Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft
File:                     C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft (raw, json)
Hash identifier:          6VdyuUT0k1+KtDpO0JYq7BERFRCvpHCmmnznf4U2jJ0=
Subject key identifier:   D8:BF:BF:2B:29:66:EE:D0:4A:CC:63:B1:FA:A1:D2:CC:4B:6A:12:40
Authority key identifier: C2:63:3A:E0:4C:D5:A0:36:A3:DD:10:83:FB:4E:6F:D2:21:08:FE:09
Certificate issuer:       /CN=C2633AE04CD5A036A3DD1083FB4E6FD22108FE09
Certificate serial:       1FCD43558F6DB117601048BEBE996063D5A8279F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft
Manifest number:          0134
Signing time:             Fri 09 May 2025 09:59:31 +0000
Manifest this update:     Fri 09 May 2025 09:54:31 +0000
Manifest next update:     Sat 10 May 2025 11:46:31 +0000
Files and hashes:         1: C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.crl (hash: RdPcnR1EdZirL0/ynTQnQFvOhZ90vBhzlx8Y0inwrxY=)
                          2: 323830343a383037303a3a2f33322d313238203d3e20323731373530.roa (hash: A0XeTnau+6VtDtj3TpzjdbZAN2eO0S4xsDBOr0wXbEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.crl
                          rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 11:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cd:43:55:8f:6d:b1:17:60:10:48:be:be:99:60:63:d5:a8:27:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2633AE04CD5A036A3DD1083FB4E6FD22108FE09
        Validity
            Not Before: May  9 09:54:31 2025 GMT
            Not After : May 10 11:46:31 2025 GMT
        Subject: CN=D8BFBF2B2966EED04ACC63B1FAA1D2CC4B6A1240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:7e:75:2f:70:bc:98:cd:d2:1a:12:03:3c:
                    4f:1e:5d:06:74:d2:c5:85:ce:ac:2d:14:5f:35:fb:
                    6a:fc:21:b9:31:e3:16:bf:16:cb:92:15:e7:97:6b:
                    86:76:d4:9f:39:fb:da:b4:60:93:15:2e:e2:1b:95:
                    a1:4a:64:4e:5f:32:e1:69:8b:10:b7:fd:c2:53:fa:
                    79:3a:d8:b8:bc:88:df:06:14:ca:46:b0:a9:dc:8e:
                    59:72:a8:4b:36:63:6b:e8:43:f9:58:ed:9b:e4:5d:
                    b1:de:d4:8e:37:a7:75:fa:87:71:99:74:aa:bc:4b:
                    72:11:36:75:70:54:dc:9b:4a:1a:25:ed:71:ec:c5:
                    7f:11:f6:90:ad:0c:46:53:8b:3a:63:13:aa:51:d5:
                    e5:85:6b:f0:79:49:8b:09:0a:05:6f:3f:f2:5d:06:
                    d1:20:6d:a0:3b:f8:77:fe:0e:c6:f5:b5:8a:2a:66:
                    34:5b:2e:e8:55:94:0f:a4:fc:3a:1c:c8:69:72:28:
                    30:03:95:3c:2c:27:4f:08:7c:88:77:48:d8:f4:68:
                    1d:2b:fc:39:ec:ef:89:8b:84:06:11:56:66:ac:a8:
                    32:2a:d8:ae:72:fd:2a:d8:8a:30:34:c4:f9:67:eb:
                    36:d4:57:26:24:24:62:81:3f:1a:4b:ab:8f:11:28:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:BF:2B:29:66:EE:D0:4A:CC:63:B1:FA:A1:D2:CC:4B:6A:12:40
            X509v3 Authority Key Identifier:
                keyid:C2:63:3A:E0:4C:D5:A0:36:A3:DD:10:83:FB:4E:6F:D2:21:08:FE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28bULS6EtCidXUgxcqZ7rywD2cbV7Fsh66f9bmMpFNa5/0/C2633AE04CD5A036A3DD1083FB4E6FD22108FE09.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:0f:8d:ba:4f:42:9e:05:ab:0e:7e:cc:bc:c6:c0:ac:d0:32:
         21:9f:2b:ce:66:bb:85:29:92:c8:ac:ab:fd:12:63:81:06:d4:
         14:5b:61:f0:c8:03:90:1d:8a:c8:ab:46:38:20:cd:01:a8:6a:
         ce:47:53:a9:77:5d:50:54:18:e4:d1:d7:e2:5a:f0:53:ce:82:
         cf:09:af:c8:74:ff:bc:20:89:71:03:f9:48:25:f1:dc:db:9c:
         ed:86:db:4a:40:78:6e:70:6d:b0:6e:0c:57:9d:a9:d3:39:55:
         5f:7a:3b:2c:2d:91:d9:9c:3a:1b:22:87:8a:de:be:ba:e3:90:
         3a:62:41:c9:fd:40:46:fe:88:10:93:d5:a8:36:c3:6c:ad:cc:
         4c:1d:0e:f1:cf:4b:de:81:60:8a:2e:30:1e:da:c4:68:83:13:
         f6:fe:33:89:90:8e:49:fa:40:d9:09:15:73:f1:60:9b:65:d9:
         af:47:57:4f:8f:8d:e3:c5:a3:af:4d:25:67:cb:17:6d:ff:77:
         f7:47:c4:bc:38:15:ab:86:04:be:e8:54:08:45:47:de:48:ef:
         1b:4b:8d:30:59:1d:87:3a:9e:d2:fd:ff:99:b9:ec:11:34:10:
         12:63:30:85:a8:39:5a:f4:b0:bf:c6:e6:12:1e:00:e7:ef:bd:
         32:99:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:09:25 2025 by rpki-client