Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
File:                     EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft (raw, json)
Hash identifier:          PQKtae3UOVET7hBnkCaC+d7FziTgrGzZgOzsLQmL4xI=
Subject key identifier:   39:C3:04:F1:63:3E:83:DD:1A:B5:09:75:FD:08:25:C3:D4:DE:22:DC
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       3FB589161F5F41B237E25F9041BFDD107C45A798
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
Manifest number:          0220
Signing time:             Thu 15 May 2025 11:01:07 +0000
Manifest this update:     Thu 15 May 2025 10:56:07 +0000
Manifest next update:     Fri 16 May 2025 13:58:07 +0000
Files and hashes:         1: 3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa (hash: dzViNs+c83tUjXDrDO3oKxCkU85rIOrrKry2IfWZVVo=)
                          2: 323830343a336630383a383030303a3a2f33342d3334203d3e20323636363335.roa (hash: jhffykDFQYLXXyg2bqUB2TloLKrGt9UZEcgsO9qXtcU=)
                          3: 3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa (hash: 48qGLex6rZ/+vqPr8wQrN7hP3x2g1yp6EBlAhjMA7F4=)
                          4: 3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa (hash: my89UvNahtQPQ7o0WjVwZjF73KKAyppaCecv0EsdPkQ=)
                          5: 323830343a336630383a3a2f33322d3332203d3e20323636363335.roa (hash: zXLAQzAvzTrcnF7Ja/X04EKon1IYBu3AuXQVBnfFwcU=)
                          6: 323830343a336630383a633030303a3a2f34302d3430203d3e20323636363335.roa (hash: oe3ruNUsfDd2s3+AA0koysjl80JKGwECzZS/5oRG19I=)
                          7: 323830343a336630383a343030303a3a2f33342d3334203d3e20323636363335.roa (hash: n0r7VaZyvHT9L1bsdWbGJmaDFeX6xTYXRJyoG0UNwMY=)
                          8: 3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa (hash: bwef2FO35n3OcLMDwdEQ5txgTHz2qPbbdJUNeGrQEAo=)
                          9: 3132382e3230312e3135382e302f32332d3233203d3e20323636363335.roa (hash: 1YLyACeSmzthUdQUAbktSi874yWsyJmCYi1xBLE0+D4=)
                          10: EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl (hash: HVyj7/OhStVtS0irGx6d6qx7JCte3yst2dwCdBKLxrg=)
                          11: 3132382e3230312e3135372e302f32342d3234203d3e20323636363335.roa (hash: ElUfvJcHUrbnVsCQ7i6WhS9k7zPjrNPl9z8HKMy7sCg=)
                          12: 323830343a336630383a633030303a3a2f33342d3334203d3e20323636363335.roa (hash: xQUBfEQ3axjTGN8/YNa9oZmj8GvbaHltiCOXulhhWkw=)
                          13: 3132382e3230312e3135362e302f32342d3234203d3e20323636363335.roa (hash: wES+H0c3sTj6CD8IJq7FUHuxHevXkCKUKnLJpQ0KMuY=)
                          14: 323830343a336630383a3a2f33342d3334203d3e20323636363335.roa (hash: s/hUfrftEhnRDVXiFxtNnxxSy33PvZBHzWCjVs60TTM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 13:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:89:16:1f:5f:41:b2:37:e2:5f:90:41:bf:dd:10:7c:45:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: May 15 10:56:07 2025 GMT
            Not After : May 16 13:58:07 2025 GMT
        Subject: CN=39C304F1633E83DD1AB50975FD0825C3D4DE22DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:5b:f9:76:c6:d5:8f:71:0d:1d:73:c7:e2:
                    e9:f4:e7:94:b8:27:19:2c:87:9a:cb:a8:f8:80:9d:
                    ac:84:11:ea:94:cd:78:5a:9c:ff:5a:a5:b7:e9:ee:
                    2c:a3:42:10:4d:3a:dc:dd:54:f6:0f:93:67:71:70:
                    fc:a5:79:e6:b3:24:d3:a2:26:28:55:a6:69:00:ce:
                    4e:22:2b:bf:21:93:a7:f0:74:ad:7e:6a:c7:3a:52:
                    70:16:a1:05:f1:98:44:bc:fc:71:91:10:4c:fb:0a:
                    bf:98:72:1e:c5:74:54:a4:a1:62:4b:cd:e2:e8:dd:
                    ec:9f:00:d8:c3:a6:1f:0d:87:86:df:17:b1:08:70:
                    a8:df:86:a7:09:05:a0:03:95:21:ff:8c:bf:6c:b1:
                    8b:29:a7:20:49:72:da:06:04:52:b4:fb:c2:59:65:
                    41:41:be:38:2f:ff:03:c6:ec:0e:f8:35:bb:09:db:
                    16:e8:d5:a2:74:b2:68:e1:1b:95:98:9f:71:a5:0f:
                    50:0d:65:63:91:5c:ac:89:71:6c:c9:96:03:1d:12:
                    8e:db:a1:d0:75:f6:74:c2:2a:23:49:7e:9a:e1:ad:
                    52:9d:e8:e1:42:a3:6d:cd:69:23:db:32:3d:dd:9f:
                    3d:e1:f7:12:1d:be:6d:20:22:45:fc:01:64:74:ea:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:04:F1:63:3E:83:DD:1A:B5:09:75:FD:08:25:C3:D4:DE:22:DC
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:10:ad:f3:18:29:96:eb:6d:83:e2:bc:b9:b5:03:48:21:
         5f:9a:b3:93:a9:77:35:23:6d:48:70:a4:92:8f:2d:c2:d1:68:
         d4:4b:62:5e:c1:cd:b6:73:6d:fd:e7:a1:a5:cb:fb:ad:be:bb:
         f0:0b:0d:0b:1c:52:31:d9:91:2e:65:e1:39:17:3a:d5:80:c9:
         33:9b:c6:79:9e:12:91:28:eb:4f:df:78:1c:89:3a:d4:60:f8:
         b4:db:15:bd:d5:0b:5e:bd:ca:54:d9:7c:fc:a8:1b:00:20:70:
         a2:07:be:a2:bf:94:36:23:4e:82:e6:3e:33:09:91:51:7f:4d:
         76:e9:34:2e:66:97:a2:57:3c:c3:31:60:b5:2c:70:9b:1a:17:
         f4:5b:f5:0d:11:7f:a0:21:a6:b7:f0:4b:52:03:a2:b5:66:fa:
         4f:4e:e2:6c:d3:68:15:d9:8f:cc:a9:e3:f1:61:65:df:f5:79:
         94:47:a2:fa:5a:b2:1e:b5:da:bf:82:aa:9a:17:eb:f2:e5:36:
         62:a3:44:ba:67:33:77:d7:d2:03:b0:02:a1:c3:86:f4:3c:96:
         70:05:98:a8:f4:8d:b6:0e:e7:ce:fa:96:9e:ae:27:c7:f5:51:
         9e:a6:29:a0:08:c2:b4:b0:49:00:42:68:ee:d2:96:f2:c0:1f:
         bf:65:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:42:10 2025 by rpki-client