Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
File:                     832871127BCACF2B8301B7D52E8D2FBE066B8056.mft (raw, json)
Hash identifier:          WtFmNQoxiN3aHJJ8FpviKMSj/88+ZQewg6PdS3NojsY=
Subject key identifier:   DB:6B:4A:B7:13:BE:77:35:79:DD:B4:CE:38:C9:D1:6F:57:49:FB:FF
Authority key identifier: 83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
Certificate issuer:       /CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Certificate serial:       17201E1F795739AD0D1A643A297AA096B3F7FC0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
Manifest number:          0147
Signing time:             Sun 11 May 2025 11:03:39 +0000
Manifest this update:     Sun 11 May 2025 10:58:39 +0000
Manifest next update:     Mon 12 May 2025 12:29:39 +0000
Files and hashes:         1: 832871127BCACF2B8301B7D52E8D2FBE066B8056.crl (hash: DOgbEPola/MNCtTzIvQb2s2QRVHqHfikjshWf7TtiNA=)
                          2: 323830343a383566343a3a2f33322d313238203d3e20323732363130.roa (hash: q8611b2ESWzovMjAi/vkL7Eh+bvvFzxozy3Tg2JcfUg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl
                          rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 12:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:20:1e:1f:79:57:39:ad:0d:1a:64:3a:29:7a:a0:96:b3:f7:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
        Validity
            Not Before: May 11 10:58:39 2025 GMT
            Not After : May 12 12:29:39 2025 GMT
        Subject: CN=DB6B4AB713BE773579DDB4CE38C9D16F5749FBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:f9:00:1c:88:70:ce:1d:0b:b1:da:e2:bb:
                    24:3c:6c:ff:48:93:e2:98:b8:9e:5f:e7:27:1a:3b:
                    cd:b9:c3:a1:79:e6:f3:59:08:e8:c3:37:23:e1:2a:
                    df:57:22:3f:92:3c:9d:1d:ef:7d:12:d8:70:d5:47:
                    30:21:3d:04:8d:74:64:93:0e:6c:23:95:d5:00:71:
                    fd:ef:a6:8d:52:f4:f0:8c:16:5f:00:99:34:4b:53:
                    13:08:f1:3e:17:f8:d7:b3:86:f6:18:57:df:f2:b5:
                    c3:f4:c4:86:19:54:4d:15:8d:f0:fa:90:38:e8:29:
                    5e:8a:3a:ef:f2:af:14:79:8a:f3:e8:9c:fe:08:6d:
                    de:77:e5:77:7d:0b:ce:05:bf:8f:64:d0:00:37:79:
                    a6:bf:ad:12:a1:cc:e0:d8:b4:c8:49:0a:fc:17:21:
                    8c:74:e1:d1:38:f3:0f:1d:56:6e:aa:09:8d:1a:5b:
                    25:d5:8d:cb:c1:57:c8:50:92:61:a3:61:fb:e9:09:
                    2b:7d:04:d9:5d:d2:1b:cc:35:42:4f:c8:71:20:83:
                    36:dc:2c:58:d7:5a:e1:08:94:8c:5a:16:e4:8b:77:
                    d0:a1:d5:b0:f2:04:dd:ba:8e:84:90:53:69:1d:59:
                    78:e8:2c:a8:80:16:6c:50:e8:de:43:f4:17:1f:10:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:4A:B7:13:BE:77:35:79:DD:B4:CE:38:C9:D1:6F:57:49:FB:FF
            X509v3 Authority Key Identifier:
                keyid:83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:78:40:9c:89:ee:52:f3:5b:66:28:1d:7e:49:e2:d2:44:34:
         7a:5e:7f:5e:0c:0b:10:26:4c:67:46:45:a3:43:92:b7:48:0a:
         d0:75:86:f2:a4:68:60:4c:43:c1:8e:ab:d4:8c:f3:94:0b:71:
         93:cb:4c:27:eb:5f:b0:ed:2b:31:ef:c8:31:81:6d:26:78:e1:
         e5:fb:d5:85:55:50:15:1c:00:9f:6f:bd:22:19:dd:b7:dc:03:
         ef:8c:ef:0f:7a:c1:b4:f6:e0:8a:cf:60:c7:d5:d7:0a:d5:ea:
         84:b9:45:24:5c:1e:a3:b8:28:17:98:f4:b8:ed:d2:4f:72:f8:
         4b:e4:f8:06:a0:8f:52:39:0e:80:c5:da:71:1f:c6:99:7d:a4:
         93:6d:35:da:bf:7d:be:13:53:b3:8a:4a:4b:28:e7:5e:01:03:
         a3:30:c8:b3:a0:79:6b:6d:18:ae:7b:6a:00:3c:98:46:82:f4:
         54:1d:c6:0e:24:23:50:1c:01:bd:34:31:aa:ed:a0:66:9b:03:
         82:45:88:e4:7f:db:f6:0a:c6:c7:e2:a0:53:db:45:ce:8c:3b:
         e0:54:59:fc:c6:5e:bc:f2:0e:17:a4:68:29:03:64:3a:13:61:
         36:43:74:21:ef:1b:31:9a:5e:a3:68:d1:a5:c4:38:7e:33:64:
         69:60:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:15:54 2025 by rpki-client