Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          37AYVeLYlf8goUMmAEXVQwS00yrn0xg1YxLkt70YpsU=
Subject key identifier:   65:56:49:D1:87:33:BA:96:14:B3:F7:14:2B:B3:17:2C:D2:14:CE:01
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       52E8C25899A1424E79B83B026C75E25F1EE32DEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          0227
Signing time:             Wed 14 May 2025 12:58:03 +0000
Manifest this update:     Wed 14 May 2025 12:53:03 +0000
Manifest next update:     Thu 15 May 2025 15:44:03 +0000
Files and hashes:         1: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
                          2: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          3: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
                          4: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: kMTQJHhypLADVCJwG7Gk4Y0/WsV0sxU8gtZFgxQjsMI=)
                          5: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
                          6: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
                          7: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e8:c2:58:99:a1:42:4e:79:b8:3b:02:6c:75:e2:5f:1e:e3:2d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: May 14 12:53:03 2025 GMT
            Not After : May 15 15:44:03 2025 GMT
        Subject: CN=655649D18733BA9614B3F7142BB3172CD214CE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:d9:d9:91:c5:86:8d:62:f2:5f:45:54:67:
                    aa:4a:03:eb:38:c5:1c:c2:69:58:56:83:81:9d:65:
                    95:3d:1b:46:a9:97:5d:d7:cc:8a:b7:1e:01:c5:8d:
                    79:9f:1c:db:f8:2f:22:57:67:b1:e7:ee:9f:f6:72:
                    d4:fb:7b:d5:54:14:98:da:3d:6b:da:ae:55:c1:47:
                    8c:eb:01:a9:f1:bb:0c:5f:56:f0:68:63:e2:ac:4e:
                    a3:88:9c:58:bf:8b:39:bd:c6:99:a9:5c:ef:a6:28:
                    e9:5a:ab:9a:b9:d4:0a:7c:f5:6c:e7:df:99:6a:c5:
                    f6:cb:c6:77:f0:eb:0b:db:d4:de:5a:21:2c:a2:71:
                    e3:09:5d:d7:a4:0a:30:c1:54:c6:0e:26:f4:e2:c0:
                    9c:73:b5:5d:32:f5:4f:d3:74:0e:89:ca:14:60:91:
                    35:74:8a:7c:51:9e:1d:f9:2d:0d:70:a6:31:09:3d:
                    9c:00:4b:0b:6e:c8:5c:fe:a1:f8:a4:ce:41:50:49:
                    78:2e:d9:42:d4:02:db:29:5a:19:f6:4d:86:85:86:
                    78:c7:b4:eb:65:15:11:e2:d3:04:3f:39:54:7c:59:
                    da:8b:56:bb:d9:9e:9e:54:ad:16:06:ae:1b:54:24:
                    e6:9e:c8:0b:17:ca:37:fc:35:15:58:9f:87:11:c3:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:56:49:D1:87:33:BA:96:14:B3:F7:14:2B:B3:17:2C:D2:14:CE:01
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:13:8b:0b:96:c0:60:77:4e:74:ad:c3:59:97:aa:93:95:
         18:34:33:ae:ec:db:34:35:8f:6a:ee:14:4b:0b:b2:c4:48:9b:
         a4:b6:b4:e8:44:37:64:46:bd:eb:dc:96:d4:c8:a5:d7:a1:f7:
         f7:d3:96:f4:85:07:6e:e4:b9:24:87:b2:7a:f5:d5:a1:aa:13:
         b1:27:be:94:e2:18:8f:94:60:02:42:11:66:c6:6b:3f:b4:84:
         93:85:f5:94:c8:e7:54:54:41:e9:99:65:dd:78:8f:0c:19:94:
         12:f2:7c:f5:0d:8d:29:c4:9a:fe:35:ba:2c:65:e2:46:df:76:
         52:a8:03:a9:d2:c0:87:40:a2:1f:6d:ac:9f:56:33:7f:06:39:
         20:ef:57:4d:18:0a:0c:f1:b0:20:98:5a:d3:23:f7:65:5b:ae:
         0d:94:11:9f:ce:8b:92:98:39:b2:70:60:9d:d3:65:65:37:56:
         14:80:60:78:0d:97:36:51:25:66:29:7c:42:c5:6e:9b:d8:30:
         fc:84:bc:30:9a:08:39:57:2e:5f:63:b8:9d:ca:e7:01:bf:e1:
         ec:2b:ab:45:83:c5:4a:74:43:a0:b9:b6:b1:af:57:a7:03:af:
         d4:95:e4:63:46:59:a5:99:a4:47:8c:b5:a7:af:82:7d:bb:16:
         ed:27:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:12:40 2025 by rpki-client