Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
File:                     99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json)
Hash identifier:          EYUsghaHgUUW0pdvwrb9eYhiK/dInPz9noHf/IDQmp8=
Subject key identifier:   F9:1F:7E:0B:34:E2:21:54:E5:59:D6:6D:9D:AA:6B:B9:D6:E2:57:CC
Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01
Certificate issuer:       /CN=99143CBAF11D170944D719FD796009BC38F9F201
Certificate serial:       53E8180226CCC0321ACBF1AB5A7A118EF82D453C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
Manifest number:          3F
Signing time:             Tue 08 Apr 2025 12:52:40 +0000
Manifest this update:     Tue 08 Apr 2025 12:47:40 +0000
Manifest next update:     Wed 09 Apr 2025 16:05:40 +0000
Files and hashes:         1: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=)
                          2: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=)
                          3: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: nFzXJRMx3EYqzklJTRjEt6jUqmqhe5qDNSt6sy/lNgU=)
                          4: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=)
                          5: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=)
                          6: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=)
                          7: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=)
                          8: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl
                          rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e8:18:02:26:cc:c0:32:1a:cb:f1:ab:5a:7a:11:8e:f8:2d:45:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201
        Validity
            Not Before: Apr  8 12:47:40 2025 GMT
            Not After : Apr  9 16:05:40 2025 GMT
        Subject: CN=F91F7E0B34E22154E559D66D9DAA6BB9D6E257CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7f:90:96:18:2b:e6:9a:1a:63:8e:08:c8:72:
                    f5:03:5b:f5:4c:65:df:0f:fc:f0:36:e3:ca:79:58:
                    fa:33:a5:35:6b:47:d9:0a:8b:14:c0:bc:aa:d9:f8:
                    b5:ff:12:b3:54:67:ae:3d:b8:e4:6b:1e:db:6d:a3:
                    ae:97:cf:c0:b6:9b:38:01:2b:de:dd:e6:33:0f:6f:
                    0b:70:90:5d:e2:d7:3c:61:f3:ce:28:b5:1b:b0:60:
                    06:8b:8e:25:14:df:e0:94:6d:f9:e9:30:29:17:ce:
                    59:e5:fb:e1:66:17:0a:e0:f9:c0:7d:71:94:ab:c6:
                    a6:c7:94:82:34:fa:d7:7d:47:0e:19:11:3e:34:78:
                    af:a5:24:a9:55:db:f2:a1:ea:80:9b:ea:09:9f:cc:
                    ae:1a:46:3e:fa:08:7c:b9:38:ba:8b:67:cd:87:a0:
                    e4:05:64:b2:a3:b0:66:4c:7c:a2:96:90:83:70:b7:
                    aa:62:24:ef:ed:f7:6d:ed:01:be:7a:c1:7f:71:35:
                    c6:30:a2:47:6a:4d:57:61:88:b0:99:b6:5c:16:0a:
                    38:69:6b:0b:b4:6f:a0:12:b0:0d:22:0e:19:e2:52:
                    83:5b:b5:3b:1c:f2:b7:3f:f1:cf:68:3a:47:53:41:
                    dc:2a:a9:4f:a2:73:38:a3:b4:39:c1:7c:8e:4e:44:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1F:7E:0B:34:E2:21:54:E5:59:D6:6D:9D:AA:6B:B9:D6:E2:57:CC
            X509v3 Authority Key Identifier:
                keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:18:c1:17:4a:c9:b7:8e:a0:af:5d:81:4d:58:d0:92:9c:61:
         80:7f:b1:70:48:5e:1d:37:ac:aa:c2:b1:d6:d6:81:88:27:9f:
         ef:79:0b:63:d3:f9:ee:58:e1:c3:8e:53:69:7d:64:be:1b:9b:
         8e:c7:ba:d1:64:16:16:f7:61:29:b6:b6:21:76:34:7b:d5:5d:
         ca:e0:9e:70:7f:6c:91:4e:55:1e:60:94:60:f4:f8:9f:e1:18:
         e9:e0:19:83:f5:09:01:2e:e4:f6:e1:37:75:86:46:b9:30:f2:
         ca:9c:fa:c5:36:20:a2:88:58:40:3c:a3:c9:2a:ad:2e:4a:9c:
         a3:18:43:3f:b3:2f:8e:c6:c7:03:79:be:3e:49:72:40:eb:28:
         79:43:6a:bb:bc:b2:1b:ef:44:bf:5c:d1:af:af:ae:0e:8a:61:
         ad:80:06:fe:78:00:40:6e:ae:ec:79:b0:83:2b:67:7e:3b:00:
         6f:6c:0c:43:89:8d:95:bd:0e:ec:fd:33:0f:ad:d0:d5:fe:2e:
         34:bc:cc:69:f3:b5:d0:df:4c:e2:0c:fb:9e:e4:1e:72:9e:c4:
         da:c6:29:51:37:77:21:c7:3e:2a:29:89:7e:df:d9:bb:41:62:
         25:82:e9:c5:50:4d:e3:36:00:16:d7:74:12:e3:c0:a8:c5:6e:
         96:77:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:30 2025 by rpki-client