Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
File:                     3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft (raw, json)
Hash identifier:          mK5x7ysJky0mclcfgvmg9aGrHl/RpbnEbdK2uXyylxI=
Subject key identifier:   DC:B4:30:5E:55:0F:65:51:24:1B:36:21:5F:65:E1:42:D5:B9:20:32
Authority key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5
Certificate issuer:       /CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
Certificate serial:       67EE5662DF35CE7D2C03AFA66555D213CD5EDED9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
Manifest number:          B5
Signing time:             Tue 03 Jun 2025 18:04:42 +0000
Manifest this update:     Tue 03 Jun 2025 17:59:42 +0000
Manifest next update:     Wed 04 Jun 2025 19:24:42 +0000
Files and hashes:         1: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: DFCs6nRQiS3p4kYOFx9qyfLKWu82j04EjjVQEUhlvRU=)
                          2: 34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (hash: ufX0QnRDG9Qtm6AUOnyqKnDEdXFfSqBv9A8zdNqIPhI=)
                          3: 34352e3232342e3131322e302f32332d3234203d3e20323637363537.roa (hash: Tx0FjievZ1fIALoALR+dZPiezsWqP+kaA3FYqPdlF7Y=)
                          4: 3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl (hash: YQYg3nVPQSaOhmCyxHizLvslXSZLCNyLaGfhk2Fk9yE=)
                          5: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: B7E00C1Vxzm7LGbcrVzCf9CW2okcJ2rZZJ8BHdI0fJY=)
                          6: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: d5s2JyEN4cNkPgu2RyAG0Tl4mWwr4eYppkTDVzH7Grw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Jun 2025 19:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:56:62:df:35:ce:7d:2c:03:af:a6:65:55:d2:13:cd:5e:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5
        Validity
            Not Before: Jun  3 17:59:42 2025 GMT
            Not After : Jun  4 19:24:42 2025 GMT
        Subject: CN=DCB4305E550F6551241B36215F65E142D5B92032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:a5:f0:a1:99:b6:97:3b:53:e1:eb:9d:d1:
                    78:93:41:a1:71:90:3d:cc:e6:0d:0f:a2:7a:d6:df:
                    3c:e5:52:e0:22:cb:28:77:08:33:1e:2c:21:3a:08:
                    1b:6b:69:86:47:8b:77:b0:fd:c3:84:7f:27:cd:8a:
                    09:52:19:6f:cd:04:98:ba:9c:eb:e2:6f:89:cf:55:
                    d5:91:0f:d3:d3:10:b7:3e:64:8d:de:40:51:0b:52:
                    7c:04:95:ca:82:ec:df:59:4c:20:d5:e1:0d:97:92:
                    e1:e9:2b:cd:ef:d3:da:ea:22:89:f4:36:50:ac:88:
                    7c:eb:ab:67:da:29:a5:4b:8c:1d:6b:2e:09:ef:79:
                    f3:3c:04:a4:88:f1:d0:2d:d1:49:49:ac:f6:48:7f:
                    81:28:d1:d2:ca:83:4d:a7:fe:52:ea:b0:67:e1:14:
                    8f:a9:0e:f2:4b:16:23:66:77:a9:dd:38:05:a6:f8:
                    3e:b1:24:1c:93:ad:5e:e1:69:43:55:a5:55:e9:d9:
                    07:05:d4:f0:06:fb:52:a9:84:34:76:da:3d:c0:09:
                    41:0b:59:2c:77:b8:6c:5e:54:b0:4f:d9:67:07:d9:
                    79:c3:61:e9:5c:f2:0a:4f:5a:d6:ab:08:6e:2e:9f:
                    3a:65:68:82:e8:53:03:4c:01:29:64:a9:09:66:bc:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:30:5E:55:0F:65:51:24:1B:36:21:5F:65:E1:42:D5:B9:20:32
            X509v3 Authority Key Identifier:
                keyid:3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:48:1c:8c:b0:f1:3d:5c:d8:c3:0c:e0:f8:1f:19:e9:59:
         60:a8:c3:f4:f1:62:5d:d4:c4:e8:f6:71:05:d7:4a:64:5a:57:
         70:c6:f8:6b:60:70:5d:d1:10:f1:52:7d:f5:39:01:03:69:d4:
         57:e0:ab:4c:cf:ef:8a:cb:3c:7f:7d:cf:f0:bf:30:8c:55:37:
         20:5a:d7:29:bb:84:7c:71:e3:ad:6a:33:92:e4:e3:2d:25:3d:
         92:8d:bb:41:58:44:1e:7c:64:31:78:ed:ab:41:73:70:44:78:
         32:85:41:47:64:ea:f7:f0:d4:fb:b3:1b:88:72:02:1f:6b:77:
         5a:c0:d3:45:1b:83:cb:d6:96:81:e1:f1:f5:a9:14:f8:d4:bf:
         da:a5:71:5e:07:72:e8:08:77:75:4f:b9:ae:7d:43:c8:b9:da:
         56:29:54:ec:89:da:49:e4:88:b1:ce:64:9c:71:ae:78:3f:e8:
         db:b0:ff:e0:5e:ff:03:9e:de:5a:a8:80:ef:f0:fb:1f:48:2f:
         55:60:7a:0e:32:c7:b8:9a:0a:63:bf:10:2b:2d:3c:99:87:05:
         1c:8c:94:68:f8:b0:d2:ad:77:1c:8d:cb:6c:b7:41:97:59:08:
         a4:f1:9f:dc:c9:30:b2:02:b3:14:81:d0:7e:8b:25:ef:0d:fb:
         2c:49:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:35:40 2025 by rpki-client