Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
File:                     71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft (raw, json)
Hash identifier:          Zpe5DDWbL8r1gdpmVEufSCpiD219QQLs0A8ME3sxyIY=
Subject key identifier:   B8:F0:C7:64:EF:27:DC:3D:51:92:DA:A2:B4:E8:CF:80:B1:EE:54:5C
Authority key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF
Certificate issuer:       /CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
Certificate serial:       1DAD4A2A9C0114A9B823919325D0841DB13050D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
Manifest number:          01FF
Signing time:             Sun 20 Apr 2025 19:08:08 +0000
Manifest this update:     Sun 20 Apr 2025 19:03:08 +0000
Manifest next update:     Mon 21 Apr 2025 20:49:08 +0000
Files and hashes:         1: 323830343a366138303a333031323a3a2f34382d3438203d3e20323730333430.roa (hash: rGrpxW+pR8Di3JwLpe93PllY4CXz4ewOZXjQsRb1SEg=)
                          2: 323830343a366138303a333031303a3a2f34382d3438203d3e20323730333430.roa (hash: oeriDupoCQwe3bNAcIolqUJf1aeQSN7ihQvDSBns/OQ=)
                          3: 3139302e38332e38342e302f32322d3234203d3e20323730333430.roa (hash: XAeZAlHHGTAFSQdNTZQkUE7Ut2Dth7OFbzyQ41Xih2E=)
                          4: 323830343a366138303a333030393a3a2f34382d3438203d3e20323730333430.roa (hash: kaDPMddMKzmpOwcHctIanWBDb1hhEhu3LNdC8dXLP+M=)
                          5: 323830343a366138303a333030383a3a2f34382d3438203d3e20323730333430.roa (hash: H9W01MoaTR9IsHOSCWQdzRjez4XqkX5bSsqi2Oz4LcA=)
                          6: 323830343a366138303a333031313a3a2f34382d3438203d3e20323730333430.roa (hash: 2kKEiyTFiOmhUk0aoZqeJVMh2uxvNnJbR4TxG8nWgwc=)
                          7: 323830343a366138303a333031343a3a2f34382d3438203d3e20323730333430.roa (hash: D79Proem/bRQyc86m2qXOgzXG+Le+wRfKE8/rmQC/Bc=)
                          8: 323830343a366138303a333031333a3a2f34382d3438203d3e20323730333430.roa (hash: 1MKusdigpWk5QQQ86qXywT2udsQeU+7YGML7EztTMhQ=)
                          9: 323830343a366138303a3a2f33322d3430203d3e20323730333430.roa (hash: TDW/fHn64wf5N2bBtzL+eolYrrwd6X6NPgN1yHidNgo=)
                          10: 323830343a366138303a333030363a3a2f34382d3438203d3e20323730333430.roa (hash: 2kHxoCoNMOLdsEOn78MgqhL8NJMeIOhz6G4LF6z6Yww=)
                          11: 323830343a366138303a333030313a3a2f34382d3439203d3e20323730333430.roa (hash: su0CPdgh4j15+QZYJ3glN4zH+LKnLBKJd31VpjKxIZI=)
                          12: 323830343a366138303a333030373a3a2f34382d3438203d3e20323730333430.roa (hash: BIY8+dgjAOmlogpQPKPeA/VD4cH1CgbIIjMe6AX1kD4=)
                          13: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl (hash: Q6HmipndDC8YY7KdsC3x5zc8Svyv6SPHx4RAbewSPgw=)
                          14: 323830343a366138303a333030613a3a2f34382d3438203d3e20323730333430.roa (hash: kiTTa3qSeZm6Ez/C0voSfREyJzRwnxlQD6XZmjTuwT8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl
