Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
File:                     127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft (raw, json)
Hash identifier:          In9LMtwyTyzNQcaZ5JKh0EY3xXeGiUs00kkkBOCia90=
Subject key identifier:   DD:5B:AD:B1:AA:66:66:9F:C5:06:DE:A4:68:DC:BE:62:27:D2:61:7A
Authority key identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
Certificate issuer:       /CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
Certificate serial:       49B870C72D3E91DED088E45A04D5F4FD8B43C92F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
Manifest number:          0238
Signing time:             Sat 10 May 2025 23:00:00 +0000
Manifest this update:     Sat 10 May 2025 22:55:00 +0000
Manifest next update:     Sun 11 May 2025 23:00:00 +0000
Files and hashes:         1: 34352e3136332e34302e302f32322d3234203d3e20323638353438.roa (hash: Ag8Qawc+HefFvTJ51kVoGMXFFO7LUH/j18YWBWmL8nE=)
                          2: 127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl (hash: LLWTA3M1CVbq+GTxwOxhS1eCLWiTw8bX70ZeuQ6a9Rs=)
                          3: 323830343a353265343a3a2f33322d3332203d3e20323638353438.roa (hash: o73gCGVM7bko/lKWhm5aWFGk+vh0wHKrOZWXJjZWgSo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl
                          rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:70:c7:2d:3e:91:de:d0:88:e4:5a:04:d5:f4:fd:8b:43:c9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
        Validity
            Not Before: May 10 22:55:00 2025 GMT
            Not After : May 17 23:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:d7:9b:f3:ef:00:2e:9c:ff:90:ca:c4:dd:
                    8e:2c:ad:b3:a9:ae:7b:13:be:30:58:c6:de:52:68:
                    fa:8e:20:e2:ce:16:b1:64:93:e3:b5:8b:29:ae:dd:
                    46:56:0f:19:54:60:58:f5:17:99:e0:4f:ca:88:97:
                    d2:54:58:ac:23:f6:76:75:e3:a0:4d:a2:f4:68:8f:
                    a2:1e:65:8a:21:61:ea:fa:6c:21:2b:02:03:8f:9a:
                    64:38:e1:5d:56:00:a9:bf:9c:d7:d8:0c:37:d1:8e:
                    c2:25:3f:a5:ac:d6:b1:c5:a9:23:57:9b:a3:c3:8b:
                    a4:35:d5:20:51:a8:11:a4:43:86:cf:e8:4b:e3:ad:
                    15:1d:a0:b1:08:1a:ce:cc:bf:9e:34:80:1c:b4:ec:
                    b0:4a:7c:33:64:c6:61:6f:76:2b:21:bf:8c:8b:bc:
                    7b:78:58:fe:cf:cd:72:cd:8f:90:11:8d:1d:2d:0d:
                    78:9b:83:45:f7:c2:5b:59:b6:2b:cd:03:59:71:2b:
                    9f:8a:8f:bf:e7:61:3b:3a:f5:ce:58:cd:97:8a:cf:
                    f7:38:59:d4:11:77:67:12:28:f4:06:81:bb:14:d8:
                    f4:18:a9:8c:5b:0e:ae:c9:12:9d:e3:26:b4:6a:2b:
                    e8:50:ce:3d:98:9b:4f:a0:25:9e:5a:ec:9f:c8:71:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5B:AD:B1:AA:66:66:9F:C5:06:DE:A4:68:DC:BE:62:27:D2:61:7A
            X509v3 Authority Key Identifier:
                keyid:12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:ad:70:b4:7b:38:43:b3:cb:9d:86:c8:0b:04:b2:d6:d7:
         7e:5d:63:e7:5b:a7:e1:b4:17:d5:6b:57:32:d7:fb:4c:46:72:
         5a:fd:7f:c4:85:b1:65:a4:85:a1:97:70:c7:6a:e9:f0:bd:3e:
         5d:a3:a6:53:8c:d5:d1:b3:ae:e7:07:3f:c6:d0:1a:c7:38:95:
         c3:16:f3:2e:ff:4e:84:9a:94:75:fd:8c:97:79:91:77:4a:e6:
         af:f0:7b:d0:40:8e:83:a2:f6:ab:59:ea:4b:64:87:a6:e9:5c:
         e7:87:f9:0b:1d:73:96:dc:d1:6a:28:48:51:c5:4a:b0:6f:3c:
         1b:57:3c:b1:3e:43:24:72:e1:ec:fd:ec:d8:9b:bc:22:b4:58:
         22:a3:16:4d:55:60:9f:f1:97:29:6a:85:c2:73:8c:24:44:6e:
         96:a4:77:d3:02:2f:bd:c0:9c:ff:d5:67:1b:65:9f:4c:bc:58:
         6a:b4:82:e9:be:5e:dd:08:24:4f:f3:15:1e:32:7d:55:6b:97:
         df:8f:0d:ec:93:bc:24:0d:8f:fe:b1:e3:26:25:e3:6b:f4:14:
         12:43:dd:d4:e2:33:b3:78:c8:56:12:24:96:a3:ba:da:8d:13:
         6e:c7:20:63:f1:e8:e1:eb:0f:33:86:46:3f:79:6b:ee:79:10:
         a9:e1:89:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 16:57:49 2025 by rpki-client