Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
File:                     2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft (raw, json)
Hash identifier:          t5QhRcEG2P7eV+Fg+60zFCeXOK7znXid5XGobd2704w=
Subject key identifier:   64:0F:C3:A4:03:03:AE:8A:17:5B:93:AE:4B:D7:66:CE:DD:E7:E9:52
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       0B49DE2CC198848B62CFDD4FF2623A023A5C90FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
Manifest number:          5F
Signing time:             Mon 21 Apr 2025 23:53:03 +0000
Manifest this update:     Mon 21 Apr 2025 23:48:03 +0000
Manifest next update:     Wed 23 Apr 2025 03:12:03 +0000
Files and hashes:         1: 323830343a336461343a3a2f34302d3430203d3e20323636353434.roa (hash: 09hisYJc1VosXsVh7+Z9+ofTW2WLctfcYNSk2Ousozs=)
                          2: 323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (hash: fNZ/9r46FClcYJgFPwN7V/mAYWUg10WZ4IB5KtcTfcI=)
                          3: 34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (hash: UBvS06FMuKqSrQS0LkIaSgc02wwjCwehpcAxAJgunxo=)
                          4: 323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (hash: DvcsaLp8E0Ouamb2Fwv0KT11deEDA6WBjUoErFqzlgc=)
                          5: 34352e36352e3230342e302f32332d3233203d3e20323636353434.roa (hash: Vt/gQuRH6Ut7MDX+FeHi3lFHnqWD10nSXGUgQmAo4Jc=)
                          6: 2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl (hash: EesPRlMECXoBMStLSPx3uJDzmUJsaUfUIqF6nw/uE9k=)
                          7: 34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (hash: y+QEhouUhOoETai0OImI1nXkg8+POCGmWct0GlhGcQw=)
                          8: 34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (hash: gmBfkFcP1FmjECVTK0E9EveVsOhM/UD0beivJWf5e30=)
                          9: 323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa (hash: GS2xXRNMwHse9m4AUjP2BjRHrpXrXQJ6LsBNXTcSD6o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:49:de:2c:c1:98:84:8b:62:cf:dd:4f:f2:62:3a:02:3a:5c:90:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Apr 21 23:48:03 2025 GMT
            Not After : Apr 23 03:12:03 2025 GMT
        Subject: CN=640FC3A40303AE8A175B93AE4BD766CEDDE7E952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:00:eb:81:b7:10:b3:65:45:2b:ef:8c:fd:
                    a5:1c:7f:66:e5:d9:0f:2d:d4:2d:a2:89:be:3e:1b:
                    1a:c8:8d:33:21:14:34:8f:de:a4:1a:31:07:f8:ba:
                    60:ad:6d:16:20:cf:1d:1e:08:88:f2:dc:53:9d:6b:
                    59:24:3d:c1:e3:af:32:96:0b:b0:3c:2c:92:9b:c7:
                    1c:a9:c7:66:20:2f:c9:6b:d8:19:59:31:43:9e:59:
                    77:c2:a7:00:b3:22:85:44:79:7b:63:f5:e1:71:99:
                    41:32:f9:5d:45:b8:2b:d8:e4:80:ab:d0:49:e6:c3:
                    71:db:9e:65:75:90:76:59:9c:09:b0:5e:a5:5f:e8:
                    4a:18:33:78:a1:fa:58:82:16:10:97:f4:1e:88:00:
                    f8:4e:72:3c:2d:fa:ef:73:1e:d9:42:7e:30:72:cf:
                    8a:e3:a4:7d:e5:71:ce:66:bc:de:43:81:57:20:e9:
                    7e:51:7d:41:16:e9:85:58:86:fc:9c:f9:9a:6f:4d:
                    6b:02:04:8c:0c:2e:d7:a1:64:16:b4:68:06:cb:a4:
                    c4:38:e5:d2:0b:bc:93:21:ca:87:0e:da:05:02:a2:
                    a8:8e:7c:7e:fa:90:5a:ca:7b:b0:62:a6:24:b4:67:
                    54:29:32:fd:74:0e:4f:c4:69:9f:b3:06:00:00:3e:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:C3:A4:03:03:AE:8A:17:5B:93:AE:4B:D7:66:CE:DD:E7:E9:52
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:fe:df:50:92:15:b1:83:a8:5a:cb:21:a2:54:8e:f8:cc:
         4b:f7:27:0c:c0:c3:5c:10:61:13:08:df:73:77:21:73:4f:b9:
         f8:67:06:68:e9:8e:6b:b8:df:4d:44:ec:3c:ef:06:81:84:8b:
         68:ed:2b:eb:a5:cb:1d:02:9d:fe:15:68:2d:10:5c:a1:fe:6e:
         ba:3b:b4:a7:68:03:1a:29:38:61:aa:17:14:9b:4c:9a:00:1d:
         08:db:70:55:26:19:5a:c1:da:88:b8:bb:58:1c:03:43:78:52:
         16:94:d3:e9:1b:0d:cf:61:a7:ed:fe:20:ae:dc:5a:e1:e3:be:
         74:d1:44:e5:c1:8e:66:97:3c:4d:ee:b3:c2:61:21:24:6f:4c:
         e3:4d:51:da:54:c0:30:f4:4a:9c:bc:00:2a:6c:cc:24:75:66:
         a3:54:ca:22:0a:3e:56:e0:82:53:61:4d:78:e5:8e:85:a4:17:
         10:47:b4:39:fb:60:06:bf:e2:9e:9c:12:8a:fe:53:b6:b6:93:
         f5:00:fd:4c:17:da:0e:f2:44:ad:a3:c6:69:c8:dc:f8:5e:5d:
         8b:d7:f6:f7:da:e7:ac:aa:88:0b:cf:02:9a:65:f8:68:c5:0e:
         39:48:52:9a:40:c1:45:1f:6d:50:ac:dd:59:18:b9:73:23:83:
         77:17:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:43:20 2025 by rpki-client