                          rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:4a:2a:9c:01:14:a9:b8:23:91:93:25:d0:84:1d:b1:30:50:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF
        Validity
            Not Before: Apr 20 19:03:08 2025 GMT
            Not After : Apr 21 20:49:08 2025 GMT
        Subject: CN=B8F0C764EF27DC3D5192DAA2B4E8CF80B1EE545C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:22:8e:3b:0f:16:59:9b:04:90:a6:02:85:
                    52:89:67:de:4e:52:6f:c5:fc:75:6b:89:4c:52:6f:
                    ca:81:fb:5b:1d:9b:3d:e6:ce:46:f8:97:fe:cf:b5:
                    22:5f:cb:e6:0e:3b:1e:d1:e8:da:57:a0:9f:72:92:
                    24:7a:8b:3d:ef:e8:90:21:78:20:b9:af:78:ff:7a:
                    df:5a:30:d1:88:fe:23:c1:36:c3:c8:2b:d9:dc:7d:
                    79:c4:bf:c2:95:9c:1d:08:53:7e:42:e0:a0:95:d0:
                    ae:e8:f5:fe:ae:6a:b0:f5:6f:9d:7b:04:22:ac:f3:
                    ee:b9:bf:ba:d4:0f:25:b4:a7:ac:99:fc:1c:3f:85:
                    d8:4c:4a:19:0d:37:77:03:6c:65:02:14:8e:f8:15:
                    d9:9c:21:ee:a7:1b:2c:c6:6b:8a:fc:8b:99:75:9e:
                    64:b4:ea:09:ed:a2:f1:43:a3:42:7d:9f:93:86:75:
                    76:45:1f:e2:b5:14:be:0f:7a:a7:07:46:53:97:68:
                    fb:4b:05:6d:c7:4d:3c:32:5d:b5:cc:4a:0d:f7:94:
                    62:81:2f:29:b0:c1:ea:5c:31:9f:d2:0e:6d:5f:0e:
                    be:9f:f7:1c:52:3d:c5:44:96:9f:1a:1a:c6:cd:ae:
                    75:e5:8b:6d:dd:e4:04:47:7e:95:6d:60:9b:f3:31:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F0:C7:64:EF:27:DC:3D:51:92:DA:A2:B4:E8:CF:80:B1:EE:54:5C
            X509v3 Authority Key Identifier:
                keyid:71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:7e:5e:74:b8:c8:df:8c:ac:a2:03:87:8f:39:ea:ef:da:
         bf:aa:9c:c2:48:67:5c:96:ac:ae:15:73:9e:3b:aa:e0:72:a2:
         61:a8:68:09:45:88:b9:50:59:4c:92:c7:7f:5f:90:d1:53:a7:
         ce:8d:48:36:52:87:f8:a9:f6:da:23:35:36:91:05:a6:5e:b5:
         01:1a:46:16:a5:83:f7:a1:b7:1c:83:b6:16:47:93:d0:f3:d8:
         fd:41:13:57:91:ce:c0:ad:0d:97:5c:9c:90:95:62:6c:60:40:
         ce:38:6f:f9:1d:8b:5f:30:47:55:da:05:cc:db:72:43:6d:1c:
         ad:39:96:5c:f2:19:a9:34:2f:5a:a0:eb:20:57:b3:b2:a4:e9:
         97:44:6c:1a:c9:ed:23:41:e8:87:7f:4c:d6:5f:69:f9:fd:20:
         67:af:1b:6c:d2:ac:cc:56:95:f0:d9:77:d1:04:70:46:e5:97:
         d0:a0:d1:0c:0f:6f:47:4f:0d:df:2f:9a:48:d3:e8:94:1c:b2:
         a9:bd:50:27:e5:99:51:d9:41:41:c8:cd:1d:8e:8b:44:9e:09:
         c5:b5:0c:8d:9f:68:a3:30:04:d3:73:fd:3b:c9:22:b3:6b:cd:
         4d:87:c9:ab:7c:e4:01:ea:18:ca:82:d2:95:7d:38:44:df:88:
         cb:cd:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:58 2025 by rpki-client