Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
File:                     806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft (raw, json)
Hash identifier:          oerFwc04k26Qv+98Cdu2eEwjVcNjNbBQhgJ5296htWA=
Subject key identifier:   E3:C3:07:F0:22:42:81:5C:30:8D:C8:2B:6D:1C:62:18:C8:DA:F1:68
Authority key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52
Certificate issuer:       /CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
Certificate serial:       22CD70E02C6D279E2AEB9BC65F854C071698E573
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
Manifest number:          0216
Signing time:             Tue 13 May 2025 11:02:36 +0000
Manifest this update:     Tue 13 May 2025 10:57:36 +0000
Manifest next update:     Wed 14 May 2025 11:42:36 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: aJepNlwBajDAqgc6KneJ78CpKDsJPHnN/0pqAA8sjeQ=)
                          2: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl (hash: G7vAhhwltdROL2wtKbOSH8gjFar3PkbzXw1rFtbTTQM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 11:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cd:70:e0:2c:6d:27:9e:2a:eb:9b:c6:5f:85:4c:07:16:98:e5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452
        Validity
            Not Before: May 13 10:57:36 2025 GMT
            Not After : May 14 11:42:36 2025 GMT
        Subject: CN=E3C307F02242815C308DC82B6D1C6218C8DAF168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:c8:05:2e:97:b2:f5:be:6c:98:d6:9b:d8:
                    c5:a8:16:3e:b7:49:d8:51:d3:ef:21:a5:95:6b:3d:
                    ab:b4:72:6e:dc:fa:70:a3:ce:38:5f:a6:36:65:81:
                    a8:1e:8f:b2:26:23:08:a8:b9:aa:28:cc:49:6f:a3:
                    e3:d6:94:20:51:61:95:f8:f0:1a:42:42:4e:9a:54:
                    e3:c7:e8:8d:8d:e8:6e:1f:fb:16:07:9b:34:a7:2a:
                    85:4f:5a:e9:c8:8f:2c:63:00:98:b7:ad:4b:9f:cd:
                    c6:52:93:1e:57:5a:5f:b3:0d:58:2e:b9:ea:02:7c:
                    90:bb:2e:bc:eb:b6:8b:31:da:b8:5b:eb:7f:20:31:
                    b5:ea:34:5b:47:28:10:af:ca:84:af:30:8e:10:8e:
                    7b:96:14:0f:1f:17:47:fd:36:13:fb:1e:ff:e1:9a:
                    4b:c7:0b:6a:ee:c4:ab:a8:bf:63:74:18:54:35:b1:
                    60:bf:63:59:12:a9:29:d8:85:de:e3:eb:20:dc:aa:
                    46:24:10:64:61:9d:cf:63:bb:89:6d:ea:0a:fd:f2:
                    02:cf:4f:f2:ad:fb:83:82:b9:c6:4c:7f:f1:e0:b6:
                    de:7e:e8:0b:5a:ad:e6:25:10:4f:30:a7:b0:fd:38:
                    b6:93:50:9d:d1:93:02:80:a5:3d:3f:99:a0:22:16:
                    80:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:07:F0:22:42:81:5C:30:8D:C8:2B:6D:1C:62:18:C8:DA:F1:68
            X509v3 Authority Key Identifier:
                keyid:80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:22:6a:14:22:7c:ab:3a:d4:31:d4:36:8b:e5:94:1d:79:
         fa:8f:59:0a:8b:5b:f3:03:b3:b2:4c:46:9f:56:b8:d9:3f:81:
         d9:19:71:ac:88:e7:c5:98:88:22:9d:d8:ed:c1:ea:da:45:d0:
         6a:52:b9:0e:06:f9:e7:33:ac:c1:86:93:fa:ee:c4:13:76:8d:
         41:90:1b:d2:e5:db:b1:54:20:60:77:f1:de:d1:0b:6d:6f:a3:
         85:1f:d5:25:8c:1d:0b:11:fb:83:88:0e:29:58:a5:67:1c:f1:
         a5:f2:a2:15:1d:a5:b0:7f:fd:1a:20:47:aa:1e:5c:12:ec:40:
         70:40:b7:8c:af:66:83:20:39:29:d4:d3:73:38:66:52:6a:95:
         52:64:11:b0:ef:65:f1:d0:5d:f0:d8:ce:6f:45:68:58:68:8a:
         07:3c:3e:e5:1f:42:d4:e3:b8:54:4c:19:98:ea:bc:38:99:62:
         68:b9:2c:44:74:d8:23:84:1b:a7:c1:a6:b2:34:48:fd:59:83:
         c4:ea:2a:d9:58:ae:6e:c9:a4:aa:a2:7d:a8:da:76:a2:f0:f5:
         6a:00:f2:21:9a:f0:10:3b:e0:91:fc:1b:97:37:ec:a6:80:4c:
         95:0c:ed:32:81:0a:0b:df:7c:60:a7:85:39:ff:49:9a:c4:35:
         59:b5:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:44:23 2025 by rpki-client