Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
File:                     E1EF9203E12432F995B9B24544924C4BA28FEE51.mft (raw, json)
Hash identifier:          1rWMEj6VYCw3WRGApbqk4pq45vOJwq5LoKGxKvlUOKU=
Subject key identifier:   51:35:40:FC:93:23:43:C4:60:AF:49:A7:2E:FB:E2:FE:53:8D:75:A1
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       6E52C609F38E487D5B7EDC4A3D165EC42D97A479
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
Manifest number:          19
Signing time:             Mon 09 Jun 2025 17:15:46 +0000
Manifest this update:     Mon 09 Jun 2025 17:10:46 +0000
Manifest next update:     Tue 10 Jun 2025 18:05:46 +0000
Files and hashes:         1: E1EF9203E12432F995B9B24544924C4BA28FEE51.crl (hash: jOIv+yHkxmQl/8KcHS+ylL4H9QokfjkXBRwhN7WkYiY=)
                          2: 3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (hash: RBYdST91niOM+x1zBtSsOW+3Z7jQEe2Wf5c86RThsdc=)
                          3: 3137302e37382e3234382e302f32332d3332203d3e20323633353434.roa (hash: Ft1Ycbt6LfCCcobasx0l2qIYcpXpDcTczvYB8PSlQXs=)
                          4: 323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (hash: Vh6IZTV5mVQ2qGqgZ43w1KYLnQ6qZM5fy6yz2yIEKik=)
                          5: 3134332e302e34382e302f32322d3332203d3e20323633353434.roa (hash: p5xOXQxXPzt77Gyp9BPtX/g7zm4TtfGKAFoBVGEnFTA=)
                          6: 3139312e352e3234302e302f32302d3332203d3e20323633353434.roa (hash: JZvdcT9RhwOExA/2167deF3x0wqUQlBUo3cnRCnsE5A=)
                          7: 3137302e37382e3235302e302f32332d3332203d3e20323633353434.roa (hash: 0+bPUTbYSUDRUZJyaD57TRxvxcZVHotBgXX9Su6sP2Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:52:c6:09:f3:8e:48:7d:5b:7e:dc:4a:3d:16:5e:c4:2d:97:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: Jun  9 17:10:46 2025 GMT
            Not After : Jun 10 18:05:46 2025 GMT
        Subject: CN=513540FC932343C460AF49A72EFBE2FE538D75A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:fa:d1:a5:0c:0c:4f:bf:06:29:b4:76:45:
                    b8:45:4a:8a:00:5b:94:5a:b3:3a:91:3c:b4:26:6d:
                    d4:c8:e8:ac:f3:7c:34:b3:0b:0a:41:6b:d4:cf:f2:
                    b8:eb:16:10:5d:2b:da:7a:81:7b:ee:69:25:71:26:
                    33:c8:8d:01:d6:1a:61:35:fb:92:6b:ee:10:ff:02:
                    5a:c1:78:22:df:c8:83:2a:cd:28:c0:d3:61:45:1c:
                    ad:7e:b8:fc:9b:e3:3e:e6:3d:af:54:6d:e8:fe:1e:
                    87:ed:35:d8:a4:bf:15:1c:65:c1:dd:64:a4:b6:ea:
                    e0:3c:e5:a1:03:17:17:8a:fb:00:cd:4f:9b:04:e4:
                    63:c2:79:5b:20:97:73:ab:a8:83:d2:a0:16:ac:06:
                    7b:de:59:63:c8:fc:01:f9:27:4f:e1:11:6e:3a:df:
                    c2:32:2f:2c:a0:33:d5:f1:65:b7:28:b3:eb:51:fd:
                    05:52:8d:af:2d:6c:f5:d0:0a:96:43:ce:5a:2c:12:
                    9b:31:47:b0:15:96:ca:52:16:bb:3e:39:46:39:5a:
                    c9:eb:66:fc:7c:c1:c5:4d:5b:8e:aa:93:24:91:0e:
                    11:4f:d5:59:e6:3e:07:ea:84:c8:9a:51:0d:5d:2a:
                    ce:6a:82:1d:68:b3:27:62:5b:39:90:06:e4:86:0c:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:40:FC:93:23:43:C4:60:AF:49:A7:2E:FB:E2:FE:53:8D:75:A1
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:3f:fb:a7:47:f4:f0:f0:50:e1:f8:67:b3:49:a0:4c:c4:
         2d:4c:93:e7:38:d7:52:67:e9:f0:3f:90:d0:f1:f7:0d:a0:35:
         86:18:30:47:55:ed:34:a9:2e:db:3e:b2:1d:d3:c8:75:73:1e:
         16:a9:34:49:7c:12:34:18:a9:eb:94:7a:30:b6:eb:ff:fc:9f:
         da:f3:34:9e:c3:9c:ba:a4:b1:c9:b8:43:f5:74:cf:77:cd:09:
         10:9f:9e:9e:5e:f6:88:53:46:79:02:26:88:a5:ab:bd:78:54:
         37:5e:96:77:ae:28:e8:71:fe:d5:ee:82:e3:18:6f:70:a7:93:
         af:30:14:38:11:b7:2a:c6:cd:bd:76:9a:55:e5:2b:55:f0:80:
         e0:5b:dc:e2:ca:2a:98:4a:91:66:27:8e:67:34:ea:5d:c1:6f:
         1c:d8:4f:7b:00:ab:d4:f1:3e:ac:dc:cd:49:48:ac:bb:ad:b4:
         38:ad:49:57:dd:2f:3a:b6:5f:d4:a3:26:af:8f:4e:4f:71:77:
         7f:e9:f0:95:65:34:55:e3:9f:bb:c2:00:0d:bd:61:a9:a5:69:
         68:ca:d1:44:4c:9e:31:eb:f8:24:1c:91:a1:b6:68:82:1a:4c:
         53:2c:dc:99:da:5c:51:05:99:69:bd:5c:b0:1b:c7:a9:93:2b:
         d0:b9:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:55:32 2025 by rpki-client