Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          Z/g/qesV6MdKf5DxRhSVlHamGsUaMzD0Zg62VoAR3o8=
Subject key identifier:   50:1F:D9:BF:63:5A:3B:5D:D5:D4:F7:99:02:5E:D4:D3:53:75:36:CE
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       0C58313BEFA95E0ABF4E5DF6ADD5A2729D37D834
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          17
Signing time:             Mon 16 Jun 2025 14:57:20 +0000
Manifest this update:     Mon 16 Jun 2025 14:52:20 +0000
Manifest next update:     Tue 17 Jun 2025 17:15:20 +0000
Files and hashes:         1: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
                          2: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
                          3: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          4: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          5: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
                          6: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: w7LAcx6dCIPQDFbWi+QMZ6HbXzDPrwuvY7TGKNVE+Kw=)
                          7: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 17:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:58:31:3b:ef:a9:5e:0a:bf:4e:5d:f6:ad:d5:a2:72:9d:37:d8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Jun 16 14:52:20 2025 GMT
            Not After : Jun 17 17:15:20 2025 GMT
        Subject: CN=501FD9BF635A3B5DD5D4F799025ED4D3537536CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:2a:62:93:47:02:6b:9c:71:b0:52:c6:46:
                    02:1f:94:ae:c1:c0:4f:fc:8e:10:91:10:00:a2:99:
                    12:e4:29:41:cf:67:2e:3d:d4:d7:5d:ba:02:7a:94:
                    ff:b6:83:17:ed:f0:90:c1:2a:4a:11:7f:dc:1b:b2:
                    33:a7:05:b2:a7:be:41:9a:0d:0e:c6:1e:7e:c9:44:
                    9d:3e:5a:cb:48:82:3a:7f:2c:5a:d0:6b:24:4a:d6:
                    3c:5e:50:8b:ac:93:fd:2d:32:44:08:f8:ff:46:72:
                    cb:8e:d4:eb:f0:e4:16:c3:8e:dc:4b:7d:1c:d5:39:
                    79:e8:6b:5e:ea:51:92:79:30:e3:06:23:4b:6f:8b:
                    31:13:cd:db:e0:73:27:56:3a:ff:13:4a:6c:2f:7d:
                    b2:ea:28:9f:d0:11:16:4c:4f:7d:db:0e:20:02:64:
                    e1:ce:fa:b3:7f:eb:af:ae:4c:3b:de:69:79:f6:5e:
                    f3:65:34:5a:23:79:b8:31:2a:2f:26:26:c0:52:08:
                    25:a8:b1:31:ef:83:b5:93:e2:74:c1:f9:ce:54:92:
                    be:5d:1d:a0:58:ec:0c:06:43:ed:7d:73:b5:c6:17:
                    f4:5c:67:83:c0:3b:23:45:ae:44:e2:f8:23:15:9e:
                    bf:e7:53:e4:e2:e8:c5:40:9a:f4:42:88:45:50:94:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1F:D9:BF:63:5A:3B:5D:D5:D4:F7:99:02:5E:D4:D3:53:75:36:CE
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:b0:95:72:cb:b2:dc:db:3f:92:d3:62:b0:3b:55:84:8d:
         31:67:c4:b5:14:5e:08:73:99:12:9f:97:6a:64:81:20:73:e2:
         2d:36:c1:75:9d:f6:9b:4b:0a:82:1e:2e:64:53:56:d4:7c:e9:
         cc:37:8e:f8:70:e1:cb:d6:2b:4c:97:da:99:59:a2:7d:8d:13:
         c1:b6:37:bf:51:18:4d:80:96:b6:b0:47:1c:0a:55:ba:e5:2e:
         ec:49:12:78:b5:2d:66:b7:b3:9c:0e:95:28:1e:81:7e:b3:21:
         81:ab:23:aa:09:b6:96:db:2c:b3:9a:30:a5:0d:3b:2b:f6:c0:
         cd:bd:1a:82:10:46:27:d7:65:ac:9e:2a:dd:70:f5:98:be:27:
         aa:e4:46:2c:b6:51:ce:7f:13:e1:bd:3b:c0:de:59:5a:a2:42:
         ad:7e:83:26:91:db:99:ac:e5:9d:d2:85:10:c5:e5:d6:7b:5a:
         63:96:55:8f:ea:f0:ef:dc:80:36:83:26:ad:08:d0:cc:93:ee:
         ff:1e:90:a6:bc:7f:e1:ff:7b:7b:3a:ab:78:f7:46:e4:5c:26:
         47:b8:af:a9:43:11:fd:06:19:09:0d:d5:47:d5:78:f3:f7:ab:
         77:41:3e:00:a3:7c:95:fe:02:c2:c3:a1:a4:9d:09:ff:1a:46:
         96:93:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:42:10 2025 by rpki-client