Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
File:                     CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft (raw, json)
Hash identifier:          M1BtbcvFjobTluiSyypqoHrLCcs10jXgWSPEMBCpCp8=
Subject key identifier:   F7:84:F7:56:FE:62:F3:63:FB:A2:26:2F:ED:F8:38:6E:BE:D4:07:26
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       407A306A0BC1C5A31C57B402EA0DD91AE756F4EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
Manifest number:          01EC
Signing time:             Fri 11 Apr 2025 23:16:25 +0000
Manifest this update:     Fri 11 Apr 2025 23:11:25 +0000
Manifest next update:     Sun 13 Apr 2025 01:59:25 +0000
Files and hashes:         1: 3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (hash: HnG1DMJoAuqnzDxdBRoltWz1OrOXM/EvggoTnkRAc/Q=)
                          2: 323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (hash: 0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=)
                          3: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl (hash: +IcyWuFJtO5VdL0V6mj4tUNp7kK2D63LcQfEIRoBKrE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 01:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7a:30:6a:0b:c1:c5:a3:1c:57:b4:02:ea:0d:d9:1a:e7:56:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Apr 11 23:11:25 2025 GMT
            Not After : Apr 13 01:59:25 2025 GMT
        Subject: CN=F784F756FE62F363FBA2262FEDF8386EBED40726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:b8:02:43:1f:b5:5d:f5:39:cc:aa:20:16:
                    84:39:d8:e1:cc:e6:ca:80:14:61:0b:48:16:e7:36:
                    0f:75:31:73:80:e8:50:fe:04:3b:0b:88:61:9a:5e:
                    90:fa:70:38:ae:22:31:b2:c5:4b:4c:76:79:69:c8:
                    47:2e:ec:64:da:40:5a:13:ac:63:11:1a:f8:f9:1c:
                    b2:7a:b8:57:37:b9:f0:53:ea:47:c4:54:58:2e:5a:
                    4a:dd:0c:47:cd:b6:41:ed:da:03:c5:6f:64:c9:b4:
                    a4:3e:f3:e0:97:e5:e8:66:1b:e5:8c:b2:eb:5a:1e:
                    ee:a2:1c:28:ec:56:54:12:0d:72:17:5f:07:41:87:
                    39:f4:57:58:2f:de:ee:21:8b:22:94:59:f5:53:2a:
                    cc:74:56:16:d1:23:57:b4:9a:25:b7:0c:0a:6e:08:
                    44:1a:cc:b3:ec:84:50:4f:1d:4b:47:4b:2a:ba:55:
                    c8:48:52:52:36:24:23:c0:74:4e:66:f3:02:cb:1e:
                    70:eb:e7:f5:bb:9f:42:1b:95:26:6e:4e:34:8d:db:
                    e4:a5:9f:b7:54:21:fc:cf:fa:d6:da:71:b7:5e:56:
                    24:93:6d:09:50:c0:f8:e1:e9:5e:9d:e1:3f:12:56:
                    cb:1d:c1:4a:db:9d:dd:28:89:7e:7b:9f:41:c2:4a:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:F7:56:FE:62:F3:63:FB:A2:26:2F:ED:F8:38:6E:BE:D4:07:26
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:90:20:8d:47:8f:91:d6:73:c1:cd:50:9c:27:fa:08:64:db:
         35:38:ac:43:8d:b7:2d:ae:aa:b5:aa:83:8b:4e:f0:9b:39:a9:
         bc:7d:20:c7:f9:bd:2e:b5:fc:05:56:1f:f3:1b:c6:b6:61:1e:
         dc:a8:51:29:cd:21:bd:27:62:68:eb:16:11:70:b9:4e:77:35:
         ff:99:1c:79:e3:36:b8:88:fe:32:68:79:cc:1a:ed:36:d6:83:
         26:3f:dd:c8:89:b3:2c:31:56:90:b6:9d:60:8d:d0:99:45:7c:
         23:aa:29:77:ec:38:c0:06:9d:b4:76:cd:43:94:74:0b:40:67:
         99:ae:e1:03:44:75:c7:c4:c5:a0:ba:9b:7a:50:69:b2:42:e2:
         67:75:4f:e4:00:96:2a:8b:0d:01:d3:a8:55:e3:5f:4a:e9:b4:
         27:d6:55:eb:ef:7a:cc:3c:45:95:ca:ca:c2:0d:5a:cb:53:4a:
         2d:a2:38:39:fa:26:e4:cf:be:6b:0b:8e:d9:6e:90:1d:0f:76:
         98:96:4a:49:7c:eb:64:2e:87:4d:ec:77:ac:1b:e3:8a:6e:be:
         a6:85:32:e9:ed:68:00:ef:93:76:90:ba:00:07:9e:a8:5e:19:
         f7:60:32:d3:ba:e4:05:32:b9:1e:56:a9:2a:2c:d7:9e:4c:4a:
         58:b3:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:29:23 2025 by rpki-client