Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
File:                     1233961E0559F239AED4F50437087EF6837DC5E3.mft (raw, json)
Hash identifier:          vYtZHML+ZYexqkFwo4N4o1IFc66z/ylZbOZ2aEbbkvc=
Subject key identifier:   A7:A1:6F:B4:11:67:BC:CD:AE:68:5F:10:3C:2D:70:96:92:DD:17:00
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       3A97B7C136D7099D4668C9316937952227D6933D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
Manifest number:          2F
Signing time:             Tue 22 Apr 2025 07:52:54 +0000
Manifest this update:     Tue 22 Apr 2025 07:47:54 +0000
Manifest next update:     Wed 23 Apr 2025 11:22:54 +0000
Files and hashes:         1: 3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa (hash: K/QKWU+NClIhv0L20xx5xdE587sdqSX2xpA58tbAEs4=)
                          2: 3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa (hash: XYnAn/lStOTH2G5MqZy6+2C+tp5Ssa3VFrg4zQ+HAsU=)
                          3: 3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa (hash: JAfVBEsHn5LahfkS5iV8ieu2Vj0nSqpQzEe+9d3Oo+c=)
                          4: 3137372e33392e3136302e302f32312d3234203d3e203238353834.roa (hash: w6OQo6nI2dUuOG9pFmBGTXYB6HQYNS9Nt183b3xjV28=)
                          5: 323830343a3931383a3a2f33322d3438203d3e203238353834.roa (hash: ZVn5cT6QUgasFxz5AQZu1JkjvYGIgaLLshWl+FfBTY0=)
                          6: 1233961E0559F239AED4F50437087EF6837DC5E3.crl (hash: vK+I4jlmM91WxEiQfMntL2iJsuM98Jaq5x7gchyl1eY=)
                          7: 3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa (hash: IA7SU1skYEFPyXwIpINwxaPiOeXAArTYBWea+cx5O18=)
                          8: 3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa (hash: O0IhMYik6I8Aq4RqHbwK0LC5612IRE1tr5xKWrdAXK0=)
                          9: 3133312e37322e38302e302f32322d3234203d3e203238353834.roa (hash: 4RfePzQntvBjVhELVuuojFUZkkLVNchTlylLiK2Unso=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:b7:c1:36:d7:09:9d:46:68:c9:31:69:37:95:22:27:d6:93:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr 22 07:47:54 2025 GMT
            Not After : Apr 23 11:22:54 2025 GMT
        Subject: CN=A7A16FB41167BCCDAE685F103C2D709692DD1700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:60:16:d5:fa:11:76:ca:73:b1:bc:c7:1f:
                    d2:ed:7f:54:22:4b:c3:66:e5:01:76:1c:c6:75:7d:
                    82:9e:bb:ef:4a:f7:27:44:14:4c:72:c5:e7:7a:c1:
                    1b:be:bb:47:84:66:eb:e3:99:b9:77:cb:28:47:d3:
                    cc:24:78:3e:d2:8c:4a:26:5c:29:2b:31:52:8d:6d:
                    64:7e:84:93:11:05:1e:64:1c:ab:3f:d3:87:d7:d0:
                    cc:40:6e:27:90:43:c2:5f:98:d3:b0:e2:be:30:f0:
                    98:44:0d:e9:20:19:e7:f4:a3:e9:7c:35:6a:54:51:
                    0a:22:8b:7f:7c:75:b1:38:36:25:b8:46:33:26:d9:
                    fa:c8:60:be:0d:55:c7:d0:61:3f:01:25:c5:07:7f:
                    da:a6:d6:36:68:44:33:90:8f:05:f4:ed:67:71:da:
                    53:4d:da:32:7d:42:2a:ed:4e:0f:84:9f:4b:ac:5f:
                    21:39:f7:86:3d:11:be:62:8f:c4:b0:ba:01:07:02:
                    95:88:fb:06:0d:b1:6e:ac:a4:4d:05:94:62:85:0c:
                    7c:64:7f:f7:a2:e2:29:25:64:b9:69:c6:a2:0e:86:
                    e7:08:ad:32:fd:d4:4a:8a:e8:52:8e:76:63:21:5f:
                    65:ce:f6:e0:f1:c9:40:30:38:d8:88:9a:f2:a6:85:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:6F:B4:11:67:BC:CD:AE:68:5F:10:3C:2D:70:96:92:DD:17:00
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ba:e9:fe:f2:be:94:e0:83:83:79:68:5f:f0:8c:64:e8:f1:
         d4:bd:86:1c:b4:c6:42:5d:e4:bf:b3:d0:19:f5:2c:b6:2a:fe:
         17:e0:e5:c0:e9:93:d6:ef:e0:53:9f:43:3b:3e:73:64:3f:53:
         af:81:de:91:e4:de:98:59:0f:44:3b:bf:8e:6a:9b:6c:19:79:
         5e:9b:81:77:9e:99:cf:1a:36:77:6f:95:ce:a4:79:bc:4f:7c:
         a3:f0:cc:6d:8b:32:3b:85:21:b3:3a:2b:03:b1:72:80:57:a2:
         df:ca:79:c3:3e:14:77:63:45:09:8b:7e:4b:ad:86:d5:46:df:
         77:da:d3:c2:ff:18:8d:e6:ca:03:9e:0c:96:83:46:dc:33:6f:
         b2:35:07:a4:a6:f6:1f:21:a8:f6:0d:9c:7a:9f:16:06:6e:68:
         71:84:d2:ee:b0:c7:6a:6f:c5:2c:98:76:1b:fd:39:64:bc:d5:
         b4:ea:e8:19:dc:2d:fc:4d:5b:35:f6:00:7c:9b:71:9a:82:dd:
         17:41:38:43:a6:ce:bb:9c:18:3d:e9:1c:15:2d:75:b1:aa:6c:
         3f:6a:3c:60:fd:7a:6d:7d:dc:74:e2:0c:89:74:9c:36:b5:50:
         94:84:f2:f4:2e:c5:4b:b1:6a:92:4b:fb:68:a2:f0:ea:84:80:
         46:bc:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:05 2025 by rpki-client