Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
File:                     1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft (raw, json)
Hash identifier:          jd3pWtecurGdVoqHPnnqN2MpFH+D2onIU1KxkK/RhR8=
Subject key identifier:   92:C1:AA:35:01:C7:DC:6F:9A:D2:A9:90:5E:7A:3A:A5:26:9C:35:96
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       65A074E8253DE5B80621D3B523186EB94DB0FA88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
Manifest number:          73
Signing time:             Sat 12 Apr 2025 08:19:37 +0000
Manifest this update:     Sat 12 Apr 2025 08:14:37 +0000
Manifest next update:     Sun 13 Apr 2025 10:42:37 +0000
Files and hashes:         1: 323830343a333831633a3a2f33322d3332203d3e20323636343537.roa (hash: XOiN5TkkeJGZQdKLDundGd6354GQZjNylfmDQFwpezo=)
                          2: 323830343a333831633a3a2f33362d3336203d3e20323636343537.roa (hash: W73/WetyRo2sZQez7k02MIb9L09vnxOC/QUMREvU5vc=)
                          3: 1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl (hash: 0dt8W32w2lLYabn6yQLbhXFtKVThXgIOPAShaNy1k0Y=)
                          4: 3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa (hash: wHzxy6w4KfogH4FMVqlWQ2zq8fpLj5hw82A65IP3eug=)
                          5: 323830343a333831633a3a2f34302d3430203d3e20323636343537.roa (hash: b3ejC392xyfbSJfQME99IiZ/zMqpkptQGSUSd2Csu0g=)
                          6: 3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa (hash: p0+6tUggShg9eqcHpTQgUbvq/Ev37jqfBULQx1QgQjU=)
                          7: 3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa (hash: UALx+SlLdLiJL02bzgV/he33Yi01ImgRgCnvIhh97Ek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a0:74:e8:25:3d:e5:b8:06:21:d3:b5:23:18:6e:b9:4d:b0:fa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: Apr 12 08:14:37 2025 GMT
            Not After : Apr 13 10:42:37 2025 GMT
        Subject: CN=92C1AA3501C7DC6F9AD2A9905E7A3AA5269C3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:a9:65:0c:80:fd:a9:4b:89:0d:6f:70:91:
                    c1:f7:da:c1:11:0a:56:c8:fb:45:c3:a0:b6:ef:09:
                    e5:fc:e6:54:1f:50:ca:81:85:04:3a:31:3c:ae:1e:
                    be:58:c2:ef:31:0a:99:77:3a:18:c5:bb:ef:91:fb:
                    35:e9:8a:8e:67:20:a1:11:b0:b5:20:fc:13:e5:df:
                    74:76:18:dd:e8:11:1f:73:52:b3:07:c3:a5:93:d1:
                    b6:e9:a8:85:5e:4c:84:40:7d:f3:7a:e0:e2:06:d5:
                    77:59:7c:f9:4b:05:3b:8f:9a:9a:4e:ca:41:c9:d5:
                    28:de:da:90:6c:96:10:52:d1:ea:6a:db:7b:14:ff:
                    23:66:7d:24:2e:77:56:f3:be:27:b0:43:e9:ed:a1:
                    27:f1:e7:2a:44:1f:c7:ed:71:d2:cd:04:7b:27:5f:
                    cf:6f:e3:1b:d7:45:09:6b:c9:9d:13:1c:7f:64:df:
                    ac:03:04:6d:c9:eb:51:8d:7d:0b:8d:6a:0f:b4:df:
                    97:46:ae:5a:d9:08:d6:8f:84:e8:9c:bb:64:de:7a:
                    0f:ed:48:77:58:78:73:97:38:e5:93:75:a0:38:4f:
                    a9:eb:78:b6:18:36:c8:41:54:cd:dd:de:53:53:ee:
                    1e:d9:65:94:92:2d:a7:c6:14:6e:0e:e1:99:42:48:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:AA:35:01:C7:DC:6F:9A:D2:A9:90:5E:7A:3A:A5:26:9C:35:96
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:67:c7:83:41:cd:d0:90:8c:36:fe:3d:78:1d:96:2b:c8:72:
         c8:cc:37:7b:7c:a0:48:fd:e1:1a:2f:2c:c6:23:7a:98:d1:1e:
         2d:2a:3f:ff:ef:99:a5:3f:14:7b:07:87:79:13:0f:2f:8a:18:
         9f:b7:38:61:27:0e:3c:41:c8:ef:25:2d:56:05:ca:95:73:b7:
         40:c4:0a:bf:3f:b3:e1:ff:38:16:8a:88:fa:92:3f:17:db:1d:
         c3:ab:b4:04:63:1c:cc:11:dd:30:f9:c7:02:ea:f2:0a:c8:39:
         05:76:74:91:02:d6:c4:79:c8:41:72:8f:a1:af:86:43:23:81:
         d8:18:c9:1b:ee:b3:0e:da:a3:dc:66:fd:5e:11:0f:93:a4:43:
         73:2c:70:56:05:46:9b:d9:ed:b9:db:12:ee:df:f9:5d:46:67:
         2a:e4:a0:35:48:1c:29:23:c2:cd:6a:f3:e4:2d:73:55:13:16:
         59:b4:1d:ee:cf:08:de:fe:aa:e5:34:8c:2b:c4:4e:dc:3e:91:
         c4:48:cc:fa:ee:a0:c9:11:7b:a6:2a:2f:a9:ef:e9:43:db:cd:
         df:c5:13:47:c2:78:0f:bc:1d:bf:b8:14:32:0d:9b:09:62:4a:
         f3:69:f8:6e:f7:e7:dd:2f:46:a0:a0:9c:78:f8:47:37:15:58:
         75:2c:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:09 2025 by rpki-client