Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File:                     31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier:          FCMgcA+ZZO2qz0jbybTq46nawtiGz38HgdNoMcvpjAo=
Subject key identifier:   4F:F8:14:62:76:51:D2:FD:16:52:56:87:27:49:55:1D:D7:0F:68:26
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       454A169ED821A4A63CDDA9F9C241D7FEBC37E690
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number:          023C
Signing time:             Wed 04 Jun 2025 06:15:02 +0000
Manifest this update:     Wed 04 Jun 2025 06:10:02 +0000
Manifest next update:     Thu 05 Jun 2025 06:52:02 +0000
Files and hashes:         1: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=)
                          2: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=)
                          3: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: K4Ge577C/nrhzNECMJlxpnzdwIBJtJkMMuEsmKXfg7k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
                          rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Jun 2025 06:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4a:16:9e:d8:21:a4:a6:3c:dd:a9:f9:c2:41:d7:fe:bc:37:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Jun  4 06:10:02 2025 GMT
            Not After : Jun  5 06:52:02 2025 GMT
        Subject: CN=4FF814627651D2FD165256872749551DD70F6826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:8f:bb:71:0c:08:75:63:98:ad:0e:6c:5f:
                    31:61:25:c0:66:fa:cc:ff:b8:02:d9:c0:70:7c:d7:
                    82:93:58:99:73:c8:6d:c6:1b:f2:38:0a:57:f2:98:
                    ec:c7:5d:78:99:a0:1a:fd:a0:4b:73:ab:45:ae:23:
                    b0:2f:83:50:04:39:89:f0:38:03:30:2f:aa:3a:5d:
                    ce:ef:21:88:24:de:9d:31:3f:05:d9:a9:c7:b4:36:
                    4c:b5:2b:b4:ff:53:4e:73:0b:c8:75:97:c4:3f:7a:
                    5d:c6:65:3d:41:44:46:93:c2:d9:98:82:a8:f2:e7:
                    97:73:53:c9:e8:c1:0a:78:c4:2e:96:e8:4c:9b:f2:
                    29:7f:72:80:a2:52:ee:72:15:0a:66:dc:33:50:b1:
                    2d:d8:6d:73:ec:c7:c9:fb:1e:12:d8:7f:fa:f3:b3:
                    38:e4:c2:01:a9:f8:70:ad:a2:b0:92:c4:b5:e4:68:
                    23:63:b1:b5:31:51:b4:99:f2:40:64:b3:5b:82:7f:
                    aa:c2:3a:ae:c4:aa:a6:86:1f:9c:83:68:34:8a:da:
                    0f:30:a2:57:c3:71:c2:96:1c:40:59:c6:07:78:31:
                    8d:0b:20:b6:64:93:ce:e5:a0:4f:15:c1:36:6e:27:
                    26:d8:d6:4a:9b:77:1d:b7:76:ad:85:dc:ab:6b:85:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:14:62:76:51:D2:FD:16:52:56:87:27:49:55:1D:D7:0F:68:26
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:ea:2c:bc:d4:16:a7:bb:f3:0c:05:51:45:95:42:82:06:
         4c:cf:d5:39:4d:0b:93:2a:eb:88:8e:91:99:99:ee:e4:46:38:
         f1:f1:1d:52:c1:39:3d:1c:3a:04:49:91:1d:b1:01:1c:36:dd:
         b5:4d:44:28:95:6d:50:63:31:9e:17:63:dd:7f:d4:f6:ae:d6:
         06:8f:40:d3:45:ad:52:40:9e:b9:82:4d:74:9d:e8:23:79:1e:
         b6:08:c9:95:44:c8:48:45:4c:31:44:7b:95:5b:c1:7d:86:ff:
         fb:95:44:eb:a9:1c:cf:b2:9f:ca:30:9b:9e:5f:b0:dd:6a:bb:
         fa:aa:71:0a:a2:a5:d4:6b:cc:eb:27:f8:ac:0d:5d:f2:17:a5:
         43:98:35:ac:35:a8:4a:e3:5f:84:7a:f9:49:a0:e9:68:ea:f3:
         81:2e:29:73:bb:2f:43:bc:9a:82:c4:dd:e2:79:e8:e2:1a:0f:
         11:14:2e:9c:b9:d9:0c:bc:41:5a:f3:78:fa:31:9f:c3:a0:c0:
         a1:e9:80:c3:43:e8:f0:cd:a6:1a:2b:0a:4e:fc:de:5f:d5:26:
         87:ef:66:80:c8:16:62:eb:20:1c:72:bf:b4:0e:ed:8e:b8:ca:
         13:19:f1:30:9d:a5:84:79:06:d7:d6:b2:7e:62:09:7a:41:0d:
         da:8b:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:28:35 2025 by rpki-client