Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
File:                     D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft (raw, json)
Hash identifier:          Xhy0B+sId3jBw1DPAXOd5ToOraeR/To95r/WUZXxW2E=
Subject key identifier:   D5:8C:04:E6:68:1C:51:11:55:7C:7F:30:25:1D:DD:7F:11:AA:90:99
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Certificate issuer:       /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial:       297660530812D1D55AB1E0131A4260F0C35BAD93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
Manifest number:          0203
Signing time:             Sat 10 May 2025 05:43:33 +0000
Manifest this update:     Sat 10 May 2025 05:38:33 +0000
Manifest next update:     Sun 11 May 2025 09:20:33 +0000
Files and hashes:         1: 34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (hash: GajE+SmGWaNYBKVNw4W3zPMLuW5M9g5AsGBUOwDGmFM=)
                          2: 323830343a343630343a3a2f33322d3334203d3e20323636393632.roa (hash: xwaJR5dhjhBO4fQGCT/XLU8PXXzRhmShVjgGEu1UG64=)
                          3: D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl (hash: Of+iSNNou7mI0YCXd8m6VqLPb8xJ9wbJvGBKamMO/PI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
                          rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:76:60:53:08:12:d1:d5:5a:b1:e0:13:1a:42:60:f0:c3:5b:ad:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Validity
            Not Before: May 10 05:38:33 2025 GMT
            Not After : May 11 09:20:33 2025 GMT
        Subject: CN=D58C04E6681C5111557C7F30251DDD7F11AA9099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:1e:34:64:7e:b5:e6:21:8c:fe:21:7a:5c:
                    b1:da:d2:9f:88:3f:72:dc:d5:e7:3c:7e:2b:0a:9f:
                    bd:1c:31:60:26:6f:74:ca:e2:fe:3a:6b:2b:78:70:
                    27:d9:ab:0d:c6:24:13:fc:b7:7e:06:7d:99:90:9b:
                    b9:81:43:b6:a0:74:3c:a5:fd:fc:24:64:ed:ff:7f:
                    0c:6a:e2:d7:82:02:e3:35:4d:b9:c7:84:99:c1:c6:
                    5c:60:60:b8:74:72:d3:fb:d9:70:41:f3:88:ed:54:
                    53:b4:a2:bc:80:53:c3:47:55:8e:4e:18:ef:ef:4b:
                    b6:57:54:73:b4:e3:79:b3:28:31:cd:4b:af:df:c5:
                    e0:f0:fa:31:2b:e9:2a:51:60:fc:3b:21:d3:e2:03:
                    91:96:00:21:c3:c6:8f:1e:20:4e:39:36:56:98:f0:
                    4d:76:ab:fa:f7:9d:65:95:1b:af:b8:f4:a8:a0:dc:
                    dc:f7:b7:06:cf:8b:63:17:e2:d2:dd:68:de:33:f4:
                    6c:be:f6:38:7c:c7:7c:db:3c:43:94:bf:b2:13:99:
                    ab:21:94:be:d4:8f:4e:00:c2:15:6b:91:5a:fe:da:
                    a0:13:09:ae:63:d0:c1:db:7d:44:95:76:ce:51:56:
                    48:17:be:8c:ee:e2:e0:c5:c1:7c:7b:9d:44:e1:1f:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:04:E6:68:1C:51:11:55:7C:7F:30:25:1D:DD:7F:11:AA:90:99
            X509v3 Authority Key Identifier:
                keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:cf:84:b4:14:92:0b:cc:d2:ce:9c:af:e6:26:37:a0:e8:
         96:1b:3c:4b:ca:bb:e4:73:a7:66:e5:2f:c3:f4:5a:3c:a5:f0:
         4f:36:c1:a7:12:70:d5:58:9e:c5:2d:ce:a0:9e:ea:12:e1:b9:
         35:a1:61:20:a2:65:84:79:0c:6f:62:fa:fe:92:46:86:6b:c1:
         8a:1c:24:22:fd:9b:47:00:95:0f:3b:ee:9d:78:13:fa:0b:2c:
         b5:e2:39:20:31:4d:d3:24:f8:bf:ec:f6:42:7d:d3:45:8d:25:
         fc:9c:e8:46:3e:9d:01:02:16:5d:8d:c8:98:37:f2:77:97:b7:
         c7:ab:37:f6:aa:46:81:06:84:1f:b7:a7:a9:32:58:b8:20:e1:
         2b:26:fa:e2:e5:cb:68:9a:ca:b0:6f:c9:72:a3:30:f2:bd:af:
         7e:5b:ad:59:f8:cc:91:4e:2e:15:11:0a:c1:69:62:3d:1c:ce:
         59:ab:67:54:3b:36:85:86:15:15:16:c7:c6:95:41:2a:ff:85:
         b5:a0:57:c5:4d:a6:17:8e:9f:23:7b:07:05:dd:1d:d7:b1:f7:
         3c:80:fd:11:0e:96:47:b1:c4:ab:20:20:6f:a0:b7:d6:aa:46:
         49:83:6b:95:85:3b:e8:8b:82:d9:ae:10:da:a4:d0:d8:d3:de:
         c2:33:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:41:21 2025 by rpki-client