Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft
File:                     FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft (raw, json)
Hash identifier:          fGk96NMvm7zf16TpSAIkENrDVWpYnUHGKMzLiMW/Hfg=
Subject key identifier:   18:49:2D:AA:16:05:7F:6E:2D:F6:E6:A6:9D:F8:8F:02:3A:47:93:8C
Authority key identifier: FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9
Certificate issuer:       /CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
Certificate serial:       10E4D0F1150B3033B942D68514F6FB6E5E149F58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft
Manifest number:          01B3
Signing time:             Sat 10 May 2025 00:27:07 +0000
Manifest this update:     Sat 10 May 2025 00:22:07 +0000
Manifest next update:     Sun 11 May 2025 03:41:07 +0000
Files and hashes:         1: 3137392e34382e3138302e302f32322d3234203d3e20323731303934.roa (hash: ZRSpBFl+k21DEySB0scpmAxJHM+MmuF+I5ZStSsRihg=)
                          2: FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl (hash: 1AQlSl3egxI7bsfo6Cj1L4ljDRe7aJLEd9pad5NnD78=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl
                          rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 01:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:d0:f1:15:0b:30:33:b9:42:d6:85:14:f6:fb:6e:5e:14:9f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFB6417C2C38F6B002334D5A317B320F0C140D9
        Validity
            Not Before: May 10 00:22:07 2025 GMT
            Not After : May 11 03:41:07 2025 GMT
        Subject: CN=18492DAA16057F6E2DF6E6A69DF88F023A47938C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:f4:a8:28:59:f1:8e:9d:ae:b4:26:cb:c3:
                    f9:37:3d:3a:1f:24:b0:46:27:04:4a:d6:7b:f8:f3:
                    68:b3:59:2c:f8:98:b5:48:31:26:ed:98:2c:2c:7d:
                    7f:6f:6c:73:4a:6c:46:28:33:92:d3:46:18:6e:f9:
                    29:72:56:e0:0c:43:1a:63:1b:f8:9a:ae:83:7c:4d:
                    93:c5:05:b6:98:05:79:ac:92:22:67:e4:1d:a6:0c:
                    4c:2b:9c:83:43:12:b3:53:5f:9c:55:9a:f2:d0:a2:
                    75:a5:f5:e0:06:ee:73:43:84:23:3b:68:9c:87:27:
                    d1:67:c1:e7:e4:80:2d:a6:e6:9b:d9:5c:13:b8:99:
                    da:3a:91:07:f7:80:c0:c7:e9:e3:74:49:cd:cc:fd:
                    29:bf:b5:bd:14:37:3c:73:d0:a0:36:bb:54:0f:86:
                    39:92:3b:59:7f:42:76:4f:d0:69:95:bf:3e:24:19:
                    c9:b4:ee:d5:e2:c7:09:5f:85:bf:20:29:ca:d4:d0:
                    04:53:5e:e6:80:d0:1c:77:d9:e6:1f:81:42:5b:0f:
                    94:76:48:60:f8:17:8a:6a:8d:90:f4:60:17:90:6a:
                    28:af:59:33:e8:19:1d:48:a4:b3:0d:58:ad:a8:34:
                    be:80:26:fb:fd:0d:25:47:6c:bf:5b:60:72:51:bc:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:2D:AA:16:05:7F:6E:2D:F6:E6:A6:9D:F8:8F:02:3A:47:93:8C
            X509v3 Authority Key Identifier:
                keyid:FE:FB:64:17:C2:C3:8F:6B:00:23:34:D5:A3:17:B3:20:F0:C1:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFB6417C2C38F6B002334D5A317B320F0C140D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/FEFB6417C2C38F6B002334D5A317B320F0C140D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:47:7b:39:78:51:cd:6e:e2:27:f3:a5:d5:31:c2:5d:50:8d:
         44:59:d2:a8:42:46:14:f6:40:30:5f:ec:e8:2e:8d:c3:e7:b4:
         69:d6:97:f1:11:26:0d:6f:d1:0e:dd:3e:b8:e0:d0:f7:f2:88:
         78:22:18:1a:20:86:87:d2:46:eb:36:9a:76:50:70:15:5d:3a:
         da:47:08:7f:a7:0d:4f:50:59:83:df:af:f5:83:a0:58:54:3a:
         d9:ef:a5:a2:4f:6a:4e:0a:bb:57:44:7d:9a:75:76:c3:87:e2:
         bf:f5:90:f5:42:e1:a0:9f:7d:9b:ae:7d:f6:47:ee:33:b1:c6:
         d4:d8:37:ff:4d:6c:27:de:5d:19:1e:e7:fb:6f:8a:be:90:b8:
         e8:d2:09:88:13:af:bb:0c:dd:62:d4:f8:ef:20:58:d9:41:6f:
         d8:24:b1:43:4f:25:77:2c:f6:62:17:bc:ec:d8:82:17:0d:b1:
         59:b3:f1:3b:33:f5:b7:47:b7:9b:bb:90:aa:eb:78:3c:1e:25:
         ff:42:06:27:1b:9f:41:1a:e6:ee:ca:45:e5:c6:6d:37:25:58:
         9c:23:26:3d:e6:76:e3:ca:5f:13:91:e0:9b:e9:ef:aa:5e:b2:
         df:05:c3:31:3f:56:73:6a:73:9a:cf:61:9c:ad:08:47:55:61:
         41:b5:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:21:34 2025 by rpki-client