Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          V1j0/C9SeypQ+z7P2czZVQM10f+s0rVvJbG59umAlOY=
Subject key identifier:   C8:CB:C6:8B:CF:09:B8:9D:09:AD:6E:FB:61:40:27:3C:74:F9:3B:1D
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       720D09433EA0E6153E3301B01773D2583987A6DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          022A
Signing time:             Sun 06 Apr 2025 03:10:00 +0000
Manifest this update:     Sun 06 Apr 2025 03:05:00 +0000
Manifest next update:     Mon 07 Apr 2025 03:10:00 +0000
Files and hashes:         1: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
                          2: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
                          3: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
                          4: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: MFu1x7jlTOYCL8r4RtTCibkouHdWtIDxYdJlJgEaJbI=)
                          5: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
                          6: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
                          7: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:09:43:3e:a0:e6:15:3e:33:01:b0:17:73:d2:58:39:87:a6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  6 03:05:00 2025 GMT
            Not After : Apr  7 03:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:a3:cb:f9:49:a7:e2:9a:37:92:b1:eb:5a:
                    81:8b:a8:27:6f:00:7a:98:bd:a9:76:29:c0:cd:09:
                    ba:5d:ac:c7:7b:2e:f9:48:50:96:1a:a3:71:e9:da:
                    0d:d5:6f:b4:05:46:f8:9d:1f:31:64:69:4f:99:7b:
                    88:c8:7e:9e:f7:84:22:a3:36:91:d6:07:42:95:81:
                    48:ac:af:00:cd:aa:6c:61:17:8e:e9:b6:18:7b:4f:
                    02:69:4b:99:e8:e5:f8:f0:49:b0:fe:e6:7c:a2:48:
                    ac:bf:62:01:a6:23:f1:6d:ed:7b:03:ac:6c:48:17:
                    df:ae:34:77:e9:7b:72:23:52:45:9f:6d:04:ee:45:
                    e1:6f:b6:19:85:1f:74:14:e6:20:d2:3b:a0:48:7c:
                    12:f6:12:68:60:76:f4:1a:47:7e:c5:5e:d8:56:14:
                    11:6a:b0:23:e9:9f:c1:70:2a:1c:3b:a8:c7:56:c7:
                    98:1c:3b:75:6f:24:fb:91:a9:15:1a:8f:6f:cb:13:
                    d6:22:0f:ab:42:26:31:4a:48:59:c5:08:e3:1b:58:
                    eb:41:4d:c4:5c:ef:a8:8f:7b:79:64:c3:19:0b:82:
                    23:98:7d:1f:9e:f8:bb:7e:77:bc:fd:f2:38:18:dd:
                    18:03:4a:58:8a:8b:e1:c7:cd:b2:96:7b:0e:5d:74:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:C6:8B:CF:09:B8:9D:09:AD:6E:FB:61:40:27:3C:74:F9:3B:1D
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:13:80:a4:80:26:9f:04:43:5a:0c:85:48:b1:94:5c:0d:
         fb:36:6d:58:b8:22:b7:e4:e9:58:26:20:61:2a:60:64:74:c8:
         4e:26:04:b6:85:4e:7f:37:65:a2:c6:71:bd:e6:95:59:6d:a2:
         b6:8e:4f:6d:3b:2c:f5:a4:1a:9b:13:d7:56:d8:07:ef:6c:24:
         88:3e:6a:d8:74:1c:c4:ff:13:da:bf:ea:3e:dc:23:9c:26:26:
         dc:9d:03:77:75:a5:3f:39:e2:59:ec:cb:2b:6e:74:42:23:1f:
         43:a9:96:5a:01:1f:e2:8d:14:aa:98:50:30:9d:7b:c4:35:30:
         29:d4:ce:f1:0f:c9:a8:0d:93:2a:00:06:19:e9:c1:84:fe:24:
         32:81:90:6b:26:ba:11:a8:ec:01:8f:f9:72:b7:d7:3c:2b:8e:
         29:28:20:b7:f2:3d:2a:df:d9:0c:fe:67:73:3b:4f:3c:1c:36:
         50:08:81:1d:cb:8b:2b:af:0f:5a:52:3b:f5:c3:8d:3a:09:47:
         ef:c0:ea:35:89:a7:54:fe:d8:57:4d:ff:de:04:2a:cf:b0:7e:
         e9:4f:05:72:bb:5f:10:6a:fc:21:3b:66:2a:a1:22:6d:78:37:
         31:17:84:16:5d:3a:a0:aa:87:d1:38:bb:db:b2:1b:65:8b:17:
         77:00:c5:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:51 2025 by rpki-client