Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft
File:                     D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft (raw, json)
Hash identifier:          I4sDAM0S51B0vGkT36A+TmKPvZazTm4INzG3emz68Ic=
Subject key identifier:   1A:D1:D4:24:EF:E4:D0:6C:2E:A5:6B:B5:E9:BB:D7:18:67:4A:DA:B3
Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
Certificate issuer:       /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Certificate serial:       2BB33963C5CB1FE72FC14A5EE51039338934D468
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft
Manifest number:          A3
Signing time:             Sun 11 May 2025 07:19:35 +0000
Manifest this update:     Sun 11 May 2025 07:14:35 +0000
Manifest next update:     Mon 12 May 2025 09:37:35 +0000
Files and hashes:         1: 323830343a323535383a3a2f33322d3438203d3e20323634323735.roa (hash: vC5rVvvzfBAI0mm3XY8A78jeA2hpP6Gnz+DXe7vNPMY=)
                          2: 34352e3137342e3135322e302f32322d3234203d3e20323634323735.roa (hash: j1Jw5ktAcvxEcaAzgsItWxmfi1R6ijjoESdWnFN/G3s=)
                          3: D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl (hash: sD4FrtdZDEB7Tl9HPYDmubAw10hzKponG87nB+WfS8Q=)
                          4: 3136382e3233322e3138382e302f32322d3234203d3e20323634323735.roa (hash: eepfNPif+o/kS3Bydt5ST2D6jnf/fTrhDBk9GCilxx0=)
                          5: 3133382e3132312e32342e302f32322d3234203d3e20323634323735.roa (hash: ynjTCrwAQTq9F0l7aMfje5k9pU31uX39MkbErQIqYFg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl
                          rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b3:39:63:c5:cb:1f:e7:2f:c1:4a:5e:e5:10:39:33:89:34:d4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
        Validity
            Not Before: May 11 07:14:35 2025 GMT
            Not After : May 12 09:37:35 2025 GMT
        Subject: CN=1AD1D424EFE4D06C2EA56BB5E9BBD718674ADAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:aa:fe:35:06:49:47:6c:67:5e:f1:18:5c:
                    d9:38:c0:40:e8:26:5b:a5:72:78:3c:60:4a:54:f5:
                    ee:06:3b:02:77:30:36:10:79:a6:0b:6f:fc:3b:b0:
                    53:89:a7:c4:16:40:1f:dc:7a:fb:6b:d5:bf:99:7b:
                    1b:0b:01:a6:3f:f8:fc:3a:10:5c:73:98:1e:4d:73:
                    57:27:7a:bb:99:bf:38:52:3f:be:96:d8:86:78:43:
                    de:2d:19:77:59:bc:69:b7:78:8b:4e:54:0c:80:cc:
                    f4:1f:85:26:f0:83:35:5c:6e:3c:99:33:1e:42:03:
                    0a:05:57:0d:3d:bc:3b:f5:86:af:cf:9e:03:31:5b:
                    11:51:cf:11:4e:5b:a4:57:ce:c9:77:e8:66:d8:48:
                    10:e7:4b:6c:ae:9f:3a:77:09:9e:45:a8:d3:08:83:
                    63:a6:bd:30:3a:ad:90:5e:b5:33:2b:ac:9e:28:fe:
                    0c:d0:c0:d9:c3:5a:fa:77:41:b8:83:ea:36:de:72:
                    3e:02:7f:2e:40:42:07:1f:84:85:b7:ab:85:3b:aa:
                    78:d7:83:19:22:19:63:8f:1c:ee:dc:0c:f5:07:8e:
                    36:a1:b1:1e:70:a5:4a:9c:ae:3a:9f:fb:8f:9c:e7:
                    63:c0:1d:53:f9:37:d6:bd:c5:13:da:12:6c:83:ed:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D1:D4:24:EF:E4:D0:6C:2E:A5:6B:B5:E9:BB:D7:18:67:4A:DA:B3
            X509v3 Authority Key Identifier:
                keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:88:fd:cc:91:d4:3f:e2:40:d1:0f:06:10:fe:1b:97:e8:7b:
         66:55:5c:31:90:94:c7:4e:5e:5d:e2:e8:c4:49:a5:7f:cd:bb:
         3f:22:87:88:71:12:16:6f:1f:42:cd:55:eb:c6:ea:1e:85:49:
         a7:ce:2f:8d:97:bd:e7:ab:3b:da:6f:98:ae:f7:22:fe:52:12:
         0a:42:f6:03:8b:19:71:ef:15:51:a5:5e:80:ed:e0:a8:4c:5a:
         b1:68:32:90:50:ee:9f:3a:f8:c1:f8:cd:84:d1:e1:31:28:7f:
         33:db:a7:77:d9:a4:b0:18:f3:f3:60:1c:8d:3d:f8:e6:33:06:
         02:ec:43:a5:63:34:9c:2c:86:1d:3a:6c:fa:1e:24:37:ca:8c:
         47:12:93:ed:94:4d:88:fc:89:7d:47:57:ee:5b:ac:1d:0c:5f:
         c6:cd:65:37:26:87:e4:db:51:47:29:d0:4a:8b:2a:da:91:95:
         44:e3:ca:e8:b1:3c:1d:9b:64:e7:26:86:b2:e8:33:f7:ce:7a:
         3b:51:82:44:dd:a5:b1:f2:5e:03:bf:2d:d9:2b:db:da:ad:0b:
         5a:87:a0:8c:3f:dc:bc:2b:f2:bd:4c:70:a2:c0:36:df:ed:67:
         5c:ea:66:88:c9:fe:d9:6f:4b:c9:7e:64:b6:d9:48:cc:47:f6:
         9d:40:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:08:55 2025 by rpki-client