Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
File:                     48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft (raw, json)
Hash identifier:          FTh1/owlRPJU27OVeM//x6xy4+b3UWJxGW3T1Sr5m7c=
Subject key identifier:   5A:53:35:22:36:21:E3:11:6A:3D:44:51:A2:F0:CF:87:86:D9:35:D3
Authority key identifier: 48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A
Certificate issuer:       /CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
Certificate serial:       44ECB2DDB60FF37B3E496EB8150878F5EA3CE29E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
Manifest number:          022D
Signing time:             Thu 15 May 2025 13:38:04 +0000
Manifest this update:     Thu 15 May 2025 13:33:04 +0000
Manifest next update:     Fri 16 May 2025 16:51:04 +0000
Files and hashes:         1: 3137392e34392e3234382e302f32322d3234203d3e20323731323231.roa (hash: Dv6hxsDroS4vlXUuIA9sQTKVJgCR9NtSdnPeeNt1eEk=)
                          2: 48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl (hash: Poe5fV7EXVkBq2+YLm0CaJedl3rIxoyz6j0MnzLjEGc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl
                          rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 16:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:b2:dd:b6:0f:f3:7b:3e:49:6e:b8:15:08:78:f5:ea:3c:e2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A
        Validity
            Not Before: May 15 13:33:04 2025 GMT
            Not After : May 16 16:51:04 2025 GMT
        Subject: CN=5A5335223621E3116A3D4451A2F0CF8786D935D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:97:86:f7:7f:fe:0d:8c:af:46:b5:b1:b7:
                    15:55:28:09:4c:85:cf:ba:67:9b:8d:7f:d2:fe:5d:
                    7d:5a:c1:7a:ac:29:5f:7d:a3:98:4a:44:d0:22:5d:
                    a4:a8:56:f7:cd:bc:d9:1e:12:fc:e7:8f:6a:6b:b8:
                    0f:88:a5:21:01:d0:ba:2b:9b:c1:3f:d8:15:a2:21:
                    61:17:51:a1:60:86:6d:cc:60:31:d2:0c:84:d2:5b:
                    d6:38:ff:c4:f4:7e:8b:b5:56:1b:ea:87:7b:5d:65:
                    a8:71:47:3a:d3:e0:89:05:c9:ab:15:38:9f:64:82:
                    58:b0:f1:93:69:b9:a6:f4:c5:84:66:38:ce:13:5c:
                    9d:d1:19:15:07:3b:e1:f0:9d:e6:23:c4:9e:de:3a:
                    69:d0:cc:e8:60:ce:44:12:c8:a5:31:c0:6e:85:43:
                    5d:18:66:a8:30:6f:c9:65:fe:20:2f:84:5e:a4:3c:
                    39:29:41:02:82:a4:98:2c:29:4a:df:d5:1b:c1:3f:
                    bd:c6:e5:11:ed:49:2b:ae:54:9e:de:8c:c3:bc:58:
                    96:ea:34:38:3e:e7:28:a0:ed:bf:4c:4a:68:26:ab:
                    7d:8f:cf:e2:39:ef:86:db:01:10:43:d2:4c:e8:ef:
                    1e:ad:f6:ce:18:f9:23:a5:d0:24:61:03:52:e1:c8:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:35:22:36:21:E3:11:6A:3D:44:51:A2:F0:CF:87:86:D9:35:D3
            X509v3 Authority Key Identifier:
                keyid:48:D1:7C:A2:96:B8:AF:71:8C:F4:F8:2A:BC:D0:82:6B:B7:6B:CD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/1/48D17CA296B8AF718CF4F82ABCD0826BB76BCD0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:25:7b:81:50:c3:14:cb:db:0a:85:2d:23:eb:eb:f9:78:
         06:0a:ae:ef:dd:1c:10:3e:67:8d:05:ec:bc:97:2c:f0:dd:7d:
         d6:48:b0:0b:4a:a2:54:99:2b:fe:0b:0c:1b:84:1d:06:cb:e6:
         e1:8f:23:51:0c:b2:a5:d5:03:2d:20:83:a8:9c:0b:4c:5d:b4:
         34:a0:a6:8a:92:e8:79:3c:08:6a:b4:f4:f7:45:8c:17:ca:69:
         3c:9c:e6:37:31:d3:6b:9a:b8:18:97:0a:ed:ab:c6:9e:ec:5d:
         2d:40:e8:e7:a0:25:a5:4a:40:94:0e:3f:1a:a9:f0:ef:25:2a:
         2f:d9:71:66:d3:1c:7e:cd:c3:14:5b:a2:64:a7:dc:48:de:4e:
         26:19:42:79:24:13:71:a8:17:43:d7:67:65:89:86:3e:82:09:
         14:55:77:3a:33:9e:b3:82:45:ce:1b:59:8c:06:3a:2c:f0:6a:
         e8:d4:17:3b:c8:dd:2f:0b:7d:4f:0b:03:2d:4f:06:2b:6e:ed:
         aa:c2:f5:fe:41:b2:54:2b:b6:91:f0:b9:32:99:de:95:40:39:
         ae:48:e4:c0:99:a9:e0:07:a7:66:18:c1:4f:6a:09:f5:6d:17:
         f4:d8:3e:f3:c0:a1:f0:92:f9:ef:a9:40:4a:59:4f:3b:33:f4:
         f5:09:0d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:55:31 2025 by rpki-client