Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
File:                     2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json)
Hash identifier:          N70jzXUX6tJB0d7YZcvob6BFHn/KsGtnVhAGBcC2Qqc=
Subject key identifier:   29:B7:23:84:20:1A:F1:6E:C0:97:E9:9A:71:3C:7C:B5:23:18:39:79
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       7190837547732E55D221BCC1211C9172698F9343
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
Manifest number:          01D6
Signing time:             Mon 07 Apr 2025 17:49:28 +0000
Manifest this update:     Mon 07 Apr 2025 17:44:28 +0000
Manifest next update:     Tue 08 Apr 2025 21:44:28 +0000
Files and hashes:         1: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=)
                          2: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: LszimQ2nxrQN1d1zt2UqtDdYn8ZYfxpW2fdsiRmgodc=)
                          3: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=)
                          4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:90:83:75:47:73:2e:55:d2:21:bc:c1:21:1c:91:72:69:8f:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Apr  7 17:44:28 2025 GMT
            Not After : Apr  8 21:44:28 2025 GMT
        Subject: CN=29B72384201AF16EC097E99A713C7CB523183979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:54:5b:67:b3:92:db:53:ca:37:09:62:a1:
                    4a:05:f7:0f:13:e6:d9:34:d7:4f:a1:90:4d:69:fe:
                    13:1c:cb:b6:35:9b:22:2f:df:5e:4b:23:bc:47:42:
                    13:50:82:f8:3a:d1:ad:94:c5:b1:8e:b0:1d:73:b0:
                    49:59:dd:42:6a:74:fd:57:b4:72:eb:e0:4e:7c:4f:
                    cf:bd:b4:83:93:90:d1:dd:25:60:d6:36:85:f9:59:
                    c3:e0:28:3b:b4:7c:2e:c9:95:4a:6f:c3:f7:f1:68:
                    84:07:1f:c1:77:72:fc:0c:f1:89:c1:6f:cc:0b:b2:
                    8f:51:f1:f1:0e:e6:7a:50:f3:7c:2b:12:1e:8b:5f:
                    05:97:c2:f0:b5:fc:48:d8:11:cb:8e:bd:79:fa:81:
                    e4:92:76:05:df:aa:83:6b:1f:2d:24:d3:d7:d8:42:
                    cd:b1:5b:9e:1e:0d:62:0c:07:44:6e:58:fd:fe:e1:
                    c7:8e:cc:61:80:ca:38:ae:6f:69:c9:03:64:24:0f:
                    58:8b:e2:b7:72:fe:27:8a:e5:4b:6b:e6:53:ad:93:
                    cc:d8:c1:d9:17:f7:56:c0:6f:97:79:01:4b:8a:23:
                    e3:ef:8f:dd:36:af:8d:e6:02:f5:86:92:95:b5:bf:
                    11:64:83:33:71:95:10:8d:ff:41:d3:68:3d:4a:57:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B7:23:84:20:1A:F1:6E:C0:97:E9:9A:71:3C:7C:B5:23:18:39:79
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e7:9f:58:04:d3:2c:06:55:ad:c3:bf:26:d0:3d:50:af:e9:
         92:82:97:4d:a4:49:60:ae:e2:82:8d:17:a2:2d:ee:47:dd:2b:
         c1:36:a8:2a:e0:ba:8c:ac:83:ae:f6:1d:fc:8d:42:ac:8c:84:
         cc:65:df:48:74:62:f2:b2:94:4b:2f:c1:22:48:14:66:ca:5f:
         97:49:9b:9d:20:83:bd:ca:f8:06:fe:5e:39:b8:60:01:da:01:
         b8:4f:0a:ae:e0:19:01:ed:ba:74:92:1b:86:18:81:a7:4a:33:
         27:78:6a:95:50:6c:b2:2a:61:46:ea:72:81:ac:99:3d:6c:49:
         ab:1d:0a:48:a6:e3:b1:b9:f2:87:99:d9:70:4e:52:c6:63:f3:
         81:47:a6:98:f2:37:66:67:57:e6:5f:87:5b:37:91:4c:74:b3:
         cd:88:c4:b3:2b:15:be:fc:c0:63:19:97:c1:e9:68:cb:db:ac:
         05:f1:b8:2c:c3:b4:df:9a:95:02:a4:18:df:2f:9a:70:ba:61:
         fd:e5:f8:f8:80:33:fe:a8:d0:ea:e0:e0:50:11:6a:1c:f0:9d:
         98:83:d0:ae:a7:98:59:93:84:d4:d8:48:a8:9d:4f:46:d8:5d:
         a5:2c:8e:9c:f6:ad:5d:8d:b4:4c:ec:18:42:be:ce:35:38:8e:
         9a:0a:67:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:23 2025 by rpki-client