Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft
File:                     9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft (raw, json)
Hash identifier:          bSiLtdMS0CxE46AVaJJgZF/cJSgScBlwhhcuzt1hYHY=
Subject key identifier:   26:C3:E8:8D:8C:AF:50:62:0D:E2:57:BB:F0:C1:79:CD:35:51:80:EE
Authority key identifier: 9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF
Certificate issuer:       /CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF
Certificate serial:       26D4A979034D0F86C175A724958FA68D5982BFEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft
Manifest number:          44
Signing time:             Thu 15 May 2025 07:39:35 +0000
Manifest this update:     Thu 15 May 2025 07:34:35 +0000
Manifest next update:     Fri 16 May 2025 08:06:35 +0000
Files and hashes:         1: 9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl (hash: o+LDL7fIvoYvTHW6af0+p3VyOzYqLcd8/vKVw/Nn+Vo=)
                          2: 3230312e3138322e3134342e302f32322d3234203d3e20323637353339.roa (hash: hFRV97wA8T/QDnmF7Ijr8alWrMcuht4PcO84oSwDwus=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl
                          rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d4:a9:79:03:4d:0f:86:c1:75:a7:24:95:8f:a6:8d:59:82:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF
        Validity
            Not Before: May 15 07:34:35 2025 GMT
            Not After : May 16 08:06:35 2025 GMT
        Subject: CN=26C3E88D8CAF50620DE257BBF0C179CD355180EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:4d:c3:53:da:2a:3a:84:5e:fc:46:86:89:
                    51:5d:0a:00:74:d7:1d:25:be:39:94:d1:ae:33:9c:
                    d3:6d:f3:a1:85:f7:9f:7f:8e:31:98:3b:d3:96:fa:
                    0d:71:65:e2:3d:f7:2f:72:9c:ac:87:e2:bc:aa:0c:
                    29:26:80:c7:5d:0f:1a:7d:95:b9:0e:3e:0c:28:eb:
                    4e:34:a0:a9:1a:52:65:b5:9f:cc:23:71:f6:8f:8c:
                    fb:15:86:7c:b4:77:17:23:dc:3b:2d:e3:5a:c2:36:
                    4a:32:4c:ed:57:0d:d2:80:b3:79:23:03:3e:b7:9a:
                    6c:bb:c2:1e:3f:9d:79:de:0a:92:4f:cc:0e:47:05:
                    1e:31:26:d0:64:35:32:c5:68:08:92:77:24:78:19:
                    e8:73:2d:ba:62:eb:f3:bc:0c:8a:cb:88:7e:51:aa:
                    2b:22:84:af:db:10:92:a1:70:71:70:b0:8c:0e:f9:
                    cb:3e:f3:72:c2:d3:86:d8:20:59:74:30:57:67:99:
                    00:20:a6:fc:3a:1d:53:2d:92:c9:78:2b:5f:69:32:
                    f0:9e:81:de:33:77:0c:e1:f0:87:bf:a9:ee:4f:ee:
                    34:56:57:52:df:a8:f7:06:a7:5b:07:b5:cd:22:75:
                    19:99:1c:f9:f8:e7:9e:31:cb:25:05:96:5c:14:d0:
                    b9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:E8:8D:8C:AF:50:62:0D:E2:57:BB:F0:C1:79:CD:35:51:80:EE
            X509v3 Authority Key Identifier:
                keyid:9B:E8:4B:7D:CA:4C:AC:C2:C9:FC:D8:CB:3F:9E:B4:F2:AE:30:67:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/9BE84B7DCA4CACC2C9FCD8CB3F9EB4F2AE3067AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:df:27:aa:90:25:10:7c:63:7b:f1:21:08:41:cb:e5:64:
         b2:86:da:a2:c1:77:35:ed:b2:90:7c:c3:c0:ac:39:2c:d3:75:
         f9:41:c6:4a:f3:b8:93:1c:be:81:88:74:01:52:27:4d:3b:9b:
         51:1b:f0:ba:25:80:6c:99:28:6a:d3:39:04:af:61:2c:92:9b:
         17:b3:6d:c3:2a:39:44:46:91:da:87:51:4b:d5:fc:69:9c:50:
         08:cb:95:95:47:0f:a0:a0:d7:0e:46:73:fc:f3:1a:19:3d:6f:
         d8:02:9c:2f:9d:03:c5:4f:e8:76:99:24:c0:bb:42:a1:e6:12:
         3d:a4:03:19:d1:6c:fb:d5:aa:39:0f:5b:99:71:18:8f:d9:e3:
         8a:05:da:aa:03:27:2a:e9:78:d5:4b:cb:3c:f4:04:25:d0:85:
         66:10:51:c8:7f:02:37:25:6a:e8:e0:50:39:80:dd:90:b5:70:
         4f:45:23:de:3d:e5:62:2b:91:46:1a:fd:c9:90:5b:f9:9f:f3:
         ef:7b:a5:fd:02:a4:94:f5:d4:bd:4d:05:8e:d0:cd:3b:23:16:
         9b:d1:31:87:53:1c:3b:c7:52:94:ef:75:50:b4:74:ff:c1:ed:
         e2:3b:f2:22:a2:b6:e2:a9:a4:f4:29:d3:bf:67:6b:c4:63:99:
         c1:e2:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:32:34 2025 by rpki-client