Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
File:                     862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft (raw, json)
Hash identifier:          QxFHsN64Vd85O7LRMQQGEc9lH/z7yAgPmd8L5c6oHis=
Subject key identifier:   17:8F:BC:72:79:62:91:58:5C:7C:C5:10:95:0E:58:5B:90:6B:DE:17
Authority key identifier: 86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE
Certificate issuer:       /CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
Certificate serial:       164B9366D5238AD91F784FBA4EC493BCB6A5D949
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
Manifest number:          0138
Signing time:             Tue 18 Feb 2025 10:48:49 +0000
Manifest this update:     Tue 18 Feb 2025 10:43:49 +0000
Manifest next update:     Wed 19 Feb 2025 12:04:49 +0000
Files and hashes:         1: 323830343a353231303a3a2f33322d3438203d3e20323638343932.roa (hash: c0xXPpH7tv9ymx9p1AGf0ADIrlEDjM4ZXJHFQ60I+ps=)
                          2: 34352e3136322e342e302f32322d3232203d3e20323638343932.roa (hash: cdXy0FNPrcIycs46UI764Q8q2G6yXHcsnVSZjw053M0=)
                          3: 34352e3136322e342e302f32322d3332203d3e20323638343932.roa (hash: 9lxIxONGtu/EoJJOVvLnlPXkC5wM9IefSf2smLJvTLs=)
                          4: 34352e3136322e342e302f32342d3234203d3e20323638343932.roa (hash: +Oe2utQ2xPaM4AUTQkctG5b6FJxkPLD/iLpQHQGuL8k=)
                          5: 34352e3136322e342e302f32322d3234203d3e20323638343932.roa (hash: BziwqFgJT7LKNxxzaJ5Vq7sk+mWjgltZq6ltiKYD7YQ=)
                          6: 34352e3136322e362e302f32332d3233203d3e20323638343932.roa (hash: HatkvKgcfyMPRUSb3zUfhNQ6vvyAmn3HaRsB9srtWcY=)
                          7: 34352e3136322e362e302f32342d3234203d3e20323638343932.roa (hash: R897vv8pzOqn4wWPY/wB2yFoD/ut1ovhmAS1s34+Zf4=)
                          8: 34352e3136322e372e302f32342d3234203d3e20323638343932.roa (hash: 6oFQ+6xR4eQ25uBgZB9OVv7tl8Z/ImPPFFRbm8w9Fzk=)
                          9: 323830343a353231303a3a2f33322d3332203d3e20323638343932.roa (hash: EOJliyDZS8TL1XAQpZxXM7BqbKZTSXoxb5nNqJXpk/w=)
                          10: 323830343a353231303a3a2f33332d3333203d3e20323638343932.roa (hash: tKQ0bp1clDBRPik3d6acvdkXltmltDMX7zngbQpoTv4=)
                          11: 862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl (hash: 83NCjDWTfpsEkiTOTW93D77qbvdUysbQSsls/N2fdB0=)
                          12: 34352e3136322e342e302f32332d3233203d3e20323638343932.roa (hash: ghZiqP9VB9U3l5I4C/4Kphxd8nBatJJohkjMY5Fx50U=)
                          13: 34352e3136322e352e302f32342d3234203d3e20323638343932.roa (hash: rT0R7bXAnE3L5fl+JpIVieLiyqHd4kd5lxnpJj9p3Lo=)
                          14: 323830343a353231303a3a2f33322d313238203d3e20323638343932.roa (hash: KJCLuqGA/AecE2Qt6Id2DdpAwUZ0KVyvuwrLmwJ9AOc=)
