Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
File:                     038EA35AF01B781289F24933082A9857B17EAE3A.mft (raw, json)
Hash identifier:          4TCXkwM37V3x6hWNHkdMluMe787Uj4esv42HgHrzhLM=
Subject key identifier:   70:1F:AB:18:4A:6B:18:EA:06:E8:08:58:D1:0C:D5:76:27:04:18:70
Authority key identifier: 03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A
Certificate issuer:       /CN=038EA35AF01B781289F24933082A9857B17EAE3A
Certificate serial:       28E33A86B5138F40D6299C93A4E956B1EE2EC8B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
Manifest number:          FA
Signing time:             Sun 20 Apr 2025 12:38:08 +0000
Manifest this update:     Sun 20 Apr 2025 12:33:08 +0000
Manifest next update:     Mon 21 Apr 2025 13:22:08 +0000
Files and hashes:         1: 038EA35AF01B781289F24933082A9857B17EAE3A.crl (hash: xRd5hH5zYx6e1+EMV5KZZCAlDIvrUsK86vGz4h7fPbE=)
                          2: 323830343a336464343a3a2f33322d3332203d3e20323636353536.roa (hash: kEInqvz8FBaJL+FPcYopeSJXdaW5j4nxuPBdRqHMBQU=)
                          3: 3136302e3233382e3232382e302f32322d3232203d3e20323636353536.roa (hash: R+6wjyKClPe7dgIGymUHsKMJdwvFVb3wALHmuJZCAds=)
                          4: 3136302e3233382e3232382e302f32342d3234203d3e20323636353536.roa (hash: nojQzheO4A3FZkLfrBvzGA5vLDN3zeMQZiI0CvC4V04=)
                          5: 3136302e3233382e3233302e302f32332d3233203d3e20323636353536.roa (hash: bPgiP0/sdFNnY87JFmdKbO2HOpk6HTTwaZpOCNt5buo=)
                          6: 3136302e3233382e3232382e302f32332d3233203d3e20323636353536.roa (hash: Q42pnf27rQFsVKkawZ7rbDCU4iV3MOg9/vdKwnhrZNA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl
                          rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 13:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e3:3a:86:b5:13:8f:40:d6:29:9c:93:a4:e9:56:b1:ee:2e:c8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038EA35AF01B781289F24933082A9857B17EAE3A
        Validity
            Not Before: Apr 20 12:33:08 2025 GMT
            Not After : Apr 21 13:22:08 2025 GMT
        Subject: CN=701FAB184A6B18EA06E80858D10CD57627041870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:45:bb:c0:d5:a6:ac:b3:58:2b:06:7d:6f:
                    f6:b4:18:fa:96:a8:7c:53:3b:61:e1:43:09:35:c1:
                    93:38:b6:14:da:ea:c9:a9:e3:04:33:10:4c:2b:60:
                    f9:61:f0:b3:43:8e:b4:14:a9:cb:71:93:d5:0e:1d:
                    0f:07:71:16:5d:02:95:f1:7d:81:71:19:35:01:eb:
                    fc:9f:b4:6c:3f:c5:55:d5:22:0c:a4:04:b9:19:77:
                    45:48:1e:b7:cf:56:c4:4d:71:d1:ad:46:47:5a:d6:
                    81:c8:e8:57:01:e8:f9:89:c7:79:94:ad:6b:4f:93:
                    88:22:4c:60:9b:69:a7:d8:0b:58:f5:ad:a3:06:db:
                    ea:12:77:f1:6c:c7:4e:38:46:ff:3c:7e:88:ee:e6:
                    63:7b:93:9e:fc:48:aa:54:c6:d9:4f:0b:91:2b:fa:
                    ce:54:a5:5b:d4:6c:e9:4c:d8:66:74:a3:66:bb:14:
                    5c:4e:4a:ae:19:99:86:40:a5:98:58:19:cd:c0:ed:
                    ba:7b:52:93:43:89:c8:a6:8f:c6:db:3a:91:4c:97:
                    d3:c9:db:bc:a1:6b:00:dc:aa:a1:b3:fc:d1:19:40:
                    58:a3:00:6d:5b:78:50:5f:39:7c:2a:8c:a7:39:08:
                    cf:80:44:16:35:54:7e:64:c2:34:6d:95:97:c9:84:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:AB:18:4A:6B:18:EA:06:E8:08:58:D1:0C:D5:76:27:04:18:70
            X509v3 Authority Key Identifier:
                keyid:03:8E:A3:5A:F0:1B:78:12:89:F2:49:33:08:2A:98:57:B1:7E:AE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/038EA35AF01B781289F24933082A9857B17EAE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/038EA35AF01B781289F24933082A9857B17EAE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8e:83:45:33:f5:54:32:80:46:78:53:cf:60:90:91:b2:c5:
         e9:18:31:87:4b:f6:a5:1b:45:bc:f5:c4:c5:f2:0d:4e:82:ba:
         b4:54:29:16:3b:8b:70:0a:ae:13:04:e9:ff:6d:86:fe:e0:99:
         a3:b8:10:ba:99:8f:14:46:7a:46:e4:e8:3d:f0:f0:f2:28:e1:
         94:fc:b2:e3:88:28:f9:50:d1:bb:bf:75:e6:3f:dc:f2:c4:00:
         59:54:99:1e:46:1e:66:ea:30:21:22:67:10:98:e2:01:68:93:
         e4:8f:c8:74:13:bc:c8:0b:4e:c0:9d:9c:1f:9b:e0:0d:a7:d6:
         a9:a5:1f:02:2d:a2:1f:e6:b8:14:73:6e:54:d3:04:54:77:02:
         74:a7:17:27:a4:eb:87:1b:1d:5c:45:f5:d8:cc:c4:11:2b:cf:
         b1:49:d5:ee:b7:de:1d:fa:a5:e9:6a:1a:57:61:9f:a9:d7:06:
         7f:10:d0:5d:2a:9d:b0:7e:c9:35:cb:eb:0f:3f:ee:be:58:4f:
         a0:1d:0a:06:78:e5:1c:3d:0b:10:70:03:30:8c:a5:39:10:5c:
         03:49:7e:49:2d:f1:21:f1:b4:73:f1:48:d6:71:64:de:cd:e4:
         72:ab:08:ef:1b:30:ef:c3:f8:fb:1c:35:26:97:eb:b1:d6:37:
         30:1f:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:13 2025 by rpki-client