Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.mft
File:                     5626987D60090D785B54CEA683D4C496170063D3.mft (raw, json)
Hash identifier:          1AUzYxB46rt4O5N3gROORngjipa89Y0I+tZSHU+7khc=
Subject key identifier:   31:03:A4:B3:99:14:FD:80:FA:54:6E:79:FD:EA:D9:50:61:49:D2:09
Authority key identifier: 56:26:98:7D:60:09:0D:78:5B:54:CE:A6:83:D4:C4:96:17:00:63:D3
Certificate issuer:       /CN=5626987D60090D785B54CEA683D4C496170063D3
Certificate serial:       72A9094F59D01250665D5669E97C896ABBC09D67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5626987D60090D785B54CEA683D4C496170063D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.mft
Manifest number:          25
Signing time:             Fri 11 Apr 2025 10:12:18 +0000
Manifest this update:     Fri 11 Apr 2025 10:07:18 +0000
Manifest next update:     Sat 12 Apr 2025 13:05:18 +0000
Files and hashes:         1: 5626987D60090D785B54CEA683D4C496170063D3.crl (hash: PmfJ3egI9Ue+F4aiKqCN8BXUBVZ5A5VYjLgdWqhYNQ0=)
                          2: 34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (hash: S8f9s+AfZd2f0EZ+JVAbqnYCvT/fVbB4fy/HERSnwVY=)
                          3: 323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (hash: 5KuOw6TnQeCZCWgkxJEhbXf5+xJ7W5VxoQrZrkRQGO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5626987D60090D785B54CEA683D4C496170063D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 13:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:09:4f:59:d0:12:50:66:5d:56:69:e9:7c:89:6a:bb:c0:9d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5626987D60090D785B54CEA683D4C496170063D3
        Validity
            Not Before: Apr 11 10:07:18 2025 GMT
            Not After : Apr 12 13:05:18 2025 GMT
        Subject: CN=3103A4B39914FD80FA546E79FDEAD9506149D209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:35:c5:95:87:72:72:a2:d3:4d:1f:55:f8:
                    1b:88:73:7d:be:4a:c2:69:94:7e:61:7c:b5:e3:61:
                    ed:21:79:93:cc:a9:af:00:e5:90:16:4e:32:32:f3:
                    14:2b:e4:16:06:13:7f:c1:04:ad:7d:1d:46:37:0c:
                    10:57:f3:d8:71:36:ba:64:e8:b7:6b:03:9e:8f:e1:
                    79:25:71:e1:49:1e:b6:72:78:23:34:61:95:48:31:
                    72:ef:55:bc:28:d1:35:c8:a6:0a:55:1a:a9:17:70:
                    09:6e:55:42:cb:6c:7f:85:f7:a2:7f:ac:ca:0f:0d:
                    98:db:df:c7:05:20:d7:b0:76:06:21:31:32:06:8c:
                    ee:d5:75:a2:cc:ae:b7:ea:87:cb:04:9e:ad:83:1c:
                    94:29:70:57:a5:35:74:e1:44:68:8b:2a:97:37:5c:
                    10:6e:6a:ed:3c:e9:dd:70:37:0a:1f:70:97:85:56:
                    51:93:d6:3f:08:c3:cd:36:ff:ce:62:1f:f5:9c:68:
                    c0:45:48:ad:a5:f9:3b:c2:23:9e:f0:84:48:f5:99:
                    87:ea:15:49:f9:94:e4:9e:1d:f8:80:4c:9e:9d:1a:
                    c5:52:c3:d9:65:d8:ff:b2:63:e6:ef:c8:b5:f8:92:
                    d0:17:0f:fc:6e:54:e0:49:7b:49:11:7c:6d:59:ff:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:03:A4:B3:99:14:FD:80:FA:54:6E:79:FD:EA:D9:50:61:49:D2:09
