Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
File:                     8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft (raw, json)
Hash identifier:          9+da3u/u007WzXMhQ1nj3so0DXiqWECaRVIZzmS1+hg=
Subject key identifier:   4A:F7:EE:FB:2E:F3:80:EE:24:08:D8:61:CE:B6:02:1F:41:42:C3:4E
Authority key identifier: 8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Certificate issuer:       /CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
Certificate serial:       23171BC1E84CE134E61CC2216483953139F5639E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
Manifest number:          01CC
Signing time:             Sat 05 Apr 2025 03:19:46 +0000
Manifest this update:     Sat 05 Apr 2025 03:14:46 +0000
Manifest next update:     Sun 06 Apr 2025 03:36:46 +0000
Files and hashes:         1: 8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl (hash: GYE/HIeaYZS5dGEbNia2R24MlKBxoru/2IzlbCQ0/nI=)
                          2: 323830343a376634343a3a2f33322d3434203d3e20323731363737.roa (hash: /i6qmhwh6J5CDx5qORW83a05N5dVBAB19l70pLYFJpw=)
                          3: 3137302e3233312e3232342e302f32322d3234203d3e20323731363737.roa (hash: SW2sQ/RINSWBrdVpMGeV1zg1Udv6KWn8cLqjo1tLUhM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl
                          rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:1b:c1:e8:4c:e1:34:e6:1c:c2:21:64:83:95:31:39:f5:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Validity
            Not Before: Apr  5 03:14:46 2025 GMT
            Not After : Apr  6 03:36:46 2025 GMT
        Subject: CN=4AF7EEFB2EF380EE2408D861CEB6021F4142C34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:e9:85:97:54:d8:d9:1d:34:55:7c:d4:43:
                    e7:d9:3e:da:59:9c:e8:7a:ff:32:12:05:94:75:f6:
                    45:ef:ad:d0:11:c1:c3:ad:a7:18:60:ed:e3:2a:0c:
                    11:f6:13:2d:05:9a:26:45:a0:14:cc:3b:7b:b5:b9:
                    e8:1a:bd:c9:59:f1:a7:bf:3f:4e:ed:49:88:47:cf:
                    91:95:27:de:52:34:ef:d8:c2:c8:3b:e6:3c:8a:18:
                    5b:4a:73:cc:06:6a:c4:74:dc:a7:ff:bc:f7:08:b8:
                    fd:8f:8f:75:1b:33:f0:7e:e8:ba:49:98:a2:b3:9c:
                    ee:2b:91:24:a3:23:56:98:ad:04:fd:99:cb:85:14:
                    5c:c5:24:1d:63:ce:34:ae:ed:61:e8:5a:92:a3:46:
                    09:87:9a:0e:38:ff:8a:93:af:da:43:65:3c:aa:18:
                    79:fd:ba:7a:ab:13:43:7b:32:7e:06:49:df:67:3c:
                    28:16:e5:ef:19:18:c7:50:85:59:96:b5:e8:1a:11:
                    c5:ce:d4:ee:2c:db:9d:58:84:13:68:e9:ae:4e:47:
                    9e:c5:a2:f2:70:72:90:74:7e:25:19:3d:74:b9:50:
                    e9:8a:b4:66:6d:94:7f:97:c7:f0:6c:e3:21:97:fa:
                    0b:30:40:7f:59:27:c1:91:d3:3b:ca:88:75:ed:d1:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F7:EE:FB:2E:F3:80:EE:24:08:D8:61:CE:B6:02:1F:41:42:C3:4E
            X509v3 Authority Key Identifier:
                keyid:8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:48:7b:c6:67:e9:41:f7:5a:fc:2b:2b:6e:98:2f:47:56:c0:
         94:2b:67:ad:31:0d:3f:80:3b:f9:ac:6b:7f:c8:3a:c3:1c:1c:
         0e:e5:0b:fa:ba:dd:fc:bf:28:fd:23:1d:7b:48:c9:83:73:ed:
         86:dc:cf:4f:a1:2b:9d:e9:d1:83:76:87:06:8f:0f:3e:df:ca:
         f6:be:2f:de:57:ac:9a:f1:ad:09:40:1a:c6:c0:eb:ea:32:c3:
         06:d5:b2:f5:98:26:48:cf:c8:f3:50:2b:b4:dc:55:c1:b1:03:
         72:56:ba:7e:ee:44:b2:f0:fc:5b:27:8e:40:18:47:f0:80:3b:
         fb:52:13:31:73:04:e7:2b:06:75:49:31:ff:e7:99:03:b7:a5:
         f9:a7:eb:51:57:0c:29:fd:b3:83:03:59:bc:ad:1a:76:28:e9:
         3b:dc:e7:6e:b3:d1:04:bf:09:bb:b6:c5:96:9d:3d:19:70:64:
         50:e8:4c:96:06:b8:79:2c:d5:97:bf:a5:37:a2:46:be:8b:4a:
         b6:15:9f:53:3f:db:89:66:ec:95:2a:4c:fb:f9:9f:9c:9f:eb:
         3f:88:a7:94:ed:25:b0:44:68:45:cf:55:bf:6d:ad:b0:c2:e1:
         f4:16:ba:5f:94:be:23:33:aa:14:19:89:ad:78:85:f8:1f:80:
         42:3e:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:07 2025 by rpki-client