Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json)
Hash identifier:          QGuSaeYI2HwJSdwWsa9keS9mRr/p9wBpzm+pXaA719A=
Subject key identifier:   01:E0:E3:7B:13:BA:38:A3:F9:16:C2:94:4E:C6:A3:7D:82:70:A8:19
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       021BB02A7D18A0C0B37B731A5CB8486602175579
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
Manifest number:          0131
Signing time:             Thu 08 May 2025 19:57:06 +0000
Manifest this update:     Thu 08 May 2025 19:52:06 +0000
Manifest next update:     Fri 09 May 2025 20:12:06 +0000
Files and hashes:         1: 34352e3138312e39342e302f32332d3233203d3e20323639313735.roa (hash: r1bn3UoZrI0mrN3xTbLY/a73fUMxwg2slKcvEzUxpHw=)
                          2: 34352e3138312e39332e302f32342d3234203d3e20323639313735.roa (hash: 4Jnh/rCJDTermsdI1dmftvy1mZKM6AFj8TGUOVLS+Y4=)
                          3: 323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa (hash: b8FIVNNVHkwZkEufW79ZWTHrDvAE3HENowgmB+V6L94=)
                          4: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: uN/i+E30vKJnux5fnr2/vAKr0AtTb392t2czu6TTWs8=)
                          5: 323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (hash: 92rAgKGyB82YXG+BbGsX61h0T+f7B1KJQ0Xx3x2ovrc=)
                          6: 34352e3138312e39342e302f32342d3234203d3e20323639313735.roa (hash: yvUWPozum5zwymdPC2/KIpd9/UtiIrfNODFpGCZ+PO0=)
                          7: 34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (hash: eNTgdwM/7BO4VPgNc0uIrE158KBwvOzCR8H9yY8IDsA=)
                          8: 34352e3138312e39322e302f32322d3232203d3e20323639313735.roa (hash: apBa/r52IvmGI+iVNX1/lrmpH2Jbn6NvkOsUQzR5wUY=)
                          9: 34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (hash: 1oY7FtDZ/o3AJipI3DGTsDD5HBCmtWkfvnscc/EGHNk=)
                          10: 323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (hash: yzkgD2HbkOeS731A8ZsgS65mmCo5d1scpi/s48QeCAE=)
                          11: 34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (hash: ShFIyk+Z0cduxovwg4cuTLF9BX3C8AsUtnC5hL20kp0=)
                          12: 323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (hash: Pff7DtfMYO4MrGrfXFCgY6pGTXB03AtsILjl7o9DOYk=)
                          13: 323830343a316634633a3a2f33322d3332203d3e20323639313735.roa (hash: 1w7/3g2jnOrotC49nW1EYA8lup8R/WWYbA+wjJYgmHI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 20:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:b0:2a:7d:18:a0:c0:b3:7b:73:1a:5c:b8:48:66:02:17:55:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: May  8 19:52:06 2025 GMT
            Not After : May  9 20:12:06 2025 GMT
        Subject: CN=01E0E37B13BA38A3F916C2944EC6A37D8270A819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:e7:6f:d7:08:d7:18:a0:a6:02:ee:2e:b5:
                    3d:8f:12:db:22:e0:bb:11:5f:9a:90:c9:25:53:cf:
                    86:d9:93:b4:51:14:a1:da:04:9d:b6:38:07:b8:d3:
                    6e:be:f3:02:f9:18:6f:2e:db:df:71:37:37:c7:aa:
                    ae:85:92:4d:13:c0:46:c9:62:9f:08:34:1a:16:ac:
                    f0:37:a9:dc:4d:c6:4f:d0:22:82:03:84:d2:97:de:
                    32:34:b7:fa:94:18:72:0c:e8:e0:d4:e6:61:b0:6d:
                    72:2f:b6:db:e6:4e:bb:76:da:35:97:31:b0:67:d4:
                    02:8d:65:21:86:34:8f:cf:2d:4a:0b:2c:a6:09:14:
                    a4:52:bc:8d:ad:c1:21:19:c4:b6:8b:16:8b:db:f7:
                    6d:e1:93:81:ef:93:fc:f5:e2:7a:47:42:e5:3d:ca:
                    09:60:c1:32:a1:b9:f7:6b:8e:41:42:d8:d2:68:8a:
                    cc:f1:d5:eb:fb:17:5c:3d:2d:ff:ad:e4:46:1d:41:
                    08:80:22:74:a4:44:6d:c4:f8:03:da:e0:2d:4f:7c:
                    de:8b:14:f1:6e:f0:22:b5:21:58:39:a5:8e:44:2b:
                    bb:91:42:fd:9c:ae:e5:ad:63:af:07:25:cf:23:b1:
                    1c:8f:cd:a2:84:88:d0:eb:ad:03:43:52:8d:75:3a:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:E3:7B:13:BA:38:A3:F9:16:C2:94:4E:C6:A3:7D:82:70:A8:19
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:cb:6a:76:ce:ae:04:d1:26:83:9a:f5:9a:54:80:48:e6:
         f5:ee:6d:99:9c:46:0f:24:19:52:5b:bf:c2:24:36:14:d4:c9:
         84:da:a9:c5:1f:97:fc:93:5c:7a:c6:b4:fa:3c:e0:26:7b:76:
         42:60:17:4e:fc:b9:4a:2c:b8:0f:95:e9:3f:fc:fd:cc:6f:99:
         5b:d0:ba:9d:c6:5c:8e:22:80:cb:a7:34:52:20:9c:e0:0d:1f:
         21:a7:fa:0e:47:41:e0:77:ce:47:6c:41:7e:0e:ab:82:a9:1c:
         57:0a:20:2b:95:86:e2:43:d7:48:94:58:61:76:e0:de:30:f1:
         0f:89:d9:de:8d:6c:99:9a:74:cb:6c:1f:c4:b0:cd:a3:89:4a:
         e1:09:a3:9b:3c:96:3f:4e:1a:69:ac:98:a5:9d:58:d0:e0:0b:
         d4:01:23:c7:09:4a:2e:ce:dd:8e:49:21:3b:de:01:38:b0:aa:
         e4:da:08:81:12:d4:c8:e2:54:35:be:e7:fe:5d:91:53:5a:7c:
         4e:f2:80:86:3f:d8:03:e7:7b:2f:d1:ce:0b:96:72:37:78:80:
         0d:4f:4b:f7:39:f1:d5:50:7f:39:51:ce:0c:fa:35:9e:fe:c4:
         90:a3:7d:71:28:00:38:a3:de:40:03:44:09:52:e9:4c:17:58:
         43:13:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:47:42 2025 by rpki-client