Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
File:                     1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft (raw, json)
Hash identifier:          3zg7R0nAiCp0boupnDk/w+fU9wpZnnv+072HxRP9LHg=
Subject key identifier:   39:6E:FE:CA:E3:98:77:D3:46:2E:03:83:CC:5A:55:99:7C:92:E6:D9
Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Certificate issuer:       /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Certificate serial:       30C74C75D8D577D865FE4A1692F2E2837F0CD647
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
Manifest number:          01EB
Signing time:             Sat 12 Apr 2025 09:41:46 +0000
Manifest this update:     Sat 12 Apr 2025 09:36:46 +0000
Manifest next update:     Sun 13 Apr 2025 09:58:46 +0000
Files and hashes:         1: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl (hash: NwG96McEIK1DSABEEMnbvTWnEGITPdeSa7q7Tb1XtLE=)
                          2: 323830343a373463343a3a2f33322d3334203d3e20323731303032.roa (hash: 2z6cwJyjlekxvSjiL4r/a9H/dyNy1DqA2JvIUkW4Ktw=)
                          3: 3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (hash: WAKTZENyc+SXTjS17ENHCayGO2lN3xVXsJCR6n3fjtA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
                          rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c7:4c:75:d8:d5:77:d8:65:fe:4a:16:92:f2:e2:83:7f:0c:d6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Validity
            Not Before: Apr 12 09:36:46 2025 GMT
            Not After : Apr 13 09:58:46 2025 GMT
        Subject: CN=396EFECAE39877D3462E0383CC5A55997C92E6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:18:7e:4a:47:9f:04:e6:7e:59:fd:38:01:
                    29:a9:e9:43:fd:7c:41:80:bc:da:af:2d:bc:2b:4f:
                    ae:80:bc:68:16:a7:66:58:03:67:c3:46:bb:0f:36:
                    90:9d:c5:c4:28:af:31:3e:13:cd:0a:19:ac:6a:40:
                    b1:04:21:d3:e0:29:40:35:4d:3f:7a:d8:94:6b:8f:
                    23:9e:7e:a7:9a:d5:af:93:71:5f:1f:68:2e:04:f7:
                    4d:15:76:b6:7e:d0:d1:71:38:94:10:84:94:97:de:
                    ad:e6:4e:f0:d6:0a:b9:41:b9:b4:a8:6b:3a:0f:83:
                    24:a0:d5:0d:20:0d:2b:cb:eb:8a:45:6b:24:75:0a:
                    23:02:51:74:f7:5c:ca:7a:5d:fa:e2:4f:3e:ef:f3:
                    84:35:f8:41:74:9d:51:29:45:97:6e:eb:1a:78:ac:
                    8a:c2:f1:02:b8:3c:8d:4a:e5:8f:07:68:fb:4e:7b:
                    b8:dc:7d:b9:2c:6a:64:9a:af:ff:8f:43:e2:4f:a0:
                    19:d7:4a:5f:cb:0a:b7:7e:5e:4f:b8:a1:96:a1:e5:
                    8d:d6:67:82:1c:8e:14:c9:69:a3:97:eb:f4:84:49:
                    ea:c9:56:08:51:f2:46:d8:2a:7c:36:27:c6:27:1e:
                    ee:56:8d:3d:12:85:85:48:7c:5c:e5:ae:c6:7a:db:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:FE:CA:E3:98:77:D3:46:2E:03:83:CC:5A:55:99:7C:92:E6:D9
            X509v3 Authority Key Identifier:
                keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:59:f4:94:9d:10:9c:98:be:ef:0f:ea:dc:af:a2:04:b3:6b:
         b9:b3:4c:0b:e9:1a:c5:93:ba:93:a1:94:0c:b3:98:1f:6e:5f:
         7c:05:b2:13:5a:59:75:bc:3d:ae:77:9f:cd:d4:de:26:6c:11:
         e9:35:5d:2d:1d:ef:32:e3:95:f8:57:fc:c5:76:76:47:e7:d6:
         f3:3c:b0:43:28:de:5b:3b:09:b6:ec:7a:b4:43:97:45:21:8b:
         af:bb:86:fe:67:9c:6b:58:d7:00:73:42:0c:5b:2e:2c:0b:c8:
         13:0c:ea:cd:58:28:b2:41:d4:d9:19:53:55:4b:31:1f:f0:0c:
         e1:82:af:2e:91:43:44:e9:d4:b7:10:6a:b3:79:64:24:d1:70:
         39:5d:e9:29:a1:93:35:f1:3d:b3:c1:60:64:19:c0:ce:ef:ba:
         44:1a:4c:0f:d2:42:17:89:09:92:5f:b5:15:cb:f7:dc:e6:1c:
         28:88:56:0d:0b:6e:9e:ff:d1:32:c2:16:95:df:d7:f1:31:f4:
         0d:fb:f3:b6:1d:c1:f7:f8:71:b6:28:d9:33:09:48:a0:0d:ee:
         bb:69:9f:c6:7c:1b:21:5f:e5:83:1a:1b:98:c2:29:d8:90:79:
         d4:cf:b9:66:a6:00:23:74:7d:63:25:04:38:89:74:ff:bf:09:
         ed:99:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:44:24 2025 by rpki-client