Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
File:                     2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json)
Hash identifier:          0Lji1wfqdV/NIeA7aqRvcEezi9+hkAtemqAsFN8izOc=
Subject key identifier:   BF:2A:F9:55:04:31:20:AC:D6:0D:CD:CB:C1:19:4C:40:E7:E5:CD:C5
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       1CEFAAD00BC6740F24FB76559253330BE41CEE7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
Manifest number:          0219
Signing time:             Mon 12 May 2025 07:54:56 +0000
Manifest this update:     Mon 12 May 2025 07:49:56 +0000
Manifest next update:     Tue 13 May 2025 09:32:56 +0000
Files and hashes:         1: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: QRux96G/lfgz7O4EjHPAERqDHHHWAhFqgGE1GI68Qng=)
                          2: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: PoDROXq7zNqNwPpg4bHVhkKOrPE3a92QWBQs0sLrW1g=)
                          3: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: vPCwI7osU5XVMd4zwaC+hIHow7PaLve2zweqHvxoEMY=)
                          4: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: /rhTp7cAUkfwcSsOM4bufZ4hzfY9DaqMVKYmLOYscFo=)
                          5: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: BY4SD16BwCLGiQCdlfmYRFg3wdhGuI3NPnN3QyHza1M=)
                          6: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: hEdsYPpEYPD/H7JxaI1qlIgBP5CxC1rxiVbomFZxPTA=)
                          7: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: QujoYRyDXcYxNpcWpfbyqXFZ66wCSLkqm7rF3+ZLRbY=)
                          8: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: mky3eE3bx2kcV4ZGcqdlXI9kN6ITAw5dtUdmNnbM04A=)
                          9: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: hhWP0ZOFP9QkXD1TLCXf2DK00yVyWv88kwhVjqWeg9Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 09:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ef:aa:d0:0b:c6:74:0f:24:fb:76:55:92:53:33:0b:e4:1c:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: May 12 07:49:56 2025 GMT
            Not After : May 13 09:32:56 2025 GMT
        Subject: CN=BF2AF955043120ACD60DCDCBC1194C40E7E5CDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:10:7a:5f:24:b8:21:26:d2:a4:74:6f:08:
                    ab:62:84:93:e4:ea:91:1d:49:41:dd:93:79:1a:c2:
                    26:be:bf:75:9c:95:f2:12:f8:c0:3a:4f:e4:51:da:
                    3c:1e:82:2a:e4:b4:f5:b0:f4:07:a8:6f:e8:10:fa:
                    df:41:a2:ba:40:3c:cb:eb:28:00:5f:f4:b2:cb:3b:
                    0d:ba:1a:4e:02:c0:4f:ec:0f:ee:22:c7:70:bd:ba:
                    db:fa:0a:c2:a3:a1:af:f4:69:a1:14:57:e8:21:51:
                    0c:c3:8e:62:c4:a8:2b:45:23:58:ad:a4:ce:fa:35:
                    21:89:99:4e:0c:36:03:5e:5f:d3:31:78:10:04:88:
                    2d:f1:f0:1e:71:5b:48:0f:d6:9c:7d:1d:6f:2a:7c:
                    0f:de:30:35:90:31:64:71:6f:c7:f4:c0:72:39:de:
                    7b:55:e5:54:64:27:ec:49:20:f6:bf:50:33:0d:45:
                    2f:9f:dc:5a:80:ef:94:8b:d0:d1:e7:e3:15:27:6c:
                    7e:b4:63:76:24:2c:10:85:46:f9:00:29:04:f8:89:
                    2e:98:39:8c:6a:c8:da:89:92:d3:45:f5:6a:52:be:
                    ca:47:e6:12:0e:46:af:20:f5:41:5c:45:27:d0:0e:
                    3e:52:1f:cc:a3:47:db:b3:cd:bd:cf:ed:25:82:54:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2A:F9:55:04:31:20:AC:D6:0D:CD:CB:C1:19:4C:40:E7:E5:CD:C5
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:26:ff:10:aa:24:b8:3c:b0:2e:ad:97:9c:63:c4:08:9f:
         5e:d9:83:3b:25:d8:0b:35:af:d8:77:df:88:fa:b1:63:bf:91:
         7c:27:0c:7c:04:78:aa:e3:2e:2d:cb:14:d1:38:66:18:f3:a6:
         91:f1:5c:bb:a7:df:53:66:5d:57:29:33:0e:70:77:ae:a2:51:
         43:51:45:ec:10:2a:8b:69:7b:4a:14:8a:d0:73:68:a6:cf:d5:
         8c:f2:10:3f:ac:93:c0:79:03:59:1e:ba:92:ac:85:34:ab:55:
         29:82:d3:b0:d0:cc:54:99:30:90:29:09:37:da:7f:ff:8e:c3:
         01:8f:a7:c1:fe:5f:9b:4f:87:5f:49:fe:a7:ec:b3:e2:26:88:
         9a:af:92:f6:01:bc:b0:15:0a:93:20:ac:71:7a:c4:ee:96:35:
         eb:5b:ac:ff:e7:75:a7:29:89:ff:93:11:c7:b0:b6:8f:2e:10:
         4b:e5:f1:d1:6d:30:8f:b2:22:b2:62:c6:82:9c:6a:bd:7b:bd:
         f0:c8:02:73:e0:c6:96:59:be:b4:6e:f7:1b:55:a8:0e:1d:a3:
         da:fd:20:69:0c:57:18:f0:41:6f:13:62:1f:bd:d9:dd:8d:43:
         52:f0:01:75:31:dc:ab:16:b5:f8:9e:d5:b1:5b:eb:35:f9:9b:
         87:8f:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:08:19 2025 by rpki-client