Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          kHaZOr54K5kI3ftkrdwg/3M6bflU8L3okYmiJ3rEfRE=
Subject key identifier:   17:1F:4D:78:B0:9F:AE:3D:45:82:1A:66:EE:39:00:F9:37:43:B9:3E
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       6676FD55271167E922C2C2BE4DADD990D08D5D7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          021C
Signing time:             Tue 13 May 2025 00:29:16 +0000
Manifest this update:     Tue 13 May 2025 00:24:16 +0000
Manifest next update:     Wed 14 May 2025 00:59:16 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: GP5N/ojn+CpGVA4mqG79uEfaVmGi1ccM9DHakURSDw8=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: 2PwI96O/mpaYOe4/E3VIgEdTimysAkSW1B/krVVDHnU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:fd:55:27:11:67:e9:22:c2:c2:be:4d:ad:d9:90:d0:8d:5d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: May 13 00:24:16 2025 GMT
            Not After : May 14 00:59:16 2025 GMT
        Subject: CN=171F4D78B09FAE3D45821A66EE3900F93743B93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:70:05:86:6b:47:02:a3:07:0e:c6:8d:42:
                    9d:07:fd:a5:3f:53:f3:56:75:26:24:da:9d:fa:c4:
                    9c:89:c9:ba:6c:ee:a2:37:20:45:2a:70:19:7a:54:
                    2c:a6:6f:e5:fd:80:11:e4:d5:06:81:72:c0:55:bb:
                    0a:72:8d:ff:3c:60:45:10:47:d1:75:28:c7:00:f7:
                    3c:29:ac:79:34:47:ce:a8:88:bc:f2:2d:d1:7f:39:
                    0a:05:15:79:2c:83:49:62:55:54:c2:54:c1:b5:89:
                    5f:e5:e1:07:a4:32:8c:1b:a7:53:10:ee:86:34:b7:
                    b6:dd:e1:96:11:ca:14:ab:ed:35:85:03:27:6a:fb:
                    6b:3c:42:2b:4d:d0:3d:d2:7a:54:99:e9:41:9f:ef:
                    0f:bc:95:b1:d6:56:97:7f:5e:cb:38:34:e6:26:d9:
                    7b:66:f1:e6:44:b7:e9:2b:c6:46:75:af:72:c6:c6:
                    a3:c0:2c:27:d7:ec:02:b3:d5:7d:20:ce:12:13:aa:
                    26:6e:f1:1c:23:57:2a:46:0c:31:f0:56:a4:dd:09:
                    79:6e:1a:79:79:20:11:e1:b0:52:55:54:0b:43:ad:
                    9a:04:d3:f1:25:a6:f0:29:39:08:11:db:a0:68:1d:
                    f3:7e:ac:fc:b5:a3:c4:a3:99:fe:31:c7:d2:24:7c:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:4D:78:B0:9F:AE:3D:45:82:1A:66:EE:39:00:F9:37:43:B9:3E
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:9f:be:ae:80:86:a5:d4:47:8f:36:15:93:3f:04:c6:b9:
         cf:a5:1a:1c:c6:e9:71:06:5b:49:d7:22:2d:9e:0e:53:67:2b:
         4c:b9:1f:d7:be:9b:00:de:03:b4:71:ff:68:a0:90:45:34:7c:
         94:12:7a:0e:d4:c7:52:40:b9:6a:af:da:2c:6b:1e:75:b2:b7:
         d6:47:ce:b7:f0:e3:f3:3f:c1:7f:8d:b4:74:c5:fc:b3:ab:96:
         40:77:c9:14:f4:96:2d:12:14:df:5e:de:e1:47:67:eb:aa:7b:
         38:fc:ca:41:26:89:4a:11:c5:9a:24:ed:a4:6b:d4:a3:32:5e:
         89:0b:7c:f4:10:9c:06:01:84:6b:c7:9b:f4:94:76:5a:87:63:
         b9:44:7b:ff:03:65:9e:3c:43:25:a9:44:34:51:c5:67:c6:f0:
         8f:81:05:64:90:6f:cc:5a:1a:27:a8:66:c0:28:eb:2f:8a:aa:
         c8:3d:c6:50:eb:7f:fc:48:a3:88:d0:d9:72:9f:9e:62:ec:e5:
         7c:bf:d2:d1:fa:93:21:a7:b4:8f:66:19:c1:69:5e:d5:62:db:
         41:ef:9d:ce:e5:23:fd:26:e9:ee:b5:9c:ed:59:50:2a:e2:64:
         18:e6:50:59:2f:22:02:00:51:fa:d5:67:a4:0f:97:66:42:c7:
         bb:56:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:27:58 2025 by rpki-client