Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
File:                     EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft (raw, json)
Hash identifier:          wI9FWqN4CiLrrgaKMVyJs1WXKtMzhxWYRqWGnZMHvfw=
Subject key identifier:   A7:AB:58:76:A1:D0:13:6E:A5:A9:E7:52:2D:1B:8E:25:04:9F:AA:C7
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       33A5B3F032454FD49EE69CEC3D6D554ACB69AA83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
Manifest number:          4A
Signing time:             Sun 11 May 2025 16:44:35 +0000
Manifest this update:     Sun 11 May 2025 16:39:35 +0000
Manifest next update:     Mon 12 May 2025 20:23:35 +0000
Files and hashes:         1: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl (hash: y+fm2ZxogVrBPZ+VwYuGvXupnwgNcWz07rVcFu9wpas=)
                          2: 3230302e362e3133342e302f32332d3233203d3e20323731353733.roa (hash: S7mn+aIRKkfCkrEGNSaEpbEn+9QE2IZk2jlyPQPYAu4=)
                          3: 323830343a376461303a3a2f33322d3332203d3e20323731353733.roa (hash: 2S5jPVpDtF/c3KX+7YrkDsURbXg6ohRU2xrGg9VcEpU=)
                          4: 3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (hash: qEEGnNXOgVLxsBmaHjZoeEIwIlOS5rZuaildH5CuVeg=)
                          5: 3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (hash: aglHitQCJNgIY3C7Tlxv80IWetc3uLwgBi5NAsxzjh8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 20:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:b3:f0:32:45:4f:d4:9e:e6:9c:ec:3d:6d:55:4a:cb:69:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: May 11 16:39:35 2025 GMT
            Not After : May 12 20:23:35 2025 GMT
        Subject: CN=A7AB5876A1D0136EA5A9E7522D1B8E25049FAAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:cd:8d:3b:d5:26:62:be:c8:be:86:71:94:
                    df:60:4f:f7:3b:0c:98:6d:b0:ed:55:14:ff:ca:c4:
                    9c:2a:cf:1d:81:6e:76:03:cf:1d:67:cd:02:7d:fb:
                    49:2a:b3:4b:9b:a9:39:54:fa:af:d5:34:f1:9f:8d:
                    8e:55:11:91:00:50:b9:c8:4b:74:c6:e6:ba:ae:80:
                    2b:c7:09:98:77:6f:03:9a:62:ce:ff:1a:44:8a:70:
                    b0:34:fd:ee:f3:b2:32:ea:1c:95:65:3b:af:57:66:
                    11:95:6c:92:ae:20:0e:a0:2c:b9:01:49:b5:4b:ac:
                    87:1b:0a:23:1b:93:6e:cf:2e:82:09:48:a0:99:58:
                    a3:5b:f8:76:a8:05:b6:7d:9c:c2:62:c4:62:ea:ee:
                    ad:c7:3d:c1:30:47:55:cd:2f:79:cd:25:4c:63:f1:
                    60:e5:9d:50:06:a4:73:d7:48:24:b2:5d:71:f1:bc:
                    29:32:68:93:a9:f7:4c:a5:fd:c4:67:5f:09:95:72:
                    d1:7b:e6:8a:97:a3:24:a6:9c:09:ca:14:ae:27:f9:
                    c9:49:d5:9a:b9:52:bd:c0:9f:4c:f4:25:e9:6b:d3:
                    19:d4:ea:05:1f:45:bf:79:58:b5:5f:00:b1:ef:9c:
                    89:fa:5e:49:8f:db:c8:ca:c2:30:a7:c1:f0:22:f3:
                    90:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:58:76:A1:D0:13:6E:A5:A9:E7:52:2D:1B:8E:25:04:9F:AA:C7
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:ca:1d:79:18:d2:57:7a:a8:76:1d:31:16:2c:29:18:dc:
         e8:46:53:d9:be:7a:47:04:59:b1:15:bc:c6:1d:f4:e5:7a:e6:
         56:42:87:a6:58:44:78:45:52:ce:f8:5e:ba:6a:3e:29:86:f2:
         ff:d0:42:03:d9:fb:69:6e:bc:d9:26:6c:7b:4b:bf:10:1c:d4:
         ec:31:c2:55:a5:a1:7b:83:0a:d4:d4:5f:1b:90:b2:91:df:01:
         a6:52:d7:f5:34:58:8e:f9:3d:e2:ff:c5:37:0b:c0:83:a1:25:
         a0:e6:d9:d2:00:56:fc:6f:a7:93:d6:7a:53:44:a6:5e:a9:29:
         7f:a0:da:f7:38:f3:c4:24:b2:aa:27:11:4b:87:68:05:52:fe:
         ac:b3:96:eb:b7:88:ff:98:db:c0:a1:77:c1:18:d5:30:fe:49:
         a0:1c:2a:43:f1:c0:23:22:e0:3e:41:53:3d:6d:f0:fa:d8:f9:
         f0:28:2b:86:13:3d:a7:5d:08:6f:4e:c6:86:cf:c9:d7:14:a1:
         59:7f:a8:dc:47:d5:a3:4d:76:ae:1d:13:06:13:b0:a7:73:2f:
         ab:2c:b3:9a:c4:a3:f4:84:7d:c6:72:17:91:78:f1:74:ad:45:
         a9:3e:8e:6f:8a:a9:83:2a:c3:9b:b3:e2:5f:86:ac:65:08:87:
         05:00:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:57:58 2025 by rpki-client