Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          t26UjFyq3w3X9gmqpY1bVDqlbmRYJxc3Hrf7Vg8eveM=
Subject key identifier:   29:3F:5F:E0:5D:FF:0C:99:90:99:9F:A0:D3:BB:90:A4:B1:EC:F6:A8
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       1B342DEA50E88F465FC554B31F7CD2256D3A754A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          0224
Signing time:             Thu 15 May 2025 09:19:45 +0000
Manifest this update:     Thu 15 May 2025 09:14:45 +0000
Manifest next update:     Fri 16 May 2025 11:13:45 +0000
Files and hashes:         1: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)
                          2: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
                          3: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
                          4: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: e/TigkQXJk3fszTUV1G2ixzuUSYEz48RWMOmm7EHO5Y=)
                          5: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 11:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:2d:ea:50:e8:8f:46:5f:c5:54:b3:1f:7c:d2:25:6d:3a:75:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: May 15 09:14:45 2025 GMT
            Not After : May 16 11:13:45 2025 GMT
        Subject: CN=293F5FE05DFF0C9990999FA0D3BB90A4B1ECF6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:2c:8d:de:d2:a1:c6:82:89:fd:a4:13:86:
                    33:a0:3a:39:01:01:ea:e1:3f:09:ec:67:9c:27:9e:
                    5a:e9:0e:9b:8f:58:40:35:55:1e:b5:f6:01:e9:49:
                    6b:63:7d:2e:e1:c8:e0:0c:f0:99:34:a9:4e:ac:6b:
                    71:08:1c:f7:04:75:f7:6c:3c:64:f0:eb:fa:d1:62:
                    72:d4:d0:cb:66:e3:e5:25:ef:9d:3e:e4:0b:b6:cb:
                    f4:1f:32:bd:3b:9f:dd:c7:d4:8b:da:e6:3e:cf:63:
                    f3:58:29:94:cd:ca:96:7c:22:c2:5f:3c:02:fc:67:
                    51:4b:69:e6:e7:86:18:e6:5b:72:2f:c9:f8:34:85:
                    2e:14:eb:9b:43:2b:4a:cc:90:a8:db:36:fa:55:71:
                    2c:8f:28:39:d8:25:ac:46:da:b0:ed:1c:09:b6:bd:
                    bb:9c:07:37:1f:17:4d:ad:22:bf:8f:41:c0:72:4b:
                    f6:7b:dd:b0:a4:31:bc:6a:8b:09:9e:69:95:34:1c:
                    03:27:da:1d:0d:c5:34:69:e6:73:40:90:c6:b5:96:
                    ea:56:7b:dd:8d:48:92:25:41:5d:36:2c:c1:f4:8f:
                    78:0f:f3:7e:c9:36:fc:46:d9:f0:79:5c:d3:c7:1d:
                    c5:e0:e4:ae:d5:85:f5:56:da:8f:36:ac:25:09:eb:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:5F:E0:5D:FF:0C:99:90:99:9F:A0:D3:BB:90:A4:B1:EC:F6:A8
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:5c:50:96:a1:d2:fd:48:7b:2e:c0:ad:f1:f3:98:b4:db:
         df:6a:cc:be:bd:4b:ab:87:91:5f:b9:86:01:1c:03:3f:0f:54:
         d5:9d:81:ab:3b:c0:01:2b:e1:09:80:1a:f6:39:10:9f:9f:64:
         a2:6d:82:aa:b5:ea:d6:52:9e:b0:b0:c6:71:02:2a:34:e5:91:
         59:5e:37:e0:05:f4:3d:24:9e:c6:d9:0f:0f:ce:fd:08:2f:3c:
         34:56:4a:6c:18:3d:e1:e4:85:f6:0b:d5:1e:74:05:7e:b6:f2:
         e4:8d:c9:49:fb:58:08:d5:78:fa:e2:ba:4a:48:2e:d1:35:5d:
         9c:40:c1:7c:3d:2d:8d:7b:76:3a:39:4f:b2:99:b7:d9:63:81:
         b6:15:40:62:10:c7:67:59:76:09:ce:2a:c7:6e:d2:d1:0f:af:
         c2:b5:04:a8:cf:0a:49:72:b2:54:4d:24:4d:de:85:76:46:90:
         0e:7c:28:87:39:df:ce:df:19:79:4d:9b:f4:11:b6:be:92:06:
         e8:06:9a:39:6d:44:02:67:b0:93:cd:1a:e8:30:64:22:0d:7c:
         e5:97:5c:5e:7f:29:cd:0e:82:b9:75:7d:5a:00:43:35:60:1f:
         ca:ad:e3:e8:c3:00:f9:e5:52:16:a5:01:a0:f6:a2:0f:f0:ff:
         4b:d1:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:35:12 2025 by rpki-client