Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
File:                     0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft (raw, json)
Hash identifier:          QY9pF81ptHVCwXGVmoKo+oPoc31Baxjxhpx0BwswHsU=
Subject key identifier:   B8:6D:35:3C:02:BD:F0:A0:8A:0E:15:53:6D:6F:8A:3D:C2:7A:59:65
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       5AB0F4342BBF29D70FD29527453742A9461B8CF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
Manifest number:          021D
Signing time:             Wed 14 May 2025 22:40:00 +0000
Manifest this update:     Wed 14 May 2025 22:35:00 +0000
Manifest next update:     Thu 15 May 2025 22:49:00 +0000
Files and hashes:         1: 3133382e3231392e3136362e302f32342d3234203d3e203631363339.roa (hash: kDW7HEer9mgGVEX/MlWZaarNVPe95LR25B+j6wQM45w=)
                          2: 3133312e3130302e3135342e302f32342d3234203d3e203631363339.roa (hash: i6UJHhYp0mrMHpEaEhjtFmjzqZoSaZubCdoCMejpmas=)
                          3: 0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl (hash: JnkreztU0Pmm2hFARr2tCfQ2cbVdIEITzI/7CboNc8w=)
                          4: 3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa (hash: gThqVJuR7QPQ1GzrsYxmk+EDLZ2l8dAbLyrJX1loguw=)
                          5: 3133312e3130302e3135332e302f32342d3234203d3e203631363339.roa (hash: Klak7APpQP3smsklp8DSnadVrjvqyFMRTu9AlCH7VxA=)
                          6: 3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa (hash: nkZpI7utuGuzfDtaAeeG/TbH+sK6o0KZkg+y5aCaeuo=)
                          7: 3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa (hash: ohncBCmyXUzrHKvX9zMnLaZici/ZynzGdXz91tV6HcQ=)
                          8: 3133312e3130302e3135352e302f32342d3234203d3e203631363339.roa (hash: sehiNyYCxtDYVMWHICHHQ8rLQfZNePiUZcqaRi0hGDc=)
                          9: 3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa (hash: VVcF7OVzUQIA6kB6GmccF5z3geFwA1dCMAb6ZJeWa/E=)
                          10: 3133382e3231392e3136352e302f32342d3234203d3e203631363339.roa (hash: 3giDU3fLflyhKGNbZqik4Ts+o5PYFTeDYCsKnGXGTx0=)
                          11: 3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa (hash: R6ABjQfx6UryWF7jhX76NHL5oTy6Ly13TWsw9SUw288=)
                          12: 3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa (hash: DrYvbXgeU3gsFGGU9cXLFNaKuaz+oUCT3nb7NAJzhkM=)
                          13: 323830343a316332303a3a2f33322d3332203d3e203631363339.roa (hash: V4eN4ORMPe8DLG2kCZ/OjRXgnSWUcj85mSg9lpRCFxM=)
                          14: 3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa (hash: mxGxuNJypBIbHYauiWKydOkUcOu2bSEXfGMfqt6pUW4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 22:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:f4:34:2b:bf:29:d7:0f:d2:95:27:45:37:42:a9:46:1b:8c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: May 14 22:35:00 2025 GMT
            Not After : May 15 22:49:00 2025 GMT
        Subject: CN=B86D353C02BDF0A08A0E15536D6F8A3DC27A5965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:d5:55:a8:37:9d:c8:73:1f:f7:b7:00:4e:
                    38:1d:9d:c8:56:6e:14:bf:86:34:3b:4d:4c:1d:0f:
                    f9:da:4e:32:8d:ee:5b:43:5e:3c:8c:58:cd:2d:c7:
                    24:d1:65:39:bb:75:c4:99:be:72:57:c5:18:6e:1b:
                    f1:b2:f0:a8:21:5e:46:f3:f5:91:f7:ac:3c:bb:97:
                    57:ed:16:31:73:d8:c3:16:61:9e:ae:5b:21:31:73:
                    b7:1f:48:2d:36:6a:5e:34:9c:be:84:89:20:f9:a0:
                    44:79:41:21:17:e5:65:31:85:90:db:2a:df:6e:b7:
                    2c:e6:72:6b:65:b2:c4:d1:5f:97:0e:7c:9c:3c:d0:
                    fc:11:23:24:90:b1:2d:ef:64:55:b3:6c:df:fc:76:
                    bc:7e:1c:07:85:13:df:38:57:70:0f:fd:9e:8e:64:
                    84:7a:22:b5:c4:bc:5c:cb:f4:43:81:f5:7b:77:ea:
                    c7:c9:71:f3:d1:97:53:f9:25:a7:18:f4:61:66:7f:
                    35:56:d7:57:26:d8:c9:6d:bd:61:66:7f:cf:5b:e2:
                    aa:10:a2:68:c5:e1:a5:89:d6:07:cc:d8:17:15:84:
                    c5:fc:d4:a6:a4:bb:25:a8:4a:4a:58:2e:4f:b2:ff:
                    1e:56:dc:28:ea:38:53:ab:63:7c:5a:1a:bb:6e:49:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6D:35:3C:02:BD:F0:A0:8A:0E:15:53:6D:6F:8A:3D:C2:7A:59:65
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3d:02:d2:0a:ce:99:8d:80:12:bd:25:e5:8d:5c:98:95:3e:
         bf:7a:28:24:6d:35:20:25:ed:fc:f2:b9:b6:6f:29:b4:25:71:
         cb:7a:1f:3a:43:84:3e:ab:2d:d6:69:af:01:0e:09:e8:4c:73:
         0c:fb:e0:39:11:ab:9f:d9:7c:86:0a:28:18:ea:7f:c7:04:60:
         0a:e3:5d:ab:7d:71:c0:2b:83:78:14:ca:40:29:d3:26:d6:7e:
         85:ed:7e:09:97:57:76:68:b5:50:b7:1e:ba:62:34:97:5c:1b:
         79:25:71:04:6e:62:b1:69:75:88:47:44:f7:f3:ba:7b:b4:76:
         b5:dd:9e:f1:ed:50:03:e5:9d:f3:51:0f:ab:18:ae:33:63:21:
         9f:9b:ee:5f:f0:8a:05:a3:a5:5c:29:51:25:1a:6d:a2:f7:5a:
         88:a2:51:bc:f2:7c:9f:2a:bd:bd:b1:32:30:a7:ed:b9:12:c2:
         4b:1b:e3:9a:26:25:7f:e1:db:99:31:2e:0a:2b:d9:c0:f4:26:
         d3:e7:5c:d9:57:c2:f5:e2:bf:d2:75:07:2d:08:25:92:25:22:
         bf:68:a5:f8:9d:c1:27:6b:5a:7e:e0:ed:c6:cf:9b:69:ad:ea:
         a5:8b:0f:84:3d:0d:ba:e5:02:24:be:b1:e9:f8:ba:7d:a4:2d:
         11:27:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:33:01 2025 by rpki-client