Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          +YqPhlci3AzBSTJhaRCXEc5i+SQwn0ZBaKyv1UpO/ck=
Subject key identifier:   45:C1:CC:ED:A8:17:99:67:D7:C9:92:09:A1:7F:E1:BC:D8:63:8E:5A
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       7C83C7ECCE4F40D183B745CEE06D67277CACBAAF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          C0
Signing time:             Thu 19 Jun 2025 07:44:24 +0000
Manifest this update:     Thu 19 Jun 2025 07:39:24 +0000
Manifest next update:     Fri 20 Jun 2025 10:33:24 +0000
Files and hashes:         1: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: CYet3kKlZMq0bVz27G5Q21l43aX4pgm4MbAST0VmGkg=)
                          2: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: kQm7zs6mdOihvolkfgieQbJTT+PeKbGxuWISLjEwXXI=)
                          3: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: CveRwIcrqNwQKM9zizyilPdp+fXc4SVnOCQsPgpHD6o=)
                          4: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: MAXqeMftrDx2qfIrNZeHi1Fg5BRXYViJaP7l5pPBgyg=)
                          5: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: HJFC7iXGTFPZDU8AX26DfYJHqA8ZIk/nP70vX6+jQo4=)
                          6: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: 0NGsiRjwRCwvztO0HQSwZ5G2u2NyRn8qasG89BQU4fw=)
                          7: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: dGUuPMBAaOXlYlzrmpRc8TAZ4SZ3d8aZsmWcWxA6jcY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 10:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:c7:ec:ce:4f:40:d1:83:b7:45:ce:e0:6d:67:27:7c:ac:ba:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Jun 19 07:39:24 2025 GMT
            Not After : Jun 20 10:33:24 2025 GMT
        Subject: CN=45C1CCEDA8179967D7C99209A17FE1BCD8638E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:77:60:03:9e:54:e5:82:fd:05:66:33:33:
                    ae:d2:5b:d6:54:7e:4a:c1:6b:9f:00:75:bf:89:9a:
                    a2:49:4b:1c:5a:ae:62:ec:3c:82:c9:c3:3c:95:2e:
                    d4:88:7e:de:f0:56:c5:3a:40:2e:33:e2:22:07:6b:
                    43:be:68:4a:47:13:af:9c:f1:06:0a:d2:84:ba:1d:
                    b1:1b:d1:1b:c8:25:4b:9c:ab:24:d2:56:e6:09:13:
                    a4:9e:6b:a1:76:66:15:aa:40:5f:13:0c:48:25:43:
                    8f:fb:3d:8e:b5:64:8b:7a:3b:cb:42:aa:dc:da:90:
                    6b:19:29:c8:3f:fe:50:f3:fe:ba:9d:a5:43:24:18:
                    4c:56:65:41:59:88:77:71:ff:f8:41:1b:9f:2a:6b:
                    29:4a:15:20:a4:15:cb:5c:d4:79:fd:62:e2:1e:47:
                    16:bd:41:52:54:17:68:53:89:49:f8:01:2e:f3:ad:
                    99:dd:69:c0:74:c2:ae:99:a7:97:2d:73:19:2f:b6:
                    e2:e3:75:99:ec:ef:39:b2:50:d4:ea:d6:5b:ac:82:
                    db:92:bb:25:b9:b9:48:3b:45:f4:a6:63:b3:95:4f:
                    72:9c:f1:73:cc:de:1d:a6:b6:ac:b3:71:92:97:af:
                    a1:93:63:11:ee:3d:89:c4:de:e9:5d:57:db:ae:7f:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C1:CC:ED:A8:17:99:67:D7:C9:92:09:A1:7F:E1:BC:D8:63:8E:5A
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:04:82:a2:ee:4b:59:c0:e7:cc:41:1f:f2:30:15:77:6f:
         95:39:b7:bc:48:74:8b:17:5e:8f:23:19:7e:79:95:a6:06:e3:
         f6:58:95:b8:af:6d:4d:de:89:da:87:60:ed:0f:58:31:ee:dd:
         16:db:74:70:90:1f:c8:e8:0b:ca:72:25:ba:81:fa:d8:8a:d7:
         90:fe:0e:d8:d5:8a:f4:3f:a8:e3:8c:ff:03:e1:e8:87:44:81:
         c0:cb:1a:fd:6c:82:ce:46:02:5c:a8:a1:fa:78:3e:e7:a2:57:
         2b:fa:74:5b:07:ce:50:01:c9:fe:d6:aa:5b:23:7e:46:d7:97:
         08:92:63:49:ff:4e:5e:94:5c:c6:3d:4d:e7:84:46:07:86:62:
         72:1e:34:dc:c1:aa:7e:78:e2:87:0c:0e:88:58:0e:29:c1:d8:
         8a:cb:5a:85:22:16:e1:c4:d3:fe:e0:14:eb:a8:4b:48:44:c0:
         2c:ed:f6:bf:1a:26:8e:a3:1f:71:c9:35:c6:30:7b:9f:6a:b4:
         c4:d8:8e:47:6f:b7:2e:ec:5c:25:74:be:98:b2:4f:f7:42:bf:
         2e:4b:33:11:03:7d:89:03:1c:4c:5a:e5:91:10:e8:79:b5:27:
         c1:74:70:dc:0e:80:1b:73:ee:ee:e7:e6:17:37:17:51:2f:80:
         95:15:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:27:39 2025 by rpki-client