Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft
File:                     76B0EA57E03504BE922FDE919983808A4300E231.mft (raw, json)
Hash identifier:          Hgz3Dc2IMWFPhlmOH1L5RH1WLzpNbeaIxvHEcKLMYQw=
Subject key identifier:   5D:AF:FA:9A:30:2D:A8:A3:F5:98:A8:BC:F5:F1:BC:26:BE:85:8F:75
Authority key identifier: 76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31
Certificate issuer:       /CN=76B0EA57E03504BE922FDE919983808A4300E231
Certificate serial:       3F8181B99CCABE9E13E86DC9A782D7E057FFE04C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft
Manifest number:          18
Signing time:             Tue 03 Jun 2025 18:55:16 +0000
Manifest this update:     Tue 03 Jun 2025 18:50:16 +0000
Manifest next update:     Wed 04 Jun 2025 21:06:16 +0000
Files and hashes:         1: 323830343a363630303a3a2f33322d3332203d3e20323639353237.roa (hash: 6zRZc6yOaztxunSOj9phf3pmmoEln1e654d5xy3YhhI=)
                          2: 34352e3138382e39302e302f32332d3233203d3e20323639353237.roa (hash: jjFY++4mITQoxFIVWEymiCiOrB6N6ia8aYp22x5bP5E=)
                          3: 323830343a363630303a3a2f33332d3333203d3e20323639353237.roa (hash: WvtwU5j1W69bqQbFTbfMTpAhQH8UdHvjU4MrL7Ywix8=)
                          4: 34352e3138382e38382e302f32322d3232203d3e20323639353237.roa (hash: /AJxynoBpKqf3ap3g82dgMjmUrsde87iPgZAKu06dWo=)
                          5: 76B0EA57E03504BE922FDE919983808A4300E231.crl (hash: W8XHz3bPX1eQgwyFCxUGkUfU28BPNLqpfIUrD3iLIaM=)
                          6: 323830343a363630303a383030303a3a2f33332d3333203d3e20323639353237.roa (hash: mtw++lcKz74GDdOmRB+dRwh92zi5rhhIuNZpDKYLKDE=)
                          7: 34352e3138382e38382e302f32332d3233203d3e20323639353237.roa (hash: buVJTfSxTAQN6ast2fg5HPqojf/2A/KlLZcLewaen9Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl
                          rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 21:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:81:81:b9:9c:ca:be:9e:13:e8:6d:c9:a7:82:d7:e0:57:ff:e0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B0EA57E03504BE922FDE919983808A4300E231
        Validity
            Not Before: Jun  3 18:50:16 2025 GMT
            Not After : Jun  4 21:06:16 2025 GMT
        Subject: CN=5DAFFA9A302DA8A3F598A8BCF5F1BC26BE858F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:72:b2:d2:aa:96:97:9e:67:2b:cb:78:11:
                    77:17:9a:5a:bf:0e:6e:25:0f:a7:cd:dd:53:3c:c0:
                    cd:36:0a:0c:c2:2f:8e:60:62:9a:e5:af:bd:8f:51:
                    1a:22:b6:eb:b8:ac:99:f3:e4:cb:78:a8:41:fb:05:
                    f5:cd:05:64:86:54:44:19:de:bc:8e:4d:02:72:ab:
                    6f:3e:46:36:cf:8f:53:59:9f:8f:25:7d:f9:94:4a:
                    02:34:49:d4:b3:04:30:a1:cc:92:01:79:7b:df:c2:
                    a0:31:5b:21:7b:c6:02:9d:fb:60:34:6d:a2:c0:96:
                    b7:20:5e:f3:62:35:87:84:9f:9c:c2:1c:0c:63:8f:
                    aa:e3:6f:8a:4a:35:18:55:5b:00:7e:1e:56:0f:cb:
                    bf:df:8b:bc:dd:1f:a4:fc:01:10:e5:73:10:08:ae:
                    3b:2c:1c:80:75:07:6c:a1:e8:e9:eb:30:aa:a7:10:
                    3a:24:31:a6:4e:e0:0d:bc:59:ad:14:5d:46:11:d2:
                    41:87:fd:bc:fe:8d:a9:2f:11:2e:fa:12:6c:22:b8:
                    e9:e8:18:07:0b:f2:a2:e1:d8:51:9c:e5:2e:0c:07:
                    9f:61:46:3b:43:23:c5:c9:39:bf:bd:56:71:04:b2:
                    ec:fb:e7:1f:07:87:87:67:fc:cc:22:7e:20:76:a0:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AF:FA:9A:30:2D:A8:A3:F5:98:A8:BC:F5:F1:BC:26:BE:85:8F:75
            X509v3 Authority Key Identifier:
                keyid:76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:75:57:62:94:3a:88:0d:34:bf:81:2c:4f:5a:57:ae:95:e8:
         ab:80:95:51:2a:ea:04:df:17:90:ab:19:4d:3a:98:13:d0:07:
         6b:a5:a9:71:dd:1c:7c:67:90:60:64:03:5d:f8:1b:c0:84:38:
         28:18:c7:94:8a:40:b1:85:83:b6:c7:bd:0b:cd:19:9b:8e:12:
         f0:0d:e8:55:7a:a6:3f:3c:dd:ac:6d:d2:04:71:18:c0:2c:93:
         27:30:dc:ef:d2:1f:e1:5d:c0:31:71:ce:0f:f2:33:26:57:1b:
         b1:9c:78:65:04:10:8b:68:5b:73:b9:7d:a3:fd:7e:bf:63:0d:
         05:f2:fd:81:a4:e9:8c:06:44:c8:17:b3:e7:0a:63:52:ee:7b:
         48:4c:a7:b7:c3:00:c8:73:a1:35:9c:b6:3f:0f:b4:a3:ea:38:
         de:bf:5b:17:37:ac:88:45:7c:9a:c5:57:9c:ec:66:e1:1f:40:
         2f:14:93:2a:72:0d:27:9d:4e:04:6f:88:13:9c:cc:b0:9a:99:
         1e:cd:b9:c3:bd:b7:fb:f4:9b:b3:b3:0b:dd:3a:59:de:09:5e:
         ae:6e:99:da:63:d8:db:e3:ae:18:04:02:a8:c1:01:90:50:58:
         f7:4a:e3:f7:d8:38:f1:2c:6d:fe:03:d9:d0:91:d3:dc:fb:cb:
         b6:1f:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:29:49 2025 by rpki-client