Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
File:                     461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft (raw, json)
Hash identifier:          SNfxQTqIh5+9W5VDBpPZFQVSRMGtZWH2VNQxTok43NI=
Subject key identifier:   EC:F6:95:FA:52:0F:1A:34:58:C9:26:10:64:9D:0E:E9:DC:AA:FD:68
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       294ED8A5E160AF0219C737FFD87A6ACC84082C3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
Manifest number:          0144
Signing time:             Mon 12 May 2025 07:32:54 +0000
Manifest this update:     Mon 12 May 2025 07:27:54 +0000
Manifest next update:     Tue 13 May 2025 09:33:54 +0000
Files and hashes:         1: 3230312e37312e33322e302f32302d3234203d3e20323632373835.roa (hash: 4IjsvHGIp7PPRAPzr3eRR6+PU6/hHwUxj7O4SaNtQX4=)
                          2: 461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl (hash: 1wUF8vCWhoSNxmbwT6DooPukvbRfCwhTeWe682zQ+cA=)
                          3: 34352e3137302e38302e302f32322d3234203d3e20323632373835.roa (hash: egQG2Ws+KVIt6xL4WG2fNvHPxoeVuDpQkoTkKoCRr84=)
                          4: 323830343a326266343a3a2f33322d3438203d3e20323632373835.roa (hash: Qnyw9yXwWTXSKg+8h1ZmtesR3jXDAGcpP2d8JwmkKkg=)
                          5: 3230312e36322e34382e302f32302d3234203d3e20323632373835.roa (hash: Pnlpij1uQkqZmg8me+fqmgQUayFDJW99HIY2OXjDzn0=)
                          6: 3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa (hash: 3f6R65emXmNLpbVJ3Z9SCoS11OJn1LQkXvDc6zwjags=)
                          7: 3136372e3235302e382e302f32322d3234203d3e20323632373835.roa (hash: Hub6BElxZ+3EMhYWSuYca5FxPDPou6MfAAUzn7XcCCM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 09:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:d8:a5:e1:60:af:02:19:c7:37:ff:d8:7a:6a:cc:84:08:2c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: May 12 07:27:54 2025 GMT
            Not After : May 13 09:33:54 2025 GMT
        Subject: CN=ECF695FA520F1A3458C92610649D0EE9DCAAFD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:db:fa:16:e8:06:98:24:3f:f4:29:bf:0c:
                    97:ff:f4:78:37:3f:0f:db:a0:c6:c2:7c:2d:ae:66:
                    db:7f:c7:65:b9:73:47:fa:8f:90:dd:35:ca:d4:f0:
                    b2:1d:3b:b2:df:63:e1:4a:84:24:0f:44:cb:17:16:
                    b8:b9:c6:6b:82:2c:93:09:9b:61:08:3b:51:90:1e:
                    79:62:4e:bd:1c:cf:00:ed:c6:87:a7:83:08:38:77:
                    fd:58:e7:55:36:fb:43:3f:bc:de:07:c8:59:35:0e:
                    61:a7:de:18:00:9c:fb:1d:c7:33:de:e2:05:d3:0a:
                    cd:f7:20:08:b2:88:3a:bd:cb:61:46:7d:c5:cb:59:
                    13:e8:35:d5:0b:08:fa:cb:ba:cd:8f:92:6a:39:0e:
                    92:38:ad:a3:70:8c:32:31:e2:d1:3a:aa:d5:df:4a:
                    ea:65:9b:4a:87:70:93:a8:88:e3:34:ee:bd:4e:40:
                    a5:35:f6:cf:06:16:e2:db:a6:09:df:37:da:4b:91:
                    f9:9e:56:b3:22:46:62:7a:38:be:8c:ca:46:b6:25:
                    b7:4d:0b:4a:d2:ad:a7:6d:2c:74:df:61:c1:eb:3a:
                    2b:70:7d:8d:c8:23:b4:6d:84:5b:81:10:e4:67:7d:
                    f9:e0:2c:d2:1d:4e:dc:29:3f:4d:e1:41:c1:b4:44:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:95:FA:52:0F:1A:34:58:C9:26:10:64:9D:0E:E9:DC:AA:FD:68
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:57:fb:f3:6b:07:83:38:f3:7d:9a:53:4c:5f:8e:6b:0b:b0:
         ad:7e:28:cf:e4:27:62:3b:64:d7:09:43:ca:e9:fd:2c:57:58:
         53:9a:03:d0:5f:07:e0:bb:7b:b1:1e:fd:89:88:98:2b:a9:e2:
         24:c7:24:21:64:ce:28:fa:16:16:7c:e6:82:bf:88:32:2f:8c:
         4c:bd:9b:e5:5a:c2:29:53:88:45:1a:87:fc:a2:c1:4c:b6:47:
         e0:dd:2e:14:0d:89:d1:3d:8b:fe:f2:e1:61:40:56:58:c1:96:
         5d:67:64:0d:09:4f:7f:72:35:81:27:ae:b9:ed:ed:70:ba:d0:
         0d:95:04:21:67:fc:a9:ac:9a:c4:92:3c:89:12:df:eb:fb:b0:
         cd:73:67:67:fa:af:48:19:3e:a9:ec:95:cd:dd:95:1a:6d:de:
         6e:92:38:b3:31:12:8a:bd:c8:a0:ae:00:87:36:f1:b4:43:34:
         16:89:1a:9b:af:ae:c9:3f:3f:42:1c:af:8e:5f:6c:fa:85:ad:
         72:bc:81:24:65:51:9c:37:ea:18:11:33:93:ee:9d:2c:0a:af:
         2e:de:8e:c4:b0:78:c9:a8:b2:f5:48:41:2a:4e:73:70:59:bd:
         cd:c7:aa:58:b9:f8:b7:3a:5e:53:36:80:ca:73:5e:ec:e9:46:
         be:92:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:32:11 2025 by rpki-client