Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
File:                     D293EBE899975158DDB35D74133FF1297A6D6E38.mft (raw, json)
Hash identifier:          MHww+YfNSgWjreggT/l2FRuW1F+nXgNe6UsfOAet4FI=
Subject key identifier:   5D:BE:FE:56:27:1F:56:2B:E1:A9:A0:00:C5:94:90:84:E1:47:EB:67
Authority key identifier: D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38
Certificate issuer:       /CN=D293EBE899975158DDB35D74133FF1297A6D6E38
Certificate serial:       303EA2F54D896422BCED264F7D580CD52F209CCB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
Manifest number:          021D
Signing time:             Wed 14 May 2025 04:40:58 +0000
Manifest this update:     Wed 14 May 2025 04:35:58 +0000
Manifest next update:     Thu 15 May 2025 05:33:58 +0000
Files and hashes:         1: 323830343a336566343a3a2f33322d3438203d3e20323636363331.roa (hash: rT4YuQwAcY/06508eGhRI+ROuO4rF5VBtawo6Tmhiuw=)
                          2: D293EBE899975158DDB35D74133FF1297A6D6E38.crl (hash: K3KCGHzsR5bAeANEh3+iT/OJqSBtsRZAEqEjM0rzXsQ=)
                          3: 3132382e3230312e3134302e302f32322d3234203d3e20323636363331.roa (hash: q6nNJFIK006loXuR9F3IuuWVGG7687FAzE3fVXpISSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl
                          rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 05:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3e:a2:f5:4d:89:64:22:bc:ed:26:4f:7d:58:0c:d5:2f:20:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D293EBE899975158DDB35D74133FF1297A6D6E38
        Validity
            Not Before: May 14 04:35:58 2025 GMT
            Not After : May 15 05:33:58 2025 GMT
        Subject: CN=5DBEFE56271F562BE1A9A000C5949084E147EB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:6e:19:1a:6c:e9:c0:c8:ef:09:a2:08:a3:
                    79:99:4f:5b:04:c6:66:79:21:b2:5c:35:f8:09:f6:
                    6c:4b:96:39:87:5c:ea:b4:b3:c2:b0:5b:f2:8e:ea:
                    32:38:ff:de:e4:8d:0b:6c:bc:22:dc:83:73:67:ab:
                    7e:ba:8f:da:0c:1d:04:bb:8c:e5:00:d6:29:5b:b2:
                    59:53:e3:d6:cd:d2:1e:b6:62:c0:4c:2b:bf:7c:ac:
                    03:05:23:03:ad:2b:ae:0f:7d:c4:34:9c:35:39:0e:
                    6a:c1:62:88:ea:fb:5c:90:07:5c:4f:57:7f:e2:99:
                    1b:fc:84:90:b4:c2:f7:8e:0b:22:f2:a9:5b:de:15:
                    60:33:34:dd:71:01:47:06:f1:55:99:00:3e:5f:7a:
                    43:65:61:0b:8c:3a:b1:50:71:fe:dd:16:41:2c:6e:
                    3b:f9:ef:4e:23:3e:60:13:15:68:f1:48:65:8a:8c:
                    6c:0d:dc:99:87:80:d1:8a:65:95:30:96:80:cc:95:
                    09:6c:aa:a9:61:66:df:62:ac:8f:94:1a:c7:77:20:
                    86:74:dd:74:0f:54:bf:e8:38:b9:e8:3d:b8:9d:20:
                    e5:3f:27:a6:08:92:e1:52:e2:2d:bc:8c:0c:6e:2e:
                    9d:bf:54:04:ec:5a:19:31:5e:a7:38:92:da:23:57:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:FE:56:27:1F:56:2B:E1:A9:A0:00:C5:94:90:84:E1:47:EB:67
            X509v3 Authority Key Identifier:
                keyid:D2:93:EB:E8:99:97:51:58:DD:B3:5D:74:13:3F:F1:29:7A:6D:6E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D293EBE899975158DDB35D74133FF1297A6D6E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/1/D293EBE899975158DDB35D74133FF1297A6D6E38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ec:32:96:3d:e7:a6:ea:da:ea:0f:a6:bc:d6:15:f5:a4:dc:
         22:8e:f9:a7:bb:aa:2d:6c:26:2b:f4:51:b8:ea:1b:2e:e2:9a:
         e1:f9:3e:39:a2:2d:56:33:2e:78:4c:8a:0e:4c:d9:0d:d7:95:
         82:b3:49:2b:cf:e7:d4:79:7a:22:c4:d7:f3:76:89:7b:0e:7f:
         00:82:83:ad:99:da:cf:30:58:0b:3a:b2:16:53:24:5a:9f:1b:
         8f:a5:90:2f:24:88:fc:3f:b7:7f:1b:9b:0b:c3:f7:97:45:4d:
         0d:c1:57:42:8b:7f:b7:ea:0e:2a:14:09:c7:30:2a:90:5d:dd:
         f3:ec:cf:be:32:e8:64:1e:85:3b:89:d2:53:f1:61:c4:d8:c9:
         60:0a:5a:55:7d:27:5e:93:dd:04:0b:f0:2e:98:b4:88:70:4e:
         4e:03:39:ca:27:cf:d9:fa:22:aa:b5:68:92:a4:93:f6:7e:74:
         17:65:91:da:b2:7e:f3:16:8c:fc:cd:64:9d:81:c4:ca:60:22:
         17:37:e7:fb:e8:20:43:68:ba:3b:bb:01:9e:5c:79:82:77:c2:
         9c:fb:58:01:5e:05:f7:21:9d:2a:4f:24:f6:53:2e:bf:90:36:
         fc:85:d9:9b:e9:04:f0:d1:51:ce:9d:5d:44:c7:16:3c:ff:65:
         07:05:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:19:19 2025 by rpki-client