Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
File:                     99448BDECD83ABA3D08AD5929B682374FE13BE98.mft (raw, json)
Hash identifier:          aZwBUI8RCEdJustq9M1izEs5HuM+ywsBAFIH+1bI5GY=
Subject key identifier:   78:0D:15:AA:B2:54:89:48:FB:41:D4:1A:2C:52:C1:2A:E8:DB:F8:50
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       519D63BD57EC4703248B55012CEC2B023D089168
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
Manifest number:          0221
Signing time:             Thu 15 May 2025 15:00:43 +0000
Manifest this update:     Thu 15 May 2025 14:55:43 +0000
Manifest next update:     Fri 16 May 2025 17:18:43 +0000
Files and hashes:         1: 3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (hash: GE+6Mfv78ypvI0QBvVuUpZ/Q526mmTuCMknY3Xmj0Ow=)
                          2: 3136382e3139342e3233362e302f32322d3234203d3e20323634343434.roa (hash: VuUgS33qTOrIsq5wAWpqxn08XlXuIieNDQyftKD9Dp4=)
                          3: 3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa (hash: XRdaYBIkZInh7q9JRP8lEC+62de2mSsYxYYTcBL2RkY=)
                          4: 99448BDECD83ABA3D08AD5929B682374FE13BE98.crl (hash: 1Yk1WDjiujABZkGYxw1ewmC+xcdEU0ybEnDHnQHiuOI=)
                          5: 323830343a316562303a3a2f33322d3438203d3e20323634343434.roa (hash: rbjYgSymgqrMaINQFLjjRvbJHQYNsGQUp9cUYv1uMko=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 17:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:63:bd:57:ec:47:03:24:8b:55:01:2c:ec:2b:02:3d:08:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: May 15 14:55:43 2025 GMT
            Not After : May 16 17:18:43 2025 GMT
        Subject: CN=780D15AAB2548948FB41D41A2C52C12AE8DBF850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:2a:e5:65:ac:a1:10:ca:5f:94:53:b0:ec:
                    45:74:df:c9:6a:9c:1a:6a:85:34:85:1e:8a:1f:65:
                    8b:27:94:6f:d2:51:12:5a:9b:30:5a:a5:61:5e:29:
                    33:8e:b8:ee:f8:07:03:35:17:fa:5c:21:f6:2b:7b:
                    10:98:e1:be:36:e4:3a:34:19:18:c1:89:79:a2:19:
                    5c:81:4a:d7:58:e2:02:83:13:b6:b2:20:19:37:f4:
                    6e:59:bc:92:b3:72:5c:29:65:7e:04:ef:8a:1f:0f:
                    4f:fb:df:aa:d3:64:5e:c8:ae:ab:19:ab:2f:42:00:
                    34:d4:86:5c:9d:2a:97:b2:bc:0c:8e:3f:7f:6c:dd:
                    b3:bd:75:a0:76:11:79:35:6a:2a:17:eb:c3:52:ae:
                    79:07:89:79:72:44:15:5f:5e:ce:8d:29:f1:26:d6:
                    12:d8:59:17:3f:ef:46:95:b5:d2:87:17:a4:fe:38:
                    05:a6:4d:34:25:6f:4b:0e:03:a2:7e:69:53:b0:e4:
                    24:7a:fd:e2:f2:8d:fe:85:0c:93:8d:03:05:9d:fb:
                    1e:1a:9c:3b:25:79:06:43:97:86:22:c7:fc:23:9c:
                    7d:61:b6:26:55:67:32:e9:59:34:6c:3b:54:df:37:
                    b8:64:bc:97:a8:b3:0e:c6:f8:34:d5:df:b1:45:a0:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:15:AA:B2:54:89:48:FB:41:D4:1A:2C:52:C1:2A:E8:DB:F8:50
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:a3:97:e7:f0:7a:00:dc:53:94:15:9b:6a:c3:73:2a:54:
         2f:64:2b:12:c1:8a:73:9e:c1:46:8f:77:39:37:19:05:1a:78:
         68:fe:da:4f:c0:cb:e4:8a:5b:70:3b:fe:ff:a9:ff:fc:67:f5:
         27:bb:95:03:90:25:20:64:5d:e9:e8:4b:f4:d9:4a:ff:5b:fe:
         bb:df:b5:3a:a7:cb:ba:34:75:02:2c:de:1e:a0:e3:36:06:96:
         93:27:a9:c9:91:a4:f2:91:e7:cb:9e:db:04:bf:67:35:ff:8f:
         0c:af:8d:69:e0:75:76:e6:b6:b5:f5:7c:aa:66:af:90:c8:66:
         fe:db:ce:26:f0:a1:5e:b9:23:3a:95:b6:77:df:e4:f2:5d:5b:
         8e:51:9f:8e:9e:83:53:b2:81:70:6f:c6:6c:1d:7a:b9:04:11:
         e2:aa:50:be:c1:22:00:d6:4b:4b:49:2d:23:5c:5c:13:95:db:
         39:55:d7:73:b7:08:dc:79:06:95:af:36:45:f5:23:bc:a0:03:
         72:9e:2e:80:a4:b3:d9:cd:a1:65:cf:30:4d:41:4a:51:1b:17:
         98:e5:dd:47:36:b3:e7:1a:b4:cf:a9:2c:87:8d:c3:cb:bb:f7:
         a5:d9:82:03:37:98:e3:fa:3b:8c:4f:9a:0b:de:4b:80:79:51:
         90:69:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:53:52 2025 by rpki-client