Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
File:                     F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft (raw, json)
Hash identifier:          4+Gy2LvqvL0T5KmQGGx03hhupLAgjsO6ZDUN/beXIgw=
Subject key identifier:   42:2F:52:9F:77:A4:B0:FA:71:CF:F3:E5:C2:EF:62:8F:01:61:0D:79
Authority key identifier: F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA
Certificate issuer:       /CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
Certificate serial:       09AA8EB1399563F2F3EABE308015A5EC62C66707
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
Manifest number:          0F
Signing time:             Thu 20 Feb 2025 13:32:11 +0000
Manifest this update:     Thu 20 Feb 2025 13:27:11 +0000
Manifest next update:     Fri 21 Feb 2025 15:00:11 +0000
Files and hashes:         1: 323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (hash: je2FcH5lOfORZMTYeq3rTbZnlu9Vjjx3fW8BpmMZXXk=)
                          2: 323830343a386135383a616130303a3a2f34302d3430203d3e20323733363633.roa (hash: qtuspLtfhJGtziiKYXLGv6WvKggSArjQNxgrfgBMncc=)
                          3: 323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (hash: D/y2jkc/qktdlnbLZprIon0oPg2DV8yuLfnx6/NNcB4=)
                          4: 3137372e382e37312e302f32342d3234203d3e20323733363633.roa (hash: h+A+5MF4na/BWKerR4iSTrARGugkKxVL/ZOdWO826ag=)
                          5: 323830343a386135383a3a2f33332d3333203d3e20323733363633.roa (hash: dwGKm84yF+qzx9Apct55DrKIFiqBR8hbeWOSD5G/1T0=)
                          6: F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl (hash: Jh1rH77XhCAICpmsprAnTo92BnUfOktlaUqD7hIhBEA=)
                          7: 323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (hash: f+hOSbUQUIs2DqapKzqkhls5h3roubDp9OWDHx0Wutk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 15:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:aa:8e:b1:39:95:63:f2:f3:ea:be:30:80:15:a5:ec:62:c6:67:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA
        Validity
            Not Before: Feb 20 13:27:11 2025 GMT
            Not After : Feb 21 15:00:11 2025 GMT
        Subject: CN=422F529F77A4B0FA71CFF3E5C2EF628F01610D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:68:65:1f:25:74:32:e7:e6:1d:38:e4:8d:
                    8e:12:c9:15:ef:a9:c2:cb:af:37:99:8f:d3:05:8f:
                    23:14:1f:b8:90:3a:55:cb:53:46:54:0f:03:bb:40:
                    f8:48:e8:73:b6:6d:62:2a:72:d8:e0:e1:5d:7a:cb:
                    7a:0d:c0:49:a3:b0:aa:48:71:a1:99:5c:60:bb:36:
                    fb:01:f6:94:a2:b4:b2:ec:99:6f:7c:4e:28:85:97:
                    d9:08:00:a0:7c:f8:87:40:55:66:c2:8e:15:6e:be:
                    2f:0f:97:5b:10:ca:ad:d7:b3:1e:45:d7:70:3e:89:
                    69:b6:12:2f:35:bf:9f:1b:61:31:8e:8f:8c:98:90:
                    bd:a8:ac:2a:c6:aa:69:51:c5:49:41:9f:0a:42:dc:
                    c6:09:d6:2d:f7:99:21:65:4a:3f:4a:f9:7f:bc:69:
                    6f:98:40:19:1e:75:27:5a:3a:ba:b5:75:d3:24:46:
                    48:04:57:8b:6c:7d:93:f3:7b:67:2f:f6:b0:92:94:
                    e3:6a:d8:23:4d:14:eb:2b:6c:5f:f4:fa:25:40:a4:
                    4d:fe:b6:b7:32:c0:94:17:4b:6e:be:c0:44:cf:ab:
                    f1:72:f9:08:1b:ca:82:db:b5:32:60:ec:a1:36:58:
                    de:a9:32:eb:3a:57:f0:48:0c:b8:bc:0f:da:68:de:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:52:9F:77:A4:B0:FA:71:CF:F3:E5:C2:EF:62:8F:01:61:0D:79
            X509v3 Authority Key Identifier:
                keyid:F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:f8:57:86:b1:14:2e:0e:15:22:c7:99:f2:36:22:0e:ee:
         74:3c:da:a8:e7:1d:d4:03:aa:48:92:21:ae:a9:39:c1:54:e3:
         3d:72:43:b7:b1:c6:cb:87:88:d4:76:a1:5b:06:b3:fa:6f:1f:
         5f:dc:c5:85:87:df:5b:41:fe:dd:8e:66:56:8a:5d:b6:6e:6e:
         a7:65:05:d8:2e:7a:3f:a2:6e:26:b0:1f:58:ab:37:11:29:63:
         60:30:d9:84:e9:3f:59:25:c5:5d:41:f5:88:3e:92:26:30:81:
         b3:23:37:3d:05:49:bc:96:86:55:a3:93:9f:51:e6:35:c4:92:
         49:95:10:40:dc:2b:32:48:ee:3d:8c:2f:fb:29:bc:3c:82:c1:
         cc:8d:7a:f8:0f:cb:7c:4e:87:e5:49:dd:d2:37:ea:8f:73:53:
         1f:3f:82:c1:9b:b6:a1:c5:96:99:d0:04:8a:50:3d:6f:7b:01:
         c9:0d:8a:97:a9:8d:98:1b:f5:e0:43:18:e3:bc:60:6a:14:e7:
         dd:5c:fd:93:e8:b7:ab:3c:97:41:3b:9e:be:07:8a:e9:e2:0d:
         46:b3:86:8e:7b:9a:27:20:73:5e:d3:56:ef:53:0c:17:12:20:
         ad:e2:d5:c8:bf:b6:41:13:76:c3:39:44:94:98:12:4d:87:ee:
         d1:c7:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:36:25 2025 by rpki-client