Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          ePlPGb4122bSWDQ2h2dprcOu1zatT9gx6g0pq1lDj6U=
Subject key identifier:   C0:20:1E:0D:F4:20:93:B8:03:ED:5D:48:1D:F5:E6:FE:8E:0B:70:93
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       1D3BB3FF3ECE04B706C85950BE35E3FDF01EABE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          023B
Signing time:             Fri 06 Jun 2025 17:10:45 +0000
Manifest this update:     Fri 06 Jun 2025 17:05:45 +0000
Manifest next update:     Sat 07 Jun 2025 18:50:45 +0000
Files and hashes:         1: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          2: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: 2H3dXakqbtPQ2gkiwj+f0vu9NR7zIh1hbhJPds6Q7Jk=)
                          3: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
                          4: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          5: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          6: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          7: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3b:b3:ff:3e:ce:04:b7:06:c8:59:50:be:35:e3:fd:f0:1e:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Jun  6 17:05:45 2025 GMT
            Not After : Jun  7 18:50:45 2025 GMT
        Subject: CN=C0201E0DF42093B803ED5D481DF5E6FE8E0B7093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:63:06:5b:41:61:78:a7:5b:b7:a6:e0:21:
                    78:b7:69:10:87:c6:cc:15:6f:95:a6:d7:5f:1f:71:
                    bd:f8:97:63:ea:9c:dd:0c:e8:ad:e8:36:aa:e9:2c:
                    4a:d8:9d:bb:97:03:0a:22:fa:ac:7b:4e:19:3a:07:
                    ef:c4:c4:2e:b2:47:5d:f8:0e:4a:42:87:56:a5:f3:
                    00:4d:61:70:d7:fd:40:16:70:6c:51:4a:8f:d3:98:
                    63:65:22:a2:f8:19:28:a4:b2:4f:ad:94:24:be:7f:
                    3b:d0:b7:53:0f:87:34:5c:89:60:0f:d5:d2:f8:38:
                    de:66:1e:92:97:ea:fb:be:be:3a:ea:c7:a6:f8:c8:
                    14:5b:49:a4:14:4e:58:1c:92:67:f6:a1:b3:be:fd:
                    e4:b1:9a:21:92:5d:79:92:ac:b0:e6:36:03:7e:52:
                    04:ae:3b:20:ca:df:7e:fb:98:ec:02:dc:5c:85:9d:
                    ca:32:cc:76:9b:80:b3:22:5a:40:db:e3:a5:26:6c:
                    13:f5:ca:b1:51:70:25:bb:34:fe:ff:9c:7d:b9:94:
                    01:4f:e4:94:ef:c2:39:c9:3a:92:1d:27:46:89:ae:
                    6a:e3:44:03:f5:0e:92:26:dc:cf:25:d2:64:1a:fc:
                    71:12:d2:6a:06:09:92:34:d7:fd:d8:a7:16:8d:5f:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:20:1E:0D:F4:20:93:B8:03:ED:5D:48:1D:F5:E6:FE:8E:0B:70:93
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:41:e3:be:45:3c:26:2c:80:b2:0f:5a:1e:6e:28:b4:ae:3a:
         1e:fa:a5:c6:0a:1d:c4:dd:be:46:4c:72:75:f8:41:b5:7f:98:
         7d:87:f1:ff:76:40:c7:aa:eb:48:b1:3d:92:e8:37:3d:db:c4:
         a9:31:aa:78:5d:53:11:7a:3c:d3:9e:c3:7d:f6:8a:5e:21:54:
         f4:ad:5d:a8:da:ba:3b:82:44:a7:6b:89:37:44:b6:57:47:b8:
         05:10:c0:53:e0:bb:8a:38:ab:c7:4d:62:ae:9b:b7:12:bd:79:
         ef:e7:95:ef:b0:fb:ea:08:d3:44:69:97:a7:cb:2d:9d:0b:1e:
         87:a0:a2:3c:5b:2c:41:4b:bb:f0:6d:c4:e3:63:5a:2c:a1:37:
         87:df:2c:fd:20:03:b6:b7:ca:f3:91:f5:2d:d2:c4:11:ac:ad:
         a6:74:b3:49:ab:57:64:47:e7:59:ed:93:d4:cd:5e:cc:b3:d0:
         9a:97:65:1a:fe:1c:87:a1:78:21:a7:5d:e2:d7:70:04:b8:13:
         fd:e3:96:ce:a9:12:b8:2d:3a:2c:a2:47:79:4e:54:f5:51:6f:
         43:55:17:aa:d8:b4:56:6a:96:c8:ca:a6:2c:fe:58:e5:61:69:
         d0:bd:c7:f8:f0:8f:a7:19:77:42:db:b5:ae:c7:d8:39:7c:77:
         e2:47:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:55 2025 by rpki-client