Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          16WdbigB+a2iAi94AtN8gE07ugncdFsbtUloyI4r6WY=
Subject key identifier:   B3:4E:8F:EE:7E:37:25:05:D2:E1:D4:77:5A:F8:4A:A8:0A:32:F3:13
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       2D3DD1F201DDDF47F52FEC6F3573CBE6C84204C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0187
Signing time:             Wed 02 Jul 2025 12:29:30 +0000
Manifest this update:     Wed 02 Jul 2025 12:24:30 +0000
Manifest next update:     Thu 03 Jul 2025 15:30:30 +0000
Files and hashes:         1: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          2: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          3: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
                          4: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          5: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: Nzq9f3mzBZGIzWLIoBCdV34sxwUahRCdGn82RZOwRgY=)
                          6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
                          7: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 15:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3d:d1:f2:01:dd:df:47:f5:2f:ec:6f:35:73:cb:e6:c8:42:04:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul  2 12:24:30 2025 GMT
            Not After : Jul  3 15:30:30 2025 GMT
        Subject: CN=B34E8FEE7E372505D2E1D4775AF84AA80A32F313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:99:bb:8e:4a:62:25:67:e7:62:d8:fa:d2:
                    84:29:c7:3d:78:3a:94:da:92:4c:b6:78:8d:4b:83:
                    66:5a:97:f2:69:63:51:6a:5e:fa:1c:26:d9:94:ac:
                    dc:bd:42:4c:10:8b:41:fc:70:03:96:2a:09:3a:d1:
                    cc:74:cd:c0:13:17:f7:ef:46:fb:a3:18:a5:84:91:
                    d0:44:6b:f3:19:bd:aa:3f:3f:43:5d:0f:e0:ac:41:
                    12:fd:65:11:e3:e2:ad:1d:cc:76:74:ef:35:ce:87:
                    18:18:84:22:7a:ab:94:42:a3:2f:1d:ee:fa:2a:44:
                    0d:0d:31:fe:91:de:5d:c7:af:07:1b:89:8b:c0:32:
                    bd:3a:af:eb:12:68:6e:56:5f:ec:28:a2:99:cd:67:
                    17:7e:89:ea:9f:38:62:24:8a:ed:db:b4:d1:9b:f2:
                    e8:ec:47:b8:ea:90:2e:0a:bd:4a:47:c5:17:3e:fb:
                    72:fa:1e:99:a4:98:07:bc:91:fe:84:33:0c:df:eb:
                    33:37:ec:99:92:09:fb:c4:d8:1b:3e:dc:7c:ec:95:
                    88:0f:46:82:74:5d:60:26:68:3c:2e:c2:16:d0:ff:
                    39:b0:af:e6:a9:29:9e:81:23:1d:92:e8:2b:f2:4a:
                    2f:fb:0d:29:92:2d:10:28:89:aa:0e:db:82:b3:b3:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:8F:EE:7E:37:25:05:D2:E1:D4:77:5A:F8:4A:A8:0A:32:F3:13
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:a8:d7:b3:98:64:25:fc:52:ca:ba:01:1c:96:5d:15:e8:7b:
         72:94:f9:2e:e0:fe:c1:08:0c:f2:46:fc:df:8a:2a:00:da:e6:
         de:65:11:3b:8d:95:81:17:b4:8b:d3:9c:4d:29:37:d2:39:a7:
         c9:c4:72:28:6c:d9:4d:8c:fb:35:45:31:e1:48:d3:fb:99:17:
         12:1c:4d:32:de:42:a6:99:dc:ab:d2:34:6a:1d:58:63:73:34:
         70:c2:b0:c7:d3:ff:05:d0:1c:c0:fe:80:71:6e:c4:da:87:49:
         c8:72:cc:60:65:88:f0:e5:f7:20:71:38:7b:3d:16:22:56:4d:
         89:01:46:81:6c:16:e9:4d:d3:a2:a9:eb:28:20:f6:69:c2:b6:
         5f:6c:e5:c2:fa:46:8a:a6:ee:24:ea:10:84:31:a7:69:fd:8b:
         cc:9f:ba:ca:3f:98:ee:b2:d6:e6:6d:fb:4f:d0:9d:4d:13:90:
         66:a4:af:e9:e2:92:04:32:a9:3d:ef:e2:03:e7:a4:7f:86:d0:
         73:d4:21:4f:b4:bd:e3:5a:c2:89:21:9f:7b:d5:d3:6f:60:36:
         ff:f3:de:e2:6e:02:66:3e:ed:78:8c:8f:5c:91:c5:19:57:ef:
         5f:b9:60:58:e2:05:85:e6:7b:d3:ed:28:b9:27:18:28:a0:e5:
         34:d6:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:32:21 2025 by rpki-client