Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
File:                     14FF5A751C4E19792B967D92C271B9738745BFED.mft (raw, json)
Hash identifier:          39hNJPyIW3MqtI1QpjZ5Fa4Ap5SAed7+BQ0m6do7llY=
Subject key identifier:   5C:81:97:84:90:D4:87:96:4B:E1:D3:93:E8:80:0C:E0:82:89:8F:E7
Authority key identifier: 14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED
Certificate issuer:       /CN=14FF5A751C4E19792B967D92C271B9738745BFED
Certificate serial:       745332FC24DA2CB4BDD2FC658E57790BC80671D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
Manifest number:          1E
Signing time:             Sat 12 Apr 2025 10:51:54 +0000
Manifest this update:     Sat 12 Apr 2025 10:46:54 +0000
Manifest next update:     Sun 13 Apr 2025 12:14:54 +0000
Files and hashes:         1: 3137372e38352e3133322e302f32342d3234203d3e20323632363038.roa (hash: /UgyYVHxFXmLtl/okr3rX3nhMe1sGcE9QbwuNeQsfTs=)
                          2: 3137372e38352e3133332e302f32342d3234203d3e20323632363038.roa (hash: XCAJARc3/kFXOWUPkJmixYG6fxhg4pBn+bGY79b5QmE=)
                          3: 3137372e38352e3133342e302f32342d3234203d3e20323632363038.roa (hash: xhG67mKq4pY8aFF8FjbvEOhttXNe59FBYmX/lJQwAlw=)
                          4: 3137372e38352e3133352e302f32342d3234203d3e20323632363038.roa (hash: l5w10JDDKk7+ihQAvz1FSTpMV+C0z7Qqa2cCzeaS3HQ=)
                          5: 14FF5A751C4E19792B967D92C271B9738745BFED.crl (hash: dyGXAekzp4UaTXM5CN5JSn0t0ehCeRqLeMP6NHJ+MG8=)
                          6: 3137372e38352e3133342e302f32342d3234203d3e203631353638.roa (hash: IWrldfDIemZbriFIWX2HxSv72vb9maR2NV3LlIXJ1/Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl
                          rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:32:fc:24:da:2c:b4:bd:d2:fc:65:8e:57:79:0b:c8:06:71:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FF5A751C4E19792B967D92C271B9738745BFED
        Validity
            Not Before: Apr 12 10:46:54 2025 GMT
            Not After : Apr 13 12:14:54 2025 GMT
        Subject: CN=5C81978490D487964BE1D393E8800CE082898FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:47:76:c8:a9:9c:e4:5c:d1:8b:5c:7d:b0:
                    1e:63:ec:7d:d0:b2:63:c9:ad:d4:43:4c:6c:23:8c:
                    f5:50:e8:09:4c:9a:74:0f:8a:87:e3:46:77:ec:94:
                    ee:40:d6:1c:3a:aa:6f:c4:ff:e0:fc:42:4c:f5:3d:
                    a0:2c:e6:04:45:2a:4f:3a:dc:8a:35:e1:cd:ed:1d:
                    34:b0:81:f2:dc:8b:2e:6c:17:c9:f4:f6:b6:6d:99:
                    5e:36:e6:a6:30:2c:0b:9e:68:4b:e1:b2:b3:bb:2a:
                    71:5f:c0:61:1d:0b:54:b4:5f:46:9e:43:77:84:91:
                    b8:1a:6d:e0:18:c6:9c:25:76:29:8c:9d:3a:42:59:
                    02:bd:4b:5d:67:5a:e9:bb:4d:27:0c:2e:55:2c:11:
                    17:ed:22:23:ad:ce:06:d6:f1:a4:b3:da:fb:ed:b7:
                    26:5b:a3:79:26:7a:27:f2:3d:0c:ae:f0:1c:38:aa:
                    d2:54:b4:6f:cf:f0:9f:8f:80:a5:cd:38:fa:44:21:
                    78:5e:13:4d:dc:62:1f:50:49:82:69:1c:95:bb:1c:
                    68:84:28:fd:0f:fb:93:8a:55:8e:89:ca:c0:dc:73:
                    41:e8:d5:25:16:7c:18:d5:71:5b:18:4f:86:b2:3b:
                    7d:9d:49:e2:85:13:d0:c1:7b:f4:87:0f:82:e8:3b:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:81:97:84:90:D4:87:96:4B:E1:D3:93:E8:80:0C:E0:82:89:8F:E7
            X509v3 Authority Key Identifier:
                keyid:14:FF:5A:75:1C:4E:19:79:2B:96:7D:92:C2:71:B9:73:87:45:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FF5A751C4E19792B967D92C271B9738745BFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qnB8rJ1UUcysMQ6tAnPyK9ZtcRATbNHRcfskqHproY9/0/14FF5A751C4E19792B967D92C271B9738745BFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:9d:a6:d2:4f:fd:0f:b9:d6:aa:62:4f:38:b3:bc:5f:72:
         3d:cc:70:f5:07:20:ee:d1:2f:b1:12:ad:eb:69:88:db:25:a0:
         1e:1d:4c:5e:82:b7:3f:f5:bb:f5:d2:87:85:f0:60:5d:a9:b4:
         77:ca:6b:03:69:ef:61:5e:86:66:09:be:30:1a:1b:2b:86:e6:
         62:18:3e:73:74:f3:55:99:dd:b6:93:a8:56:77:55:a1:20:28:
         16:7a:78:40:25:6f:d4:94:d2:ae:c6:b4:b6:30:09:d6:3e:0c:
         46:9e:cb:c1:d3:10:ab:52:2e:7e:dc:32:1a:94:8f:a5:ab:b0:
         07:d2:5c:7e:8a:2d:0e:7a:f8:4f:f6:29:9c:3a:2f:99:f5:3f:
         0a:bb:62:61:a7:d5:b7:1a:53:70:9f:09:71:bb:18:d4:bd:bf:
         e0:65:ee:6d:ea:28:51:1f:e8:33:30:a5:8a:78:f9:35:80:59:
         ef:cb:f7:f7:3b:b8:7e:86:78:a5:fd:77:a4:62:c2:f9:39:e7:
         22:c5:99:36:3c:f7:80:8b:28:82:ed:13:b0:1f:22:2c:0a:b8:
         80:a0:e7:5d:04:17:ba:ad:52:5e:5a:86:f6:c4:5d:16:e8:0d:
         7a:46:4d:3a:99:c8:7f:1e:cb:22:33:0d:77:d2:86:f4:99:d2:
         ad:36:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:41 2025 by rpki-client