Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
File:                     E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft (raw, json)
Hash identifier:          b8O+dIXLoTZaeuQ4kVGlcAAIJr8ASzIzZTkBl91dlx0=
Subject key identifier:   DC:ED:46:7D:9E:FF:AE:EC:86:07:46:98:16:DD:A8:D2:AE:BD:52:86
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       6395AC48D105E117F520AE57A690BED1E9D78874
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
Manifest number:          021F
Signing time:             Thu 15 May 2025 07:10:00 +0000
Manifest this update:     Thu 15 May 2025 07:05:00 +0000
Manifest next update:     Fri 16 May 2025 10:04:00 +0000
Files and hashes:         1: 3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa (hash: SLWQaLbJXAWOTLglLFO8TECCpk74xCspLU8rBVsve9c=)
                          2: 323830343a366635343a3a2f33322d3334203d3e20323730363533.roa (hash: xf4jTxMsQXdP95qYqDMbmLLAPkTTxISTwfWFlsj+IZo=)
                          3: E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl (hash: kS+PlYsIqX1L6O5c1wyKwDTrTnXROjzTWEwRoA9mcuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl
                          rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:95:ac:48:d1:05:e1:17:f5:20:ae:57:a6:90:be:d1:e9:d7:88:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: May 15 07:05:00 2025 GMT
            Not After : May 16 10:04:00 2025 GMT
        Subject: CN=DCED467D9EFFAEEC8607469816DDA8D2AEBD5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6d:93:8a:ef:0b:d1:e3:bb:35:4f:e3:c0:5f:
                    a7:78:88:92:de:76:86:aa:4d:6e:e8:33:af:2b:0e:
                    be:50:4e:20:6e:83:02:16:a5:17:08:3d:94:64:54:
                    79:24:32:6f:0c:17:e5:4a:da:03:1c:27:52:69:9c:
                    69:21:c1:93:95:4a:7f:86:2b:c0:1d:ea:09:42:4f:
                    23:de:88:3b:7b:db:30:e6:35:cf:e4:3b:6d:37:fd:
                    c7:b0:09:bd:97:9a:04:36:fa:4b:3f:f4:22:9b:f3:
                    a6:f2:77:42:8c:32:ee:c0:63:56:8d:bf:eb:6d:72:
                    19:f9:87:a2:7f:34:15:19:24:88:45:e5:5f:08:be:
                    25:25:8c:44:3f:f3:4d:4a:2a:54:af:d6:59:8a:6c:
                    2b:bf:25:dc:ab:bf:e3:ca:c7:91:d8:a0:c8:19:9c:
                    b6:8f:a7:d3:c2:73:7f:69:87:6a:ba:24:4f:b9:ba:
                    47:50:d3:27:90:05:c8:fc:87:79:ca:a5:92:21:ee:
                    63:74:83:4e:7b:1c:2d:fc:fe:22:18:77:a2:bf:a5:
                    a7:a7:85:e3:e3:0c:49:4b:96:6c:e8:bf:28:ba:31:
                    bb:33:01:03:28:1e:a6:7a:2d:54:eb:90:e4:67:76:
                    20:ba:41:7f:cb:fa:1b:bc:aa:ec:28:98:85:ea:6c:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:46:7D:9E:FF:AE:EC:86:07:46:98:16:DD:A8:D2:AE:BD:52:86
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:38:a1:65:3a:b9:8a:d7:39:21:f1:87:47:39:15:ea:f7:
         88:73:2d:d9:f3:cb:1c:7c:ba:2c:c6:24:cc:8a:c5:87:0d:e7:
         e1:27:09:36:54:ef:6c:83:67:3f:33:75:a4:d5:75:f1:c9:69:
         ee:bf:c4:17:69:5d:b6:c6:36:ce:c5:dc:33:7f:46:65:05:8b:
         83:5c:f5:13:26:e2:fe:34:4c:28:0c:7b:7d:10:28:a9:26:1b:
         22:c7:c4:95:5f:64:46:e3:e6:3e:22:a9:ee:e7:de:f3:ba:b4:
         96:0a:60:d6:72:eb:1a:5f:68:0b:19:21:e0:aa:b1:e7:d5:19:
         4f:93:db:73:bc:85:e8:4d:aa:20:00:d5:dd:3b:eb:1f:b1:d0:
         81:4e:18:eb:26:ca:5b:cd:5a:b9:4a:ca:63:0a:c9:5e:3c:bd:
         9e:61:9c:cb:2b:94:85:11:66:bd:48:44:12:12:64:ed:a9:bd:
         72:3b:f1:23:6c:9e:f6:29:09:47:cb:62:93:e6:6b:5e:39:50:
         cc:94:f7:96:8d:4d:ac:d3:f5:a0:f1:4c:12:95:f7:c6:6d:a6:
         0c:7b:43:50:c0:e0:82:bb:be:f6:d6:f4:4d:64:cc:07:1b:4b:
         b4:d7:d8:4c:ce:c6:3b:d8:d9:d0:0c:5b:03:54:06:44:77:0f:
         9f:ab:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 16:53:35 2025 by rpki-client