Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
File:                     3170E59F647D12F2C01381F789FEA19B94A7EA94.mft (raw, json)
Hash identifier:          NlsWOfCzOWyPo91kwpuePWKdihDd9KnodupNZU35jRY=
Subject key identifier:   99:5B:AF:C1:04:D0:20:8E:33:3E:BB:A2:50:5E:9A:AB:93:E3:3E:0D
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       7D982C506608B61C271B38854DF1A6DB4A8AB397
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
Manifest number:          010D
Signing time:             Sat 17 May 2025 06:24:51 +0000
Manifest this update:     Sat 17 May 2025 06:19:51 +0000
Manifest next update:     Sun 18 May 2025 07:32:51 +0000
Files and hashes:         1: 323830343a383236383a3a2f33342d3334203d3e20323732353138.roa (hash: VHbLnBh+MIcqX2rOknoM+7yXE3n3B6fYN0D/ZGd03VM=)
                          2: 3170E59F647D12F2C01381F789FEA19B94A7EA94.crl (hash: yu7U4pbCyC8PCbcXOm/nHyW4TfPd9vc1g4rdTGxUBGo=)
                          3: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (hash: p8mxdsJqd7Z6f1JB1QLr6T+6+Rpg0LQLBtyRI4domro=)
                          4: 323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (hash: Bm9Kcd02phGiG7AWOn0ma8NcB+QmfSZ46IQIKek0iV4=)
                          5: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (hash: lgKZpEMQXJgbbGxAppKdGMzEqXxmi5YjRfS1hmqnWqk=)
                          6: 323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (hash: dg++jRiYgNDqqn7koG7VCPM8YtEa8GnVfBh/0VMl//I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 07:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:98:2c:50:66:08:b6:1c:27:1b:38:85:4d:f1:a6:db:4a:8a:b3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: May 17 06:19:51 2025 GMT
            Not After : May 18 07:32:51 2025 GMT
        Subject: CN=995BAFC104D0208E333EBBA2505E9AAB93E33E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:51:14:0e:2e:3d:35:26:e6:a8:c6:19:81:
                    d5:23:9e:24:6c:88:38:34:57:76:f5:a2:41:f7:ba:
                    7c:e5:64:3f:c1:e9:98:3f:68:19:1b:5e:56:83:0b:
                    82:dc:fe:5b:d5:3f:70:d8:12:16:3d:69:da:38:55:
                    24:2a:2b:af:7e:d2:10:ef:f9:1d:14:b6:b3:43:5b:
                    99:34:be:fd:5c:bf:14:5d:df:ac:88:8e:ae:11:6e:
                    ad:04:fa:83:fa:ee:8d:10:0b:19:f6:37:bd:2a:9a:
                    ee:e6:bc:9c:c3:15:41:db:a3:18:1a:44:f9:ba:24:
                    c0:55:a7:58:15:19:b7:95:5a:13:af:86:94:c8:3d:
                    a6:d7:17:de:1f:78:66:bf:3d:5b:6a:aa:94:9a:3c:
                    8a:4e:6f:2f:9c:3c:16:35:73:9a:89:b4:9a:cf:22:
                    ce:6c:32:2e:f8:ed:34:c5:45:3c:ec:3d:8f:e2:e2:
                    ea:32:bc:4c:3e:ff:24:29:3a:b7:a1:34:83:c8:a4:
                    08:f6:bd:22:82:cc:e1:91:d8:a4:d8:9d:9f:8d:57:
                    52:59:18:84:97:59:c7:3e:98:89:b3:9e:1a:5e:9c:
                    e9:ac:72:ff:47:03:ba:51:bd:ac:46:59:c5:24:a8:
                    a8:ab:6a:41:6c:a9:9a:40:c4:b1:e0:7c:95:26:3c:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:AF:C1:04:D0:20:8E:33:3E:BB:A2:50:5E:9A:AB:93:E3:3E:0D
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:af:d3:69:1b:b5:c7:c6:5b:cf:d6:e0:2d:46:0b:d2:02:
         81:7d:61:ca:bb:c7:06:c2:cf:e4:81:1f:c7:f8:f4:0d:76:7d:
         68:c7:d3:ed:7e:aa:67:15:87:de:b4:82:1b:11:1f:38:c1:39:
         c8:98:08:f3:83:34:41:28:6a:78:ba:f9:61:68:9c:68:d1:a1:
         40:cb:18:9a:25:a6:6b:00:f4:67:9a:f8:3a:5a:f8:02:9e:a1:
         ca:29:b7:94:74:d0:24:ff:ee:64:33:d9:52:e4:bc:42:a7:02:
         59:74:52:cc:d8:58:ba:a1:55:6c:09:7e:52:26:56:23:0c:1b:
         46:f6:de:26:83:14:ba:44:81:2a:89:a1:32:7f:b0:f1:98:d4:
         76:d2:12:7a:b3:b0:9e:f3:78:42:22:4c:3b:31:8f:87:bc:ed:
         cd:7e:4e:2f:6a:be:fb:92:98:65:52:1f:e9:6c:bb:fe:3a:84:
         62:0f:bf:d7:a2:a1:45:4a:0a:1f:a4:11:07:57:9a:5e:4b:29:
         7c:44:e6:86:d3:6c:1f:65:6c:80:39:72:b9:f4:56:13:da:df:
         b4:90:fb:6c:a1:e1:1c:89:95:c7:18:60:c1:24:f4:ea:5f:79:
         b4:80:82:3c:ca:7b:93:3e:e3:cc:1d:be:7d:8b:4e:7d:56:a4:
         13:a8:8a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:23:24 2025 by rpki-client