Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          mMSp1tGFLHoU383n0EQtonSCx2UGJxj/QKTrbZbkdwE=
Subject key identifier:   BE:AF:27:02:BC:0E:3E:84:8F:F2:3D:C0:50:1A:0E:43:9F:E3:C8:44
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       5F3EACD9ACFDA2A834312AC0AB28DD293BE5D3A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0112
Signing time:             Sat 05 Apr 2025 15:46:56 +0000
Manifest this update:     Sat 05 Apr 2025 15:41:56 +0000
Manifest next update:     Sun 06 Apr 2025 15:47:56 +0000
Files and hashes:         1: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
                          2: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          3: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: mW4PoEXjotT+2d9Py7Ozoggy800ux/CbUw03jxBe/WQ=)
                          4: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
                          5: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          6: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          7: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3e:ac:d9:ac:fd:a2:a8:34:31:2a:c0:ab:28:dd:29:3b:e5:d3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Apr  5 15:41:56 2025 GMT
            Not After : Apr  6 15:47:56 2025 GMT
        Subject: CN=BEAF2702BC0E3E848FF23DC0501A0E439FE3C844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:2e:9f:b4:a9:83:39:2e:c3:33:f5:2d:32:
                    d1:f1:9c:24:ff:a8:7d:bc:f6:67:e5:58:c3:3e:6a:
                    fa:ea:26:aa:bb:f1:64:3d:ed:6a:02:93:f0:f6:40:
                    7f:10:23:e8:36:98:2b:6c:27:09:f4:13:cf:46:a4:
                    2b:51:76:ef:bd:4b:9b:0b:8e:be:aa:b4:84:ad:df:
                    89:20:a0:db:e6:3a:ef:23:61:c3:ea:8e:7f:e2:2a:
                    fa:c2:16:ef:c3:65:1e:18:7a:13:2c:5d:85:e4:03:
                    fe:8d:a1:da:fb:c3:3e:ec:99:b2:c5:ce:1e:d3:ca:
                    2e:23:55:b4:c9:2b:39:df:3a:c1:7f:63:43:a0:79:
                    68:c5:d3:ac:30:6e:b4:44:f5:e0:cf:2a:17:ef:81:
                    a2:f8:5f:0d:61:4a:1c:ef:1f:85:c9:f0:52:c0:e6:
                    d7:de:39:9d:19:08:0b:75:b9:45:40:7a:ff:7c:de:
                    4f:5f:18:1b:dc:2e:f0:46:b2:61:e8:78:2a:34:7b:
                    68:65:e0:11:5a:57:1f:fc:45:af:ff:5b:de:d3:6e:
                    27:82:51:01:e8:83:1e:f5:4b:e5:d2:7b:68:7d:68:
                    61:fa:47:6c:52:27:cf:c7:c1:9d:24:ae:93:b0:46:
                    e4:9a:82:3f:ae:12:3e:4c:08:8f:b1:3c:b2:ae:d3:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:27:02:BC:0E:3E:84:8F:F2:3D:C0:50:1A:0E:43:9F:E3:C8:44
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:fa:05:86:13:1f:46:39:e1:ad:65:70:6d:cf:01:52:cd:
         26:d5:f6:31:75:a2:94:d8:bd:35:09:e2:d8:54:35:ab:f7:2b:
         fa:69:2c:e0:1a:3e:ae:f3:53:b0:07:dd:74:13:76:38:72:34:
         6d:7c:1d:eb:92:15:9d:8f:c2:a1:0c:7c:7e:c2:75:76:9e:09:
         fa:26:56:57:e8:38:fa:4d:fd:98:ef:4b:14:27:5c:8c:05:b7:
         4e:7e:96:f9:5a:b6:8b:12:bd:2f:ea:94:4d:d9:f6:4b:33:e2:
         27:02:fa:50:a6:68:60:c0:ba:29:0f:cd:42:37:10:37:2a:2c:
         de:29:d0:00:34:86:f9:4d:26:9b:ca:b6:7e:ae:56:72:af:4d:
         44:5f:71:8e:ae:5f:5b:46:3f:bf:c9:88:eb:eb:0a:47:23:2d:
         f5:a3:cf:6e:de:c2:91:b4:46:da:a2:9e:cb:0b:e0:a2:8a:d0:
         7f:fd:d3:60:02:eb:2b:ce:23:10:22:11:ea:02:22:36:e6:1b:
         d2:a7:90:e9:a5:74:38:8c:0e:c7:34:d6:17:06:08:7c:a3:ce:
         d3:e5:ed:e2:92:1a:5b:0a:1a:a2:94:bf:6a:f3:91:e3:de:a2:
         2a:81:31:48:75:93:83:35:d7:71:2f:86:fa:15:9a:8e:9e:76:
         8e:cb:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:05 2025 by rpki-client