Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File:                     B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier:          APfAASafH4g3bVg7mBL9xRN386P5P5V2ee60DIjOhLc=
Subject key identifier:   45:BE:35:C3:DB:44:D3:75:B7:22:D4:42:84:37:9A:8C:73:8B:98:AB
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer:       /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial:       1C871A76579DBCCD07AEFFED12525A7192A2206B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number:          023B
Signing time:             Fri 06 Jun 2025 14:42:59 +0000
Manifest this update:     Fri 06 Jun 2025 14:37:59 +0000
Manifest next update:     Sat 07 Jun 2025 15:09:59 +0000
Files and hashes:         1: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: wipLINYAZA1vX7i2MzHSIklDt78FWy/u3KJPPauL9Cs=)
                          2: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
                          3: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
                          rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 15:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:1a:76:57:9d:bc:cd:07:ae:ff:ed:12:52:5a:71:92:a2:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
        Validity
            Not Before: Jun  6 14:37:59 2025 GMT
            Not After : Jun  7 15:09:59 2025 GMT
        Subject: CN=45BE35C3DB44D375B722D44284379A8C738B98AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:f2:13:85:8b:72:aa:28:cb:b8:d2:d0:2a:
                    27:a1:e3:c3:2c:4b:5d:6d:71:ea:30:f1:ef:5d:65:
                    09:c0:aa:06:17:4b:bf:55:5d:80:e6:0f:26:04:04:
                    d0:48:ff:0d:85:b7:60:98:d4:6f:ac:a3:5e:66:f8:
                    5b:d4:84:44:47:12:bb:a1:bf:50:c2:bc:b5:8d:e0:
                    77:42:e6:5d:99:05:43:52:22:42:c8:99:a3:d8:cd:
                    e9:3b:ea:be:e6:9d:95:a3:04:2b:42:dc:e8:42:60:
                    c9:4c:02:08:90:57:86:51:e8:34:b5:a0:fa:51:e4:
                    15:1d:e7:d0:cb:f6:d8:dc:62:c4:3e:52:22:40:41:
                    ee:17:ab:0a:7b:67:54:36:0c:bf:45:91:49:96:f2:
                    8f:4a:1c:39:d3:30:55:73:69:0e:0f:82:62:4a:0d:
                    b1:f0:cd:98:3b:2f:ea:0f:8f:dd:e8:ca:20:3f:3b:
                    e1:77:e0:72:28:1e:29:ce:4b:bd:91:31:d0:b5:09:
                    cd:4d:c7:23:21:46:44:d4:62:1c:dd:03:0f:1e:89:
                    58:03:c3:ad:36:2a:da:65:c3:46:1b:cb:5d:62:63:
                    6b:e7:d3:d4:49:08:61:6f:ac:69:1c:5e:22:26:0e:
                    3a:4f:6c:31:52:3e:5b:f9:4b:60:d4:91:70:10:4f:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:35:C3:DB:44:D3:75:B7:22:D4:42:84:37:9A:8C:73:8B:98:AB
            X509v3 Authority Key Identifier:
                keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:b2:2c:37:a0:cc:f5:37:80:cf:26:1a:9c:73:b7:0c:ca:
         9d:f1:9f:02:b8:31:e4:77:8a:37:b4:d3:ff:63:a2:b0:44:e3:
         de:65:e8:57:0e:56:cd:87:7a:36:3a:5c:be:2c:b6:6e:6e:a6:
         87:93:d6:e2:e4:44:81:d7:cd:72:0d:6c:3f:44:c3:ae:84:56:
         15:4d:91:9b:91:2f:ee:ad:73:d1:8e:6a:54:de:85:d9:1d:a4:
         94:91:49:92:50:bb:f6:8f:0a:dc:fa:dd:e4:ae:32:cc:61:a4:
         d8:81:43:49:be:91:6c:3b:b4:e9:e2:bc:af:cd:df:bb:3a:67:
         50:71:8d:78:cc:1c:2f:32:48:13:6d:f4:9f:a1:62:9d:28:a3:
         f1:99:1f:40:46:be:8e:89:36:b5:9c:24:50:30:e6:2b:d2:51:
         05:ed:51:83:42:12:1d:42:b4:54:7c:b9:e5:05:8c:c8:44:1a:
         6b:48:55:eb:f5:72:dc:e5:e8:9a:0d:d3:53:37:94:61:25:be:
         18:fe:87:38:1a:28:b9:f7:ab:46:d2:79:22:40:db:a1:ca:36:
         09:ff:ad:39:f4:15:53:c4:e5:25:23:12:1a:d1:a2:71:7f:89:
         4e:63:32:7e:95:ed:6f:a2:18:88:d0:d2:5f:99:31:8e:b9:2d:
         9d:55:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:24 2025 by rpki-client