Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
File:                     BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json)
Hash identifier:          4tqHjXSFuMzRbMYVci2ndVcw0A9AfitDooun5vocIUE=
Subject key identifier:   14:21:E2:D8:82:06:F3:5E:C2:CA:DA:BC:B3:68:37:B3:2F:83:9D:ED
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       2A1E71BEAD1CB1059FBE54F45C865321AD23596A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
Manifest number:          0260
Signing time:             Tue 01 Jul 2025 02:51:57 +0000
Manifest this update:     Tue 01 Jul 2025 02:46:57 +0000
Manifest next update:     Wed 02 Jul 2025 06:40:57 +0000
Files and hashes:         1: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=)
                          2: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=)
                          3: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=)
                          4: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=)
                          5: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=)
                          6: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=)
                          7: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=)
                          8: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=)
                          9: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: e2b5E06rr27pETdtnKw4apdPdOs5f8577vbui4OGFSU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 06:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1e:71:be:ad:1c:b1:05:9f:be:54:f4:5c:86:53:21:ad:23:59:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Jul  1 02:46:57 2025 GMT
            Not After : Jul  2 06:40:57 2025 GMT
        Subject: CN=1421E2D88206F35EC2CADABCB36837B32F839DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:18:5b:c3:90:db:6d:aa:ac:01:ce:d7:1f:f7:
                    42:58:44:d7:be:88:c7:06:3c:ad:40:9d:d0:0b:d0:
                    88:16:ea:ae:c4:74:24:e2:88:99:11:7e:6f:68:c2:
                    d9:f6:9c:07:dd:b8:d9:8c:4b:aa:fc:78:ee:8b:f4:
                    5c:21:a4:8b:54:1c:42:3b:9f:3e:44:46:18:6c:83:
                    72:98:2e:3f:f1:7e:2e:98:eb:00:bf:e3:16:63:e2:
                    11:ee:d8:70:68:16:72:82:22:63:38:ed:96:08:e8:
                    85:7b:1e:12:08:29:57:c6:2d:1d:56:21:59:b4:71:
                    69:2a:d9:4c:f8:f6:2b:c4:23:8e:74:7a:68:5c:07:
                    da:16:47:69:34:14:d4:07:2e:61:d6:50:18:33:46:
                    fe:c3:11:06:db:74:43:f8:3d:f1:03:1d:33:02:c2:
                    3f:f1:f9:2d:07:12:2e:5a:03:1f:1c:08:78:1f:64:
                    14:51:00:b2:74:7a:f9:d6:94:7a:77:6c:c4:2a:cf:
                    94:05:22:92:22:36:5b:9f:85:90:54:fd:fe:c2:50:
                    a5:28:ca:0f:2c:21:cd:34:ce:a1:f7:a6:b1:34:a5:
                    44:26:ff:61:47:04:8a:a2:a6:4b:4b:74:a4:05:2a:
                    1c:98:c1:a0:38:e8:f2:a6:11:70:c5:f1:59:6f:a1:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:E2:D8:82:06:F3:5E:C2:CA:DA:BC:B3:68:37:B3:2F:83:9D:ED
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:10:11:36:b7:0e:a0:9e:14:06:77:74:9f:9c:d6:cb:ef:da:
         86:65:30:35:ef:95:d5:c2:9d:c7:24:21:d2:58:29:6a:8a:c0:
         74:3e:ac:71:f3:56:3e:3e:d8:e8:1e:58:3b:6a:e8:ec:08:8b:
         55:bc:4a:66:52:ff:60:ce:d6:09:e1:2e:34:9a:17:e1:9e:b3:
         98:20:40:3d:46:dc:b8:20:94:cc:4d:03:5c:13:6e:06:58:36:
         4f:dc:fa:82:c6:50:88:4c:0f:1f:00:b9:a1:a1:1c:d5:ac:fa:
         89:ca:5d:4e:6c:18:0e:1e:c1:a7:8c:d4:32:57:43:f7:a6:da:
         ed:08:52:c3:e4:51:27:51:36:80:79:97:f1:83:5e:d8:34:69:
         d5:c3:7b:f6:22:53:91:f9:b6:e4:1f:e6:28:0f:d4:37:d3:f1:
         b7:e9:b3:85:e9:6a:85:52:bd:ca:5f:ce:40:02:02:8e:47:d2:
         f0:07:ac:fc:fc:a9:2f:3d:c2:86:7a:46:99:60:62:7a:6d:93:
         b7:db:17:cd:be:da:15:c7:a6:72:e2:5f:41:f8:68:b6:ee:e9:
         00:47:ee:36:73:80:6f:9a:42:e9:29:54:45:5d:9d:82:15:90:
         f8:83:bc:39:1c:fe:a7:b3:cc:b6:c5:33:4f:9d:62:a9:34:0e:
         37:d7:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:44:51 2025 by rpki-client