Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
File:                     58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft (raw, json)
Hash identifier:          IuJGS3PAnJWl7nU7Asqt+VG28B5R7Qy0nHRn+CNpODw=
Subject key identifier:   58:22:08:4E:37:4E:C2:3C:87:42:FB:BF:E3:0F:67:BF:88:DA:84:C6
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       168D10CF3F959F821C62698DBEAE4C710C5ECA42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
Manifest number:          0221
Signing time:             Thu 15 May 2025 14:40:01 +0000
Manifest this update:     Thu 15 May 2025 14:35:01 +0000
Manifest next update:     Fri 16 May 2025 17:16:01 +0000
Files and hashes:         1: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (hash: 7aOz+w3xh/vQfWkq3CR+i6MPO1ooiQlR1tcsgc8jFHY=)
                          2: 58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl (hash: roC5OvBa7aTJUzykMoFYjvSckSeCWYosOk78BmPB1wk=)
                          3: 3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (hash: p7CnfzytcgcHXs5zf6jbP7AYnuJHNlfWJANH/i5HJzA=)
                          4: 3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (hash: Oq1Gl544c3jQF5Ot3+46X+ciHFxFoKXBs5JSWAsjqcg=)
                          5: 323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (hash: d6OdgEEtIa5bGHHXjt6Kdu1OjM8gDrTnz7mzpXDsx+o=)
                          6: 3137372e36362e3135322e302f32342d3234203d3e20323632343939.roa (hash: pCX4r+zPvwDy1mFVwWyz1e+IEoH318PNLvcLzFXKOHU=)
                          7: 3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (hash: sj2JtpNhGu9/ztHVKdkWqSNViNVqzCX3obxZMGRf8I0=)
                          8: 3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (hash: szNNtCNnjsORqs6P6lequjtDSRNgzjx1EHAehu47jc0=)
                          9: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (hash: SXqNZDQVkOYnhirJ+le7mTwCQqPy4Nbg4Z5FSElxc/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
                          rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 17:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8d:10:cf:3f:95:9f:82:1c:62:69:8d:be:ae:4c:71:0c:5e:ca:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: May 15 14:35:01 2025 GMT
            Not After : May 16 17:16:01 2025 GMT
        Subject: CN=5822084E374EC23C8742FBBFE30F67BF88DA84C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:a8:a4:84:1d:a4:d8:04:03:3c:4d:78:2a:
                    c1:68:0e:33:c2:9a:79:e5:60:1c:bc:c0:f6:cb:47:
                    15:cc:c1:fd:a7:ef:b3:e9:49:ac:b4:73:ee:ee:d7:
                    f5:06:f7:42:0e:df:e7:c6:b9:06:d9:45:95:8f:8a:
                    08:cb:d4:2c:3b:81:f6:15:15:61:1f:88:4e:3a:bd:
                    a9:b1:45:6e:ff:79:05:e7:6c:c7:c8:03:9e:a8:a9:
                    c5:c2:24:fd:39:32:10:f2:d8:ea:a0:ff:54:ca:76:
                    bb:bd:e5:62:40:0d:ca:63:ce:7e:0f:8f:a2:59:19:
                    a3:6c:27:61:a2:7f:40:3e:b8:2b:79:0b:3e:bd:b9:
                    81:83:18:75:a5:cf:8e:3d:44:4e:29:f5:84:f0:66:
                    c9:4f:b2:e5:0b:81:78:f6:90:9c:a3:72:e5:db:23:
                    a2:2f:d8:0a:13:20:26:7e:d1:76:50:13:7f:ee:26:
                    e9:3e:9e:99:03:ab:71:4e:cb:44:a5:52:9e:ab:ef:
                    72:00:ba:e8:16:e9:79:6b:ca:65:64:46:e5:8f:2a:
                    8a:e6:d1:27:4b:15:98:a8:18:34:2b:b7:7c:ae:8e:
                    f0:41:90:6f:e5:73:5a:fd:f5:92:c8:ed:3c:ba:01:
                    d5:da:77:4a:99:da:8e:5b:53:8e:72:36:7d:7f:a5:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:22:08:4E:37:4E:C2:3C:87:42:FB:BF:E3:0F:67:BF:88:DA:84:C6
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c8:7a:61:db:3c:56:60:4e:72:5c:d7:7c:97:f2:9b:c0:8b:
         66:88:c6:b2:94:97:e3:97:d6:ac:ce:d6:d7:b4:c7:a6:ef:45:
         d5:ea:12:a2:d2:88:1d:2b:d8:39:7a:68:ba:c8:4c:39:b8:78:
         26:c9:76:0d:c4:ca:7d:2f:41:80:36:fd:ee:33:96:27:0d:1c:
         c6:f8:1e:cd:16:06:1b:59:3b:80:9d:49:7e:aa:cc:51:a2:3b:
         38:43:b4:c5:fe:33:34:dc:62:09:46:83:ac:bf:4a:7f:a1:9c:
         e4:6c:a6:44:59:4a:f9:ff:00:41:d6:88:c8:69:75:93:d3:59:
         81:66:b4:b4:00:69:86:60:3a:83:9d:00:f9:10:32:bf:e8:5d:
         b3:5f:57:a9:a5:6a:e6:f2:ad:43:e9:e1:2e:ac:52:ad:04:27:
         95:aa:ae:29:66:c9:c3:6d:8a:aa:ec:fc:e6:fb:d1:a6:fd:b7:
         41:09:d6:8e:63:8e:72:76:c3:52:31:9e:af:6c:f9:f0:92:85:
         7b:97:ac:0e:73:ae:83:bb:ad:8a:18:6f:8a:48:40:fd:f7:01:
         06:c9:2a:54:76:b5:2e:d4:66:e9:e2:21:27:de:ce:f6:99:b0:
         73:f1:c1:91:89:80:77:64:4f:c9:e3:e6:c2:86:ec:f2:d5:78:
         20:72:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:19:56 2025 by rpki-client