Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
File:                     AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json)
Hash identifier:          omRdK1i+FN02srll8Ub4eIUh72rXne/ix7Ouazup39g=
Subject key identifier:   88:29:3F:2C:03:9B:2A:CA:ED:2D:45:42:9F:5E:BA:B1:E9:A6:75:AE
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       0ED2D63B5481D64D86110AF8D6E0604136BBB0FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
Manifest number:          C5
Signing time:             Wed 14 May 2025 22:53:50 +0000
Manifest this update:     Wed 14 May 2025 22:48:50 +0000
Manifest next update:     Thu 15 May 2025 22:53:50 +0000
Files and hashes:         1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=)
                          2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=)
                          3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: CHK7pcE04isOP8fqYV/9WLU7LOMvybPOE3PP/UT7ias=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 22:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d2:d6:3b:54:81:d6:4d:86:11:0a:f8:d6:e0:60:41:36:bb:b0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: May 14 22:48:50 2025 GMT
            Not After : May 15 22:53:50 2025 GMT
        Subject: CN=88293F2C039B2ACAED2D45429F5EBAB1E9A675AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:87:0c:e8:5c:89:81:28:4f:e4:25:0f:5c:
                    3e:ad:4c:d2:c0:0d:c1:f7:cc:19:b4:f1:22:04:76:
                    8c:bf:e5:4d:76:d7:c9:8f:9b:65:f3:eb:03:02:ad:
                    af:70:f8:7c:4f:05:6b:a8:d9:cf:08:31:1f:e4:7f:
                    1d:c9:bf:38:ed:21:65:10:00:d9:16:c5:6e:47:e4:
                    46:c2:45:92:98:2c:d4:ab:58:12:63:3a:ce:8b:2a:
                    d1:22:a2:2b:1f:f3:ef:05:0b:73:7c:ca:e1:ea:33:
                    5f:1a:8a:e4:e1:ee:ef:95:d1:c1:94:07:f3:4d:38:
                    ce:e7:cd:89:cc:dc:14:cd:01:d6:04:33:61:5d:e6:
                    a8:61:06:f6:27:c7:30:91:d1:ae:bd:25:4c:eb:ed:
                    c6:03:0c:82:61:7b:46:ac:2b:e7:d5:62:91:77:9c:
                    0b:54:6f:e2:79:78:bf:54:b4:b6:05:20:b4:e6:bc:
                    04:ee:d4:98:90:0a:f9:2c:15:fe:1b:15:8c:3d:36:
                    9c:9e:fd:71:7d:65:53:e1:14:a5:a0:ab:df:da:42:
                    f5:39:f9:71:4a:0f:2b:8f:12:88:da:12:a1:07:c8:
                    b8:37:e9:92:42:71:9a:f6:0b:c0:07:c3:ad:9b:e3:
                    6c:cd:d6:e8:c8:9f:87:c2:2d:5e:ef:8b:82:c5:8e:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:3F:2C:03:9B:2A:CA:ED:2D:45:42:9F:5E:BA:B1:E9:A6:75:AE
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3f:9c:52:88:e1:bb:65:de:0b:81:20:c6:aa:e8:5a:af:70:
         ee:d8:9d:04:d6:8c:16:43:54:85:63:10:11:ef:14:dc:b5:f9:
         6f:6f:2f:c5:ed:82:d8:9c:bd:ab:81:95:c7:76:13:ee:44:12:
         b7:ec:7d:71:fe:bc:4d:2f:84:02:91:e9:9d:65:5f:90:22:44:
         78:f8:38:b1:06:94:d3:0d:e6:88:df:e8:97:f8:df:a6:96:38:
         34:22:45:d5:85:97:8f:71:2c:4b:bf:cd:7d:89:64:9b:ba:d3:
         5d:60:0e:44:53:a2:25:28:8f:15:c3:3c:3f:db:2a:9e:1f:60:
         ac:97:6f:d1:f7:a7:fe:06:04:63:13:c5:dd:b3:2b:78:af:c8:
         08:f3:1c:c0:53:34:0b:8c:e8:20:e5:a5:81:a4:3e:97:4f:62:
         68:7f:f8:b3:c9:16:21:37:d7:93:69:cb:dd:e1:e2:1d:e0:db:
         5f:45:fa:c8:c8:64:20:a5:5b:b6:7b:af:2d:3c:08:68:8a:e5:
         c7:75:e6:37:f9:c1:65:93:61:f1:f2:c3:41:78:71:8e:70:18:
         f2:28:aa:87:12:0a:87:5e:c6:a9:81:ef:dd:ef:f7:bf:78:78:
         da:6b:da:63:05:ca:a8:c1:67:13:09:35:6a:aa:a8:97:69:ba:
         21:57:73:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:07:43 2025 by rpki-client