Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
File:                     BDE43E626C927270D334976A9B665C443892DF57.mft (raw, json)
Hash identifier:          I9QpWGXSPoYNdoJp0RaFm3MSGUuXJq0IvCx+UJdi8Oc=
Subject key identifier:   F8:9E:EC:54:1D:B9:1F:6D:C2:E5:C6:6A:35:BB:30:95:E4:7C:A6:6A
Authority key identifier: BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57
Certificate issuer:       /CN=BDE43E626C927270D334976A9B665C443892DF57
Certificate serial:       17A6B5F50EFAF32623F03CCB60615EF5D43B987B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
Manifest number:          E3
Signing time:             Thu 15 May 2025 03:12:05 +0000
Manifest this update:     Thu 15 May 2025 03:07:05 +0000
Manifest next update:     Fri 16 May 2025 05:59:05 +0000
Files and hashes:         1: 3139322e3134312e3234302e302f32342d3234203d3e20323637353432.roa (hash: cYpAj5rgDR58Mw3pivkFtZn7NdA+uT4E+M5gGoGV4/A=)
                          2: BDE43E626C927270D334976A9B665C443892DF57.crl (hash: rhVCCBmBrW2eHwgRDH+RBrylKviTreZl+Np7Kc0LteU=)
                          3: 323830343a343330303a3a2f33322d3332203d3e20323637353432.roa (hash: tkDsUCaLqwHwe6ULCaF5Q1JfquPcF5Bcw3ECyhgtg5s=)
                          4: 3139322e3134312e3234332e302f32342d3234203d3e20323637353432.roa (hash: GWKkTNtEG1a63Qu8OhR6vF+4t4EKoI1EZSj7BNhuiYw=)
                          5: 3139322e3134312e3234312e302f32342d3234203d3e20323637353432.roa (hash: iJ6ltOQJVNmJbZeqxftraIZmSiZ90s12Z7mWp2U363U=)
                          6: 3139322e3134312e3234302e302f32322d3232203d3e20323637353432.roa (hash: XvVi8S94j3/kae6qTxK1+1xB7j15KqcYw5m/G30X+4Y=)
                          7: 3139322e3134312e3234322e302f32342d3234203d3e20323637353432.roa (hash: OL2ItaAq9W2vkNvG+8dkRmuvqXqbVX6IK2PH4GBGRZw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl
                          rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 05:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a6:b5:f5:0e:fa:f3:26:23:f0:3c:cb:60:61:5e:f5:d4:3b:98:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE43E626C927270D334976A9B665C443892DF57
        Validity
            Not Before: May 15 03:07:05 2025 GMT
            Not After : May 16 05:59:05 2025 GMT
        Subject: CN=F89EEC541DB91F6DC2E5C66A35BB3095E47CA66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:a2:bc:5b:24:85:a0:e5:41:89:45:a9:a2:
                    fd:10:e0:9d:c2:99:e1:c8:5a:14:36:4a:d8:0f:9a:
                    a8:b2:12:e6:07:d0:f8:43:fc:06:1d:d7:d8:b8:fb:
                    53:d0:50:ff:9b:ad:15:3b:31:a9:3e:4d:e2:d5:81:
                    c5:81:b1:c3:66:e5:83:f1:6f:c9:75:a9:4e:e8:ee:
                    72:ab:1c:39:a0:30:a6:e0:79:5a:1b:8b:1a:09:98:
                    11:e7:05:4f:76:03:d2:df:80:dc:72:1e:79:22:1d:
                    e9:91:99:69:44:30:cc:c9:ce:60:72:1a:3b:15:79:
                    ef:45:54:ed:29:1e:15:ff:37:1d:6a:18:2e:0a:03:
                    6c:09:d3:2d:73:24:ce:71:a0:e4:fb:c3:31:47:63:
                    f9:e0:11:ec:52:34:e8:5c:d1:16:ee:6c:27:85:55:
                    43:9c:f9:d7:72:ce:96:40:d2:29:cf:55:9e:48:08:
                    a5:a7:7d:6e:03:d6:d2:77:66:30:b1:b1:40:50:54:
                    a0:06:f1:8d:96:5c:cf:b9:95:f3:d0:2e:e7:8e:58:
                    b0:23:73:82:74:1b:7c:65:a0:d1:4b:80:cd:05:f2:
                    30:bf:a9:5b:86:80:99:94:72:d9:39:40:53:98:90:
                    e1:86:7d:d6:0a:7a:60:aa:96:5e:ea:72:e9:b2:b4:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9E:EC:54:1D:B9:1F:6D:C2:E5:C6:6A:35:BB:30:95:E4:7C:A6:6A
            X509v3 Authority Key Identifier:
                keyid:BD:E4:3E:62:6C:92:72:70:D3:34:97:6A:9B:66:5C:44:38:92:DF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE43E626C927270D334976A9B665C443892DF57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/BDE43E626C927270D334976A9B665C443892DF57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:62:dd:59:cc:e9:2a:6c:59:d3:4a:7f:8a:55:d3:a3:9e:ac:
         70:30:b1:a0:73:2a:1b:80:26:86:bd:c1:43:dc:6b:e1:5c:45:
         02:86:bf:86:3f:a8:bd:2d:74:b2:4f:3a:e7:e5:52:0f:1a:c7:
         df:37:65:65:05:dc:d5:de:f8:0f:b1:c6:4c:9a:a9:48:52:b5:
         ee:19:9a:fc:3d:16:42:07:8c:9e:a1:cd:d9:69:c3:4a:65:87:
         c9:64:2b:92:0b:9e:23:49:22:38:12:3b:34:34:7c:f8:55:7f:
         01:94:bf:c4:cd:48:3a:dc:0e:e9:55:cd:87:d8:50:f2:64:cd:
         18:56:23:83:29:47:97:15:34:db:71:37:11:ee:33:08:74:85:
         7c:65:84:c7:74:9f:bf:b7:82:5e:32:40:c6:83:f9:9b:0c:d2:
         79:d8:b6:cd:24:ef:3a:84:6e:ec:a9:e8:d6:b3:b7:d8:1b:2e:
         52:31:ad:be:8c:98:d0:d9:b4:6a:79:1f:f1:40:9c:e3:79:73:
         e1:e5:a0:4a:47:d7:a0:56:6f:f3:b9:c6:98:35:97:0a:ea:f6:
         0b:1d:67:f8:08:58:a0:bc:f4:4a:58:b3:73:33:30:08:a9:40:
         b1:c0:29:a4:10:39:c8:6e:b7:a7:85:a2:b1:ad:67:2b:bc:93:
         4b:80:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:33:49 2025 by rpki-client