Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          KufobxhZ+b38cM/ftFokYBAYQJq9a9ffFnMib1ZmuhY=
Subject key identifier:   2D:3F:4A:EC:B3:46:4F:04:A9:59:3F:29:84:E3:77:80:7C:AE:5B:56
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       05EA31A3BCBE6BE84C0EC71D9135E57EFF98F19A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          021F
Signing time:             Mon 12 May 2025 23:46:39 +0000
Manifest this update:     Mon 12 May 2025 23:41:39 +0000
Manifest next update:     Wed 14 May 2025 03:25:39 +0000
Files and hashes:         1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
                          2: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)
                          3: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: 9dJDDCZ+qhq7JJyjgHVMUYo3N8EuSDW9Jt69Qfic8bY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 03:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ea:31:a3:bc:be:6b:e8:4c:0e:c7:1d:91:35:e5:7e:ff:98:f1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: May 12 23:41:39 2025 GMT
            Not After : May 14 03:25:39 2025 GMT
        Subject: CN=2D3F4AECB3464F04A9593F2984E377807CAE5B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:57:92:51:8d:0a:13:ad:6f:85:ea:29:31:28:
                    b8:97:19:56:97:51:6c:25:fc:4a:bb:15:5d:57:66:
                    b3:e4:c4:ea:2e:b8:27:ba:4f:92:7a:09:37:ae:9c:
                    69:90:ea:de:fc:91:09:1a:46:f4:72:cd:e8:f2:8e:
                    fb:f9:64:57:5a:19:fe:4b:15:c5:e6:db:c8:47:a3:
                    5d:1c:f9:af:4e:0f:11:9e:7e:76:f4:68:f6:fe:35:
                    73:16:4d:e3:fb:bc:8c:a8:9a:1c:a0:63:fe:15:9a:
                    bc:21:73:ca:1d:78:fa:48:16:b3:c8:0d:1c:ae:f9:
                    ed:71:37:c2:a9:a2:ac:d0:28:ac:2c:79:2f:0e:29:
                    c0:96:ec:b7:69:ea:fc:52:ed:c3:0d:c0:9d:10:3c:
                    44:05:2c:88:ae:00:27:36:be:48:51:a3:9a:76:54:
                    2f:cd:e9:4b:e0:cb:e0:fa:6f:85:35:8e:7a:d3:bd:
                    91:e9:b9:ec:37:a9:09:83:eb:51:a2:df:c8:48:02:
                    ea:f5:0c:23:f5:d0:d4:16:87:ad:86:92:ef:9c:68:
                    c9:b5:e0:b9:a8:01:63:51:09:20:97:19:38:c4:3d:
                    f4:c3:72:96:0c:5b:a7:89:2a:b2:f5:94:55:ef:7f:
                    dd:91:11:c9:ce:72:c9:aa:07:3e:e0:2f:3d:5b:71:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3F:4A:EC:B3:46:4F:04:A9:59:3F:29:84:E3:77:80:7C:AE:5B:56
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:2f:6c:20:6a:c0:7f:6a:fc:30:a9:65:15:e2:20:45:ee:
         0e:ff:57:16:91:a8:71:7d:15:ab:aa:fe:2f:95:ea:21:71:06:
         77:1f:60:62:9d:f0:51:9f:da:65:c7:41:5c:8e:92:44:1e:30:
         f2:fc:d0:be:2d:7e:b5:19:7a:78:8d:39:ef:d6:ba:04:f4:2b:
         3f:61:9a:b0:eb:17:3d:de:16:1a:69:eb:a4:6a:23:5d:07:79:
         ff:bb:f5:36:ae:ca:69:96:a8:11:19:ab:e3:90:f1:a9:30:62:
         f1:8e:fa:e0:58:ad:2a:09:f0:97:6a:73:c2:43:14:ce:be:e9:
         99:09:9f:a5:17:be:6f:ca:85:ff:96:1e:49:44:6f:c0:12:03:
         d4:e4:7a:d5:3b:5d:95:b6:60:9a:29:1c:98:55:8d:a2:13:ff:
         26:85:f7:94:07:e9:af:4e:4d:6c:92:f1:05:c0:19:e7:85:7a:
         ac:3e:69:3a:2b:6a:02:b6:af:f0:c8:79:4b:fe:9b:d2:e7:6a:
         72:8e:2e:f2:61:d4:4b:c0:c3:c5:fb:77:61:8b:49:6f:2e:3e:
         36:a5:dc:35:dc:46:fd:c2:a6:3b:a5:78:d3:d2:d2:4a:d6:a3:
         93:11:a9:f2:9b:dd:82:5d:37:cd:fb:c1:d3:6c:cd:9b:88:f9:
         75:8e:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:09:41 2025 by rpki-client