Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
File:                     9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft (raw, json)
Hash identifier:          aYxLSSv/4iLexquosw1DpQgn6lUoebqbs2csX/LkT/s=
Subject key identifier:   B0:DF:B6:63:F2:00:4E:82:C4:1D:7D:6D:49:6A:44:38:41:60:DE:E8
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       060989B968EAB0A24A1E3A3CF321F646C5406453
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
Manifest number:          0217
Signing time:             Sun 11 May 2025 10:46:17 +0000
Manifest this update:     Sun 11 May 2025 10:41:17 +0000
Manifest next update:     Mon 12 May 2025 11:17:17 +0000
Files and hashes:         1: 323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (hash: BuT6SVf+q5oMKia2hb1uFcClSeTWsZZo4z0q3Ha5OtA=)
                          2: 34352e362e3131322e302f32322d3234203d3e20323636313331.roa (hash: 7Dz4w+nF0VfTfBfkOh3PyIEA3gtOe3Tz5BUNfanJK1Q=)
                          3: 9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl (hash: K6cSfZUXDyDEYGJ6a6MATAMRWG2BXxNU6B5dHHW3ns4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:09:89:b9:68:ea:b0:a2:4a:1e:3a:3c:f3:21:f6:46:c5:40:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: May 11 10:41:17 2025 GMT
            Not After : May 12 11:17:17 2025 GMT
        Subject: CN=B0DFB663F2004E82C41D7D6D496A44384160DEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:61:9f:19:3e:f2:86:72:93:c1:73:51:a4:
                    9d:86:ac:5f:1d:d7:02:0d:93:8e:af:be:1a:48:20:
                    fd:88:7e:93:4f:fd:84:4e:5e:a1:41:37:a2:6d:9f:
                    3a:03:e0:15:27:f8:a1:4d:4c:83:d7:05:ae:02:ad:
                    cf:ce:15:72:4f:43:58:cd:4c:a8:19:dc:21:6a:8c:
                    cd:45:f4:13:27:0a:ee:ba:b1:d7:cc:4d:c8:2c:8b:
                    0f:4f:25:8a:da:bb:c3:86:a1:8e:59:70:3e:df:18:
                    02:b7:b2:85:7b:87:97:85:73:9b:15:96:ee:08:e6:
                    50:bb:57:a2:d3:08:87:7b:71:d5:cb:fa:a6:bc:d2:
                    e1:50:e6:cc:7c:57:20:b7:1d:bb:24:ac:cc:13:8c:
                    32:3c:58:c2:f9:8e:34:97:01:f2:08:c7:bc:99:19:
                    2c:ee:1d:f6:c3:89:23:9a:2d:a5:e2:64:91:e9:30:
                    9c:ab:78:fb:e5:5e:8b:30:58:d4:70:3b:e7:e6:7c:
                    1a:27:ca:12:aa:7b:3a:6e:ba:98:cb:6a:64:26:c8:
                    ff:7c:aa:56:dc:29:da:e7:c6:59:b8:a7:0c:44:31:
                    8e:a7:52:aa:2b:d4:45:64:6f:47:bf:56:17:4e:84:
                    18:be:10:75:a3:33:4f:e5:99:ce:cf:62:34:69:81:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:B6:63:F2:00:4E:82:C4:1D:7D:6D:49:6A:44:38:41:60:DE:E8
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:16:c3:68:2c:47:59:bd:cd:f2:1a:71:b4:dc:31:05:1e:59:
         56:dc:23:29:6b:c5:1a:f1:0a:dc:af:77:ca:24:36:92:aa:39:
         c6:22:bd:45:99:a8:69:02:d2:71:9e:c7:a1:e5:7e:36:37:2f:
         86:48:de:18:11:7d:c1:ff:38:f0:c6:5c:7e:dd:ca:29:55:2f:
         91:cd:35:c8:6f:6a:5a:c2:43:88:66:19:1b:7d:48:bd:1c:00:
         f9:cb:46:b2:ac:04:dc:c0:9d:f6:f9:c1:ff:b0:cf:ea:62:ae:
         0c:4f:a9:6f:9d:7e:79:62:ee:60:50:29:fa:18:06:98:8d:9e:
         8a:82:04:50:99:6d:59:f8:e9:ed:8e:e1:c7:10:39:7a:dc:6f:
         40:67:b4:8e:4f:99:6f:0a:12:8c:c0:78:32:bb:11:45:d6:c6:
         9e:dc:fc:53:4e:23:fd:a3:74:c1:51:71:73:89:7f:28:a1:18:
         30:5f:ee:a3:d4:2d:38:2f:88:5d:97:14:b3:7d:52:cb:d1:e0:
         44:86:f1:b0:3e:80:be:e0:6d:ac:0c:49:b2:3f:5d:2f:34:e5:
         35:79:80:29:eb:0e:3c:19:c0:32:af:a8:9c:0d:b7:ed:e3:c0:
         5c:86:41:65:2c:2b:ef:93:d0:6f:d3:86:00:f6:64:4d:f7:73:
         8d:73:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:20:15 2025 by rpki-client