Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
File:                     B87E403FD04360E1BA519D841853FF5C9E675A23.mft (raw, json)
Hash identifier:          cRswHRbCH0DtRZNGHMfbq2DWr0jK2/DU3BRkE1m4dfM=
Subject key identifier:   49:E9:04:97:3E:05:5C:F4:46:76:A9:39:00:BB:0B:E6:B3:05:CD:89
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       3B228245820A151CFA42FEF99B98DA442486ABC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
Manifest number:          021A
Signing time:             Mon 12 May 2025 02:30:00 +0000
Manifest this update:     Mon 12 May 2025 02:25:00 +0000
Manifest next update:     Tue 13 May 2025 06:26:00 +0000
Files and hashes:         1: 3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (hash: 8clL3fZ/UcUBet/ByyqI0tz/CBKDL/m9LuvOyhWETW0=)
                          2: B87E403FD04360E1BA519D841853FF5C9E675A23.crl (hash: XLh2i5uDt6voWsMVF9XyboaD3PWHTGyGYoYVxwg3sww=)
                          3: 323830343a3161633a3a2f33322d3634203d3e203533313735.roa (hash: hthaHQ1W4Hhi7UR8B+WN+HOaWbENvNu2yu6xV3d/KEc=)
                          4: 3138362e3232352e3234302e302f32302d3234203d3e203533313735.roa (hash: w0owl7DF+mAIOGXYpwnTswecX/S7RFKkX0sboH3wAh8=)
                          5: 3136382e39302e3132302e302f32322d3234203d3e203533313735.roa (hash: kmPbp9SIMWkNQPWpAWYgRGrTVxQTvYRtPinUblfqjEI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 06:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:22:82:45:82:0a:15:1c:fa:42:fe:f9:9b:98:da:44:24:86:ab:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: May 12 02:25:00 2025 GMT
            Not After : May 13 06:26:00 2025 GMT
        Subject: CN=49E904973E055CF44676A93900BB0BE6B305CD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:b7:a0:cd:c1:ec:27:b8:aa:cd:76:c0:7b:
                    fc:42:b7:41:6d:49:f1:ff:55:a4:0c:b3:0f:ad:d6:
                    63:d3:51:a3:3b:7a:83:2b:51:ae:2e:47:df:b1:02:
                    ae:09:5d:b4:16:33:07:01:c9:da:01:90:eb:ee:0c:
                    d8:3c:9e:a4:72:dc:47:3a:36:c4:44:00:14:c2:f8:
                    cc:3d:b8:49:9b:ca:09:b9:01:28:86:c3:45:d2:8c:
                    65:d9:3e:19:32:8f:f0:37:d8:fc:81:b1:c5:6e:42:
                    0d:70:54:b8:19:2c:d4:cb:a9:31:d7:53:69:f0:f4:
                    a7:57:94:a4:2d:66:95:e9:9d:84:55:30:cc:f4:70:
                    f7:37:b5:b0:8f:85:71:5b:82:69:4f:5f:ad:04:19:
                    71:54:42:13:1e:1b:58:a2:ad:3d:8c:8f:d1:85:ea:
                    29:bf:28:31:5a:49:d9:48:f1:4d:b9:85:e6:9b:0f:
                    2a:fe:64:80:e4:ae:ef:4f:6f:a7:75:94:e4:a1:2a:
                    29:b8:c4:5d:17:42:99:43:e2:6c:8c:6b:f0:0b:63:
                    23:3c:38:78:21:2b:05:30:f4:d3:6d:34:9b:1a:26:
                    f9:09:02:3f:20:bf:de:9d:f4:73:93:02:f6:29:9b:
                    70:6a:9c:c9:9f:66:65:fb:7b:90:b8:2c:02:53:aa:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E9:04:97:3E:05:5C:F4:46:76:A9:39:00:BB:0B:E6:B3:05:CD:89
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:9b:41:74:a6:19:23:66:69:74:ad:9d:e8:89:15:e5:f7:
         e8:4b:83:3c:1b:dc:af:cf:e1:b9:75:3d:00:4e:66:d6:0c:e2:
         91:19:91:ef:56:0d:51:5a:99:ee:ce:5e:f7:6c:25:8a:85:0f:
         34:2e:a3:e7:3f:07:50:30:2f:40:ee:9d:02:a2:e9:22:20:ec:
         80:a8:fb:4d:0d:e2:a5:10:00:3d:97:19:52:00:7d:3b:8f:7a:
         f3:6c:d8:73:56:64:c4:6c:59:76:68:3a:ea:46:33:c2:1c:b6:
         2a:3f:f4:20:54:80:ce:f0:c4:99:c5:bd:4b:88:7a:23:06:55:
         64:b8:0b:04:27:15:b0:c3:38:d6:a8:ed:de:69:1a:d8:69:15:
         39:de:81:69:c8:bc:3c:86:91:6f:07:19:46:85:ce:67:3f:52:
         b1:31:ce:2b:7a:48:35:4e:80:b0:1a:bf:aa:1a:c7:bd:a0:88:
         ee:59:a4:31:04:8a:c3:c6:0c:e2:c7:66:ac:8d:3c:f9:86:a0:
         8d:c1:60:f4:52:21:90:87:82:27:0c:54:31:0c:4c:85:26:28:
         41:66:28:48:71:92:9a:40:25:01:d8:c6:2f:53:44:94:51:25:
         32:ae:a4:a0:37:51:0f:8d:18:e5:a1:3f:29:79:9c:4d:6c:6c:
         1a:74:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:54 2025 by rpki-client