Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
File:                     EC37D17C061BE878628F004F6A8613266553C3FB.mft (raw, json)
Hash identifier:          gvFgbcoCnALakOai3ZP8/lWuE1lmTKbBXu0e6v32LqE=
Subject key identifier:   36:7D:98:1E:53:10:30:4C:B2:F4:AE:F2:26:19:19:DC:9D:7C:76:12
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       0B9622BE7A9271E39B04E97F6875572768025417
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
Manifest number:          020D
Signing time:             Sat 05 Apr 2025 08:00:00 +0000
Manifest this update:     Sat 05 Apr 2025 07:55:00 +0000
Manifest next update:     Sun 06 Apr 2025 08:00:00 +0000
Files and hashes:         1: 3137372e3132352e35362e302f32322d3234203d3e203532363037.roa (hash: gTm3JE2wZ9ec0kDgE2rLrOqSrbtHePEDbcoKoOa5iWE=)
                          2: EC37D17C061BE878628F004F6A8613266553C3FB.crl (hash: Lmy/mAZDtkrsjYG67VH1YWtQW/8dMkBuB7e4bibyQYY=)
                          3: 323830343a336266633a3a2f33322d3438203d3e203532363037.roa (hash: SkUiwPPRh8RlEDwLS6Lx4aUfllu6KV1Az1T8u5m5VNc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:96:22:be:7a:92:71:e3:9b:04:e9:7f:68:75:57:27:68:02:54:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Apr  5 07:55:00 2025 GMT
            Not After : Apr 12 08:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:4a:54:bb:31:26:72:49:30:6d:2a:77:f1:
                    65:89:96:15:91:ca:dc:be:20:0b:f3:01:25:aa:f2:
                    83:9c:9b:a1:9b:7a:65:80:dd:c1:67:67:02:98:81:
                    ed:bb:ac:f3:3d:96:9a:0a:43:82:a6:86:8d:7b:a7:
                    80:0f:39:f6:7d:c3:b4:52:bd:e4:0b:67:93:ea:09:
                    75:12:cf:7b:37:99:f6:c0:5c:e2:71:f3:dd:9e:19:
                    bb:a1:5e:49:81:78:c3:bf:b4:8b:41:67:4e:52:3e:
                    85:dc:e9:fd:b9:bd:ab:38:ad:65:d6:bc:07:46:8c:
                    18:43:6f:1f:bb:53:f4:db:07:33:d5:58:b0:99:1b:
                    90:7a:62:f7:50:95:cb:d6:03:17:c3:fb:f3:ac:ec:
                    75:3c:2d:e5:c0:63:08:87:e7:72:8c:66:41:ee:ea:
                    5e:3d:01:70:69:10:d0:34:ff:57:b1:4c:0d:f1:30:
                    2e:53:25:2b:26:c0:bc:4d:de:76:83:09:9b:17:aa:
                    8b:f8:10:6e:aa:8a:56:19:2f:14:f9:90:e0:d8:6f:
                    b5:69:6e:02:ea:07:70:20:ec:be:3b:b8:ec:40:2d:
                    f7:07:b2:15:03:1c:47:b4:81:9a:15:69:22:e7:c4:
                    44:fc:85:ee:d3:ec:ee:9a:f2:2b:65:ce:6d:c9:24:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:98:1E:53:10:30:4C:B2:F4:AE:F2:26:19:19:DC:9D:7C:76:12
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:0d:06:64:f8:f7:65:43:c3:2a:be:c3:36:28:de:02:2e:
         d4:37:b0:93:8c:3c:ab:7c:21:f1:3a:51:fb:fb:77:d2:26:f3:
         43:3c:af:c2:f2:8e:b5:4a:2e:7a:af:4d:cf:d7:ed:e3:2f:6c:
         b0:70:e1:cf:12:49:31:9b:00:83:24:e9:23:64:8f:7a:e8:80:
         73:ba:bb:9c:c1:a1:9a:82:80:86:e8:7d:b4:ba:e8:53:cb:0a:
         21:20:06:55:21:dd:9c:8a:f7:2b:64:02:fa:bd:88:fd:ec:3c:
         ab:8c:50:48:5b:7b:f7:80:87:2e:2c:5c:2d:23:56:7f:19:af:
         8d:14:79:e1:c2:b9:82:af:5b:cc:7d:09:49:59:f5:15:62:33:
         43:25:2c:93:49:9f:59:f7:1c:60:06:48:e6:9e:73:9e:ea:91:
         38:e3:bc:06:04:67:ea:3c:9b:f7:39:f1:32:09:a2:4e:fd:68:
         7b:92:b7:29:27:af:8d:5d:db:02:bc:18:36:7b:b9:b2:06:6c:
         b0:0d:60:2b:59:42:7c:7e:7e:a1:3e:ef:65:d5:c4:be:7d:9a:
         71:e9:74:3a:5b:7e:7e:c4:b8:ec:4b:2e:ac:8e:7c:d8:c9:bd:
         33:e5:67:91:af:eb:f7:0e:bd:04:6b:ce:75:3f:cf:2e:e5:e1:
         19:48:7f:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:40 2025 by rpki-client