Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
File:                     C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json)
Hash identifier:          X2RscEoeIJs+pQS0wFoDWk1/MetOg6tPIa17Kuo6TGk=
Subject key identifier:   B4:5F:3B:4C:B8:66:30:22:73:36:B5:FD:39:58:DA:19:16:3C:81:97
Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB
Certificate issuer:       /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
Certificate serial:       7C53F99F99A5A5A6D885DEBA62672C7B08517257
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
Manifest number:          01F1
Signing time:             Sat 12 Apr 2025 03:22:08 +0000
Manifest this update:     Sat 12 Apr 2025 03:17:08 +0000
Manifest next update:     Sun 13 Apr 2025 03:22:08 +0000
Files and hashes:         1: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: 1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=)
                          2: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: iqbOQxLsT0o5ckFmUytY7Sd+u/F2g7/hR91bzz5U23k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl
                          rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:53:f9:9f:99:a5:a5:a6:d8:85:de:ba:62:67:2c:7b:08:51:72:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB
        Validity
            Not Before: Apr 12 03:17:08 2025 GMT
            Not After : Apr 13 03:22:08 2025 GMT
        Subject: CN=B45F3B4CB86630227336B5FD3958DA19163C8197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:fb:3b:8f:56:63:9f:ae:e4:31:0c:dd:a0:
                    c5:b3:3b:19:92:8d:ac:65:a9:1a:10:74:bb:6b:c8:
                    5d:12:9c:db:1e:9c:c8:5d:89:18:1b:e2:a1:99:20:
                    f1:78:fb:27:4a:45:57:fe:84:c9:ec:9c:df:6f:59:
                    43:44:fd:cd:df:33:9a:1b:ca:99:54:81:9f:8f:7a:
                    66:17:13:ee:b2:5b:64:4d:a2:8d:83:5a:59:55:b3:
                    a2:03:11:7a:f9:0d:94:8e:6b:ce:a2:53:1d:73:08:
                    b6:10:c1:64:40:c3:ac:fe:4d:aa:c0:f2:a7:a2:2c:
                    5c:25:78:8e:53:22:ae:a5:6d:1a:80:19:51:83:64:
                    28:1b:6d:2b:fd:6f:b4:ab:f1:93:6b:11:63:4f:e9:
                    b8:1c:49:b0:2f:f0:84:1a:15:9e:26:95:48:cf:23:
                    eb:87:2d:ba:19:d0:fd:2e:3c:e8:0a:c5:23:b7:a3:
                    ac:eb:a4:d1:3c:f4:94:f0:13:41:20:57:48:a1:f1:
                    c6:1e:7d:3b:08:eb:d1:07:96:70:a9:6d:13:6f:79:
                    2d:78:e4:36:f3:d6:8b:b4:4f:d4:b2:f7:01:72:62:
                    cb:f0:4b:10:5f:8f:91:b5:63:30:33:03:99:34:ee:
                    c3:67:82:70:f9:ff:61:1c:37:97:aa:c0:5d:7a:d7:
                    f7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:3B:4C:B8:66:30:22:73:36:B5:FD:39:58:DA:19:16:3C:81:97
            X509v3 Authority Key Identifier:
                keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:44:50:d7:e0:77:19:86:50:67:fb:16:a2:42:ca:2d:7a:9f:
         22:fc:6a:5c:2d:7a:73:37:a9:ab:1a:dd:6d:16:cc:b9:ca:bd:
         8b:10:0a:80:00:d1:76:67:8c:89:95:39:17:6d:f7:05:c4:67:
         9f:c5:b7:74:f1:8f:b5:d9:a9:97:f3:3e:86:a5:ba:6c:03:b5:
         71:51:cf:3a:4d:42:41:a3:a3:6a:68:f6:8b:de:bb:7d:c2:a8:
         be:b2:2a:cd:45:d8:cc:15:27:d7:cf:a0:81:a2:0b:7a:45:1e:
         7c:5c:6a:34:2b:81:c8:22:44:b9:87:30:49:f4:69:47:53:92:
         d1:8a:20:ca:72:89:6d:02:79:01:63:ba:46:41:fb:4d:52:de:
         17:00:15:26:32:74:8d:4b:16:8c:ee:05:bb:3d:cc:bd:d1:4e:
         76:9a:00:37:5f:ee:78:3d:3e:ed:66:86:66:f1:a8:24:e4:34:
         ca:9d:88:f6:84:f6:a9:c5:42:0f:d8:40:de:1f:7a:39:34:f6:
         f4:19:5b:9b:35:01:13:2f:73:26:d7:a1:a6:1e:86:dd:b1:f3:
         18:23:3c:a7:c2:6c:67:61:c4:c0:2e:a9:34:29:fa:4f:cf:13:
         3a:24:fc:73:c9:41:aa:7a:9f:54:4b:62:3e:5a:a1:a9:7d:e6:
         c7:16:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:57:55 2025 by rpki-client