Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft
File:                     1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft (raw, json)
Hash identifier:          pWJjU+Y4PLxqXzuTNOXtRtd7iBdX02lLvga8vz60Aw8=
Subject key identifier:   FF:7B:9C:2E:14:2C:8D:A6:71:A8:C7:41:DC:AF:2D:1C:BE:31:6E:EB
Authority key identifier: 1B:AB:08:E1:3B:91:F3:47:E4:AF:C0:D4:E0:DA:28:75:4B:FA:E4:FB
Certificate issuer:       /CN=1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB
Certificate serial:       37B4BF572900783FDB146E10E89B67E441ECFBD8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft
Manifest number:          B2
Signing time:             Sat 10 May 2025 08:06:12 +0000
Manifest this update:     Sat 10 May 2025 08:01:12 +0000
Manifest next update:     Sun 11 May 2025 08:38:12 +0000
Files and hashes:         1: 1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.crl (hash: hiPrTAsPDZRoxOuvdmVLceqc/HhvacDb4Z9cKgA1iN4=)
                          2: 323830343a376562383a3a2f33322d313238203d3e20323731363433.roa (hash: 7Jq3UGJkgMep+No6gWY9KriYKBMRwSlBFLtQat9fYDo=)
                          3: 3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa (hash: Stcwo5DEidu0DgvdDeH5pw7giQNIdS2u8VDEVZ9vkUg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.crl
                          rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:bf:57:29:00:78:3f:db:14:6e:10:e8:9b:67:e4:41:ec:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB
        Validity
            Not Before: May 10 08:01:12 2025 GMT
            Not After : May 11 08:38:12 2025 GMT
        Subject: CN=FF7B9C2E142C8DA671A8C741DCAF2D1CBE316EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:40:62:a1:0e:93:88:7c:1c:02:bc:ae:8d:
                    fc:4e:f7:2b:da:58:2c:ec:16:e5:c1:bf:f7:93:8c:
                    10:30:60:97:ed:f8:e2:34:27:9c:9b:91:f9:c6:79:
                    09:e7:a7:0e:08:5f:43:36:07:b9:8e:e2:54:a4:74:
                    b2:cd:b3:03:5c:83:d5:eb:f1:2e:d0:56:c5:d3:54:
                    38:d9:85:4f:0b:5a:30:8d:cc:73:1d:5b:70:8e:51:
                    0f:ac:5e:63:51:b8:a7:a7:71:b9:5f:4b:77:74:47:
                    f8:d6:ce:3a:aa:0b:85:42:48:80:cd:5d:1b:40:eb:
                    49:31:55:81:4f:92:58:ee:87:84:ea:98:9b:70:41:
                    97:83:c5:58:50:93:c4:d5:e9:9c:7d:a2:cc:b2:92:
                    fd:77:d3:3f:53:bc:6f:2f:2a:c9:1d:6b:97:d7:d2:
                    58:b5:2c:27:d1:ce:e2:ed:63:50:2a:3d:f7:54:86:
                    3c:c2:60:b9:4e:87:23:6d:49:a7:99:5a:cc:1b:52:
                    3a:32:c2:11:42:82:f5:7b:b4:fe:78:41:22:0b:7d:
                    91:95:0c:41:2e:11:d7:9d:f8:e5:5d:2f:2f:8b:72:
                    09:24:b3:79:1d:b6:79:8e:1d:58:79:d6:cd:7f:5f:
                    42:be:79:8b:24:fe:3d:61:31:14:72:ad:78:0f:2e:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:9C:2E:14:2C:8D:A6:71:A8:C7:41:DC:AF:2D:1C:BE:31:6E:EB
            X509v3 Authority Key Identifier:
                keyid:1B:AB:08:E1:3B:91:F3:47:E4:AF:C0:D4:E0:DA:28:75:4B:FA:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/1BAB08E13B91F347E4AFC0D4E0DA28754BFAE4FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:32:70:d0:e9:b3:85:89:69:dd:61:7a:1b:f2:ef:dd:29:4b:
         ea:39:a5:e0:14:2f:28:a4:63:86:26:55:36:e0:5c:ac:95:36:
         cc:08:72:88:5c:d5:0e:50:8a:6b:3d:c8:1c:1b:e4:ca:f8:8d:
         cc:e9:d9:fb:71:aa:11:29:5c:3e:8a:91:ee:cd:9b:da:b1:05:
         bc:3f:e1:c8:0a:d9:3f:c4:fe:37:55:81:43:de:a6:8a:08:b5:
         90:53:6a:15:45:71:f4:84:a8:40:7f:85:18:78:a5:23:de:13:
         c3:c9:44:a8:01:99:77:97:30:85:a9:b8:44:57:17:70:6b:cf:
         3b:4b:73:a2:b1:e2:c0:2d:2d:65:18:b3:6a:66:cc:0a:6a:3b:
         3b:6e:a4:1d:4c:e3:d2:f5:d0:76:f7:92:09:0d:84:21:c4:41:
         82:5d:41:6d:de:31:a5:b6:f5:a6:9a:31:bd:e7:b0:e2:39:d5:
         e9:93:50:24:da:cf:78:4a:0a:54:23:eb:74:85:9a:c5:4c:7b:
         e9:d0:c1:c8:fb:39:fb:b3:3e:b9:43:8b:70:d1:14:b9:70:a5:
         92:1e:f9:d4:aa:2b:1e:77:70:69:0f:61:73:45:49:83:e5:94:
         aa:91:4f:0b:b8:e5:db:db:de:9b:b7:54:dd:66:40:c0:ad:f3:
         ef:95:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:01:06 2025 by rpki-client