Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
File:                     F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft (raw, json)
Hash identifier:          /2bP1m01xVuGzCvXA9IlTPBWHGwHT2gLea2jQp01ixo=
Subject key identifier:   0C:CE:81:6A:69:22:98:E6:40:06:9B:2C:32:6F:A8:09:CD:80:38:57
Authority key identifier: F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E
Certificate issuer:       /CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E
Certificate serial:       501D4FAA7E488E3784BF9A79B2CAB7C007AB14EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
Manifest number:          021A
Signing time:             Sun 11 May 2025 11:41:24 +0000
Manifest this update:     Sun 11 May 2025 11:36:24 +0000
Manifest next update:     Mon 12 May 2025 14:20:24 +0000
Files and hashes:         1: F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl (hash: 6pI5JS1CDcbnFN6p7cho6GNRlecfjmIZpQd9zUPxOk8=)
                          2: 3138392e33392e3138362e302f32342d3234203d3e20323730373932.roa (hash: WA3J0WguYs9zONV4TbORGUBacU9F5Nfbxix2CDq0vVM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl
                          rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 14:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1d:4f:aa:7e:48:8e:37:84:bf:9a:79:b2:ca:b7:c0:07:ab:14:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F840F3A07A5BA8A1B8C895C59626D4B907A88F7E
        Validity
            Not Before: May 11 11:36:24 2025 GMT
            Not After : May 12 14:20:24 2025 GMT
        Subject: CN=0CCE816A692298E640069B2C326FA809CD803857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:e0:86:41:29:6a:a2:81:b5:3e:84:74:8d:
                    49:cb:6f:21:44:56:92:45:33:dc:1b:97:3d:b2:84:
                    32:11:99:c4:39:2a:0b:15:82:c3:0f:6a:6c:cd:18:
                    e0:b8:51:8c:e6:db:96:f0:de:6b:33:c5:bf:71:4e:
                    f6:49:72:2a:91:7e:a7:95:45:e1:20:2d:35:4e:4a:
                    38:a8:0d:3b:94:89:da:80:9d:49:66:aa:1a:a8:4d:
                    5e:e5:e9:6e:ad:9c:69:2b:06:b9:3d:68:d0:51:e2:
                    8c:43:d4:1a:11:01:4a:a9:61:61:75:04:63:6b:2d:
                    08:c8:4a:a7:ad:91:f9:58:73:71:25:87:53:07:bb:
                    bb:b7:ac:82:c6:ef:92:dd:ba:d4:36:73:cd:23:c3:
                    94:85:3e:55:45:6e:44:4c:c8:7c:52:a5:c0:22:5b:
                    8d:42:e8:90:54:88:cd:c3:46:ab:f7:2a:b5:4c:76:
                    1d:4e:b8:93:0a:3a:c9:ac:63:88:9e:ba:9d:a3:86:
                    40:c0:ee:8c:b3:1c:89:32:9e:62:a2:94:b0:d4:0b:
                    ea:98:45:5c:f6:4e:71:e6:be:a0:e0:90:b0:5e:9e:
                    e3:c3:6c:10:ed:56:51:42:64:f7:b5:fa:49:d0:b3:
                    7f:53:8e:f8:f1:dc:b5:13:c5:02:9c:be:6f:fb:6c:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CE:81:6A:69:22:98:E6:40:06:9B:2C:32:6F:A8:09:CD:80:38:57
            X509v3 Authority Key Identifier:
                keyid:F8:40:F3:A0:7A:5B:A8:A1:B8:C8:95:C5:96:26:D4:B9:07:A8:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngCLrcUVciropQtPiXfAedzrtGmrx89ohzFoXNcuGwm/1/F840F3A07A5BA8A1B8C895C59626D4B907A88F7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:e9:28:f1:83:56:fb:f7:4c:03:96:37:4b:99:d5:ea:fb:
         89:79:a4:5a:e2:3b:0a:63:b8:1e:b3:92:50:a0:1a:a1:9a:2a:
         f8:8d:2e:d9:1f:f7:03:d0:34:22:d2:27:c9:0c:4d:34:71:28:
         29:18:60:5b:bb:04:50:1d:af:4c:1d:5e:a5:49:59:7d:ac:aa:
         25:2e:6b:d4:07:db:9e:49:26:d7:e9:0a:7a:d2:94:24:3e:35:
         dc:d6:3b:ee:04:d4:2b:a1:e6:b4:03:4d:25:68:04:19:0d:9b:
         7e:30:2d:b8:45:c7:27:31:54:d9:fd:60:6f:65:c9:30:9b:ff:
         ed:40:bb:f5:3a:c6:55:f9:71:2a:af:aa:60:c7:41:bf:48:24:
         ec:82:ef:0b:66:54:b4:93:55:d4:25:ad:d2:5b:57:60:d7:ab:
         e6:31:d7:b8:23:62:9f:2b:90:f8:d3:5f:a0:87:42:78:76:89:
         1a:7d:fb:bf:76:fc:80:b2:90:7b:94:08:86:a6:41:33:83:22:
         09:3d:ed:ca:0a:14:4a:a3:b3:e0:1b:b7:29:f4:79:da:bf:ee:
         95:c8:bb:b4:63:33:59:9a:da:6f:6e:30:39:80:e4:34:6b:47:
         63:60:88:69:9c:01:5f:b3:4b:33:3b:58:45:ba:94:db:ad:d2:
         f4:b4:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:21:47 2025 by rpki-client