Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
File:                     CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json)
Hash identifier:          VW8zLbUJfkRJM9ybB8A4RVwzd+85waxaOVl1/5UNhOQ=
Subject key identifier:   32:68:F5:30:03:FA:38:BA:8B:B2:B6:B4:03:D1:A4:32:7C:4B:5D:8C
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       664A21CBDD9A1C2B7BCE3F285B6B94A75D746C2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
Manifest number:          0219
Signing time:             Sun 11 May 2025 12:41:15 +0000
Manifest this update:     Sun 11 May 2025 12:36:15 +0000
Manifest next update:     Mon 12 May 2025 12:50:15 +0000
Files and hashes:         1: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=)
                          2: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=)
                          3: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: bm3KZ55sA0F8gC3VjtPZi2VSsBK09wQPTxNPp6IjdwE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl
                          rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 12:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:21:cb:dd:9a:1c:2b:7b:ce:3f:28:5b:6b:94:a7:5d:74:6c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: May 11 12:36:15 2025 GMT
            Not After : May 12 12:50:15 2025 GMT
        Subject: CN=3268F53003FA38BA8BB2B6B403D1A4327C4B5D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:f3:18:68:cb:20:58:86:90:1a:d9:29:30:
                    47:fb:ea:79:3a:d0:dd:17:14:51:7a:d6:49:f9:22:
                    47:b4:ce:10:12:13:c3:04:a7:da:b0:4b:86:b0:42:
                    9d:d6:cd:03:4e:5b:ec:65:42:e0:a8:6f:73:6f:0e:
                    f4:1c:d8:ba:17:6f:86:bf:98:95:28:ec:a8:c1:a4:
                    f9:8a:18:ea:2f:ad:95:0e:a6:52:6c:e1:c2:09:d4:
                    43:40:6c:cd:29:dd:ce:6e:28:81:11:85:42:c3:ad:
                    b7:64:db:69:b1:2c:a1:ac:5f:0d:75:5c:c8:21:9f:
                    be:12:42:4e:1e:73:39:b3:90:bb:54:c6:e0:58:ff:
                    44:dd:55:22:7c:3a:ac:62:68:a9:ea:dc:33:4f:67:
                    ee:85:5c:8f:97:fc:83:47:51:85:09:f1:c6:74:8b:
                    38:ac:53:2e:5c:16:23:aa:6a:8c:23:7c:32:94:9c:
                    b5:ae:fb:31:f9:9b:43:21:86:3d:b4:e7:2c:b5:bc:
                    ef:33:9a:31:7d:9a:5b:09:ce:4b:33:20:b0:5d:28:
                    96:b7:f1:5e:09:1a:a4:ea:fd:47:a0:e5:79:f8:34:
                    a4:5f:fe:a8:1f:c0:67:31:ca:06:fd:99:34:b5:4d:
                    0b:5d:06:01:1e:89:b5:44:73:6c:b3:27:73:82:d1:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:F5:30:03:FA:38:BA:8B:B2:B6:B4:03:D1:A4:32:7C:4B:5D:8C
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:5a:64:9a:b2:f7:15:b2:35:c2:1c:3e:4d:69:62:e8:0c:
         b0:ea:4c:fe:50:ac:4e:e3:fb:77:3c:85:f4:60:1d:a7:17:42:
         cf:2f:9e:d9:64:8d:ee:97:b8:98:5a:91:7a:37:0d:d2:65:fd:
         dd:2d:bd:f7:ce:be:18:75:45:87:f6:c2:e3:23:3f:b7:47:3d:
         12:43:cb:21:5d:f5:67:3f:e2:ed:ac:2e:60:7e:e1:b9:5f:2d:
         c8:cb:45:8d:8d:e0:48:49:d0:2e:c3:57:08:fd:c4:d1:16:8b:
         89:4d:9d:4f:ab:f7:a3:28:e0:96:53:4c:b2:bb:b9:d4:fd:93:
         8b:ad:3a:13:e3:5f:20:e8:2b:28:a4:20:4d:59:c9:cc:9c:3b:
         2a:52:ad:f0:02:c1:2c:d8:89:da:48:8a:0f:8d:17:83:fc:6b:
         ff:9f:09:48:67:28:5a:34:59:34:57:63:53:0c:60:cf:10:97:
         eb:30:ad:18:d4:d5:ee:78:8b:e6:75:cf:cc:8f:3a:0f:1c:c2:
         74:0f:57:6b:2a:e0:3f:87:ff:11:2b:41:f7:86:08:bd:a0:99:
         8d:88:9c:c9:cd:e0:74:1f:29:ab:80:d9:6e:8f:21:25:e9:b0:
         9e:70:31:9a:35:89:34:a4:ba:49:c3:c7:26:70:46:53:0f:2f:
         44:78:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:13:49 2025 by rpki-client