Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          j4/H0XESl8cfDoHoKVXzANX6Isjx9xuYgIduq8YvdF0=
Subject key identifier:   2C:00:8C:47:E4:47:8D:8B:8F:32:63:57:66:91:D5:E9:91:07:07:D2
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       134DC951B891891C71B040994CCD408A7638C2B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          0217
Signing time:             Sun 11 May 2025 03:32:17 +0000
Manifest this update:     Sun 11 May 2025 03:27:17 +0000
Manifest next update:     Mon 12 May 2025 07:31:17 +0000
Files and hashes:         1: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: sJL4DvhGGV25ei6EBxuFYLH85qGXRFbFM4ewEDhp5V8=)
                          2: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=)
                          3: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=)
                          4: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=)
                          5: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 07:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4d:c9:51:b8:91:89:1c:71:b0:40:99:4c:cd:40:8a:76:38:c2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: May 11 03:27:17 2025 GMT
            Not After : May 12 07:31:17 2025 GMT
        Subject: CN=2C008C47E4478D8B8F3263576691D5E9910707D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:9f:36:cd:24:a4:3c:9e:46:40:de:5d:96:
                    7f:38:07:ec:e3:59:77:0d:1d:aa:a6:6c:2b:58:1c:
                    7a:21:e6:3f:db:7a:43:35:c1:75:cb:7a:96:17:fb:
                    82:e4:2a:29:b6:26:42:8f:a2:8c:67:1a:e5:86:aa:
                    8c:36:2e:d1:ec:35:04:53:d2:86:c6:e2:59:be:b5:
                    6c:9b:09:42:21:a1:09:a8:5d:58:d3:4b:ff:e3:bd:
                    fe:3f:f7:c6:11:2c:8f:6c:00:37:cb:54:dc:ef:82:
                    f7:b6:f3:36:b2:7c:ca:26:a0:1b:65:1f:79:e7:92:
                    f6:c1:34:5b:b4:8d:e9:28:39:2a:60:f7:75:79:64:
                    7c:85:33:17:e3:a5:ee:98:44:6c:27:88:40:47:da:
                    18:74:aa:59:5d:c2:f0:8c:3c:dd:b7:74:dc:fe:4c:
                    1c:9b:04:33:35:d0:d6:f1:11:79:c6:df:0e:0a:02:
                    70:b7:da:c2:4d:92:d9:1c:35:6b:54:c3:4e:33:24:
                    84:ef:02:fa:fd:2d:d9:29:2b:0e:e9:2f:df:25:6b:
                    07:aa:75:6a:62:7e:28:76:dc:24:de:93:57:7d:31:
                    e2:1c:d5:22:29:f5:18:93:2d:61:aa:1f:c4:e1:23:
                    f0:fd:f8:2b:ab:a8:9f:63:3a:e2:b6:7c:c0:c1:5a:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:8C:47:E4:47:8D:8B:8F:32:63:57:66:91:D5:E9:91:07:07:D2
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:06:95:9f:2b:bd:63:e9:5f:13:f5:48:ea:4e:41:b1:d9:
         c7:69:18:b9:b8:53:e3:28:b0:6e:41:37:94:82:df:d9:15:73:
         97:31:65:d1:17:24:2c:07:a9:12:b6:9d:7c:a4:86:54:82:e6:
         95:3b:52:a0:47:8a:6e:75:e3:af:8e:91:9b:8d:3d:ae:a1:e4:
         dc:c4:7b:e5:1e:1d:59:f8:e8:68:4a:fc:82:70:f2:1f:7f:bc:
         82:1e:70:01:eb:d6:2f:4e:e4:e3:90:ad:a1:df:f4:bc:78:f7:
         62:cc:ce:a1:65:67:cb:ba:81:f3:59:ce:cd:77:ce:4a:73:36:
         bd:07:bd:50:fc:40:b0:70:83:f4:85:9d:df:78:16:7f:c5:21:
         b2:1a:72:95:47:45:dc:90:c0:91:5c:91:fb:8b:7b:68:29:dc:
         a4:6e:ac:65:20:0f:96:1d:19:c1:c9:78:76:7b:04:31:ab:41:
         84:8e:29:eb:b5:76:f4:b5:77:50:67:de:d9:e1:c8:99:a5:99:
         1a:41:de:d9:9c:d9:30:73:72:d6:8f:16:dc:c6:56:53:fa:63:
         ad:b2:23:c0:b3:0b:0c:3e:a7:34:3a:c4:f8:2c:3d:d9:14:94:
         2a:6b:59:a3:32:a3:3d:49:c1:14:79:52:83:a5:77:70:88:9f:
         a2:63:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:00:22 2025 by rpki-client