Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
File:                     A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft (raw, json)
Hash identifier:          qruvW3RBXFhAVg5ccn3RxzJht/+mzis+DrX8vhMx8B8=
Subject key identifier:   15:80:C4:83:48:8B:5A:9A:E2:AD:DE:D5:C8:F0:64:26:28:02:7B:0A
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       2FA5CF14305C74440283BBBACA647300A7B8372F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
Manifest number:          0219
Signing time:             Mon 12 May 2025 13:03:45 +0000
Manifest this update:     Mon 12 May 2025 12:58:45 +0000
Manifest next update:     Tue 13 May 2025 16:46:45 +0000
Files and hashes:         1: 323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (hash: IGZC/ZqhSQbu5GFCYQCixQwJXOH+Gl9YndWhUHmy/Gc=)
                          2: A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl (hash: uHReTAXNXSTTQ5HvF7xDpMwgmtBFOUt4flK2ua8waqw=)
                          3: 3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (hash: FAgRhtWVbW83aLMZDwCfmIgyXr+8usf+s+PrU2i3Erw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a5:cf:14:30:5c:74:44:02:83:bb:ba:ca:64:73:00:a7:b8:37:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: May 12 12:58:45 2025 GMT
            Not After : May 13 16:46:45 2025 GMT
        Subject: CN=1580C483488B5A9AE2ADDED5C8F0642628027B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:d7:13:02:f5:10:3f:4d:fd:46:aa:b6:f3:
                    46:bb:86:d5:d9:7c:4e:d5:4a:93:42:8f:da:1b:38:
                    99:49:de:43:19:f6:18:0a:ce:6a:09:7b:cc:7d:f5:
                    87:ad:21:cf:3e:f8:80:1f:15:f5:9e:07:19:4b:6f:
                    66:06:a1:1b:db:e0:aa:fd:78:be:48:21:45:c3:cf:
                    88:de:3f:8f:94:8b:ce:74:03:b9:60:10:b1:38:63:
                    b7:d5:78:c4:ee:ed:84:c3:c8:76:31:d3:2d:0c:68:
                    59:78:08:81:b4:e7:01:00:2a:e7:65:af:3c:f0:b0:
                    ad:d7:65:90:48:c2:f0:20:9f:3c:40:d5:d4:27:f9:
                    f6:ca:5f:14:e7:df:99:e1:44:97:2c:80:b3:1d:df:
                    a8:58:db:c5:54:92:ed:40:d0:99:ec:e8:a5:be:99:
                    2d:dd:eb:18:b9:b0:29:81:f5:7b:18:9b:92:01:0a:
                    e1:9a:d8:80:e8:bf:ef:41:ec:a9:4a:06:8d:ba:02:
                    18:bf:2a:32:bb:59:df:ca:e4:2b:b5:d9:f4:c8:39:
                    c5:dd:2c:34:72:72:20:72:8e:31:7e:bd:c1:52:85:
                    a2:50:1b:10:60:2a:06:9a:ee:6d:17:c1:92:7e:c9:
                    aa:de:e8:47:43:8e:7a:2e:c0:b8:20:fd:e7:21:31:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:80:C4:83:48:8B:5A:9A:E2:AD:DE:D5:C8:F0:64:26:28:02:7B:0A
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:a3:0c:a8:d0:8e:c7:f6:48:42:fe:ff:54:2a:5d:cd:fa:
         e9:a9:e8:65:5c:a6:3a:d5:56:2d:0b:d5:e9:c6:56:14:0b:de:
         20:9a:33:9e:3c:e3:5c:d6:d3:2f:ab:d5:0a:f7:ce:aa:f0:1b:
         c9:df:3f:d2:89:bf:c9:3f:8e:b3:1f:38:78:ef:b5:c8:b2:ea:
         81:aa:4c:8e:7b:dc:0a:a9:9a:f3:99:71:b6:10:63:55:a1:29:
         f7:ba:3d:da:fc:11:15:89:78:6a:66:af:1f:20:ac:01:37:7b:
         34:07:af:e2:6c:ff:a4:51:af:62:78:a0:27:ab:e7:50:54:a3:
         20:f6:89:9b:17:2a:84:8a:b1:c8:c0:e3:93:0d:90:64:e9:16:
         77:6e:aa:e3:c5:6c:aa:18:39:90:78:04:08:03:5f:60:21:9d:
         f8:92:66:b1:bc:dc:fc:6e:2f:e6:72:56:85:31:fd:32:fc:33:
         d8:9b:5d:fe:73:f9:5d:22:9c:15:b0:16:8c:60:f9:9a:4c:47:
         5c:41:f1:f6:bd:58:70:3a:e9:2c:de:00:a8:ab:96:4d:1c:42:
         11:20:6f:6d:7c:ab:1c:e1:10:d6:1b:fb:52:cc:67:fe:9e:85:
         c9:e7:36:09:17:33:ed:f3:14:f6:c4:4e:1a:5c:bd:c7:0d:20:
         12:6d:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:15:28 2025 by rpki-client