Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
File:                     901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft (raw, json)
Hash identifier:          uvKKIRisIS7kSL9qySMrQHJSZuxRlr1GHBdB5XC3nK0=
Subject key identifier:   51:30:C6:6C:04:84:B0:F1:C0:A3:C7:CC:EE:95:82:02:A3:25:9D:28
Authority key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Certificate issuer:       /CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
Certificate serial:       7EF6D8AC3D9BE465909316692E647C005EFCF27F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
Manifest number:          021D
Signing time:             Mon 12 May 2025 16:39:20 +0000
Manifest this update:     Mon 12 May 2025 16:34:20 +0000
Manifest next update:     Tue 13 May 2025 16:51:20 +0000
Files and hashes:         1: 3137372e31302e3230342e302f32322d3332203d3e20323632333032.roa (hash: zXZVmG0BvN5Qp80Uihq7QXyG1HoNMssDmv/MIwdlRT4=)
                          2: 3137372e38372e3133322e302f32322d3332203d3e20323632333032.roa (hash: o4g5XU20jdFu4J/XwxAVfr4F1cH7vUffEOyIh7mNHUg=)
                          3: 901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl (hash: WU3RX1KTHVkUs78n1ctvQ7nNlWG1YSoLhRBSesWuyrk=)
                          4: 323830343a6566383a3a2f33322d313238203d3e20323632333032.roa (hash: d9TiLfPFGCaU1Z2AIBNzkdz7jXn3buSzxxFil3as2+c=)
                          5: 3137372e38372e3132382e302f32322d3332203d3e20323632333032.roa (hash: 7kgaaTH8I9272TqXqvm9uJZFGNVlZ3gRXBFXlOixjtM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl
                          rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f6:d8:ac:3d:9b:e4:65:90:93:16:69:2e:64:7c:00:5e:fc:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Validity
            Not Before: May 12 16:34:20 2025 GMT
            Not After : May 13 16:51:20 2025 GMT
        Subject: CN=5130C66C0484B0F1C0A3C7CCEE958202A3259D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:bf:ee:81:d0:d9:1d:14:3b:01:fc:ae:0f:
                    5b:8d:c1:92:8d:2f:b4:e9:9a:f1:be:64:9b:c5:6e:
                    13:f9:67:6d:ea:7b:38:59:e1:9f:ca:e3:d1:3b:bd:
                    1e:ee:7e:16:a3:1a:10:08:3a:d7:51:15:8b:a4:ee:
                    7d:ed:19:e1:c8:88:f2:7a:2d:f7:f9:f4:81:51:67:
                    9b:b9:ee:3f:e5:99:8d:0a:8f:6c:30:19:7e:09:10:
                    fd:67:90:e5:25:5c:1f:9b:1d:17:85:8a:26:e8:7a:
                    cb:0d:12:36:1d:4e:79:2a:2b:2b:4b:5a:93:96:9d:
                    7a:b8:3b:1d:ed:7a:b9:42:c3:f1:c1:33:e2:1d:f8:
                    4d:28:22:68:b2:96:a9:49:58:ca:61:1a:bd:ae:fb:
                    32:f1:7d:22:30:29:9e:55:e9:6b:27:cf:20:a2:3f:
                    eb:dd:2c:e9:8f:78:bc:c6:93:18:3f:13:88:0e:d5:
                    43:d7:b3:70:59:9c:d8:ea:3f:c5:57:d5:88:7e:70:
                    14:c1:09:2f:39:cb:2e:3b:55:df:b2:bf:63:5e:cd:
                    55:7f:ca:63:cd:ff:b1:23:19:ed:27:43:da:80:eb:
                    5d:2f:50:44:ba:b3:3c:7c:e0:b4:1b:c7:d7:1f:21:
                    f5:01:1e:c9:9f:0d:7d:d5:b1:49:a7:fb:e7:b6:8e:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:C6:6C:04:84:B0:F1:C0:A3:C7:CC:EE:95:82:02:A3:25:9D:28
            X509v3 Authority Key Identifier:
                keyid:90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:eb:fb:45:4e:90:c3:54:b1:86:db:13:f9:da:17:ef:5d:
         0b:f9:dc:38:16:ac:41:7e:45:e9:83:63:dc:79:8b:38:12:e7:
         56:5c:1e:5a:27:4e:7b:07:32:53:5d:f1:d7:3c:cc:3b:dd:71:
         e9:1e:7f:f2:5b:ac:a1:9b:9e:14:9c:ba:fc:f9:8a:ef:9b:1e:
         a3:0b:51:5f:a3:c1:42:94:d7:f3:d7:47:2e:e8:b1:4c:58:a0:
         3e:56:4c:ad:59:5e:ca:4e:3b:b4:57:03:5e:70:6f:a6:af:b2:
         98:8f:f6:c6:af:cf:ea:8f:d1:5d:a5:56:24:cb:8e:2d:df:e3:
         c0:38:cf:01:aa:1a:5f:12:f8:21:19:7d:7e:f3:e5:d3:ff:12:
         d0:fc:28:0c:44:0e:23:ac:ad:e5:26:84:fc:ef:75:d7:26:50:
         b5:7d:ef:a2:6f:6c:09:b3:3e:98:90:a2:ce:07:32:e5:49:7d:
         91:f8:ff:29:9d:a5:ad:00:0e:d9:61:52:70:9b:dd:41:57:03:
         4b:1c:9e:73:ee:94:8a:a1:ec:b2:d3:31:0f:2a:14:4d:6a:e6:
         98:65:2e:e8:33:47:eb:25:10:62:d8:ff:ea:9a:82:04:ec:93:
         78:a2:74:67:64:9f:77:7a:d2:38:02:3c:d6:24:e3:34:6f:b1:
         96:74:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:08:09 2025 by rpki-client