Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          cCle5j+0k09WQkWqGn7oxIni4g1oS5jGC1PvjK6QTOM=
Subject key identifier:   19:BB:19:33:0B:37:A8:C8:CF:D5:60:F7:92:D0:71:83:D6:39:21:D6
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       7A61140784F93B4B1F8B3EA2639DBF23ADB1A271
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          0242
Signing time:             Sun 08 Jun 2025 10:55:38 +0000
Manifest this update:     Sun 08 Jun 2025 10:50:38 +0000
Manifest next update:     Mon 09 Jun 2025 12:27:38 +0000
Files and hashes:         1: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=)
                          2: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=)
                          3: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: aVOnsSgWaBx/DvOhwcZYSn6t5+YPSrKmlT3YMc3R+HQ=)
                          4: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=)
                          5: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=)
                          6: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=)
                          7: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=)
                          8: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=)
                          9: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 12:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:14:07:84:f9:3b:4b:1f:8b:3e:a2:63:9d:bf:23:ad:b1:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Jun  8 10:50:38 2025 GMT
            Not After : Jun  9 12:27:38 2025 GMT
        Subject: CN=19BB19330B37A8C8CFD560F792D07183D63921D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:90:3c:ea:d4:76:a2:dd:35:5a:18:39:e5:
                    b9:9d:43:a5:3a:ac:d2:65:7b:ad:dc:5b:83:91:48:
                    04:b5:34:d8:7e:a2:10:6c:0e:bd:1c:1a:3b:6d:e6:
                    a4:74:e7:9e:80:7c:0c:5e:66:ed:a1:9d:c1:6b:98:
                    33:df:5d:c0:0d:24:14:1f:7d:83:57:50:67:05:b8:
                    ee:a0:0c:cb:a7:b3:ea:3a:00:61:ca:9d:e9:ae:d5:
                    a2:b2:63:c7:a1:64:cb:6f:10:af:21:8c:21:1b:8a:
                    a5:34:ff:de:64:c5:08:75:95:8b:c6:f7:b9:5a:e3:
                    54:16:04:51:df:69:48:d3:c1:73:12:31:95:d0:e5:
                    5c:ea:85:2c:29:b7:aa:da:d8:e8:e7:ec:64:3e:03:
                    14:23:c7:00:db:b5:7e:d6:93:38:d6:af:ba:14:de:
                    ef:3d:e1:27:46:7a:6b:13:0b:21:82:06:86:4e:dd:
                    91:0b:5e:4c:ee:d5:3d:ae:73:a1:3e:b5:4e:84:ea:
                    97:0e:c4:57:a7:e0:f6:b9:f8:c3:0d:61:5f:96:63:
                    f9:12:4b:81:5c:cc:29:6a:42:bb:e4:1f:55:94:be:
                    79:57:34:38:60:3e:ee:c7:18:0c:ee:0e:af:25:2c:
                    18:e0:47:50:23:92:22:92:0c:3a:c7:b9:35:3e:2d:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:19:33:0B:37:A8:C8:CF:D5:60:F7:92:D0:71:83:D6:39:21:D6
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:23:18:3b:bf:99:2d:f9:4e:ee:22:46:38:68:ea:0d:4a:
         32:dc:df:10:3d:90:d9:0a:1d:07:ce:9c:a5:25:0e:37:d0:b8:
         f2:0f:de:8e:bf:1f:30:e4:9c:ff:14:df:cf:21:f7:e2:fc:7c:
         1b:77:37:a6:b2:92:4f:b4:fa:c0:8b:6d:15:51:7c:53:00:d1:
         30:5c:a3:eb:b7:0f:8a:e9:4e:48:32:d0:e9:61:38:93:a3:12:
         84:81:ae:70:d8:ae:9b:51:74:c8:f9:8c:e6:c4:55:f3:dd:3e:
         b1:d9:e1:8d:c5:0d:d1:5a:92:8e:a9:42:28:45:15:17:14:52:
         a0:14:a9:25:7b:f0:8a:fb:04:2f:d4:fa:34:34:78:a1:82:5d:
         6f:b2:92:04:8b:ef:3c:0d:7f:3e:20:52:3d:96:e5:c1:cf:14:
         ed:10:8b:4e:49:7c:94:67:44:16:85:1c:46:c4:10:22:7d:c3:
         c5:3f:5d:7b:34:86:c0:3a:74:3e:9a:3e:9e:b0:8f:98:c8:55:
         0c:f8:3b:9f:3f:6d:e6:3d:41:20:35:03:b8:c4:0d:3e:2a:43:
         b2:e9:f4:d2:96:f1:be:e5:ce:88:67:37:fa:fd:19:e5:53:29:
         c1:67:e3:3b:c6:90:9d:51:e2:e9:88:fd:e3:e6:7a:f3:8d:e4:
         d5:2f:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:08:08 2025 by rpki-client