Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
File:                     1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft (raw, json)
Hash identifier:          2A78zygeSb4uUv8VmuwD/jy1JZq5yg228xEIAMds1pU=
Subject key identifier:   08:32:7C:74:27:78:67:A6:2B:F7:4C:D6:3E:97:B3:E2:FD:4E:18:20
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       54FC6F941EC216DAA3E54F62E866E634E7092811
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
Manifest number:          0221
Signing time:             Sun 11 May 2025 20:51:43 +0000
Manifest this update:     Sun 11 May 2025 20:46:43 +0000
Manifest next update:     Tue 13 May 2025 00:21:43 +0000
Files and hashes:         1: 3138392e38392e3234302e302f32342d3234203d3e20323634313230.roa (hash: 2fr7r8R9lDxNrRl4/Hw4+ij8XzNMy1fJIpN7SWdKn+s=)
                          2: 3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (hash: sUu/YLPLaMu0Olqsngx/9uH8qml8jsoB7mpsGIvMI3k=)
                          3: 3138312e3233322e3232342e302f32332d3234203d3e20323634313230.roa (hash: KQ4w4HsCnS6muTAhBvT26hKjOMoO/6iO//Sml7Vi/vM=)
                          4: 323830343a323263303a3a2f33322d3430203d3e20323634313230.roa (hash: MWwXHflHDWAcArs9RIp1jIAMDGRcTZytb96z8Z4YBJ0=)
                          5: 3137372e31322e3132382e302f32322d3234203d3e20323634313230.roa (hash: WO+FKFMBBiOVPBQfaW1urrem7SgkrtoJJxK0M0e9ZEI=)
                          6: 1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl (hash: DZ9I9PdIhTdA2iUX3o75roc2kLxkAVOvXZXFv/dQMxs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 20:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:6f:94:1e:c2:16:da:a3:e5:4f:62:e8:66:e6:34:e7:09:28:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: May 11 20:46:43 2025 GMT
            Not After : May 13 00:21:43 2025 GMT
        Subject: CN=08327C74277867A62BF74CD63E97B3E2FD4E1820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:51:e9:d1:f9:d0:08:0f:4f:59:6f:c1:8a:
                    85:1b:b9:c7:cb:09:9b:d8:59:b5:e5:49:c8:37:4e:
                    77:4f:72:08:a0:49:27:68:98:0d:8f:b0:22:99:c5:
                    9f:bb:8b:ce:4a:e1:d1:c1:70:f9:e7:b1:97:83:07:
                    6d:55:4f:85:ef:45:f2:51:b5:fe:93:f8:5a:70:7e:
                    af:e3:ef:44:04:d4:82:d3:20:52:99:c7:72:04:b5:
                    4b:b8:bc:4e:6d:fe:0a:eb:54:69:bb:4f:70:ff:df:
                    f7:83:c9:12:55:fd:02:ad:3f:53:8d:c6:de:69:a5:
                    54:b1:c0:d2:6e:a1:dc:41:ed:a9:29:68:2d:e5:fd:
                    5f:92:3c:21:db:ab:63:fc:9f:d9:be:24:e9:be:16:
                    05:ea:0d:87:2d:b4:b7:44:8a:aa:7c:1e:31:4f:d2:
                    3c:25:f2:2c:b4:98:50:97:03:ac:a5:d7:2b:49:7e:
                    cb:24:ff:fd:d7:d5:3d:af:49:23:72:72:c5:fc:cc:
                    eb:a9:c8:c4:a2:7d:fc:9e:b6:9c:9c:d4:56:a4:bb:
                    a4:6d:75:34:80:17:69:0f:fc:19:16:60:fe:57:2e:
                    f2:23:89:56:01:ab:7c:f0:7a:d5:2f:82:2c:c5:a5:
                    fb:0d:02:de:45:0d:64:37:49:28:6c:41:8f:5b:82:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:7C:74:27:78:67:A6:2B:F7:4C:D6:3E:97:B3:E2:FD:4E:18:20
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:cd:98:e6:e0:3f:eb:f7:3c:a7:d6:fd:a5:fc:cc:fb:30:
         d0:ca:82:e8:d2:7a:a2:88:bc:e3:10:93:67:6f:77:fd:3e:a2:
         85:19:4d:aa:4c:54:e7:fd:00:54:37:60:6b:90:73:96:76:72:
         be:ad:96:81:0c:3d:70:d5:aa:c7:2f:63:07:9e:6f:63:05:91:
         50:73:54:9e:3e:7e:17:ae:3e:83:75:4c:5c:79:6f:81:59:c8:
         e1:21:31:ab:22:b8:13:a0:05:3e:b8:b9:e7:78:c2:63:a9:ef:
         a9:7d:45:8d:6f:d1:eb:72:b0:e6:f9:ab:fc:17:18:fa:3c:6d:
         f1:83:01:cd:48:58:f2:8d:de:75:5f:3e:93:f5:43:ba:41:0a:
         ab:9b:bd:35:ce:c1:a5:9a:20:e0:fa:30:7b:d9:97:0f:df:7a:
         82:78:da:79:3a:9b:0b:7e:85:56:3a:b2:3f:36:61:bd:a4:34:
         29:6d:a2:1c:1a:a0:f9:7a:8e:48:72:df:4f:03:dc:63:69:8d:
         a1:49:30:fe:18:a6:34:86:c3:91:6a:1e:e6:65:26:5c:24:3d:
         3c:b7:2c:cf:1a:9a:0c:0e:77:4a:73:bc:69:ca:43:49:5a:9d:
         51:42:05:d3:fd:c9:cf:93:ab:8a:43:f3:d1:07:63:4f:0b:42:
         eb:d2:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:39:09 2025 by rpki-client