Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
File:                     19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft (raw, json)
Hash identifier:          YE2jf8Kmd2I1SuiOuyLLjWlclw3nOUWIjVwWyjvRQeI=
Subject key identifier:   4F:45:AF:08:C6:39:66:A4:EB:EA:31:5C:5D:B5:0A:F7:AA:1E:E1:B0
Authority key identifier: 19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
Certificate issuer:       /CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Certificate serial:       1896313C2069E8A555A1CBF89CEE492FE85F567E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
Manifest number:          A1
Signing time:             Fri 09 May 2025 07:03:21 +0000
Manifest this update:     Fri 09 May 2025 06:58:21 +0000
Manifest next update:     Sat 10 May 2025 09:09:21 +0000
Files and hashes:         1: 19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl (hash: exUp28bkeHRZRF051JYSGptc90kBB1r6V7FEaekJyi4=)
                          2: 323830343a316466633a3a2f33322d3336203d3e20323632373635.roa (hash: E2EyG6L3VMBfdDeZeg7N4M4v/IpcCr04uIWhN8e66jg=)
                          3: 3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa (hash: wnqmO7zy+DY1zGNM6U0m4VxBJ0bceSOLw74PAZdaiag=)
                          4: 3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa (hash: G6k/mrJJFdpSo8mL7F5Tq5WoPbnHkRN8F1sMhYhIi80=)
                          5: 3138362e3232372e302e302f32302d3234203d3e20323632373635.roa (hash: M2one68sTTfjWoTrqMbX9pnsnn4iExyDhTNVSZ9zOPs=)
                          6: 3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa (hash: ZJstMgP4PFpCzUvv72rdZjDN0CD/9d8GF/sSAtnwSzc=)
                          7: 3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa (hash: 6iuF+Q+4WKZLeOiNzcTKQsr68o5YrtRBFSTP9VPgBfw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:96:31:3c:20:69:e8:a5:55:a1:cb:f8:9c:ee:49:2f:e8:5f:56:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
        Validity
            Not Before: May  9 06:58:21 2025 GMT
            Not After : May 10 09:09:21 2025 GMT
        Subject: CN=4F45AF08C63966A4EBEA315C5DB50AF7AA1EE1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:2e:50:73:c0:24:31:12:f9:2a:b4:60:ad:
                    b1:9c:d4:2e:7e:84:cf:03:ff:52:8b:47:f6:84:23:
                    48:f2:ac:51:a7:0a:9a:46:5c:67:32:5b:c3:8d:cb:
                    b9:67:98:3e:85:3b:9b:c9:c9:d0:e2:76:ac:fb:9f:
                    f2:08:4e:da:7f:2e:96:67:b3:92:03:90:99:d0:4c:
                    8a:48:26:74:d6:0b:b2:2c:c0:af:e4:c0:59:42:57:
                    2e:d9:8e:f2:00:bd:42:eb:d0:d0:83:ec:55:34:ae:
                    f6:94:be:da:20:3a:00:dc:34:26:9f:6c:aa:d5:b8:
                    17:53:da:a9:55:3f:25:92:57:ad:2a:32:89:0a:5a:
                    8c:0a:67:db:7d:a6:01:d1:4c:82:0e:3c:fd:0b:16:
                    ea:9f:8c:f3:90:63:04:74:9f:5d:a4:a5:cd:52:07:
                    ea:53:23:f2:9f:54:79:2d:ee:a1:0e:ee:91:48:49:
                    1a:3f:7c:63:79:92:4f:c8:42:bb:6b:79:3f:6c:e6:
                    fc:b8:dd:d0:38:44:36:a3:5b:47:92:51:ec:27:b9:
                    bb:d0:d9:44:27:2a:ad:a5:c4:7c:ad:f3:1f:1c:e1:
                    dd:d0:97:05:8e:25:7d:7e:da:bf:5f:6d:59:c5:b2:
                    ee:06:16:ab:7f:ab:f9:6e:d5:46:5f:f9:e0:da:b1:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:AF:08:C6:39:66:A4:EB:EA:31:5C:5D:B5:0A:F7:AA:1E:E1:B0
            X509v3 Authority Key Identifier:
                keyid:19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:8a:b1:74:38:1a:b8:c7:72:6a:79:73:55:2d:b0:f7:87:
         12:5b:12:52:44:56:52:31:6c:4f:e3:0e:ea:22:49:01:23:08:
         d8:de:6c:15:e2:d5:92:2a:79:b3:25:69:19:58:3a:2f:45:8c:
         54:c0:76:a6:4b:32:ae:f2:93:2d:b7:a6:61:62:d5:e8:08:96:
         7e:7a:b6:37:69:a3:9d:09:31:21:bd:8d:bf:85:e4:e1:80:a4:
         09:cf:da:cf:42:ba:91:04:ba:22:e8:74:47:78:57:f9:02:31:
         d7:fd:b0:98:4f:5c:00:f8:39:ee:99:a2:49:a9:bb:b1:45:7b:
         64:c3:53:bb:0e:1e:64:d4:59:cc:49:c1:86:8c:c6:08:7b:41:
         0f:3c:9c:fd:fd:4f:6c:8e:40:bb:59:88:b1:ac:ce:61:e1:cf:
         81:80:96:45:52:57:1e:3c:d1:d3:97:05:51:aa:24:27:e0:1d:
         94:8d:59:85:0e:db:a8:62:46:14:40:2b:3b:17:ac:76:f7:ff:
         52:f6:e7:6b:ec:99:f2:e5:e7:99:02:c6:c1:11:05:bc:ba:30:
         4a:e6:31:84:ef:ba:76:8d:a9:a9:be:db:30:57:62:23:b8:69:
         06:65:a8:bc:3d:78:50:9b:b6:38:56:11:38:9d:34:00:0a:b4:
         bb:00:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:50:52 2025 by rpki-client