Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          PqfaSBVE1tMOB1wRMuB7IKylAb0/T6SaSTG9QSzWStU=
Subject key identifier:   F1:C2:E6:2A:6B:7D:FE:71:E6:DE:C8:4C:3D:59:50:14:25:1F:52:ED
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       48A5B66CDBF7DDC3F4FC9071B551BCB90F8550FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          C0
Signing time:             Fri 16 May 2025 13:34:05 +0000
Manifest this update:     Fri 16 May 2025 13:29:05 +0000
Manifest next update:     Sat 17 May 2025 16:29:05 +0000
Files and hashes:         1: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: fIG/4kYv2TxHFwZCuk3f3A0q1UQK0liTIO5WoftdOoY=)
                          2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 16:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:b6:6c:db:f7:dd:c3:f4:fc:90:71:b5:51:bc:b9:0f:85:50:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: May 16 13:29:05 2025 GMT
            Not After : May 17 16:29:05 2025 GMT
        Subject: CN=F1C2E62A6B7DFE71E6DEC84C3D595014251F52ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:65:b9:73:e5:38:20:0f:28:82:53:6c:9a:
                    53:8d:c4:87:32:08:ef:38:65:e3:e3:f7:5b:fe:a5:
                    3d:0b:e1:ff:f6:fb:da:4e:68:4d:e1:99:4c:34:d1:
                    10:99:a1:b2:b6:fc:15:14:2f:2b:45:70:74:64:62:
                    6f:7a:fd:9b:dd:45:09:22:5e:6a:bd:b4:4b:5e:87:
                    34:1e:28:d5:c8:49:ca:cc:c8:35:fb:4f:9c:b4:ee:
                    aa:4d:72:0e:db:b6:cd:71:86:d1:f8:36:4f:77:76:
                    6e:3d:14:13:73:c2:00:77:f8:e3:9e:48:e7:be:3c:
                    0a:fe:60:3d:41:01:48:6b:ba:2f:25:b8:95:43:dc:
                    a1:b6:cc:4b:f9:63:1d:69:d7:da:4e:36:97:5d:40:
                    d1:04:ef:26:0c:a5:54:a1:89:61:69:10:87:e0:c1:
                    86:60:5d:ad:a0:08:b5:45:dd:47:fb:e1:8e:1b:aa:
                    04:cc:be:79:c5:d3:d0:67:5d:51:6d:1b:71:18:24:
                    fb:af:8c:a5:84:2f:17:48:b4:00:df:87:38:c6:de:
                    c8:77:f6:d5:8a:87:58:70:37:d7:e6:5e:90:13:02:
                    26:f8:e9:36:91:79:f4:95:25:13:10:5c:f8:33:1a:
                    df:e5:46:70:5f:5c:06:40:95:9a:82:35:4d:18:f3:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:E6:2A:6B:7D:FE:71:E6:DE:C8:4C:3D:59:50:14:25:1F:52:ED
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:1d:04:a2:db:2b:d1:68:95:74:b5:a6:27:5f:56:1e:91:
         6d:84:96:ed:69:b8:07:a1:08:32:1f:35:11:b6:d4:de:21:29:
         8a:76:af:44:75:ff:cf:ef:15:2c:5a:56:18:51:64:6a:f3:62:
         d6:a4:fc:46:6d:57:56:ec:b3:8e:94:26:00:77:6e:e2:f0:08:
         41:09:ba:0b:20:d0:b8:3b:83:02:27:dc:e2:ba:03:b7:58:be:
         3f:4f:3d:5a:34:84:cc:62:25:c4:79:6c:94:b5:d6:18:86:c5:
         87:1b:f5:a2:ec:fa:e0:fd:10:53:8e:f6:00:0b:96:90:85:68:
         36:95:47:3c:c1:67:35:fe:62:81:a4:28:1f:e6:2f:34:b7:90:
         63:54:8c:22:f6:c1:05:1d:d6:77:a7:ea:e9:81:59:53:e7:ca:
         a7:49:13:55:7c:07:16:47:fc:07:e7:14:f6:cf:2f:dc:e0:d2:
         93:6b:99:3f:97:94:00:f4:0c:8a:f6:8a:6d:82:fa:79:29:98:
         14:01:de:93:a8:87:31:4f:28:82:3d:36:09:8d:32:18:b8:10:
         83:c5:8e:a4:56:31:44:40:77:7a:3b:e5:d6:b5:4e:21:48:14:
         00:03:95:c2:7e:f7:a6:41:00:00:33:f4:91:d9:ad:65:1f:8e:
         a8:c9:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:22:28 2025 by rpki-client