Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
File:                     87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json)
Hash identifier:          MxAXQ/x0J1/02nU5cOkGREEur4SW1PKSFEUH02f1DP4=
Subject key identifier:   31:24:38:9E:BB:79:EF:53:63:CA:B5:B6:27:4A:87:B0:F5:BD:37:77
Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88
Certificate issuer:       /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
Certificate serial:       6F3E2274B3912BB4C32F4C4DD4C1B8912F281B04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
Manifest number:          20
Signing time:             Sat 12 Apr 2025 13:54:05 +0000
Manifest this update:     Sat 12 Apr 2025 13:49:05 +0000
Manifest next update:     Sun 13 Apr 2025 14:27:05 +0000
Files and hashes:         1: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: AaZvRo1Gvb8ehjQqNPJyt+YSjKNO902zr4a+9F5QLy4=)
                          2: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: PD33t9dvfUs1NQhXuL3Xie0KcybW7wj9PNJerbegWf4=)
                          3: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: azYb7n2AhoMfnq11Pg2Qjpcr2bkrMTcbjmZ5g/ma4F8=)
                          4: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: X0k+OEr8tLPrBAoKgoUkicfgVlQuwd4zoHl0bGDYL7E=)
                          5: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: +sNenIhVPHPzNEjIlSdczqKykJ1F6OVtxAmahgGAIR8=)
                          6: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: 8VJcKEqv8e2Tu0UhAjiMptR5U9IhVleiKUHk7Ndb67c=)
                          7: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: E7PEVvRvng2uOsiRhVeUjei4pitJ5GoJken0emdnfsg=)
                          8: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: Cj+XZApZwEyDBIz0YbaEcUyGeZaj4bZtMyXONedMytI=)
                          9: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: mr9ScxkCfrNipa98mKWypykYs4LK2vm5XStXm9jcJaU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl
                          rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3e:22:74:b3:91:2b:b4:c3:2f:4c:4d:d4:c1:b8:91:2f:28:1b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88
        Validity
            Not Before: Apr 12 13:49:05 2025 GMT
            Not After : Apr 13 14:27:05 2025 GMT
        Subject: CN=3124389EBB79EF5363CAB5B6274A87B0F5BD3777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:8c:83:0e:4a:9e:9c:01:b9:99:b8:8c:d7:
                    9c:07:6d:b7:18:bd:3b:d3:e0:03:14:f3:dc:1a:48:
                    7f:d6:6a:60:a8:f9:84:59:f3:a3:2e:05:64:0b:88:
                    5f:48:59:7d:7f:32:8d:a9:e7:20:f2:d9:05:5a:65:
                    7a:1c:e9:04:53:20:aa:d5:df:6a:57:75:f5:7b:bd:
                    7a:97:45:75:4e:95:e1:b3:c4:e2:bb:5e:bb:f8:95:
                    65:07:a6:18:22:ad:bd:18:74:d2:f9:2d:6a:e9:e7:
                    53:8b:1b:a5:0c:14:e8:17:4b:42:8a:9f:fe:18:7d:
                    b4:77:3a:a3:88:3c:be:a4:9c:a4:50:7e:d3:af:ee:
                    38:35:f2:cf:d3:8a:06:55:b9:06:43:57:55:4c:72:
                    f9:f2:80:c7:22:f8:80:c6:97:0b:3c:1f:f5:f6:39:
                    1a:da:82:54:c7:91:13:27:8f:39:b2:38:cc:f8:80:
                    dd:4d:ea:77:60:ac:3c:35:7c:09:56:e0:8c:75:79:
                    bb:6c:0b:f6:43:9e:42:f2:9b:76:16:b6:66:28:f5:
                    17:23:c3:30:57:2d:99:9e:06:18:db:41:31:6d:10:
                    59:2d:85:02:d4:b0:36:ed:74:a5:3e:ab:41:6d:53:
                    e3:29:76:78:7a:61:9a:04:6e:f9:73:d1:28:42:68:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:38:9E:BB:79:EF:53:63:CA:B5:B6:27:4A:87:B0:F5:BD:37:77
            X509v3 Authority Key Identifier:
                keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:78:53:25:6b:c9:02:12:cb:f0:d2:3c:8b:a4:12:4d:c7:
         fb:57:17:aa:5e:50:a4:49:4c:49:47:9f:42:a4:9b:91:03:3d:
         70:19:c9:06:b4:0d:cb:f9:83:03:aa:62:26:10:19:3e:5f:dc:
         de:5f:74:4e:36:e9:6f:f4:7a:cd:7a:68:ee:aa:e3:6f:44:3d:
         2c:d4:a3:fb:f7:8d:89:93:dc:a2:d6:95:a1:6b:11:fa:d4:be:
         8f:45:9f:92:7b:26:86:b0:45:25:d5:62:5d:88:5c:79:98:37:
         0b:8d:a7:aa:64:22:27:90:ec:91:75:b7:56:6f:42:a2:e0:83:
         10:33:81:34:3f:07:49:50:6d:c6:16:f5:47:70:94:13:f1:e2:
         ec:f7:df:e3:ec:46:97:5b:81:fd:a8:40:19:f2:c6:07:1c:76:
         e3:df:92:49:7e:f8:45:e6:d6:a6:66:45:54:14:43:51:c8:da:
         74:a5:61:52:0d:f1:52:db:04:b5:8b:2b:9c:4c:8f:c6:22:88:
         45:6e:63:57:12:2b:ab:31:da:c8:82:1b:67:37:23:58:62:fb:
         69:34:66:36:8a:ad:f8:0e:63:af:f3:2a:88:07:68:fd:3b:11:
         f4:ed:a4:4a:7c:2f:45:98:e5:e6:c6:34:63:54:c8:6c:48:76:
         d8:08:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:29:17 2025 by rpki-client