Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
File:                     B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json)
Hash identifier:          2jGo72Y2ONOZ/XYkW5QBTm50NQQprHEVHHMEFVQI8wE=
Subject key identifier:   A5:BF:38:BF:1E:F9:F1:FC:9A:62:04:FF:AE:9B:CA:6B:7A:43:42:BC
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       43234594D02B52D9FFED6C744FA4D8065CEC23CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
Manifest number:          E1
Signing time:             Wed 30 Apr 2025 19:16:34 +0000
Manifest this update:     Wed 30 Apr 2025 19:11:34 +0000
Manifest next update:     Thu 01 May 2025 22:47:34 +0000
Files and hashes:         1: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: Lu1OSt4cOEe/F2A5k8dYNu12ENmSxNLv5TmK+E60+4o=)
                          2: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=)
                          3: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=)
                          4: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=)
                          5: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=)
                          6: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=)
                          7: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=)
                          8: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=)
                          9: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 22:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:23:45:94:d0:2b:52:d9:ff:ed:6c:74:4f:a4:d8:06:5c:ec:23:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Apr 30 19:11:34 2025 GMT
            Not After : May  1 22:47:34 2025 GMT
        Subject: CN=A5BF38BF1EF9F1FC9A6204FFAE9BCA6B7A4342BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:46:76:7a:03:29:cd:e4:36:ef:29:64:fb:
                    73:78:e5:fb:4f:eb:ee:09:24:aa:d1:23:3f:57:64:
                    8e:81:94:d0:37:a4:00:9f:bc:d7:d9:34:e6:56:3e:
                    d4:d9:a0:f1:c9:0c:fe:8c:2f:cd:14:b2:12:5d:08:
                    a9:a6:62:27:99:5d:d9:fe:26:de:a8:a9:5f:7f:33:
                    bd:65:9b:24:4a:90:cd:c2:2f:93:4a:0f:bc:48:9c:
                    4e:7b:c1:7d:ac:95:65:bf:c9:0a:a7:5f:50:04:32:
                    3f:fc:c0:67:b7:5f:28:e1:a9:db:44:27:e9:fa:d5:
                    95:e5:ad:e8:87:bd:02:30:1c:18:85:11:c0:0b:76:
                    01:a0:4f:ae:12:54:77:d7:fa:d4:74:20:1c:b7:c8:
                    89:20:a8:51:a3:8d:ae:9f:3f:68:6d:88:dd:ba:19:
                    f0:f2:8b:45:46:22:ce:f7:21:31:67:f3:4d:f3:5e:
                    5d:0c:cf:21:79:e0:24:22:4f:dc:a9:ea:f1:7c:f2:
                    3c:b7:97:9b:50:d7:33:14:89:34:ac:1b:dd:51:51:
                    aa:6b:97:c6:66:da:97:e9:c3:0c:41:84:71:3d:06:
                    26:f7:1f:dc:13:d6:ab:e8:9d:56:84:e4:89:85:46:
                    f8:98:1b:80:60:3c:eb:03:c9:e9:2a:7a:43:b6:2d:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:38:BF:1E:F9:F1:FC:9A:62:04:FF:AE:9B:CA:6B:7A:43:42:BC
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:44:a9:5e:2a:40:b0:b9:69:fa:08:ab:c4:45:e6:4a:88:
         57:d2:60:18:67:5b:52:16:30:47:00:ee:45:46:ae:a7:46:5d:
         24:23:28:82:db:59:90:ad:9f:64:7a:f2:2c:40:f8:d2:4c:55:
         08:28:5a:cf:67:1d:55:8e:46:b4:8e:8b:de:33:eb:f8:54:e2:
         82:92:a1:50:36:b9:6c:da:b1:a4:ad:66:ec:81:ff:dc:9b:22:
         52:e5:0c:a4:67:9c:89:bd:6d:51:a5:43:44:37:24:b9:7d:b4:
         f9:13:6c:bc:41:46:20:cd:46:ec:11:8b:89:cc:df:f9:ee:00:
         bc:ec:0b:91:91:c9:15:0d:62:d6:93:4c:97:59:9e:29:1e:02:
         0e:b9:b4:cc:2c:46:2b:e4:e2:89:9b:fc:1a:bf:13:fa:e8:76:
         40:80:31:05:96:e8:dc:e6:c5:55:fc:b7:1a:5b:82:13:bf:22:
         a2:88:1c:52:3c:33:ac:88:de:34:d4:a5:5b:54:71:55:13:58:
         ee:82:56:cc:5c:de:3f:2a:aa:76:fd:94:0b:27:42:9a:b8:e7:
         4b:d4:47:2f:99:e0:6b:a4:28:f1:2a:99:80:04:26:53:02:0c:
         28:88:27:b7:dc:4c:68:bb:87:40:9f:83:b4:8d:0f:ef:28:06:
         7b:59:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:21:27 2025 by rpki-client