Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
File:                     1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft (raw, json)
Hash identifier:          5JR5w/jfDR7qOqYs/Eqh7PYDb1WgJI2i2GDLT/R4oVg=
Subject key identifier:   84:19:E9:FF:B2:27:FB:99:42:8E:88:1C:5F:A8:8E:19:B6:7D:BA:13
Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Certificate issuer:       /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Certificate serial:       4D54140F1C3B3C19972B25D563A90AECDFFF868A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
Manifest number:          020B
Signing time:             Mon 28 Apr 2025 22:56:03 +0000
Manifest this update:     Mon 28 Apr 2025 22:51:03 +0000
Manifest next update:     Wed 30 Apr 2025 01:37:03 +0000
Files and hashes:         1: 34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (hash: R+YeKaric66ljUw2I3Ykw+k8MG3+GmRJweocJpLs5io=)
                          2: 323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (hash: U0D6objo3IN8IwtefdRBKWj3Eg4/rYfaZK3h4CbPvKM=)
                          3: 1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl (hash: cKjN7ElfEW2XzedWxR+IplKvaCepe5TFSpvih4hJ95M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl
                          rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 00:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:54:14:0f:1c:3b:3c:19:97:2b:25:d5:63:a9:0a:ec:df:ff:86:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
        Validity
            Not Before: Apr 28 22:51:03 2025 GMT
            Not After : Apr 30 01:37:03 2025 GMT
        Subject: CN=8419E9FFB227FB99428E881C5FA88E19B67DBA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:5a:46:61:33:b4:5a:c2:d3:97:44:31:71:
                    45:37:11:39:bc:71:ac:da:6b:6a:61:4a:04:97:db:
                    9e:be:45:ad:9a:17:31:62:a4:c5:7d:13:23:d5:84:
                    de:b2:3d:23:3f:67:a4:67:5e:44:89:71:df:69:d9:
                    21:03:73:e7:4e:9f:b8:fe:bf:dd:3c:aa:e9:6e:9b:
                    cd:3e:7b:3f:2f:bf:57:3f:81:2a:45:ca:54:69:65:
                    d2:79:78:f1:e6:30:68:e8:c1:1d:11:7a:99:89:23:
                    52:30:96:ef:74:67:87:37:29:e9:ce:fb:79:15:0c:
                    27:9a:f2:66:f2:0d:35:50:49:a7:49:9f:86:04:1f:
                    bc:aa:14:47:41:8f:44:1d:1a:8a:30:2e:37:d8:83:
                    5a:c6:d0:4e:71:39:fa:7f:bb:8a:77:a5:5d:5a:14:
                    53:d5:33:62:8d:f3:4f:67:da:37:83:6d:53:e7:3c:
                    6b:80:84:a1:e1:0d:c9:27:32:bb:70:97:b0:a5:f8:
                    f7:70:4a:bd:ed:18:d1:56:68:ca:76:b3:65:b4:9e:
                    0c:aa:04:24:50:fb:44:ac:1e:47:2c:85:0b:5d:13:
                    35:8a:3b:68:77:36:ea:79:c2:47:c6:b3:8e:a8:1e:
                    1e:22:f2:00:28:13:6b:83:7d:3d:2c:a4:e3:47:b1:
                    ce:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:E9:FF:B2:27:FB:99:42:8E:88:1C:5F:A8:8E:19:B6:7D:BA:13
            X509v3 Authority Key Identifier:
                keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:22:3d:db:26:00:6d:0b:18:65:f0:13:58:ba:6e:4b:ec:0a:
         7f:4c:9c:25:1d:43:fe:39:78:2a:6b:c3:a8:90:d9:67:c8:eb:
         76:b2:e0:16:5a:f3:e3:ca:6e:78:a2:22:75:46:94:aa:95:f4:
         e8:e7:81:65:6c:e6:d9:ec:67:a6:68:6a:54:8a:78:20:82:c4:
         4a:0f:60:5a:f4:75:22:b3:f7:a9:5b:e0:45:d3:21:b8:89:6f:
         a2:d0:ed:ab:ea:b4:8f:47:ad:ec:81:2f:40:59:6a:b5:20:e7:
         30:9e:a0:32:35:3c:3b:18:e0:e0:57:65:0d:64:02:f5:85:51:
         95:f0:5b:c1:80:e4:18:02:66:e1:d4:96:18:0a:d9:b1:bb:d3:
         1d:4f:45:43:a4:3d:77:b5:62:b7:42:14:f2:25:9e:dd:54:5c:
         63:ff:ae:77:dc:ee:24:d9:6c:28:60:f7:eb:8d:97:3e:2c:c9:
         15:bd:9e:1b:f9:fa:02:b1:3b:8b:b8:68:43:fb:a5:81:f4:ee:
         13:19:52:a4:be:b5:0b:42:34:0c:6a:43:6f:db:c6:e7:03:d2:
         a3:cc:bf:c0:19:20:a3:7a:65:86:e2:e6:d2:53:bf:d9:05:01:
         41:d9:50:80:2d:34:f3:07:3a:eb:42:41:b8:4c:d0:36:4d:47:
         79:aa:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:35:25 2025 by rpki-client