Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
File:                     BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json)
Hash identifier:          +TugSAyNmw8FNqFkbTOCJgdSIWfnnAZyp5TD4D5UjnY=
Subject key identifier:   8E:B5:B8:F3:8B:51:2F:03:A9:F3:24:83:62:88:1F:FD:68:60:E1:8A
Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4
Certificate issuer:       /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
Certificate serial:       1F1F1572BB55D44A5A01E9F4094E3E7EE47F015A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
Manifest number:          01EB
Signing time:             Sun 27 Apr 2025 22:29:21 +0000
Manifest this update:     Sun 27 Apr 2025 22:24:21 +0000
Manifest next update:     Tue 29 Apr 2025 01:04:21 +0000
Files and hashes:         1: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: PqamsfFtNsa9ARX2GSaUEgM9yAkUazD4HfVCZ5s9hNs=)
                          2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=)
                          3: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=)
                          4: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl
                          rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 01:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1f:15:72:bb:55:d4:4a:5a:01:e9:f4:09:4e:3e:7e:e4:7f:01:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
        Validity
            Not Before: Apr 27 22:24:21 2025 GMT
            Not After : Apr 29 01:04:21 2025 GMT
        Subject: CN=8EB5B8F38B512F03A9F3248362881FFD6860E18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:b6:55:cf:84:cf:d7:70:3f:2f:1d:f3:e6:
                    d3:2c:34:e0:d5:a1:18:1b:d1:a0:6e:ec:9f:7d:cd:
                    38:1b:8b:23:00:28:ca:28:44:92:1c:5b:9e:da:37:
                    ab:9b:ba:d9:d5:39:79:26:31:ab:ad:a3:55:32:8e:
                    df:9c:06:49:e9:f7:2e:b7:bd:73:26:57:49:04:7d:
                    f0:c9:87:94:47:88:13:d0:c9:ac:1a:78:ee:14:a4:
                    f8:b5:f3:b6:3c:19:07:52:85:64:71:8b:f2:8a:98:
                    c5:d7:9e:c7:b8:40:56:97:bb:e0:25:a6:57:f5:4a:
                    91:f0:5e:76:85:b3:78:33:5d:d9:ae:2e:f3:82:e7:
                    77:42:86:a6:3e:aa:dd:6c:cb:86:75:cf:00:b0:50:
                    7d:39:26:57:19:82:bd:b8:00:f4:54:6d:8e:f4:67:
                    19:78:b5:f2:8a:71:be:de:97:ad:07:73:88:7b:17:
                    d2:6a:b4:fe:5f:28:34:da:8c:55:10:78:34:be:60:
                    2c:fa:e0:f0:5a:6b:8c:25:1b:3f:98:b5:df:fc:c3:
                    c5:cf:78:15:e3:10:aa:94:58:91:8e:5b:b0:2e:65:
                    fc:ec:7c:3d:e1:6b:d6:69:3c:81:77:c4:17:da:86:
                    77:22:19:e0:44:69:88:51:0a:49:cc:b4:45:04:a1:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:B8:F3:8B:51:2F:03:A9:F3:24:83:62:88:1F:FD:68:60:E1:8A
            X509v3 Authority Key Identifier:
                keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:1b:a6:8c:c4:b4:88:d9:a3:a1:e6:ba:fe:72:6e:55:3d:b7:
         4d:6d:4f:d4:5b:46:72:a3:86:e5:f5:2b:56:a7:51:fc:cb:71:
         d6:1c:47:07:9a:39:84:aa:ff:19:46:73:c1:e2:d1:76:50:9e:
         8d:dd:74:65:99:b7:b1:7f:2e:31:d8:fa:07:64:03:08:bc:f4:
         fd:85:a0:01:b3:af:c1:97:c0:27:35:04:fe:5d:af:eb:1b:c3:
         5c:a9:88:4b:81:b4:bb:e4:f4:c9:70:f2:7b:5a:42:99:96:ab:
         c0:63:cc:50:70:fa:5d:b8:45:74:cf:74:84:54:48:f1:d3:05:
         c6:8c:a6:a7:fc:c1:9d:5d:55:0c:ca:48:36:e7:1e:c3:3e:4f:
         52:4d:0e:84:b1:98:31:97:af:4d:24:02:7d:9c:34:7a:84:b2:
         77:23:be:9d:74:47:da:7a:22:30:a9:84:d8:5c:f3:6f:e8:95:
         64:8c:29:01:f6:e7:1f:d5:72:37:21:bf:9d:19:57:1e:29:34:
         55:2f:92:4a:22:da:0c:47:b9:fe:f2:e1:d1:cd:6e:17:96:c4:
         fe:10:64:4d:fd:a2:c2:e0:48:f1:58:77:62:c9:57:48:4e:80:
         a6:cd:c7:9a:58:41:8b:31:0f:6e:1c:1a:a7:f8:2b:33:6d:4e:
         89:87:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:29:39 2025 by rpki-client