Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          cGx48UkRlFuoFOZehDzwy+NQFG3BJJM3ykSgQv0xdYs=
Subject key identifier:   7A:1F:FF:84:14:46:D7:39:F2:9B:05:C2:11:BA:17:5B:61:34:D6:E0
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       3720AE71A563701AC8C24CEE009FE3D417CAFD66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          0224
Signing time:             Wed 14 May 2025 08:46:11 +0000
Manifest this update:     Wed 14 May 2025 08:41:11 +0000
Manifest next update:     Thu 15 May 2025 10:29:11 +0000
Files and hashes:         1: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: 1ke442G4sr1gdXVL5S2dIvsAioTdoxCJCdzpNrSzpFk=)
                          2: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: BcM6j+OwDyoPY5saIhljxjNWGNX33CnT7EmA2Ywuaco=)
                          3: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: HodIiouYpi5HRYferTFJC9p/9oItbt3HQJ/8I8MD+HI=)
                          4: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: yza4Zo9yVGL4KcXUvM1WV/SVXJPxDQVSdADB15AOh6k=)
                          5: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: 5lvhdKKVxPcZ3/nd628FoXyR2ITdSGX90BwjYAK8rAQ=)
                          6: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: IeqfO60APtI/aiujhRBbK+p5lGRCUGsDS7H6b+Gn6jY=)
                          7: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: Q+6zb8/52SCseUccO/k8n9a/FXB90wWY4SheKioGF5I=)
                          8: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: fgaktkZvREqEdKxhCwkQM0vrGN+uJ33xvruPLYDVzIA=)
                          9: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: j1Avox9NgQODW3LhBzJuljIRz5meY02BEta5hWYd8Ak=)
                          10: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: DLXwjCeMLBvIeKOLzFt3HCcPZ+8cjQuMJE3Kyj0FUk0=)
                          11: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: 9+ioA8iW3wDN9f27KoCoYuS2Xxc1WiJBzblSsKv38+c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 10:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:ae:71:a5:63:70:1a:c8:c2:4c:ee:00:9f:e3:d4:17:ca:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: May 14 08:41:11 2025 GMT
            Not After : May 15 10:29:11 2025 GMT
        Subject: CN=7A1FFF841446D739F29B05C211BA175B6134D6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e8:f8:28:9c:b8:4a:e7:db:a8:48:aa:4c:94:
                    f0:19:e7:db:e3:0c:97:52:bc:1f:34:c5:33:e4:21:
                    f1:52:68:64:66:28:75:f3:b2:f1:26:87:08:49:43:
                    8b:13:0d:fc:5a:2b:73:cf:eb:56:59:50:a4:92:d2:
                    52:5d:92:f7:f9:da:19:27:57:56:50:b1:07:2e:7c:
                    bc:d2:ca:68:46:76:cf:db:12:0f:da:20:ca:33:59:
                    a6:03:9e:d0:4c:82:8a:7e:1c:46:7a:2f:5c:62:c7:
                    af:b2:00:2e:3c:38:f7:b1:29:df:f8:08:60:57:93:
                    8a:1e:9f:69:26:a1:24:a4:06:95:74:e2:03:6c:a1:
                    f3:54:9b:f1:cb:e0:c1:e7:d2:43:71:3e:24:87:b5:
                    88:74:76:08:c9:41:17:20:1e:16:83:56:51:f7:da:
                    d9:60:52:91:8e:fb:00:4b:99:8b:ee:b1:58:54:85:
                    9d:0a:c1:b0:f2:d0:f2:9d:6d:dd:21:9a:98:38:47:
                    98:50:4d:5c:3e:4d:37:55:69:b8:99:4a:d5:6c:e6:
                    4c:e3:d9:27:fd:75:46:5c:0b:d3:c9:fd:c3:40:d1:
                    54:a0:f5:67:ac:07:00:24:d4:40:89:bc:e0:fe:f8:
                    3f:eb:a7:73:54:ee:eb:1c:51:d2:8d:ff:2f:13:c5:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:FF:84:14:46:D7:39:F2:9B:05:C2:11:BA:17:5B:61:34:D6:E0
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:bf:b1:ee:73:be:65:9e:fa:12:81:d6:c5:21:74:39:32:
         fd:66:13:65:32:a2:07:a1:a5:0d:fc:9f:c4:49:c3:d7:41:e3:
         41:d1:4a:21:a5:47:1d:bd:02:a1:36:d8:17:cc:5e:e5:f6:7c:
         10:2d:b6:4b:52:09:2e:a9:fe:3e:1d:ba:b5:af:5e:c0:6d:0a:
         c1:94:a3:18:3f:7e:4c:74:10:c8:4e:af:1b:1b:d2:51:9e:b6:
         24:27:ab:b9:86:dd:c4:4f:c6:58:f5:0d:c5:da:de:c9:90:0f:
         34:8d:6f:21:18:39:ff:0f:08:4b:e4:05:5d:b4:f4:32:70:53:
         ea:7a:9e:da:67:65:3a:7a:06:22:23:27:7c:51:f5:7a:27:53:
         a0:5c:c1:ca:63:0f:77:fa:3c:7b:e9:2e:2f:38:f2:18:66:7a:
         91:aa:93:d6:fc:ca:d0:99:c7:c5:66:31:05:36:d3:74:ff:8b:
         d1:27:19:71:dc:07:f3:88:f8:d6:6f:ae:b6:e8:bb:39:46:2c:
         49:fc:b3:a2:f9:5b:78:dd:89:81:f8:46:84:98:2b:e6:6b:e5:
         32:48:e7:82:31:45:03:7d:f7:dd:8d:be:93:18:0b:e2:21:e2:
         93:e8:41:e6:88:ae:90:8d:b5:c5:80:f8:83:49:30:40:3e:46:
         cd:af:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:00:31 2025 by rpki-client