Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
File:                     1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft (raw, json)
Hash identifier:          UhUeUv7+zRngf8ywzPn8ll/Vt+1v9Zz6B3kdCKF4Fp8=
Subject key identifier:   BE:38:CE:4E:C3:0B:C6:4D:C2:27:8B:81:D8:C0:53:07:D3:1B:3E:E8
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       3B384B449F161CD0F1F2E95F33CB2F1C50105234
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
Manifest number:          17
Signing time:             Thu 03 Jul 2025 08:21:33 +0000
Manifest this update:     Thu 03 Jul 2025 08:16:33 +0000
Manifest next update:     Fri 04 Jul 2025 10:26:33 +0000
Files and hashes:         1: 3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa (hash: ZOpR6ebnsVEr7B8GeJB46CIo4HJA09T6JKXiyd5NmYM=)
                          2: 3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa (hash: 3Gf+WxQ0B1eVL2D7cAyvpYGHYkoHi4D1CMxpK90ijgQ=)
                          3: 3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (hash: KMfK0s630r6fe++qh4HHY9iZtQwOjAx4dGHB8DUadVE=)
                          4: 1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl (hash: 7WZSFhXGGkErftStji5dn5fl27j+bapp/MJLHzxoF+I=)
                          5: 3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (hash: 68PknaBUZdVIB8KkChAFH63UxAWBng/D4R7urPqFos0=)
                          6: 323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (hash: VEE4/t5dmZFRStRb1fb0wA+etXd4a4juK2OsFd3nOyI=)
                          7: 323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (hash: ICnAkGG4yb5Iq5UU0HixMRSiCmle+BX8YoSbtVTGJSc=)
                          8: 323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa (hash: nndo4/SwT+DoUN2P9hKVIbBcJ89/QGt3LoLJLTaXa3c=)
                          9: 3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (hash: zktye7LHoSRMsIMkK4Bj2uFHdOyKV5CgakH99QBZ1vU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 10:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:38:4b:44:9f:16:1c:d0:f1:f2:e9:5f:33:cb:2f:1c:50:10:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jul  3 08:16:33 2025 GMT
            Not After : Jul  4 10:26:33 2025 GMT
        Subject: CN=BE38CE4EC30BC64DC2278B81D8C05307D31B3EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:51:af:ee:bb:9e:7a:df:02:c7:bc:bd:9e:
                    62:ad:85:13:ce:32:05:97:97:10:6c:0c:99:c2:41:
                    2a:a8:82:e9:b9:4b:ea:db:f0:d3:7e:25:26:30:ec:
                    62:9f:33:a5:9c:9f:65:2d:7b:98:9f:4d:60:0e:78:
                    65:05:67:1c:d5:ba:13:c9:15:a0:0d:45:0f:da:2c:
                    d8:5b:04:b0:06:d4:66:3e:2e:1d:be:f6:83:02:0e:
                    6c:a2:48:d5:fa:9e:e3:98:54:80:99:fa:53:a8:25:
                    ff:db:cf:0f:79:fd:e2:32:43:29:d5:6d:71:85:57:
                    5d:6b:96:a6:c3:1d:e9:26:43:73:33:05:15:f5:08:
                    a6:4e:f3:69:73:fc:94:fb:42:f0:89:7f:fc:04:47:
                    a2:ba:33:cd:50:bd:c4:a0:b0:e8:04:ae:9a:5b:7d:
                    dd:02:97:9a:a2:01:67:17:d8:d1:eb:43:82:1f:8a:
                    33:8e:37:a5:60:8d:32:b5:be:69:fa:b7:aa:f6:f1:
                    ee:72:7b:3f:a8:17:84:b2:59:2d:ac:04:5c:f2:e6:
                    0c:a5:6d:d5:e2:b5:7b:24:20:46:f7:c5:84:1f:9b:
                    cb:ad:ef:f8:e4:74:44:b9:ae:f5:67:72:6c:88:c8:
                    dd:b9:1e:b5:ab:be:61:f3:b7:f5:9b:75:ff:0e:6b:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:38:CE:4E:C3:0B:C6:4D:C2:27:8B:81:D8:C0:53:07:D3:1B:3E:E8
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:a6:77:b2:aa:cc:73:49:61:b8:6d:1d:cc:34:c8:3a:df:
         5b:99:d6:14:90:84:60:85:9a:38:0a:31:c1:60:35:d6:8d:22:
         0f:28:3c:dc:78:7d:a0:6c:17:e1:df:95:b0:3e:d2:dc:2c:59:
         3c:ba:70:49:f9:3c:85:76:00:f2:e8:3e:e3:9c:34:ed:66:fa:
         93:68:b6:6f:1d:66:b5:2c:47:3f:26:24:b9:51:c5:e4:56:b7:
         c7:96:61:cd:ef:bc:cc:d2:e2:fc:ff:5c:3e:bf:ad:59:e6:df:
         b8:61:91:3d:23:01:29:d6:79:01:0f:fe:4c:7a:0c:61:4d:d7:
         6f:82:e6:69:e5:12:42:22:0f:cb:71:9d:a5:d9:33:0b:d8:1a:
         b2:95:27:52:6b:ba:ae:5b:93:d7:11:f5:74:0b:ff:76:d4:4f:
         42:ad:ba:a5:11:d4:a7:db:d5:13:c2:52:dd:ba:3d:cf:12:05:
         8f:96:d8:ed:7e:c5:9c:cd:eb:1e:b4:bf:70:9a:7e:8b:fa:da:
         e8:87:56:51:eb:6a:a5:2c:d8:d3:84:f5:f1:9f:a8:3b:b4:f0:
         ef:5f:4f:6e:f7:74:76:d0:ae:b4:9e:65:22:75:ee:ec:f3:5e:
         f2:c3:c1:06:65:e5:a7:40:91:3a:85:e2:43:a3:e4:64:87:5b:
         67:a3:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:16:03 2025 by rpki-client