Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
File:                     C947EC19DD5216E11734983E3D954D61BC79E7C6.mft (raw, json)
Hash identifier:          +3AzY1VLI7id9G+g5sRPAyWMp2WE9u/dqLr1IXSExqw=
Subject key identifier:   F3:27:1C:BA:D5:E8:F3:92:AA:A9:B0:4C:7F:39:70:EA:2B:B7:C2:76
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       11FDDDED523C2FB67CA600DD6064321BD6F586A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
Manifest number:          017F
Signing time:             Sat 05 Apr 2025 00:13:33 +0000
Manifest this update:     Sat 05 Apr 2025 00:08:33 +0000
Manifest next update:     Sun 06 Apr 2025 02:29:33 +0000
Files and hashes:         1: C947EC19DD5216E11734983E3D954D61BC79E7C6.crl (hash: AifbVE3YSpurd9Yh2xRWHhXoGu6xbYkv4445EASxEFU=)
                          2: 323830343a313331383a3a2f33322d3333203d3e20323633353135.roa (hash: e+oXJBqOvzmMX9sr9AlYViwAqanW4OG8g9sSbTZAfDA=)
                          3: 3139312e3234332e3232302e302f32322d3232203d3e20323633353135.roa (hash: uomxGEy9XdesoKUQ55H6BbtHDtT01Va0Tr8V+lGeGXU=)
                          4: 3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (hash: zT+e2DAMZZ6235zyMWJfM8Mh0e6AoSm+pVQZo+EcgHc=)
                          5: 3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa (hash: vZGBQlqLGgKZSpier2taKaZwqllhse7GRGN7XT2pQzs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:dd:ed:52:3c:2f:b6:7c:a6:00:dd:60:64:32:1b:d6:f5:86:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: Apr  5 00:08:33 2025 GMT
            Not After : Apr  6 02:29:33 2025 GMT
        Subject: CN=F3271CBAD5E8F392AAA9B04C7F3970EA2BB7C276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:ad:c9:aa:23:a9:bd:21:dc:d0:0b:f0:eb:
                    6a:39:51:bf:af:af:fd:42:b7:a3:6e:31:7d:48:f8:
                    dc:75:fb:18:d0:a1:4c:e8:b7:d5:f1:4f:4e:5c:9e:
                    79:87:a7:1a:e3:f3:d8:72:2b:68:e3:dc:9a:a4:24:
                    98:fb:4f:6a:3e:74:88:93:a0:b5:31:2c:ac:00:81:
                    1c:83:59:b0:1a:33:97:45:72:3a:c7:d1:9f:b3:e1:
                    61:35:5f:f9:0c:d3:43:38:88:70:40:00:65:14:31:
                    41:df:07:53:c8:61:a4:65:dd:b2:b0:52:be:95:dc:
                    f6:99:57:59:3f:2d:a1:0b:f4:2f:f8:47:53:7a:af:
                    e0:d0:bc:96:4a:35:d6:4e:4e:85:73:13:17:b0:13:
                    25:30:7f:fc:e6:92:a4:7e:ab:ff:a4:9e:73:f4:6b:
                    b0:4f:b2:b7:48:19:6b:aa:f6:06:0b:84:74:3b:87:
                    f9:4d:35:27:9e:c7:2f:e4:6c:31:e7:fb:d7:14:71:
                    98:33:be:d7:50:a0:75:0c:75:33:39:3d:96:a2:36:
                    a5:16:a3:1a:a0:47:d4:44:cf:09:21:43:3a:34:91:
                    43:3e:02:72:8e:e7:46:76:81:70:54:e0:5e:5e:eb:
                    f9:be:f9:ff:f0:89:e7:80:27:f8:3a:8d:62:d4:b7:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:1C:BA:D5:E8:F3:92:AA:A9:B0:4C:7F:39:70:EA:2B:B7:C2:76
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:41:40:bc:97:99:e5:3c:2d:72:cb:51:30:f1:3b:47:37:ad:
         f7:9a:63:cb:f1:de:f4:c5:7e:72:96:b4:11:0d:04:70:e1:7d:
         13:30:3b:3d:c1:f2:66:b1:34:52:61:87:46:5e:bb:12:42:e2:
         a2:dd:00:67:05:18:d8:e1:1c:a6:8c:74:bc:95:fc:c2:9e:ea:
         af:8e:71:2b:c9:98:2b:00:44:28:1f:43:12:cc:3d:71:5a:e1:
         65:90:d3:ba:49:66:e7:66:e3:da:34:ad:73:ff:01:84:8c:1d:
         36:ba:c7:99:37:95:7d:e3:7b:28:38:d8:c5:b3:b7:f1:af:8f:
         9f:dd:65:72:c3:83:e1:13:37:07:90:45:f2:c7:c3:6d:db:e5:
         e8:0b:c9:68:a5:ef:93:93:fd:37:f8:9e:8f:65:ae:0b:fa:3e:
         b1:27:b1:17:2a:54:d3:1f:53:4f:be:2c:b2:00:f0:67:76:6a:
         5d:43:50:74:4e:8e:29:cc:2f:c0:28:04:8e:2c:24:1c:e5:28:
         d0:4e:ca:98:a6:09:a4:52:0d:58:1c:b6:7c:46:85:eb:84:3b:
         11:a8:c0:52:22:32:70:12:28:58:da:72:c0:71:88:4f:4c:ae:
         a6:c1:93:0d:9c:34:e9:0c:aa:c7:37:43:1f:26:ac:01:7c:b9:
         ee:fd:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:48:49 2025 by rpki-client