Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
File:                     1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft (raw, json)
Hash identifier:          K9gX62cJ4ISBlNtAKS9vExnZA2LH+94EGDcQ1HO6Dxc=
Subject key identifier:   51:AA:62:92:B5:32:C0:16:93:BB:8C:CA:F5:67:DA:46:B2:0F:A7:58
Authority key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E
Certificate issuer:       /CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
Certificate serial:       1138ECB583F502BE6F12A713F08900131DCB557B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
Manifest number:          71
Signing time:             Mon 21 Apr 2025 10:08:32 +0000
Manifest this update:     Mon 21 Apr 2025 10:03:32 +0000
Manifest next update:     Tue 22 Apr 2025 13:11:32 +0000
Files and hashes:         1: 3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (hash: +QF6r8cJoOgopMXHRk+XYYXKfB6U8fZNhd20Flzrr5U=)
                          2: 323830343a316266633a3a2f33322d313238203d3e203631363332.roa (hash: Q20tO3PH1FdBiNGAf2lmvuYhX5482yPCWn6UjwSAsTA=)
                          3: 3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (hash: hMPwxwIFj7Buq6bAV/HOMwaoPoqeXdLoP8Bcivkp5XU=)
                          4: 3136382e3233322e3138342e302f32322d3332203d3e203631363332.roa (hash: aO0SHpEJrP4XNtQuwqB7tN9pl9DDuzDBSC0/9pYo55g=)
                          5: 1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl (hash: 6U/Mx7P29ZGCe7tBz0rLtpLEQFwTWPnNQ/g+EwPY1/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:ec:b5:83:f5:02:be:6f:12:a7:13:f0:89:00:13:1d:cb:55:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E
        Validity
            Not Before: Apr 21 10:03:32 2025 GMT
            Not After : Apr 22 13:11:32 2025 GMT
        Subject: CN=51AA6292B532C01693BB8CCAF567DA46B20FA758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:35:51:87:93:56:b1:e7:a1:2a:e6:61:be:
                    97:48:c8:b9:a9:ae:23:bf:47:02:76:e1:96:af:1a:
                    28:a8:8c:83:cd:31:18:c0:af:da:3b:7b:67:16:a0:
                    5b:ad:17:14:46:f4:8f:7b:2c:70:94:19:88:a5:ab:
                    1c:bb:82:7b:40:11:ad:54:32:f5:14:ac:5a:6b:95:
                    b1:b0:d9:6f:49:5a:e2:ee:85:35:49:a7:c1:99:92:
                    1c:80:9b:12:3a:fa:55:cb:1b:16:d3:b8:6d:9d:e3:
                    8b:a0:49:ff:05:69:17:f1:99:72:4b:2e:99:9f:9f:
                    a8:4b:79:72:90:d4:76:89:48:bc:3b:ea:60:3a:75:
                    e6:14:74:aa:45:12:ae:b2:d0:c5:69:6a:87:9b:54:
                    3e:1a:a1:84:54:8b:da:e3:81:b0:30:07:37:41:b9:
                    48:68:b1:7f:10:89:7f:80:e0:b1:dd:56:69:29:9f:
                    55:3d:fd:3a:bb:5a:27:19:4a:a6:02:88:d2:1b:72:
                    a6:b3:24:17:e5:59:55:33:3e:17:8a:28:ea:f1:d2:
                    fb:99:58:99:b7:ce:ff:ee:10:df:39:38:40:d4:67:
                    10:e7:fd:91:71:94:7a:fa:d0:9b:54:bd:76:b5:c8:
                    23:1d:79:98:ac:1e:69:fd:47:ab:ae:b1:c8:5d:cb:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:62:92:B5:32:C0:16:93:BB:8C:CA:F5:67:DA:46:B2:0F:A7:58
            X509v3 Authority Key Identifier:
                keyid:1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:5c:34:b4:ed:76:a2:7b:97:d8:2b:1a:f4:c0:6e:5b:d4:
         2b:77:09:66:0c:41:74:34:10:06:bb:f3:60:91:62:5e:f2:e7:
         2c:88:38:6b:58:50:d6:cb:7d:75:8a:c0:26:5a:4f:89:44:19:
         42:5c:b5:4d:d7:8d:f9:d1:aa:75:bb:fa:1f:45:85:d1:e6:d6:
         f4:32:8c:11:4c:ae:57:d4:8d:e3:b4:f9:cb:82:0a:a9:17:25:
         cc:1d:36:f9:6c:6e:59:69:fa:36:42:31:84:d6:e0:f1:eb:79:
         31:0a:0c:6a:ed:5c:c2:cd:7a:c6:77:95:fc:50:ed:7a:f9:08:
         9e:96:d9:03:0d:e6:18:8a:f7:34:a6:f5:f4:5c:19:ba:04:5f:
         2e:cc:10:5f:5d:f8:bd:43:3f:64:94:19:bf:d0:44:a7:d3:0a:
         96:05:61:ec:ab:4c:7a:36:05:2b:bc:71:01:7f:cb:2a:d5:6b:
         3e:5e:6d:68:a6:d0:5f:33:df:47:47:bd:ec:36:90:71:cb:12:
         60:40:4a:fa:8c:b7:fd:b2:e1:d8:c1:c9:7f:91:66:1f:92:01:
         eb:74:cd:44:95:e3:ab:1f:30:f7:b6:02:23:50:cb:fb:dd:85:
         26:4f:b2:5f:fd:5c:e7:fa:09:2b:46:7b:eb:31:86:b3:f0:68:
         55:bf:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:00 2025 by rpki-client