                          15: 323830343a353231303a383030303a3a2f33332d3333203d3e20323638343932.roa (hash: f2xP3KSIVmoBh4q+qzoDaIYgtgt69n0PAEAIUc+Ll7I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4b:93:66:d5:23:8a:d9:1f:78:4f:ba:4e:c4:93:bc:b6:a5:d9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
        Validity
            Not Before: Feb 18 10:43:49 2025 GMT
            Not After : Feb 19 12:04:49 2025 GMT
        Subject: CN=178FBC72796291585C7CC510950E585B906BDE17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:0e:ee:c7:ef:fb:9b:3a:f3:60:fe:b0:5e:
                    4a:37:c2:36:6d:5c:29:75:52:c3:04:98:ae:2f:2f:
                    f2:34:0c:87:9c:b3:2d:ea:eb:05:18:ef:80:44:d8:
                    8e:6e:1b:0a:64:a3:83:fd:c6:10:40:be:53:e9:a1:
                    6b:63:ec:fc:6c:ee:1d:75:86:50:68:bf:64:a7:f1:
                    19:e9:16:4f:71:21:cf:d3:d8:ea:d5:59:04:3b:9a:
                    72:dd:2a:3a:e3:c0:3b:40:75:d9:df:8a:88:40:ee:
                    ef:de:4e:30:24:93:30:eb:0d:8a:60:61:89:9f:46:
                    d0:45:69:72:a4:07:ec:24:26:d7:47:5c:f2:c2:b0:
                    5d:19:fe:91:37:91:6a:bd:92:bb:43:f8:43:84:e2:
                    7e:83:55:5a:ae:b2:02:1f:5e:0c:7d:e2:f1:93:c1:
                    79:76:8f:8a:24:89:5a:b8:29:24:a8:a4:d1:d5:b8:
                    bf:fb:42:e8:ac:ca:f1:b1:12:77:1c:47:8b:c0:23:
                    16:1a:72:1a:d6:8a:ff:2d:a4:6a:11:cd:4d:4a:07:
                    6c:bc:e4:94:1d:88:84:9d:44:56:a3:cd:28:8c:90:
                    32:cc:5a:71:fc:b9:ff:7b:41:1b:f6:03:93:6e:fc:
                    37:0b:a3:57:35:17:d7:c1:df:80:34:60:6b:c5:7a:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:BC:72:79:62:91:58:5C:7C:C5:10:95:0E:58:5B:90:6B:DE:17
            X509v3 Authority Key Identifier:
                keyid:86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:a6:14:3c:a2:59:ef:b2:13:e2:bf:b8:88:04:19:c3:39:
         50:6f:98:52:15:fb:96:20:cb:10:c9:d4:42:90:43:4e:c0:00:
         60:cd:5f:cd:f9:de:11:52:78:48:4b:51:17:c2:6c:13:73:7a:
         64:5f:ec:dd:db:e2:ed:31:a0:71:40:eb:ed:4c:78:d0:df:7e:
         06:54:72:9b:fd:3c:ca:6f:da:b9:30:95:fd:72:da:c1:e5:49:
         99:dd:85:0c:4d:7f:2a:20:4b:4f:86:90:0e:27:d7:e1:01:66:
         e5:a9:52:31:dd:32:cf:fd:7a:13:45:8c:22:5d:a6:57:48:d1:
         5f:8c:47:0c:a3:41:b4:62:85:3d:b2:10:7d:ad:e7:3e:a5:40:
         a0:96:18:0d:0e:8a:05:98:aa:f9:18:51:c2:e4:78:76:1c:78:
         d3:6f:06:f2:c5:ac:e1:3c:a2:ed:8b:09:6a:b6:17:2a:09:a2:
         d6:86:e4:58:17:36:60:e2:6e:6b:00:ff:8a:61:d3:8a:94:93:
         59:7c:61:5e:42:00:4e:9e:f9:d1:32:d2:fe:e8:2d:f6:0e:db:
         f7:bb:ca:3e:e7:c4:4b:c1:4e:92:d3:ab:06:7c:32:7a:cd:fd:
         2d:92:ce:00:57:18:8b:92:ad:22:fd:f9:aa:91:e6:72:97:a6:
         86:40:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:46 2025 by rpki-client