Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
File:                     C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft (raw, json)
Hash identifier:          JmgKauelBL3hnbIXRQOvFo/y68HUSM78oYXgXx/bDBo=
Subject key identifier:   52:88:7B:E6:35:1C:D3:E4:96:40:C4:C3:B6:5B:2E:F4:98:5F:76:10
Authority key identifier: C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67
Certificate issuer:       /CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
Certificate serial:       511F689BF9845F72E998CB3F8C39447CE28C72AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
Manifest number:          0220
Signing time:             Thu 15 May 2025 18:57:30 +0000
Manifest this update:     Thu 15 May 2025 18:52:30 +0000
Manifest next update:     Fri 16 May 2025 22:41:30 +0000
Files and hashes:         1: 34352e3233332e3137362e302f32322d3234203d3e20323637333235.roa (hash: SFno6H8QV9UkvILMup+WNLlGk6gvLDk59HQUTpBQq/Q=)
                          2: 323830343a346262343a313030303a3a2f33362d3338203d3e20323637333235.roa (hash: L8BGRFiTtudvsEKPed1DZuWKkf5cvl/2AQGQ3fl16T0=)
                          3: 323830343a346262343a3a2f33322d3334203d3e20323637333235.roa (hash: ra1uQu46o9kDbe4atLsetzB+R64N4cO1caTZ/cL/Cuw=)
                          4: 323830343a346262343a3130303a3a2f34302d3434203d3e20323637333235.roa (hash: SR67MdxGNsPvyTxgm+JN7mfkSRF6U2WY76p4K9xjI8o=)
                          5: C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl (hash: WyykppS6VQV7PAueHW927BFles2k6V4Mm+Dwdk++dtE=)
                          6: 323830343a346262343a3330303a3a2f34302d3434203d3e20323637333235.roa (hash: qYO7TG3jRmuwXISh7CYQ4fXo+DOyDHVTiOPPvXORBgQ=)
                          7: 323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa (hash: 9gYff9fBRulPwjeFuSq34+y9zPndK5lFp+taI+X7nFk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 22:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1f:68:9b:f9:84:5f:72:e9:98:cb:3f:8c:39:44:7c:e2:8c:72:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0AF97A488EE7A27D1DDA7B6D5982708540FAD67
        Validity
            Not Before: May 15 18:52:30 2025 GMT
            Not After : May 16 22:41:30 2025 GMT
        Subject: CN=52887BE6351CD3E49640C4C3B65B2EF4985F7610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:1d:55:bf:73:c9:49:5e:92:4b:64:7e:e2:
                    40:04:f2:ea:e8:4d:e3:b4:15:a5:b2:e8:a5:20:0e:
                    cc:4d:34:51:91:9d:ff:42:6d:4f:11:98:5c:b4:d6:
                    d7:53:bc:b4:37:e4:27:19:fd:8b:bf:1d:31:ca:03:
                    6c:ee:80:a7:30:0d:a7:73:f0:8a:78:46:ed:a1:d4:
                    e9:be:44:79:3c:31:1f:e8:4b:6a:2a:92:c1:90:fa:
                    eb:31:02:3d:fc:9f:45:3c:94:cd:67:cb:96:9c:12:
                    05:12:55:e5:4c:a6:ec:8a:6d:75:4c:62:fa:f2:d1:
                    1e:fa:8b:7e:0c:af:86:cd:d1:8b:db:e6:01:13:e1:
                    ad:7f:2c:94:4b:9a:40:5d:e9:4a:b2:1c:fb:47:72:
                    92:76:40:4a:ba:bd:dd:d9:f5:57:63:85:aa:d9:77:
                    28:b4:78:81:3e:45:86:fb:ac:63:8a:53:92:a6:94:
                    9c:82:93:14:25:1c:1a:48:a0:f2:36:06:f3:5b:ee:
                    35:99:aa:5e:3a:d9:d7:e1:5e:a1:d2:08:e8:c2:8f:
                    36:82:39:80:dd:55:23:c7:61:62:7f:fc:27:f0:ed:
                    41:a2:d7:97:31:5c:66:7b:25:7f:22:1a:cd:d5:2e:
                    1f:92:ec:96:85:59:93:b4:cc:56:57:be:35:89:71:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:7B:E6:35:1C:D3:E4:96:40:C4:C3:B6:5B:2E:F4:98:5F:76:10
            X509v3 Authority Key Identifier:
                keyid:C0:AF:97:A4:88:EE:7A:27:D1:DD:A7:B6:D5:98:27:08:54:0F:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/1/C0AF97A488EE7A27D1DDA7B6D5982708540FAD67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8e:65:81:53:68:d0:bf:47:7f:ae:1f:3a:79:59:fb:ff:c7:
         bf:17:e4:31:77:3c:6a:9c:50:75:8c:a5:aa:5e:55:ac:4e:91:
         c1:de:69:93:f5:ff:cb:58:b2:6e:35:57:50:3b:c9:82:b5:21:
         28:9c:1f:6a:4e:45:cb:b6:fe:b1:1e:2b:9b:b1:20:37:c9:d9:
         a3:f2:97:b7:7b:15:e9:77:b7:1c:30:de:21:ea:15:87:a7:8e:
         d1:59:a7:70:81:39:1a:0a:25:da:fb:e6:47:84:91:0a:76:18:
         e6:5f:36:da:c0:2f:c1:f1:a8:87:13:d8:01:17:15:b2:0f:2e:
         48:75:65:bf:7a:2b:52:bf:db:7e:71:e7:cf:79:d0:4a:1a:80:
         34:f3:29:5f:62:a4:45:96:11:1b:93:a3:b7:f6:f2:17:a1:31:
         4c:ff:43:79:df:20:96:22:26:ae:e9:bc:18:76:24:80:38:1c:
         ad:d8:3b:5e:fb:22:87:b2:63:5a:46:d0:9f:36:eb:83:37:2e:
         83:41:9a:ba:f8:a9:f5:2b:00:c9:d1:e7:9f:40:bd:0c:8a:df:
         5e:7e:68:c0:27:e3:66:a3:6b:e9:51:0b:4a:8c:6f:b9:cb:d1:
         ee:4e:da:7d:a0:fe:86:20:cb:5b:42:6e:df:21:31:cf:19:26:
         47:0b:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:41:33 2025 by rpki-client