Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
File:                     7B02316541C9F170484214259E6C028DF7BB0F4A.mft (raw, json)
Hash identifier:          LBiEc5hjiQ1/OLqDIifxI/3NvwbfPI/QsEPGSiYa2DA=
Subject key identifier:   0A:4F:09:D1:8C:70:C9:78:92:D5:B3:03:26:10:B5:15:72:D4:E3:EA
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Certificate issuer:       /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial:       1D4AB8DAC2D3DED3273731F9F828B71F44827244
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
Manifest number:          0211
Signing time:             Sun 04 May 2025 08:30:01 +0000
Manifest this update:     Sun 04 May 2025 08:25:01 +0000
Manifest next update:     Mon 05 May 2025 10:25:01 +0000
Files and hashes:         1: 34352e3136372e3134302e302f32342d3234203d3e20323638303131.roa (hash: bvofTO4p/RXr3veTfLpNX5ZbyOpv69RdW4gAhFFiCrA=)
                          2: 323830343a353639383a3a2f33322d3332203d3e20323638303131.roa (hash: 7/oZ5YDAg2s8eP+0iq0G7aqHMR4Ybw45HbH0QypRAww=)
                          3: 7B02316541C9F170484214259E6C028DF7BB0F4A.crl (hash: h4LmYBrZtz9QFIxKiw/YTfWng4kHcN6YZZDQRU/eVRE=)
                          4: 323830343a353639383a3930303a3a2f34302d3430203d3e20323638303131.roa (hash: XR+Ho6meu5j0cJ85dzVwbhhheTluNi4OrfmJIHCO/WY=)
                          5: 34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa (hash: SR2bGmpRVtvJcmsmtIDu+OAqfqbAeXT8aGUyx04el0M=)
                          6: 34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa (hash: 8Q/yxBIT8oxmIspDJmLyMyv1UCLeO+bwPCsbbRl7GMg=)
                          7: 34352e3136372e3134332e302f32342d3234203d3e20323638303131.roa (hash: iswk5t9dB85tkwTbZ5hvO+Sccs/AVW6i3PYKjbPLT00=)
                          8: 34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa (hash: +fTYsStmK9Ww5QCPTyC8E5U4PMfmh89ORxjd9BQnR5Q=)
                          9: 34352e3136372e3134302e302f32322d3232203d3e20323638303131.roa (hash: 9iDXG0JIWbNMqIwgo2K/TChQA6oKdrR5Ky63Vbq/ra0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
                          rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 10:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4a:b8:da:c2:d3:de:d3:27:37:31:f9:f8:28:b7:1f:44:82:72:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
        Validity
            Not Before: May  4 08:25:01 2025 GMT
            Not After : May  5 10:25:01 2025 GMT
        Subject: CN=0A4F09D18C70C97892D5B3032610B51572D4E3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:0e:c4:bb:2e:f5:d9:1c:ec:74:6e:f3:50:
                    36:40:a8:07:f7:31:b8:8c:a0:18:49:f3:22:2e:6d:
                    6f:dc:46:9c:8e:09:ba:39:ed:4f:8e:7e:ed:6b:dc:
                    25:ec:e8:d8:29:a5:f6:83:6e:43:43:56:87:99:0d:
                    61:b2:c4:26:f3:23:50:b6:43:4d:c8:a7:a2:53:bc:
                    4b:c7:c3:f3:de:3e:b9:31:3f:9a:09:ef:87:b4:5f:
                    65:dd:2a:bd:15:e2:14:8e:89:66:44:57:ad:cd:15:
                    e5:29:92:dc:08:1b:d0:c7:60:48:dd:de:47:79:0a:
                    9c:3b:e3:d8:b0:30:ec:3d:fa:25:e4:0d:a3:7b:15:
                    d8:4d:47:fd:2b:32:87:b9:2c:a9:d7:fe:25:78:26:
                    ad:55:57:f2:d2:c7:13:31:c6:45:ae:de:a4:ac:da:
                    2f:57:c7:93:a9:3d:26:81:08:0e:0a:b2:d2:97:35:
                    6b:34:a3:f4:39:c3:79:5b:8a:37:5d:c7:65:6c:99:
                    82:06:0f:67:e5:71:69:79:c1:5b:de:05:dc:48:3b:
                    3e:b7:b8:7c:1a:91:2f:74:a3:d6:ea:e5:99:28:3b:
                    87:c2:42:14:88:d4:8a:d0:22:91:05:5c:59:0a:88:
                    ed:e5:41:b8:af:f4:be:24:31:15:43:7d:bd:ba:5e:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:09:D1:8C:70:C9:78:92:D5:B3:03:26:10:B5:15:72:D4:E3:EA
            X509v3 Authority Key Identifier:
                keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:16:21:47:e4:fb:71:ec:d0:8a:2f:7e:33:11:c1:27:7f:
         78:d6:6c:00:b8:52:d8:6d:19:15:99:d2:ed:c6:40:d8:30:ac:
         02:fa:1f:35:75:2f:b2:e6:fd:65:34:c0:43:08:dc:51:7a:c6:
         7b:33:90:80:ba:1a:3c:3b:c0:8e:2e:14:14:a9:4c:b8:f4:c0:
         ef:fe:f3:46:b4:66:26:dc:c8:e7:3b:08:c2:9c:cc:09:80:ed:
         f7:be:06:12:09:a4:5f:f3:1e:ce:f2:ea:2c:ee:0e:f8:3b:f6:
         c6:04:03:43:e9:c5:f1:0e:f6:99:93:7a:fe:4d:c2:bb:18:e7:
         fa:7f:89:28:92:e7:b5:1c:00:47:0e:f0:10:3f:6a:56:6a:43:
         ce:77:0b:e4:28:86:47:d3:91:a5:13:8c:83:e3:30:9c:93:91:
         70:c0:a2:d7:47:c4:bf:87:b6:ad:02:a9:83:20:da:6d:63:b6:
         a7:0d:48:c6:c8:f7:4a:41:0e:b8:d0:d9:2a:c5:75:b5:3d:40:
         fb:d6:66:15:f6:3f:a1:f4:d4:f6:43:a9:25:89:67:21:75:10:
         ac:63:2b:44:18:fa:02:2e:3c:89:47:8e:a5:6d:26:c3:c4:69:
         24:4b:55:fc:b8:b2:e9:cd:8f:0b:b9:0f:7f:2b:08:f1:ae:94:
         ca:3b:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:25:27 2025 by rpki-client