Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
File:                     0E88601104C6C43AC785175C29585EFD06974620.mft (raw, json)
Hash identifier:          g5qv5rA1DtDFxUZisewXah3ZF8NqTXa438QpVPk0mSM=
Subject key identifier:   13:8F:FD:19:40:41:83:3A:06:33:20:BB:C5:3C:B9:84:9E:A8:47:33
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       6F16665B7A73B40B8D5271E728A5D35B77523956
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
Manifest number:          020E
Signing time:             Fri 02 May 2025 12:37:34 +0000
Manifest this update:     Fri 02 May 2025 12:32:34 +0000
Manifest next update:     Sat 03 May 2025 15:53:34 +0000
Files and hashes:         1: 3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (hash: 0zrk0rMnYzWSYDq46FuTI0iv0jDwmBnxoaItP+eRn6M=)
                          2: 3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (hash: jF7P3JPghc/AEXiuXRrOdlHXfUjf3+C7Tg5FIpeRjPI=)
                          3: 323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (hash: aB1z7sY/Fwrtj5JKVGNz/9ciptRcynh6JYuqsnxTzUk=)
                          4: 323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (hash: RUPXGYFc3N0ZWFTODpHDk21IQfK7JmFqCdhx/1Ka6tk=)
                          5: 3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (hash: +3XDDjbpUjZYS64iae7bMObO4htNGF2MzhF9x1grRfk=)
                          6: 3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (hash: y048Dkkeefar+0HYkpGi1CGqcQN+18HgNGctlkgGRm4=)
                          7: 3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (hash: zBeuDG3RpGHHGbRjcO/FJ0TSzmfYg8s/84qoaut7x10=)
                          8: 3133382e33362e3234322e302f32342d3234203d3e20323634353839.roa (hash: +9KcEL6OAPO2Fq7ZbMshlfBSAjbcWsvCmPPRoUp5LKE=)
                          9: 323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (hash: BuY3JAd+I4GQ4Isw/fBgvSFhIYsLCQ++juQp2KHBFd8=)
                          10: 3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (hash: ZGO5v9LUDQZRjXsn+ndJFWRwUxJYLrzNBAFMDafI0gA=)
                          11: 323830343a323231303a633030303a3a2f33342d3334203d3e20323634353839.roa (hash: 7DSHhb4g6HFGRhAKFHMHVvfJLvJKpVU7GdrA+yuW66M=)
                          12: 3133382e33362e3234332e302f32342d3234203d3e20323634353839.roa (hash: hv9ftqmNpaONsGT5S5w3yZVByFa4B+kPyKFdUqLXgGQ=)
                          13: 3133382e33362e3234322e302f32332d3233203d3e20323634353839.roa (hash: 8pt7YXEiXIfFxJCTJdqDqmkT8OgmhItP2tM+ZcM2c14=)
                          14: 323830343a323231303a3a2f33322d3332203d3e20323634353839.roa (hash: 5dX02pKTmcG5vMsy47XWvGYRUU8FZoy/F9zypLxTMYI=)
                          15: 323830343a323231303a383030303a3a2f33342d3334203d3e20323634353839.roa (hash: PX+wwIOc1ieID9iSMRg+d7nEgrl4+4INLeP2emGG/78=)
                          16: 3133382e33362e3234302e302f32322d3232203d3e20323634353839.roa (hash: K84lfU1RhnRjpWwWFsC7fGV98rOEFsh1J68jGmxtvhs=)
                          17: 323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (hash: JVP81+cv0YHuMm/kO22QIUMeE8hiF/fIBv9LFC46orI=)
                          18: 0E88601104C6C43AC785175C29585EFD06974620.crl (hash: y61pgP064p2LsqESOO9x7oqjLEQErQJ3PH9o+g3e37U=)
