08:9b:64:60:3d:fc:71:d6:49:90:f5:fe:dc:42:28:f0:
         54:42:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:35 2025 by rpki-client