Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
File:                     598DA71AEBD137B402470BB062F68BE6315A8ABF.mft (raw, json)
Hash identifier:          wfHpPXKBwu3zkwKynt32HsY8TzWohSyFl2ZEg69rLgk=
Subject key identifier:   14:E9:E2:1C:C2:A6:DA:CB:21:E7:70:8A:41:8E:F6:34:D4:23:88:7A
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       40A8B84B5786F0A43A352DE8BC50F338B7D23809
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
Manifest number:          0143
Signing time:             Mon 12 May 2025 15:48:01 +0000
Manifest this update:     Mon 12 May 2025 15:43:01 +0000
Manifest next update:     Wed 14 May 2025 05:53:01 +0000
Files and hashes:         1: 323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (hash: 6a4hW4PLh2F8bHNJZDD/PfOVLrWZfxA4WKw3HFkFXTk=)
                          2: 3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (hash: baNFhgbFTdOx+2Bsp14GMKfBsYT5picsrzlhIPnrFF0=)
                          3: 598DA71AEBD137B402470BB062F68BE6315A8ABF.crl (hash: 4xBl31UDR/f12N0DeFOQcNSmNLIB1BBCSQJlUX0bvn0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a8:b8:4b:57:86:f0:a4:3a:35:2d:e8:bc:50:f3:38:b7:d2:38:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: May 12 15:43:01 2025 GMT
            Not After : May 14 05:53:01 2025 GMT
        Subject: CN=14E9E21CC2A6DACB21E7708A418EF634D423887A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:6a:08:a9:1e:5e:8b:b8:d5:4f:03:5a:ca:
                    82:95:82:44:e7:1c:cf:a2:20:22:a2:b7:17:a3:89:
                    1a:1c:d0:6c:93:c3:55:57:d3:09:6a:93:b9:3a:e7:
                    4b:3e:d0:a6:65:c5:2f:57:2b:ef:1d:72:4c:e3:d7:
                    0a:84:63:cc:7e:f8:20:28:0d:86:27:00:db:09:f6:
                    33:77:6e:0e:4d:ce:f8:21:f7:9e:e0:7a:ef:f9:5d:
                    96:8f:a7:4b:cf:d7:11:9e:8e:25:11:3f:42:b9:66:
                    09:d1:12:ba:bf:fa:dc:47:9e:29:92:76:4e:5f:9a:
                    3d:c8:30:f5:c6:bd:13:fc:f5:fc:91:9e:83:d1:f3:
                    8a:9b:5e:ff:9a:f7:b8:f3:b2:2f:b5:74:ab:31:89:
                    81:fe:de:cc:e8:dd:48:92:4b:de:33:b1:b4:25:92:
                    86:21:17:db:fc:7c:37:5a:4d:05:a6:ad:7b:da:dd:
                    49:76:af:b0:6d:a8:e1:26:44:54:d4:bd:2b:08:bc:
                    bd:c6:74:cf:05:28:75:29:c0:77:e3:1e:80:d5:d8:
                    fe:3d:a6:62:02:4e:3c:e4:26:1c:90:16:41:25:6c:
                    64:fd:09:fc:d0:bb:0d:cb:54:8a:f9:9d:9c:01:2d:
                    e3:73:1a:e6:8c:75:c6:c7:9f:ea:4b:76:1e:d8:85:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:E2:1C:C2:A6:DA:CB:21:E7:70:8A:41:8E:F6:34:D4:23:88:7A
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:57:38:10:a7:9d:30:b2:9d:f7:1e:2c:e4:2c:d9:b2:43:
         87:d2:75:b8:ba:47:e7:14:89:91:e5:77:3d:91:8c:a2:48:28:
         5b:86:0e:ba:09:87:87:d6:93:c4:64:1a:eb:fc:35:22:66:59:
         0a:8f:da:0d:c8:6b:30:71:5c:58:74:32:b6:45:2c:e3:0b:c7:
         d2:d8:bb:fe:6b:dd:7f:53:43:97:22:15:01:b3:9d:72:4e:5d:
         64:36:d8:93:98:b3:7c:de:3f:8e:96:e3:ff:d8:d3:88:e6:96:
         ad:2a:c7:87:05:0b:fe:b5:35:b4:50:0c:c1:9b:58:c0:63:9e:
         91:2e:a8:5c:6f:d1:c0:66:54:aa:6f:a5:7b:53:a2:66:d2:d4:
         0f:70:25:8d:db:d9:d8:d2:1c:6e:7d:c9:cb:38:2c:92:8a:70:
         01:b4:d4:d4:7a:c3:dc:69:4a:56:3f:71:a4:48:22:fb:3f:bc:
         54:89:6e:03:20:01:ee:56:65:fa:a9:dd:5e:05:ce:1b:b0:17:
         19:9d:5d:e7:cf:c0:a1:82:a8:84:74:8d:59:de:09:5d:ed:dc:
         95:2b:77:b0:88:20:cd:12:3c:b6:2e:8a:85:b7:e9:c0:7e:1e:
         52:3b:52:ba:d0:cb:79:27:ff:57:55:49:3b:24:99:ba:da:c7:
         25:cf:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:35:54 2025 by rpki-client