            X509v3 Authority Key Identifier:
                keyid:56:26:98:7D:60:09:0D:78:5B:54:CE:A6:83:D4:C4:96:17:00:63:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5626987D60090D785B54CEA683D4C496170063D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/5626987D60090D785B54CEA683D4C496170063D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:d4:e2:51:31:0f:f6:bf:3e:07:d0:28:07:f7:fb:a3:91:
         c6:dc:e2:94:19:d1:59:7c:db:4d:9d:e8:71:72:13:80:ec:47:
         8e:6d:2a:4e:17:d5:dc:9e:87:b8:2c:13:33:6c:df:11:1f:01:
         b7:1a:ef:bd:8c:51:ee:07:69:bc:b4:62:74:8f:a3:bb:2f:bb:
         a1:b2:b3:f2:f4:52:bc:6a:b3:d8:65:75:7d:ef:85:ee:2d:0a:
         ff:39:0e:8d:3f:01:7f:c3:d3:3f:9e:7d:bf:b2:66:ac:c5:1f:
         57:c5:05:e6:d4:d4:da:0f:03:53:57:6f:72:51:b1:68:d2:15:
         54:d8:70:61:8a:17:c3:90:d6:23:fa:8c:22:c6:57:4c:eb:48:
         5a:11:74:94:15:4d:6f:0e:ad:ce:10:14:db:4b:42:c9:7b:69:
         11:2e:11:ac:c8:10:8b:b5:80:20:90:76:ba:17:d3:02:e4:9c:
         da:8d:f4:e8:1c:c1:43:e7:8a:b2:99:3d:25:02:23:77:b9:24:
         f3:58:21:f5:7f:2e:34:b1:fb:27:12:44:b7:32:95:42:4a:62:
         02:db:7c:78:8d:ad:f0:9c:b7:56:10:32:94:51:bb:9e:39:06:
         fe:aa:3f:dc:89:b9:0c:99:33:9a:d6:a0:17:7d:61:72:e3:f3:
         2f:9a:30:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcqkJT1nQElBmXVZp6XyJarvAnWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYyNjk4N0Q2MDA5MEQ3ODVCNTRDRUE2ODNENEM0OTYx
NzAwNjNEMzAeFw0yNTA0MTExMDA3MThaFw0yNTA0MTIxMzA1MThaMDMxMTAvBgNV
BAMTKDMxMDNBNEIzOTkxNEZEODBGQTU0NkU3OUZERUFEOTUwNjE0OUQyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBjXFlYdycqLTTR9V+BuIc32+
SsJplH5hfLXjYe0heZPMqa8A5ZAWTjIy8xQr5BYGE3/BBK19HUY3DBBX89hxNrpk
6LdrA56P4XklceFJHrZyeCM0YZVIMXLvVbwo0TXIpgpVGqkXcAluVULLbH+F96J/
rMoPDZjb38cFINewdgYhMTIGjO7VdaLMrrfqh8sEnq2DHJQpcFelNXThRGiLKpc3
XBBuau086d1wNwofcJeFVlGT1j8Iw802/85iH/WcaMBFSK2l+TvCI57whEj1mYfq
FUn5lOSeHfiATJ6dGsVSw9ll2P+yY+bvyLX4ktAXD/xuVOBJe0kRfG1Z/7QFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMQOks5kU/YD6VG55/erZUGFJ0gkwHwYDVR0j
BBgwFoAUViaYfWAJDXhbVM6mg9TElhcAY9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXIxSjk4TWlFNDlOQ0xueXhwWXNUVnVXaFZieDFWU3Vzb2hSM2o4Q2Y0
MTgvMC81NjI2OTg3RDYwMDkwRDc4NUI1NENFQTY4M0Q0QzQ5NjE3MDA2M0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2MjY5ODdENjAwOTBENzg1
QjU0Q0VBNjgzRDRDNDk2MTcwMDYzRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXIxSjk4TWlFNDlOQ0xueXhwWXNUVnVXaFZieDFWU3Vzb2hSM2o4Q2Y0MTgvMC81
NjI2OTg3RDYwMDkwRDc4NUI1NENFQTY4M0Q0QzQ5NjE3MDA2M0QzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUkLU4lExD/a/PgfQKAf3+6ORxtzilBnRWXzbTZ3ocXITgOxHjm0qThfV3J6H
uCwTM2zfER8BtxrvvYxR7gdpvLRidI+juy+7obKz8vRSvGqz2GV1fe+F7i0K/zkO
jT8Bf8PTP559v7JmrMUfV8UF5tTU2g8DU1dvclGxaNIVVNhwYYoXw5DWI/qMIsZX
TOtIWhF0lBVNbw6tzhAU20tCyXtpES4RrMgQi7WAIJB2uhfTAuSc2o306BzBQ+eK
spk9JQIjd7kk81gh9X8uNLH7JxJEtzKVQkpiAtt8eI2t8Jy3VhAylFG7njkG/qo/
3Im5DJkzmtagF31hcuPzL5owUw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:18:58 2025 by rpki-client