Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
File:                     DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft (raw, json)
Hash identifier:          Y34zlVqxh9gpzhiFN+1J9m44cY+O3KTjkHcC5vpR7yg=
Subject key identifier:   48:97:BE:D5:9C:08:4D:64:A7:71:3A:D8:84:BE:A2:26:24:49:57:09
Authority key identifier: DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E
Certificate issuer:       /CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
Certificate serial:       81671194D2A1698EDCED2F0B509855CA0468A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
Manifest number:          2B
Signing time:             Sun 11 May 2025 05:14:32 +0000
Manifest this update:     Sun 11 May 2025 05:09:32 +0000
Manifest next update:     Mon 12 May 2025 05:50:32 +0000
Files and hashes:         1: 323830343a353033303a3a2f33322d3438203d3e20323638333734.roa (hash: bmCfoJVjmMhZ9Zxei7VwsBUkWDIqf9LkUDnbJiwOoO8=)
                          2: 34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (hash: pjcENXhwN39gPAIuzrYcrkt1/jTP1rUfHtlUwzsHBWs=)
                          3: DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl (hash: okliVcSLt/X6sQZU7pFj0B3TtK1Tz3/Xdxs6Qfp3XzA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl
                          rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:67:11:94:d2:a1:69:8e:dc:ed:2f:0b:50:98:55:ca:04:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEF78BE3350057ACC8FE96EE5D24BD578A03464E
        Validity
            Not Before: May 11 05:09:32 2025 GMT
            Not After : May 12 05:50:32 2025 GMT
        Subject: CN=4897BED59C084D64A7713AD884BEA22624495709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:90:ea:0e:e8:31:8d:89:c3:23:f2:76:48:
                    11:16:53:25:e0:ab:76:bc:51:00:81:b5:22:df:cf:
                    eb:4d:d6:54:63:e6:c9:aa:67:43:ef:fc:24:6c:c9:
                    a4:6a:f0:3c:4d:f0:dd:16:85:61:ac:72:ab:9a:62:
                    60:db:2e:e3:54:1c:df:f8:c1:f1:d6:57:da:5d:32:
                    86:ca:9a:22:04:ed:42:43:6e:25:73:c9:d7:85:54:
                    09:ca:4b:cb:aa:30:61:eb:81:cf:f2:2e:42:d8:09:
                    72:ff:68:77:52:83:43:7e:08:e6:25:83:ac:4a:ea:
                    a9:c6:a0:1d:33:da:64:56:53:49:3e:9d:8a:8d:8c:
                    08:40:9e:3a:7d:41:05:2f:c4:9d:fa:a0:88:ff:12:
                    4a:aa:58:3e:3a:13:10:20:db:14:4a:5c:5b:b1:12:
                    08:7e:3f:24:d3:13:1d:ab:57:b6:45:22:d6:3c:9f:
                    06:56:78:3d:be:9b:3b:ac:45:9d:c9:9f:e3:72:b3:
                    cf:08:c0:d2:47:2f:67:f6:ba:91:4c:42:52:28:c3:
                    b1:0e:48:24:83:34:b3:fd:a6:5e:a7:fa:b4:f4:df:
                    5a:61:fb:81:15:08:b3:db:96:07:c7:8f:c5:4e:26:
                    d2:b7:d9:64:2e:54:47:a4:75:8a:85:e6:e3:6a:90:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:97:BE:D5:9C:08:4D:64:A7:71:3A:D8:84:BE:A2:26:24:49:57:09
            X509v3 Authority Key Identifier:
                keyid:DE:F7:8B:E3:35:00:57:AC:C8:FE:96:EE:5D:24:BD:57:8A:03:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/DEF78BE3350057ACC8FE96EE5D24BD578A03464E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:1f:ac:44:4a:71:b6:42:18:d0:98:f3:85:9c:ae:eb:5d:
         05:64:8b:a6:82:bf:d4:ef:dd:a4:a7:5b:a8:46:ac:14:d3:08:
         01:83:eb:06:4d:f5:ac:25:7e:dd:ba:dc:ab:5e:ab:d0:73:91:
         78:3c:9d:d3:ba:71:2f:6e:b0:c0:7b:b2:1e:9d:eb:8b:3c:04:
         01:c4:93:bd:60:74:a5:84:5c:f5:73:2e:bc:3c:f3:71:dc:64:
         ab:46:59:8f:8d:7c:00:70:c0:88:81:a7:07:c1:b1:08:9e:07:
         81:58:6b:a5:8c:de:a1:53:b1:ca:c6:60:02:98:41:e6:9d:f3:
         2c:3f:d5:e6:50:6c:6b:21:be:f5:69:fa:53:63:57:91:ae:09:
         27:d9:58:6d:2b:93:e7:87:7e:a0:eb:3d:69:c6:f8:d1:c3:c4:
         cc:12:97:ae:49:19:68:45:b2:40:51:b3:8b:62:51:72:86:6a:
         44:50:05:ba:8b:6c:10:c7:96:36:10:88:a8:0f:4e:fa:d5:f6:
         84:9e:e7:c6:66:58:fe:83:e4:88:82:74:6a:ee:d6:70:90:26:
         93:86:46:c9:0a:60:d4:64:7e:fa:cf:9c:f5:73:f5:1a:9a:77:
         9e:72:34:e0:d9:98:bc:b2:93:dd:97:53:10:aa:10:75:43:6a:
         73:83:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:59:16 2025 by rpki-client