Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
File:                     1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft (raw, json)
Hash identifier:          w9o3lAZai7YKdF2/c8Aao4sK0/FWW/ToBF24ymULYMg=
Subject key identifier:   05:B6:03:2B:13:FE:2B:5E:34:2D:A5:B1:DC:ED:A3:FD:F4:2D:A6:3F
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       257E1BDD67FD4AC670E547D2263E5430D79FCBF1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
Manifest number:          8E
Signing time:             Fri 02 May 2025 13:40:23 +0000
Manifest this update:     Fri 02 May 2025 13:35:23 +0000
Manifest next update:     Sat 03 May 2025 14:37:23 +0000
Files and hashes:         1: 323830343a333831633a3a2f33322d3332203d3e20323636343537.roa (hash: XOiN5TkkeJGZQdKLDundGd6354GQZjNylfmDQFwpezo=)
                          2: 323830343a333831633a3a2f33362d3336203d3e20323636343537.roa (hash: W73/WetyRo2sZQez7k02MIb9L09vnxOC/QUMREvU5vc=)
                          3: 1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl (hash: M4AfRlW2T1N5VJDiZVtiur1SXDKvZhnVliC1W6HsDzU=)
                          4: 3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa (hash: wHzxy6w4KfogH4FMVqlWQ2zq8fpLj5hw82A65IP3eug=)
                          5: 3137302e38322e3230302e302f32322d3232203d3e20323636343537.roa (hash: p0+6tUggShg9eqcHpTQgUbvq/Ev37jqfBULQx1QgQjU=)
                          6: 323830343a333831633a3a2f34302d3430203d3e20323636343537.roa (hash: b3ejC392xyfbSJfQME99IiZ/zMqpkptQGSUSd2Csu0g=)
                          7: 3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa (hash: UALx+SlLdLiJL02bzgV/he33Yi01ImgRgCnvIhh97Ek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 14:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:1b:dd:67:fd:4a:c6:70:e5:47:d2:26:3e:54:30:d7:9f:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: May  2 13:35:23 2025 GMT
            Not After : May  3 14:37:23 2025 GMT
        Subject: CN=05B6032B13FE2B5E342DA5B1DCEDA3FDF42DA63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:f9:1a:4b:57:b6:26:cc:8f:ae:35:b8:77:
                    3a:4e:fe:54:68:8c:a5:f2:c2:6b:0c:82:e8:f7:23:
                    2a:e5:a8:a7:77:bd:bd:37:a4:8a:10:8a:ab:29:78:
                    3f:ff:55:7f:d1:3f:92:bc:af:44:c9:d3:6d:bf:b3:
                    13:15:30:c2:f3:31:6c:43:5a:f1:4d:c4:48:39:f0:
                    40:fa:2c:83:88:21:07:cf:03:b9:15:62:a0:82:b4:
                    64:0a:7d:4e:94:15:1d:1b:bd:fb:35:91:18:16:50:
                    00:e0:ee:39:65:d6:cb:ef:94:4e:6a:64:bb:d9:cd:
                    65:e5:db:22:75:62:d2:2b:d0:f1:d2:91:51:8f:ea:
                    89:95:92:a6:0a:0b:5f:95:72:d6:69:c7:5f:68:64:
                    9c:39:7b:81:3f:00:40:cc:46:3c:ad:ab:51:96:70:
                    6d:ba:bd:21:48:47:36:7e:b3:17:54:aa:e6:79:6c:
                    ee:7d:9b:99:4d:ed:de:38:5f:f9:a0:ee:96:29:ca:
                    ed:82:86:8f:02:6c:18:d3:0b:a4:4e:61:1f:e9:6e:
                    be:d4:01:2c:b2:7e:55:2e:0b:ff:91:e4:62:5c:37:
                    2b:20:a9:3a:74:b2:9f:85:69:be:8e:d9:f3:14:8d:
                    c6:7f:5b:1d:3d:39:f7:41:99:09:d8:1a:3f:6e:c1:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:03:2B:13:FE:2B:5E:34:2D:A5:B1:DC:ED:A3:FD:F4:2D:A6:3F
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:29:1d:26:17:da:cf:a5:1e:a0:28:bb:cc:05:14:69:da:69:
         9a:18:49:22:da:7b:db:54:fb:c3:22:6d:92:9d:b5:34:5e:bd:
         cc:ee:ee:16:af:af:c0:eb:8f:44:a3:fb:e9:74:0d:d0:29:d4:
         b8:53:4f:ac:42:3e:d8:d3:12:43:92:41:83:35:fe:ee:36:07:
         ae:9b:89:5f:25:cf:1e:4e:f8:8f:78:89:5b:47:65:4b:8b:dc:
         bf:b0:ff:8e:aa:9b:5b:96:41:03:0f:b6:0e:22:8d:c0:80:14:
         e9:e7:7b:c4:3c:69:df:60:8b:c8:da:4d:1b:22:bb:64:e3:a0:
         a6:8c:b9:cc:42:8c:97:0b:a6:ce:ef:dc:a8:02:a8:13:aa:ff:
         c0:17:c7:2c:d7:e3:33:bf:06:15:26:ca:8d:69:b0:59:b8:eb:
         af:e2:9d:08:ad:24:b1:51:d6:77:1b:6a:99:46:34:99:5c:aa:
         4e:7a:85:d5:66:69:d7:fe:70:8d:61:ca:7e:25:96:a2:5e:56:
         44:af:17:8b:e8:9c:eb:99:c2:a2:30:ed:6f:00:a9:7f:79:58:
         61:6f:a3:7b:1a:dc:3a:3f:97:82:e4:d7:c5:1d:1b:2b:38:e9:
         bf:2a:78:88:c0:cc:46:1e:20:42:b0:a0:c1:e8:e3:2e:8a:16:
         08:03:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:51:42 2025 by rpki-client