Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
File:                     DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft (raw, json)
Hash identifier:          +UF21kTcb1zNLJOPoQCvCU1oAFvtDrVJYg/Vv09XVvw=
Subject key identifier:   B7:9B:92:9E:45:8C:5E:E0:4B:6B:43:1F:9F:C0:A4:6F:94:DF:AB:33
Authority key identifier: DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Certificate issuer:       /CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
Certificate serial:       656746889E989900261612A621789AD6B4A41FC8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
Manifest number:          01E7
Signing time:             Mon 07 Apr 2025 08:47:32 +0000
Manifest this update:     Mon 07 Apr 2025 08:42:32 +0000
Manifest next update:     Tue 08 Apr 2025 12:46:32 +0000
Files and hashes:         1: DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl (hash: +AuCZA1hcw32CYjOCh1QQxYyc42I6sBvZNxAHFoQyLc=)
                          2: 323830343a353436383a3a2f33322d3335203d3e20323638363438.roa (hash: /GemfBvArZtukG4Y6RFLcXF3f1tLbIJXVDgtbWncR/o=)
                          3: 34352e3136342e3234342e302f32322d3234203d3e20323638363438.roa (hash: c0ivNdsbn1PNL+sK8V9iDiQA1Mt4huXCPkc/G0mHMQ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl
                          rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:46:88:9e:98:99:00:26:16:12:a6:21:78:9a:d6:b4:a4:1f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Validity
            Not Before: Apr  7 08:42:32 2025 GMT
            Not After : Apr  8 12:46:32 2025 GMT
        Subject: CN=B79B929E458C5EE04B6B431F9FC0A46F94DFAB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:aa:03:bb:2f:1a:6f:b0:48:54:60:49:4f:
                    5a:74:4a:0c:88:97:e6:2b:fe:b2:8f:ba:3b:a9:cf:
                    6b:43:b0:01:7b:a4:d8:75:01:47:84:64:db:91:b7:
                    e1:91:20:22:ba:07:6a:79:64:fb:1b:f3:1d:9e:af:
                    10:b0:1a:d7:6e:56:fe:70:02:c5:bf:a3:cb:83:0a:
                    b3:78:25:92:e0:77:ea:89:4f:b1:9f:4a:ba:12:69:
                    32:91:3c:bd:62:2f:61:4a:b1:3d:de:02:ba:32:48:
                    12:80:ff:11:9a:13:e3:52:0a:32:21:a1:91:7f:dd:
                    90:1e:25:da:a3:a2:a4:d1:03:ee:4e:7d:f2:1d:7d:
                    70:4a:61:9f:df:7d:b7:6f:8b:61:af:bf:47:fe:77:
                    eb:e6:77:92:27:62:6c:f0:b2:1b:d3:eb:80:3c:04:
                    1e:ad:21:e5:b0:73:5f:09:5e:4a:be:6a:4d:f0:8c:
                    10:1c:ca:84:50:96:ac:7e:d9:01:a2:b6:a7:15:d1:
                    66:40:25:61:fb:5b:60:48:b7:e0:a7:21:f8:0a:66:
                    8b:11:78:7d:e9:36:29:03:7d:f8:61:a8:38:cc:be:
                    49:55:e6:af:bc:5b:d0:35:0f:1d:5e:a1:05:0f:f1:
                    5d:e0:db:0c:d8:bc:85:56:44:8c:36:31:dc:1c:27:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:92:9E:45:8C:5E:E0:4B:6B:43:1F:9F:C0:A4:6F:94:DF:AB:33
            X509v3 Authority Key Identifier:
                keyid:DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:16:b2:0f:4b:6f:73:b3:c7:49:7f:3d:fc:fd:27:6b:13:
         17:65:7c:ff:ff:d5:ca:1d:c1:0a:0d:0d:47:87:da:e1:54:a6:
         c3:e8:96:2a:71:7e:3c:9a:ba:d8:25:44:a1:8b:f2:07:8c:e1:
         16:ed:7c:cb:3c:c8:84:04:31:91:55:61:1d:6b:c2:b9:ba:71:
         83:b2:7e:6f:95:5c:90:97:dc:1b:42:b3:0c:55:2b:35:e4:86:
         f6:df:c3:dc:1e:ec:7a:11:04:a2:83:cf:c3:1b:2e:c7:35:ca:
         ca:06:9a:47:54:50:15:75:56:a6:f7:4c:12:df:19:7d:c6:39:
         38:22:98:ba:58:17:78:6a:4b:0e:d2:ee:f3:78:30:21:49:b2:
         6e:8c:21:73:d2:ff:44:3c:93:bd:b6:c6:62:f0:7c:75:cc:82:
         98:54:1a:79:e0:b6:83:f8:c5:9c:12:fb:9b:9e:47:65:2f:a2:
         9d:f4:52:67:c1:b9:36:05:3e:af:d9:dc:20:49:e5:61:d9:06:
         b2:87:90:41:ce:5f:d3:4f:82:bb:e4:f6:b8:85:3c:54:44:22:
         dc:ad:4e:86:14:fe:ca:02:2f:70:16:d5:bb:d0:72:a7:99:e8:
         3d:e8:0c:2b:78:95:7c:0b:f0:66:7c:5b:0f:95:40:e9:55:cc:
         8e:ad:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:29:10 2025 by rpki-client