Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.mft
File:                     4BEBE1FD76533487F2EE184784556E532323C3ED.mft (raw, json)
Hash identifier:          ySArfbdTljfvBkrYhLgATuPBG6+gFfrtpdEMbMi+a/k=
Subject key identifier:   04:46:EC:2F:5A:0E:57:0E:B8:69:5B:94:2A:9C:43:CC:96:E4:77:CA
Authority key identifier: 4B:EB:E1:FD:76:53:34:87:F2:EE:18:47:84:55:6E:53:23:23:C3:ED
Certificate issuer:       /CN=4BEBE1FD76533487F2EE184784556E532323C3ED
Certificate serial:       12F5EDF4D3D7F128A23F737F6A24179910CD00B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.mft
Manifest number:          021A
Signing time:             Mon 12 May 2025 02:01:07 +0000
Manifest this update:     Mon 12 May 2025 01:56:07 +0000
Manifest next update:     Tue 13 May 2025 04:45:07 +0000
Files and hashes:         1: 4BEBE1FD76533487F2EE184784556E532323C3ED.crl (hash: 5GJNOUmAJz6dQEhkTekPQFeMmA0iB1/4rjV6oAc8Wak=)
                          2: 323830343a383335383a3a2f33322d3438203d3e20323732313932.roa (hash: HZLOwwFPOWp4SgJoULEX5k1gWxcRraAF+oCRN52KuX4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.crl
                          rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 04:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f5:ed:f4:d3:d7:f1:28:a2:3f:73:7f:6a:24:17:99:10:cd:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEBE1FD76533487F2EE184784556E532323C3ED
        Validity
            Not Before: May 12 01:56:07 2025 GMT
            Not After : May 13 04:45:07 2025 GMT
        Subject: CN=0446EC2F5A0E570EB8695B942A9C43CC96E477CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:78:ec:cd:60:55:a4:0c:4b:0f:7c:87:e6:
                    a8:16:f7:84:e0:66:dc:a9:ca:5e:b0:36:d8:80:32:
                    a1:d8:17:08:25:da:f8:4c:99:4e:27:56:90:6d:db:
                    d0:7f:0a:94:38:53:f2:2a:23:43:7b:0a:8f:0c:e7:
                    e8:1b:01:8c:5c:bf:3d:b5:2b:62:48:da:50:f7:c6:
                    89:ef:45:92:c2:d4:7c:7c:d0:07:09:4c:f3:10:a3:
                    7c:63:67:dd:c7:9d:d6:d3:83:17:7c:73:3f:e7:fa:
                    b4:8d:d4:86:95:e0:c3:e0:73:a8:be:60:64:b3:cc:
                    07:3d:ee:57:8f:4e:dd:7b:9d:88:da:b6:b9:88:a7:
                    4d:d0:b1:1c:7b:b1:95:d0:b1:89:36:f0:4c:83:c0:
                    7c:57:52:56:f9:c0:a3:5b:d6:db:90:0b:48:aa:03:
                    af:fb:21:53:39:9a:c3:40:c0:35:eb:9c:32:d1:dd:
                    4c:2b:84:5b:b7:82:60:8e:f1:91:9d:d0:90:2a:32:
                    28:35:5b:6b:91:7d:3e:2c:8f:88:f8:43:af:b1:4a:
                    79:ba:f0:73:60:2e:1e:1b:93:79:76:e6:15:8f:15:
                    cb:aa:c9:35:b4:db:39:d9:f9:b9:e4:1d:a0:92:c0:
                    d9:8f:f0:cf:4b:97:a8:bd:ed:e2:29:15:de:16:02:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:EC:2F:5A:0E:57:0E:B8:69:5B:94:2A:9C:43:CC:96:E4:77:CA
            X509v3 Authority Key Identifier:
                keyid:4B:EB:E1:FD:76:53:34:87:F2:EE:18:47:84:55:6E:53:23:23:C3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BEBE1FD76533487F2EE184784556E532323C3ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrcxeBmxXM9RtYXjuQ6PsotYtbEdrZHCE8cavqp5wfrc/1/4BEBE1FD76533487F2EE184784556E532323C3ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:89:96:f4:5d:b2:d6:3f:4f:4b:6a:75:c1:a4:85:4d:52:dd:
         d6:3f:ca:71:de:71:82:d2:81:b5:e9:5a:af:c8:c5:14:08:5b:
         db:a2:c6:b2:0b:72:ce:44:99:9e:4a:73:69:95:ab:0c:b2:28:
         14:8f:ee:5a:a2:0a:a1:cb:de:39:6a:20:5a:89:f3:9a:52:e4:
         bb:50:95:56:6b:ad:4d:05:e8:c5:1c:79:ff:d8:21:bf:d5:36:
         46:cb:ee:d8:94:ec:e8:96:8e:2c:91:36:6c:c3:bc:d7:62:ae:
         ef:48:62:36:68:f4:e4:10:4f:16:d2:dc:e5:10:41:97:03:b9:
         ec:80:a5:4d:5f:7b:2d:e1:c7:0d:98:a4:bc:bb:d8:ba:4d:34:
         1e:89:a8:0b:55:4e:45:76:ad:70:8e:57:b4:20:97:6b:71:ba:
         75:3e:4d:b1:d4:c3:c0:fe:d6:17:12:8a:dc:64:7c:05:75:c6:
         44:c2:8f:0c:a4:ae:16:03:bc:48:fd:e3:2b:62:df:c5:46:8c:
         9f:48:05:66:ef:e0:9d:41:2d:5f:52:d1:36:a8:da:03:52:ff:
         a2:9d:a4:e5:2a:4b:d5:db:ab:14:cf:52:1a:ab:c3:a4:ee:00:
         c6:af:54:81:35:c0:55:17:78:05:35:10:42:72:a3:6f:d0:18:
         8f:8e:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:08:36 2025 by rpki-client