Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
File:                     8C9489B5F162370B3CD6AE611F82567891AA2F79.mft (raw, json)
Hash identifier:          lX1NwIooUMqpXr3IvyiRGIdkSJoKJbwPTMfJVh5uTgg=
Subject key identifier:   49:84:05:41:77:E3:39:DB:1A:53:4D:AA:93:83:FC:8E:71:7F:F9:8A
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Certificate issuer:       /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial:       4A1AADF00C9DDF47B7927D7AC4A0AA2A000B27CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
Manifest number:          1A
Signing time:             Fri 09 May 2025 20:11:50 +0000
Manifest this update:     Fri 09 May 2025 20:06:50 +0000
Manifest next update:     Sat 10 May 2025 23:58:50 +0000
Files and hashes:         1: 34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa (hash: iA+ldL/fGyDGB/XdXsXTUs22s5Gfxyq23UOMWKTack8=)
                          2: 323830343a353239383a3a2f33322d3438203d3e20323638353238.roa (hash: npZtOWAX2jdEasirZhHJUpjOYx48/HGh96fzMy2npB8=)
                          3: 34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa (hash: B/FW6NB9mbW4dLGdEb/iRIbaB2Z4d1Aejq3uYgvPCeA=)
                          4: 8C9489B5F162370B3CD6AE611F82567891AA2F79.crl (hash: d5ibi5yrUbcd2BtoOpNBuf1106lw4jBaZ2Xo1bLYOy0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl
                          rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 23:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:ad:f0:0c:9d:df:47:b7:92:7d:7a:c4:a0:aa:2a:00:0b:27:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Validity
            Not Before: May  9 20:06:50 2025 GMT
            Not After : May 10 23:58:50 2025 GMT
        Subject: CN=4984054177E339DB1A534DAA9383FC8E717FF98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:c4:37:20:c4:cc:02:99:f6:06:a5:67:d4:
                    00:57:8d:1f:44:71:7f:42:95:e6:e8:4b:fb:d8:f0:
                    32:8e:b7:d0:99:8f:ee:82:98:79:c7:a3:d3:6b:8b:
                    fe:95:2f:0b:0c:e4:c1:c7:de:0f:7c:04:68:9e:11:
                    18:af:ce:9a:7c:ca:33:81:9c:95:d8:79:5d:94:7c:
                    a9:81:a4:4b:25:f8:4a:22:01:9e:e8:a7:4f:77:cb:
                    09:6e:e6:96:d5:75:72:8c:ff:45:e5:0e:61:f5:d4:
                    4e:6c:8d:a9:69:29:7d:85:59:e9:44:00:06:1e:d4:
                    47:ec:09:23:c6:98:42:45:75:4f:56:43:0c:5f:ed:
                    94:b5:5a:0d:88:66:24:8a:47:d5:04:04:c8:5e:d7:
                    87:ba:75:95:52:c3:e0:c6:92:80:42:a8:65:fe:87:
                    50:c7:4c:45:4d:5f:ba:ad:64:a1:9e:0c:a6:a0:91:
                    1d:84:47:41:a2:5b:57:6e:7a:80:f5:90:d6:a9:fa:
                    e8:3e:28:23:92:fb:4b:b3:df:20:59:ba:06:53:c5:
                    25:6a:ac:99:fa:d5:16:66:7a:02:41:9f:08:07:40:
                    d0:ab:d1:0d:7d:40:ad:56:08:e7:66:bb:78:e3:75:
                    d5:cb:e3:8e:f0:46:0d:88:71:09:50:b1:60:28:8b:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:84:05:41:77:E3:39:DB:1A:53:4D:AA:93:83:FC:8E:71:7F:F9:8A
            X509v3 Authority Key Identifier:
                keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:60:90:91:bc:b6:9d:60:a9:c9:4b:20:81:c8:cd:ef:b1:7e:
         3b:b6:c7:08:fb:e5:3a:9b:67:20:61:3b:4c:3b:01:72:2e:14:
         4e:af:1a:73:fd:9d:8f:3b:18:c9:e9:d0:cb:0e:fa:e6:e7:e2:
         4f:27:96:9c:2a:26:21:9a:ec:49:9c:ee:31:e5:3e:23:47:58:
         f6:ba:3c:87:b9:33:43:af:d1:36:7d:5c:21:0b:f6:aa:0e:05:
         37:1f:ba:32:7c:65:d6:9b:77:cb:95:e6:18:37:8f:10:d7:fd:
         fb:93:42:d2:77:eb:f5:dc:e8:f0:65:7b:16:ba:f3:22:ad:d5:
         05:8a:e6:8a:ee:4b:f0:93:a5:71:71:e6:75:eb:42:50:13:87:
         c2:99:ab:8c:4c:66:50:76:c5:7f:a6:da:fc:bf:bb:c9:ac:73:
         fe:77:14:69:a5:97:7e:14:4f:3c:58:4b:ca:0a:5b:51:f7:f4:
         55:f5:0b:dc:1c:df:73:6c:6d:b7:73:25:84:dc:3d:bc:f4:87:
         f0:66:68:15:0a:3d:6f:40:77:d5:ed:2a:a6:ac:ab:91:69:39:
         f5:8b:1e:19:10:75:54:28:fd:5f:d7:0b:95:7e:2a:d4:86:bb:
         f0:ba:49:89:1d:17:d2:05:be:1f:ed:d8:aa:e8:62:83:06:b5:
         5a:79:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:54:39 2025 by rpki-client