Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          cKaKSXpubKLIzFD/nxR54T9ckr1mOgu6YFLP+y+Dc+4=
Subject key identifier:   F9:39:BA:3E:D4:C5:D4:18:9F:BA:05:70:5F:5D:4B:C9:CB:5F:87:9D
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       15A8C8DB35E97183C61420965503780EEF40AD7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          025F
Signing time:             Sun 11 May 2025 11:10:00 +0000
Manifest this update:     Sun 11 May 2025 11:05:00 +0000
Manifest next update:     Mon 12 May 2025 11:10:00 +0000
Files and hashes:         1: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
                          2: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
                          3: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
                          4: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: ZAARh2GLs3cYKD/CMBBiqVv8tYSxiv9AObnuwkBsU7o=)
                          5: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
                          6: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
                          7: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:c8:db:35:e9:71:83:c6:14:20:96:55:03:78:0e:ef:40:ad:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: May 11 11:05:00 2025 GMT
            Not After : May 12 11:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:c1:6b:3e:c8:0f:34:2d:8e:cf:53:9a:7e:
                    8c:88:76:47:8e:34:72:d0:e5:6f:8f:3d:84:19:c7:
                    40:f7:4d:d6:cd:7d:d8:06:38:38:e5:e6:a2:90:1b:
                    aa:d2:0b:63:0a:60:2f:b5:d5:a5:9a:11:eb:26:b3:
                    9a:e4:96:83:60:d7:1a:7a:43:1e:7f:64:27:2a:9c:
                    06:af:85:56:de:8e:16:45:c8:49:06:b7:08:46:d7:
                    7d:f4:e7:eb:6e:0c:4b:f5:de:9d:4d:2a:ab:93:1d:
                    5c:33:31:b7:1e:5c:a2:ad:ad:e7:f8:1d:a5:13:c5:
                    64:7d:1b:91:46:d3:cb:98:24:7d:f5:38:2b:05:7c:
                    2d:db:92:fc:21:e9:09:e3:1a:3b:31:05:0b:41:c2:
                    17:1d:a1:df:43:75:ad:40:34:33:37:90:74:64:45:
                    ec:66:f6:b6:64:ab:22:28:43:a5:63:28:61:9d:f7:
                    c0:29:d1:23:90:7c:ce:32:09:fa:36:94:a6:26:ab:
                    41:a1:5c:bd:19:80:a4:7c:d9:99:3e:04:6f:d6:2e:
                    a5:a5:84:8b:d4:e9:5a:02:44:2b:ac:3b:55:78:1c:
                    ea:38:0d:4c:92:3b:15:68:26:71:0f:cf:ef:29:f4:
                    0f:c3:5e:54:b7:84:09:1e:6b:63:24:45:8a:fd:f4:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:BA:3E:D4:C5:D4:18:9F:BA:05:70:5F:5D:4B:C9:CB:5F:87:9D
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6c:f9:5b:42:1a:ad:80:77:dd:ac:9d:dd:ed:78:39:15:a8:
         ab:06:83:03:0f:dd:d7:7e:72:77:0d:b2:00:f3:1b:af:28:f7:
         f6:7d:1c:f3:e5:11:4f:c2:32:31:05:48:c5:72:11:0e:c6:88:
         96:32:85:6c:ac:10:30:01:4b:09:4c:4a:a3:17:13:37:96:54:
         85:62:33:ca:11:15:33:f4:c4:d6:9d:23:90:f0:53:df:79:6f:
         b3:36:73:e3:5f:eb:c3:95:a1:f6:03:bf:a5:80:5e:96:d2:9c:
         b5:01:24:7a:d4:c4:69:db:7b:cb:f8:a8:09:e8:e6:30:1a:32:
         7f:ea:10:db:5c:df:0d:25:8a:02:f9:47:da:4f:85:3b:24:bc:
         4a:25:f6:a9:99:32:a0:49:84:65:72:a7:67:d5:fd:21:8e:ae:
         18:fd:0b:48:69:e9:25:c5:5d:c6:40:20:de:d2:f6:05:ef:67:
         4e:0f:86:b0:b8:bd:d0:c3:ba:e2:9d:97:a4:c2:8b:b8:f9:ec:
         70:2c:e0:17:e9:0b:67:1b:4b:d6:9d:24:f0:f4:2b:97:b5:3f:
         37:75:c2:a9:2e:ce:5a:8b:39:9d:47:16:42:06:42:38:d6:f6:
         b0:42:42:a5:7b:dd:70:56:d1:6b:7a:73:49:c8:13:4a:bf:f4:
         f4:c8:e8:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 12 04:17:31 2025 by rpki-client