Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
File:                     DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json)
Hash identifier:          EK9XRthSeFeuMGRVazTpbcUqXoEfzwB44HrZCew/ncc=
Subject key identifier:   6A:DA:13:62:F5:6F:11:F4:EA:2C:89:A6:D2:AB:F3:75:46:EF:68:31
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       05D2C1AE22945ADCCC7135A20F6F49E20FB01B95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
Manifest number:          0212
Signing time:             Thu 15 May 2025 10:16:09 +0000
Manifest this update:     Thu 15 May 2025 10:11:09 +0000
Manifest next update:     Fri 16 May 2025 10:55:09 +0000
Files and hashes:         1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=)
                          2: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=)
                          3: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: x8AsvZdENn1D/ERUDMnJqwVd6c45cSyOiD3vq0JcgSM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d2:c1:ae:22:94:5a:dc:cc:71:35:a2:0f:6f:49:e2:0f:b0:1b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: May 15 10:11:09 2025 GMT
            Not After : May 16 10:55:09 2025 GMT
        Subject: CN=6ADA1362F56F11F4EA2C89A6D2ABF37546EF6831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:46:97:f0:67:26:6f:67:61:92:cf:e2:45:
                    3b:18:97:a9:c1:9b:3d:52:11:39:00:21:00:3f:89:
                    a9:47:cd:7e:1d:8c:01:76:79:e1:f3:45:be:6e:2b:
                    e7:1e:94:89:49:66:b0:3b:f0:21:fe:0a:4f:48:8c:
                    a0:8e:d3:32:02:61:42:47:39:db:32:ce:74:ba:f0:
                    d5:dc:d8:92:1c:4c:25:7d:6b:f1:93:09:4e:2c:14:
                    05:d2:94:5a:30:ea:91:eb:65:87:63:79:ab:47:e4:
                    d3:90:08:44:b0:b9:04:3e:68:8b:d6:b4:0d:30:f7:
                    f5:14:9b:de:c0:43:e2:af:e4:c4:05:87:26:35:d7:
                    3b:e7:00:3b:f0:d1:db:4c:c0:b1:89:24:76:60:a7:
                    45:de:65:23:0f:35:fb:7d:40:1b:34:56:6d:db:4b:
                    9d:2b:1f:ec:c1:05:06:87:a3:69:f9:ec:58:16:12:
                    47:3a:cd:92:65:9d:85:e0:e2:ae:29:6d:cb:f6:ea:
                    b8:06:d0:f2:00:fc:27:41:fc:ad:80:e6:49:3c:9f:
                    09:af:92:eb:cf:21:52:a3:4d:dc:7f:f3:bb:98:95:
                    b7:c5:02:c5:bb:d6:15:96:17:98:7d:b4:1f:37:4a:
                    8f:4b:20:de:d8:bd:5c:1d:a0:83:12:52:0d:dd:ae:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:13:62:F5:6F:11:F4:EA:2C:89:A6:D2:AB:F3:75:46:EF:68:31
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:9b:f4:7b:83:c5:42:f4:07:0c:25:72:01:d4:e6:02:68:
         70:10:30:91:d6:5d:f7:2b:41:99:54:82:99:f9:c2:0c:17:be:
         bf:b1:65:ec:8c:22:2c:74:3c:ce:03:88:e2:09:ef:21:2a:92:
         bf:03:2c:42:84:f4:4e:ea:f9:85:2f:df:b5:12:c5:31:9a:39:
         ac:67:ef:97:5b:ee:da:e4:d6:e5:88:37:27:ab:c4:3d:b6:0a:
         fd:f4:80:d3:48:79:af:1b:de:07:90:2d:8f:14:55:1a:66:11:
         25:da:35:e0:e0:06:36:e2:c7:fb:38:f3:c3:fb:d7:09:31:3a:
         fe:00:ae:ad:1a:62:33:0d:6b:16:cf:8b:b7:71:fe:65:26:f9:
         f6:2d:b1:8d:bb:56:76:32:8d:de:17:9e:cb:e5:0d:4e:03:bd:
         54:a4:25:da:16:d2:84:91:c3:55:9e:a8:eb:ab:1d:20:e4:73:
         b6:c4:c7:f2:1e:fa:30:83:ac:3c:0f:65:7f:a8:13:17:d1:24:
         b2:35:9b:42:6a:0b:1a:97:31:b9:52:06:23:ac:94:63:87:ad:
         9a:a3:b8:b7:82:3d:87:34:f7:58:ce:4b:34:ff:f3:2a:a4:85:
         89:3f:5f:87:30:6e:bb:af:40:5c:0a:58:e9:26:80:cf:83:5b:
         92:de:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:50:39 2025 by rpki-client