Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
File:                     3496860CED46E82860498DD946601D168147920B.mft (raw, json)
Hash identifier:          ycdYmnM8cegDc2+kvH4w7vTIrc/x70LLcsFC368m9cA=
Subject key identifier:   28:59:06:85:77:DC:97:A2:AE:F7:08:0E:85:7B:7C:30:1D:36:C2:37
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       720E85CD95285D9F7834D7125213AA4CFAD2EBD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
Manifest number:          018A
Signing time:             Thu 01 May 2025 04:30:02 +0000
Manifest this update:     Thu 01 May 2025 04:25:02 +0000
Manifest next update:     Fri 02 May 2025 07:39:02 +0000
Files and hashes:         1: 3230302e3232392e3230382e302f32332d3233203d3e203631373738.roa (hash: MxZnaA9MLfY1GeEFimXmouwPnA2J6xpri6SRYzPKSEA=)
                          2: 323830343a313933343a3a2f33332d3333203d3e203631373738.roa (hash: BYrafSDWw7cW4dCICVil6yUohrIzkymhPTKzvmZly2c=)
                          3: 323830343a313933343a383030303a3a2f33342d3334203d3e203631373738.roa (hash: 3TDf2VP+pvI4yUPgQ3iIBXaKygVm+fN/n4ISckNB9WA=)
                          4: 3496860CED46E82860498DD946601D168147920B.crl (hash: MvP2n5IegqqAb/VfYgT0Zrev7+hPJnNenwQ5dlPoZQE=)
                          5: 3230302e3232392e3230382e302f32342d3234203d3e203631373738.roa (hash: RDNHobNehEvrBXUyygntt6BTO81TaxHROlGoWC5/Ge8=)
                          6: 3230302e3232392e3230382e302f32322d3232203d3e203631373738.roa (hash: F774Iqqqp7kKY1OCOIKYQ5y00+r/sWlfNOcIWKYI/GM=)
                          7: 323830343a313933343a3a2f33342d3334203d3e203631373738.roa (hash: QxuaV67XC2reDZTP8BfC37BPFyrFHjrqCGmBs4b/0Ac=)
                          8: 323830343a313933343a343030303a3a2f33342d3334203d3e203631373738.roa (hash: c9vtNOAer9TYXNP3Xax6JDFFggy5l60fnLWorOERCDw=)
                          9: 3230302e3232392e3230392e302f32342d3234203d3e203631373738.roa (hash: 3VaNl3cB+psCwl+Gsk22yVys40iepQjOI4lXQT30UDQ=)
                          10: 323830343a313933343a383030303a3a2f33332d3333203d3e203631373738.roa (hash: aPJMF+3Gouw73Om2s6/r7owD+0SPLohgPFzSXT/IzWU=)
                          11: 3230302e3232392e3231302e302f32342d3234203d3e203631373738.roa (hash: kA804tfEnBD035EoGN/4G73s2LBA4EUxTQmNS+wL540=)
                          12: 3230302e3232392e3231302e302f32332d3233203d3e203631373738.roa (hash: q3SGmdR0L0IGrGtnMmxlbCuZbcKDDyAoWBrVhqLtnJE=)
                          13: 323830343a313933343a633030303a3a2f33342d3334203d3e203631373738.roa (hash: eYUSjxdjtQ1LBcWwQ+fYkCWGT08a39dW/kHEr267a0E=)
                          14: 3230302e3232392e3231312e302f32342d3234203d3e203631373738.roa (hash: 3qtq7icdqa/958L/CMxJ0GEuTz6bRvM2HTuWYOXYfks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0e:85:cd:95:28:5d:9f:78:34:d7:12:52:13:aa:4c:fa:d2:eb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: May  1 04:25:02 2025 GMT
            Not After : May  2 07:39:02 2025 GMT
        Subject: CN=2859068577DC97A2AEF7080E857B7C301D36C237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:36:ae:70:c6:0c:59:3b:e9:56:67:3c:00:
                    02:0d:f3:36:75:f1:59:5f:dd:d6:04:85:0f:b9:6d:
                    e4:c3:76:22:7a:7b:c0:30:ee:46:5d:1e:83:a4:92:
                    00:e0:60:d5:1b:ee:30:73:e4:23:4b:f2:7e:8f:cb:
                    b0:6c:4b:3f:8e:e1:5e:c2:0b:a9:ae:bb:c8:6d:b7:
                    13:b8:b5:02:c7:0a:e5:19:79:ad:6b:61:70:f1:89:
                    d4:ac:30:0e:f7:5a:0d:f8:04:0c:2c:ed:4f:e8:9d:
                    22:25:0b:17:18:06:7b:0e:b0:62:0f:a7:71:79:e2:
                    77:45:0c:d6:d2:d0:31:e3:06:94:80:03:2d:9a:66:
                    5b:7d:1f:16:2e:8b:9c:49:90:ad:21:81:cb:00:35:
                    f3:ab:6d:2c:3c:01:39:ce:d2:01:73:41:0e:50:be:
                    ac:58:42:c6:9f:f5:7f:44:9a:9c:8b:6c:dc:68:47:
                    69:33:1f:5f:32:41:82:3c:04:86:00:e1:49:19:e0:
                    a5:9e:18:4c:72:18:87:d8:92:4a:de:89:cc:a9:86:
                    ab:6d:50:8a:d6:fc:b6:01:30:e4:24:2c:02:73:f0:
                    c1:c9:69:9f:a2:ef:a3:7c:7e:da:1d:f0:7b:11:e4:
                    bd:bf:de:de:fc:c3:cf:27:9a:04:37:8b:bc:0d:ae:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:06:85:77:DC:97:A2:AE:F7:08:0E:85:7B:7C:30:1D:36:C2:37
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:70:68:53:33:8c:84:d0:a0:83:c6:55:da:fd:64:26:46:
         f6:4a:78:41:cc:2f:c5:68:6d:b1:61:b7:f6:73:bd:a6:a5:29:
         a3:4f:14:c2:d5:85:91:25:cb:a8:41:02:90:b9:c5:40:b7:64:
         83:29:8b:a4:62:9e:bf:ce:68:90:fc:9c:ad:19:29:55:8e:86:
         67:d6:73:88:c4:35:8e:f5:5a:ca:8e:c3:cb:ec:6c:3f:73:59:
         39:b8:6e:d4:1e:a4:f4:a8:bf:fb:fc:55:26:45:e1:1c:d3:07:
         e9:b9:d0:db:fd:a7:72:0b:00:c0:78:ce:9f:fe:f6:cd:93:d3:
         f7:e4:fe:71:b2:4d:45:75:7e:f6:1c:8c:60:fb:04:05:41:ca:
         5e:bb:77:cb:d0:75:83:8b:ae:aa:d9:88:6c:56:3a:9f:ee:e4:
         bb:f3:dc:3a:d2:48:9e:a9:11:6a:fa:f5:e7:9c:27:f6:fa:f7:
         a3:54:14:bc:21:2d:55:f7:bc:0a:55:0f:59:1c:72:47:4b:95:
         9b:16:e7:b1:13:ac:8b:2e:9d:20:1f:5a:3a:d5:06:d5:be:77:
         f7:d2:ed:65:7e:df:6e:4e:f3:ad:13:a0:8d:a4:01:a2:ce:5b:
         05:09:d7:81:dc:92:b4:f9:6b:4b:98:b5:c1:c6:f6:41:54:cf:
         78:3c:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:01:26 2025 by rpki-client