Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
File:                     BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft (raw, json)
Hash identifier:          M8ZRPZEfyyhQaqoaWnl9NJ+wRUIK0krdFhQIrMRz7Rg=
Subject key identifier:   38:2E:0C:83:08:54:F8:E6:41:5B:71:A0:FD:05:26:9E:9F:2C:D3:F5
Authority key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Certificate issuer:       /CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
Certificate serial:       1F6D6929F19A2614BDE014775ED3DFD1BE0D35D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
Manifest number:          01E6
Signing time:             Thu 03 Apr 2025 23:04:41 +0000
Manifest this update:     Thu 03 Apr 2025 22:59:41 +0000
Manifest next update:     Sat 05 Apr 2025 02:50:41 +0000
Files and hashes:         1: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl (hash: qWpZknWFZNOT08fIz419L/UnW2NzKNuGui+AizpQW0M=)
                          2: 34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (hash: f61UtWClOyp6Kh10ULsTV0tVHLCtuW2TgahnSxPC6co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl
                          rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 02:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6d:69:29:f1:9a:26:14:bd:e0:14:77:5e:d3:df:d1:be:0d:35:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Validity
            Not Before: Apr  3 22:59:41 2025 GMT
            Not After : Apr  5 02:50:41 2025 GMT
        Subject: CN=382E0C830854F8E6415B71A0FD05269E9F2CD3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:23:10:39:71:e3:02:c2:aa:e6:c4:8e:d6:
                    ab:4d:d7:e5:b6:23:03:89:4b:74:a5:99:b7:88:72:
                    58:df:23:07:c6:9c:a8:76:b0:73:9f:2c:c0:fc:58:
                    a4:09:bd:dd:5a:cd:94:aa:54:6e:64:90:50:db:b5:
                    37:6b:57:bd:07:97:d3:c5:7d:4f:9e:04:57:7c:d1:
                    7f:3f:86:5f:ae:17:29:30:f3:92:1c:1d:56:ee:cb:
                    46:9b:f2:86:3b:fc:f3:d9:49:2b:cc:a5:ea:b4:78:
                    e4:12:12:90:30:3a:79:2f:9c:d6:66:39:f2:bf:f5:
                    4f:74:ab:de:91:c7:81:4f:42:a4:9f:ec:9b:ca:33:
                    3a:25:2d:d7:97:e3:49:ba:ab:f6:9a:0b:a8:0e:50:
                    ae:ed:34:ab:d1:6c:37:1b:87:ec:78:8a:1a:1b:64:
                    2e:57:9c:52:00:ef:30:a0:b9:56:e1:b4:a7:e8:9f:
                    e9:da:6f:d3:04:16:38:2b:c7:59:f5:d0:67:64:6f:
                    91:ef:68:7b:40:37:fc:c1:cc:dc:07:eb:5b:4b:5a:
                    cf:fa:f8:c7:fa:08:9f:12:bd:e0:3a:c1:c0:a4:62:
                    ef:bd:e8:1a:5e:dd:ce:57:96:39:1b:1c:6f:6e:e7:
                    cf:47:c4:e5:10:cb:88:63:39:cc:3d:cf:c4:79:f5:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:0C:83:08:54:F8:E6:41:5B:71:A0:FD:05:26:9E:9F:2C:D3:F5
            X509v3 Authority Key Identifier:
                keyid:BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:2c:d0:49:3d:4d:f7:60:56:66:a0:6e:37:5c:1c:e9:5d:
         c6:27:2c:2b:36:14:f8:ec:2e:bf:0d:ee:d0:54:b7:39:fe:f0:
         e6:be:a1:00:36:03:91:45:fb:c4:18:84:e0:81:9c:52:ee:01:
         e4:c8:c3:63:d8:52:b3:0b:8e:ab:e2:42:57:54:0f:04:39:df:
         19:20:dc:57:32:00:02:46:af:f5:b6:95:5d:41:b2:5d:6d:45:
         52:87:a7:be:23:37:47:04:f3:1d:46:9f:cb:3c:d0:86:4d:0a:
         a0:1c:a9:dd:78:6e:eb:59:f5:f8:8a:89:75:55:7a:ff:90:13:
         08:72:ed:d3:96:53:f7:97:bf:d4:c2:2d:78:10:a4:5a:94:61:
         0a:ef:29:82:02:7f:d8:11:c8:32:e2:09:f0:fc:de:f0:f1:98:
         48:70:0b:29:98:46:04:5d:85:73:09:00:6a:b0:2f:5e:30:36:
         50:4f:2f:72:44:11:4c:52:45:f2:81:1a:21:ad:96:a5:5c:7d:
         51:93:32:5e:c7:ca:11:07:63:4f:43:63:0e:2f:6e:5f:35:03:
         df:d3:96:1b:48:0a:db:76:72:56:46:7d:38:76:f5:f5:6b:2d:
         b9:3e:8b:59:3f:e0:47:12:49:d1:2d:6c:bb:11:82:76:81:57:
         59:7b:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:02:25 2025 by rpki-client