Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
File:                     E533674BA5C26CC97186C54907220754478B1596.mft (raw, json)
Hash identifier:          WnIhgarTK179SnZi0aLbw+C8ibON1H+cWI7kCu5Uy3g=
Subject key identifier:   B6:41:80:5A:C2:8C:B5:98:9A:E5:94:CF:28:99:4E:BD:7C:FD:24:20
Authority key identifier: E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Certificate issuer:       /CN=E533674BA5C26CC97186C54907220754478B1596
Certificate serial:       50B1E8D9144F7B21964AC8D701256472C7D2C540
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
Manifest number:          01A7
Signing time:             Mon 09 Jun 2025 00:49:08 +0000
Manifest this update:     Mon 09 Jun 2025 00:44:08 +0000
Manifest next update:     Tue 10 Jun 2025 01:43:08 +0000
Files and hashes:         1: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (hash: PmZa6XWW8N0henoxOZeBx1dJrefChIYpP++Fbka1nSU=)
                          2: 34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (hash: STUTTS9Wj0hf5bSZd/NwsL0QIxxDmsLuJ+nSe4pQjPc=)
                          3: 34352e3232392e32322e302f32342d3234203d3e20323637303931.roa (hash: 00ulnhT2clKAj5Z6OK+iggphhmHJrrSSDuCe0rMHUPI=)
                          4: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (hash: G4RWRbFzkiPtRpwuxbHytfYOPuZHnvzajHmAKaSv+pM=)
                          5: E533674BA5C26CC97186C54907220754478B1596.crl (hash: k1eBrqefJdZIE4p7d5TLsQMURtquvUaDCLQJng7rqfQ=)
                          6: 34352e3232392e32312e302f32342d3234203d3e20323637303931.roa (hash: I7BIDIJi3iCaWYerp/PhHNnLTqF8EU3R+zjy8+DnC1E=)
                          7: 323830343a343830303a3a2f33322d3332203d3e20323637303931.roa (hash: P1iVoJfxgVgvLp6czCL9TvfGbVslmweuGYAC31iY/H4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl
                          rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:e8:d9:14:4f:7b:21:96:4a:c8:d7:01:25:64:72:c7:d2:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E533674BA5C26CC97186C54907220754478B1596
        Validity
            Not Before: Jun  9 00:44:08 2025 GMT
            Not After : Jun 10 01:43:08 2025 GMT
        Subject: CN=B641805AC28CB5989AE594CF28994EBD7CFD2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:ba:d2:06:e5:47:9b:42:27:06:5b:d6:2b:
                    a1:ca:fe:11:e0:ef:87:eb:13:10:1d:ee:cf:4a:87:
                    56:c0:7f:60:f8:33:ba:35:9b:c0:7b:7f:1c:0f:2c:
                    7c:f1:4d:73:78:3c:fd:5d:99:11:53:f2:82:98:50:
                    09:dd:36:96:ef:82:d6:17:ec:91:39:9b:77:dc:3f:
                    01:9a:f0:3b:4f:cf:25:82:ce:11:9c:1b:ae:bd:31:
                    7b:d4:f8:f9:8d:60:a4:bf:80:60:13:6d:9d:de:cb:
                    94:ce:4f:7d:08:0a:c3:68:5a:a1:08:f6:8b:75:2d:
                    c4:51:be:6c:39:23:bd:78:d2:f3:c7:58:82:32:b0:
                    f2:87:41:63:f2:6a:ce:31:48:70:63:da:96:ae:6d:
                    17:fa:6a:4a:da:c5:c9:fa:1b:c5:cb:76:cf:df:6a:
                    c7:16:22:69:e8:92:4c:b7:b3:2f:01:07:5c:bc:cf:
                    cc:42:0b:7a:fb:57:2f:54:e9:e3:7e:63:e3:a8:8e:
                    51:c0:aa:63:0b:2b:39:36:75:e1:f9:39:fe:ff:e7:
                    96:b9:8d:55:be:ed:ed:b1:47:84:b6:58:a9:50:1b:
                    70:6e:04:c4:aa:a7:a2:b3:d4:c0:69:f7:35:21:e1:
                    59:9f:f4:2c:3d:1b:08:0a:d4:ed:bb:1c:50:f8:c8:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:41:80:5A:C2:8C:B5:98:9A:E5:94:CF:28:99:4E:BD:7C:FD:24:20
            X509v3 Authority Key Identifier:
                keyid:E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:46:5a:ec:da:fb:94:0b:23:90:76:0a:be:3e:39:a0:2c:
         50:a1:f9:09:10:5a:39:45:e6:64:99:38:86:47:f0:c4:0d:fa:
         d5:d0:eb:de:9d:8b:0a:cf:75:db:15:82:45:cb:03:9b:19:91:
         4d:a9:a7:5b:17:7e:89:92:78:7c:cb:d6:ae:8a:9a:e9:e9:6a:
         7e:4c:d8:5c:57:53:ca:28:9a:31:8c:52:3f:9f:e1:8e:26:35:
         a5:0c:f7:bf:c1:d4:26:1c:e1:f9:92:62:ac:1d:c4:dd:fa:d0:
         84:39:93:c8:e0:4c:98:99:31:75:84:4a:81:3a:97:62:af:e9:
         d9:bc:35:2c:14:c9:cc:7b:5c:40:72:2d:f1:01:d4:6d:c9:df:
         63:f1:b8:93:4d:55:57:49:02:96:36:35:24:ea:b8:58:f3:ab:
         e8:0d:1c:8e:69:d7:f5:76:3c:ff:b5:f6:57:10:b6:b1:51:b6:
         1a:a8:ea:79:f7:96:21:77:3a:d5:50:14:1a:08:7e:0b:24:e9:
         d0:ce:79:81:4c:4f:fa:e6:e2:9d:51:be:da:68:f6:29:5e:00:
         aa:32:84:79:5f:bc:74:84:d3:e3:15:d8:bc:37:dc:8b:3e:f1:
         da:4d:3a:9b:6e:bc:f7:0f:2c:3b:20:a8:ab:0d:ec:5a:62:6d:
         2d:e7:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:38 2025 by rpki-client