Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
File:                     0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft (raw, json)
Hash identifier:          7oeHEwRZd4uZuxQiidbj8DqGO7RkGVopgPODRsOWH/4=
Subject key identifier:   1A:60:85:04:29:A4:17:C5:5E:14:1B:26:BD:7D:FC:6E:97:EF:93:DA
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       22894D08998BF4867628A239DF04531793271C48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
Manifest number:          01F3
Signing time:             Fri 11 Apr 2025 05:59:23 +0000
Manifest this update:     Fri 11 Apr 2025 05:54:23 +0000
Manifest next update:     Sat 12 Apr 2025 07:42:23 +0000
Files and hashes:         1: 3137372e38362e3132302e302f32342d3234203d3e203532383532.roa (hash: 96VF9Staauf3dsuRt8r4pCvMBn17yhiWg+mTczALVx4=)
                          2: 323830343a3833303a3a2f33322d3336203d3e203532383532.roa (hash: vq/3tDCm2OEcOZcNyM6+v/n+6ppGUA9V8sl8SrBtXhA=)
                          3: 0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl (hash: dvrD+OSEkG8GdhDTd7fPu6fKVrY6zLrb0G/yySoTS48=)
                          4: 3137372e38362e3132312e302f32342d3234203d3e203532383532.roa (hash: sMUaBw/U3QIknbNpcxKL23aoE9bmswQ93xvAZKSkfHE=)
                          5: 3137372e38362e3132332e302f32342d3234203d3e203532383532.roa (hash: V8CtQ5Zq95IJWpTwL89tfgGHZMz+x4t3OvkK650zzMM=)
                          6: 3137372e38362e3132322e302f32342d3234203d3e203532383532.roa (hash: HsiIwALd4tolhIyRRdXJFFrfj5mRkrWXsIJxc0JaYdw=)
                          7: 3137372e38362e3132322e302f32332d3233203d3e203532383532.roa (hash: xKIUrVIggq7PIZczk4fzn7vaaRw+Y/bqcfY/oeOEoz0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:4d:08:99:8b:f4:86:76:28:a2:39:df:04:53:17:93:27:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Apr 11 05:54:23 2025 GMT
            Not After : Apr 12 07:42:23 2025 GMT
        Subject: CN=1A60850429A417C55E141B26BD7DFC6E97EF93DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:fb:c6:23:28:7c:0c:19:b9:88:9c:59:76:
                    38:f0:df:da:3d:d2:8c:f0:9c:44:f5:ee:8f:a5:53:
                    37:57:a9:7d:a2:7a:5f:b8:38:21:7f:08:8a:d2:dc:
                    83:7f:a5:ec:48:c2:fc:c3:02:db:76:cf:66:9c:0b:
                    48:19:ae:82:5d:14:18:3c:2c:cc:4c:0d:09:45:c1:
                    ca:bd:c2:f6:df:9e:39:e0:3e:1c:76:db:09:3b:91:
                    45:1a:12:82:96:76:3a:37:9c:d9:80:01:bf:40:0e:
                    db:55:0a:84:77:a0:61:67:6c:af:2a:cd:40:3a:70:
                    70:50:7f:d1:22:2e:e2:c3:d6:63:94:9f:60:0f:21:
                    2b:2b:54:f0:ee:26:4f:7c:77:5b:31:38:7f:fb:6b:
                    99:80:4c:7a:9f:45:25:59:57:70:15:74:59:59:ba:
                    88:f9:89:08:eb:61:55:68:88:6b:72:78:a8:3f:51:
                    8a:c8:9b:6e:4f:7b:56:55:31:5a:cd:23:3c:c8:2f:
                    75:09:8c:50:b4:35:98:8b:23:a9:87:8a:24:d8:5c:
                    d5:64:6e:40:01:c2:67:07:14:af:70:24:f1:65:c3:
                    bf:4d:ff:b6:a4:e6:ad:2d:ac:3a:5c:5f:93:04:09:
                    46:a1:d7:be:8a:35:63:a6:27:69:af:0b:3c:b6:17:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:85:04:29:A4:17:C5:5E:14:1B:26:BD:7D:FC:6E:97:EF:93:DA
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:39:16:bb:b0:64:68:d3:b6:f2:b7:6a:5f:fb:d2:f9:67:
         76:b0:a4:fc:fe:6b:14:2b:0f:8a:5f:5d:b7:63:85:0a:3d:49:
         6f:e0:0e:c2:2e:94:d8:f7:d4:d1:18:bc:ae:c3:27:d6:1f:23:
         fa:40:ab:1a:9e:6a:fb:1a:cb:4c:53:75:cf:7b:4d:cf:f1:7d:
         a7:28:ed:1e:59:6b:1c:20:4d:93:4f:0c:26:b4:44:dc:32:fd:
         96:38:f3:52:2e:55:19:32:da:1b:0e:7c:f2:8a:9a:0f:a6:c1:
         b1:52:ce:f4:ab:f0:68:d9:c0:9a:67:7b:85:49:cf:70:2b:4d:
         91:40:bf:83:91:c0:1f:78:82:58:f5:d7:e8:2f:a5:92:9b:4f:
         fe:18:44:46:e9:e9:3c:f9:44:f4:77:f4:76:e0:a6:2c:52:fc:
         b5:d3:c4:ad:00:c5:cb:9d:cd:63:cc:d6:e4:83:9f:6b:23:c9:
         ed:f5:35:8b:2b:bb:23:22:c7:10:52:26:e5:3d:e7:17:94:a3:
         2a:dd:e3:b7:ac:6e:5c:e8:e7:88:8f:9b:4f:d7:9c:c4:e7:fd:
         3d:9d:59:69:c3:78:4b:2e:11:b4:64:9b:02:91:65:d6:77:46:
         c8:06:41:d9:73:f1:ff:bb:50:02:43:06:3d:eb:5e:78:63:50:
         10:5a:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:00 2025 by rpki-client