                          19: 3133382e33362e3234312e302f32342d3234203d3e20323634353839.roa (hash: CTrQciMDxx8vgbFdw9ZhtXbFV9uTg7+xiXebGL4IcBw=)
                          20: 323830343a323231303a383030303a3a2f33332d3333203d3e20323634353839.roa (hash: z0PK89XPf7iScPDW5/s/N6ven+AoHLN0gyU8EK0vNeo=)
                          21: 3133382e33362e3234302e302f32342d3234203d3e20323634353839.roa (hash: DZqiSTx+V0teLhKuCpOTCGoIK1Uvk9SRjn8+zZJSwZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 15:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:16:66:5b:7a:73:b4:0b:8d:52:71:e7:28:a5:d3:5b:77:52:39:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: May  2 12:32:34 2025 GMT
            Not After : May  3 15:53:34 2025 GMT
        Subject: CN=138FFD194041833A063320BBC53CB9849EA84733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b4:6c:b8:40:15:a2:d5:30:8c:f2:93:73:47:
                    d7:ba:6f:b7:a9:59:98:c7:7d:40:72:5f:1b:95:df:
                    a7:eb:cf:bf:a3:07:fd:7f:07:dc:8f:13:07:5c:1d:
                    54:44:58:ea:6a:83:29:31:91:22:6a:e9:4f:46:c5:
                    80:89:4d:93:bd:f4:f5:d3:f1:86:76:6c:dd:c9:c9:
                    4d:68:c8:38:77:e1:65:68:79:37:4d:81:cb:d0:66:
                    a9:ac:91:2e:bc:ff:c5:6b:b4:ec:49:ce:5f:c7:7a:
                    fe:15:c9:51:e9:18:bc:05:b8:f5:72:a6:60:a9:b1:
                    e5:0e:d0:eb:60:43:9f:e4:35:db:89:6a:6e:64:b2:
                    92:38:9a:48:6c:00:ef:5d:3c:c9:ba:5d:42:6e:20:
                    fc:84:f2:ef:38:8e:28:3b:b6:1a:de:08:93:a3:4f:
                    07:66:2f:c8:da:12:82:3a:08:46:05:77:f3:82:87:
                    a5:7c:63:c3:62:15:8e:86:83:24:43:db:14:23:33:
                    29:5d:6a:da:d1:0b:05:3d:94:79:e4:05:fb:a7:57:
                    80:93:d8:15:82:36:e9:56:f9:72:fc:a4:a4:f8:8e:
                    92:ed:03:df:b3:5d:7e:ef:2f:23:04:0b:e9:0a:5c:
                    23:91:ca:ae:4b:b4:03:75:a3:05:23:ec:a0:ed:1f:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:FD:19:40:41:83:3A:06:33:20:BB:C5:3C:B9:84:9E:A8:47:33
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:51:f1:55:b9:67:d0:41:8d:f3:d5:0c:20:8e:4a:f5:28:6e:
         97:5c:04:97:ab:82:ac:15:59:d3:c2:9f:ec:f3:90:b0:64:ac:
         d0:a4:d5:e3:6b:d6:83:e3:c2:26:c3:dc:3c:6b:ce:7e:42:f4:
         36:64:42:df:ac:69:16:ba:11:4c:25:1d:23:75:b7:41:2f:5a:
         d6:14:4d:87:e1:c6:a0:63:b7:07:06:9c:12:1b:fc:1c:7f:b4:
         27:85:f6:19:b5:69:31:bd:ae:59:31:02:68:58:bc:9e:89:fe:
         87:41:d0:39:d0:20:5a:b1:67:0a:e4:c2:5a:4c:1b:af:97:e9:
         fc:75:16:f0:35:d3:0d:1b:da:3b:71:e6:21:cd:09:53:d1:fc:
         d4:a2:da:f2:cf:29:15:58:75:d6:61:ae:31:7f:8b:67:48:74:
         d2:21:ce:19:ed:e2:fe:ec:00:ae:6b:e1:80:c3:bd:f0:e6:0f:
         61:d9:9a:28:12:4f:1f:25:e4:2d:31:11:ca:77:c4:e9:8e:7a:
         8e:97:93:f4:0e:40:16:d0:5e:f5:59:e7:36:7d:95:f9:27:91:
         53:53:7f:69:15:51:29:df:fb:41:d8:21:37:7f:1d:4e:c4:f1:
         0d:e2:04:27:2a:47:96:e1:bd:8b:62:c8:4f:8c:f3:59:d7:cf:
         3c:64:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:20:23 2025 by rpki-client