Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
File:                     BFB590FA7A04C15A07E802593C4472D77FAB7820.mft (raw, json)
Hash identifier:          kF3fj+ms5uwWZUjMjjIBGz7/KdUh+2JXhZeRoPcApa4=
Subject key identifier:   F3:2E:D0:78:38:25:D2:16:63:D4:C4:F9:65:17:73:59:51:DC:15:79
Authority key identifier: BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20
Certificate issuer:       /CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
Certificate serial:       2A0ADDAD7DB4299FB05789D06CB5080FDF08769B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
Manifest number:          4A
Signing time:             Wed 19 Feb 2025 18:38:47 +0000
Manifest this update:     Wed 19 Feb 2025 18:33:47 +0000
Manifest next update:     Thu 20 Feb 2025 21:16:47 +0000
Files and hashes:         1: 34352e3137342e31362e302f32322d3232203d3e20323638383738.roa (hash: tRP99msVkW4x5i6Uy0O0k8TB+1CHSJFMroGWXc0LjX4=)
                          2: BFB590FA7A04C15A07E802593C4472D77FAB7820.crl (hash: E8IPEA8prC1DM2vgHa6HSLKPfkydrgDKpCw2g9M6v24=)
                          3: 323830343a356266303a3a2f33332d3333203d3e20323638383738.roa (hash: TWk0qbr98hdZcik90dFhM/vWCOrd/lQB5+fTAQwFpUg=)
                          4: 34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (hash: o2AWkGLSZ5uTr9uUvc/qL3QyFADL0DLPLW60o2iQcfM=)
                          5: 323830343a356266303a3a2f33322d313238203d3e20323638383738.roa (hash: tsOYH76BfqT8mY4MadK531UC5ikBGOXeTaV5dqn1iMM=)
                          6: 323830343a356266303a3a2f33322d3332203d3e20323638383738.roa (hash: M8QdCmCZ2nO+QaOKL/SmyLoTX8bAHqo9M9egvScytuw=)
                          7: 323830343a356266303a383030303a3a2f33332d3333203d3e20323638383738.roa (hash: skQOzkPTQZFZec1K7wXdytKDapP/Rl8ttG0KuDQZl8g=)
                          8: 34352e3137342e31362e302f32332d3233203d3e20323638383738.roa (hash: nLiE6yi8v2swM0N2WR++xc99oe2em4lVBJ/aphER4g0=)
                          9: 34352e3137342e31362e302f32322d3332203d3e20323638383738.roa (hash: hYhI8DrxJwx77ijyfRSEPiOMYTfIUK0ZFXqFZI1FTPU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl
                          rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 21:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0a:dd:ad:7d:b4:29:9f:b0:57:89:d0:6c:b5:08:0f:df:08:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB590FA7A04C15A07E802593C4472D77FAB7820
        Validity
            Not Before: Feb 19 18:33:47 2025 GMT
            Not After : Feb 20 21:16:47 2025 GMT
        Subject: CN=F32ED0783825D21663D4C4F96517735951DC1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:72:2c:7d:d0:ee:b8:b4:e1:3e:2c:8f:d9:
                    2b:93:af:a8:93:1e:9f:ca:27:24:c0:31:0f:25:1b:
                    c4:5e:5b:ef:6c:be:db:97:2d:00:de:11:a6:05:cd:
                    a2:f7:90:14:d4:61:bf:35:d9:2e:92:d6:04:aa:6d:
                    28:45:e0:b8:93:31:57:cc:6a:84:99:ce:60:93:39:
                    99:bf:04:6f:fb:23:56:63:f8:e5:83:80:92:6c:a4:
                    16:a8:b3:5c:57:6b:2d:73:76:0b:f3:83:0f:03:4e:
                    45:c3:5c:1c:dc:61:92:b2:0a:8e:3c:85:31:57:c8:
                    25:40:54:2c:c0:a7:a0:96:c0:c8:41:ab:12:62:7d:
                    ad:53:1b:c3:fb:4d:af:3d:7d:52:c8:9f:17:af:ae:
                    36:d4:0b:5a:e3:43:04:82:b4:9d:4a:09:b5:fe:bc:
                    79:b7:71:76:0a:42:f5:31:30:01:d5:3d:fe:45:b9:
                    51:78:0a:1f:5d:76:e7:bc:73:b7:a0:c7:66:1b:0f:
                    09:b7:c9:7d:88:91:af:4d:c1:ec:58:f0:2a:51:a0:
                    31:c6:cb:6d:8d:da:e4:6a:7e:3b:c9:c6:51:d0:85:
                    dd:e6:7d:21:aa:fa:e9:18:ac:78:7f:68:f4:84:60:
                    61:70:b3:2c:40:fc:83:e6:3e:71:ce:b1:35:bc:97:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2E:D0:78:38:25:D2:16:63:D4:C4:F9:65:17:73:59:51:DC:15:79
            X509v3 Authority Key Identifier:
                keyid:BF:B5:90:FA:7A:04:C1:5A:07:E8:02:59:3C:44:72:D7:7F:AB:78:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB590FA7A04C15A07E802593C4472D77FAB7820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/BFB590FA7A04C15A07E802593C4472D77FAB7820.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:13:79:7b:6c:cc:4d:85:83:52:97:37:d0:1e:3a:d9:ec:19:
         f5:32:8c:73:94:04:f7:c1:33:6c:a8:10:b1:a9:ef:4c:ec:b2:
         e7:c7:b1:59:1f:ff:47:a0:42:03:d3:9c:d8:ea:4f:49:2c:ee:
         de:69:f8:d3:c0:24:bf:a5:73:26:f8:05:bd:1e:b3:47:98:df:
         9b:da:92:74:c3:4d:ca:70:0e:a4:c1:ba:73:e7:39:31:15:9e:
         73:07:c0:36:ec:99:5e:ac:18:2a:bb:e7:4b:5a:e6:e6:e2:07:
         68:5b:78:9c:a9:74:16:d9:c5:a9:5e:ff:e0:83:91:b2:35:57:
         e1:b8:c2:10:4e:ba:b8:36:22:45:41:53:89:07:12:5c:a6:3b:
         8e:5e:75:c1:0c:1f:61:3c:30:42:1a:34:6b:20:b9:55:ec:31:
         f8:af:cd:b2:45:7c:c3:be:cc:1f:fe:e1:d8:57:38:76:ac:6e:
         36:54:d6:29:9d:2a:de:f3:aa:cd:1a:9f:c9:43:5c:bf:bc:e6:
         ef:5c:d7:ba:a0:af:67:66:3e:85:d9:e8:ce:52:bb:7d:fc:b2:
         93:94:9a:49:a4:0a:3c:56:f5:5a:f5:8b:36:42:13:54:0c:94:
         91:45:ca:e0:84:67:a8:5b:b8:89:5a:04:e6:b0:17:9f:87:36:
         ec:56:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:40 2025 by rpki-client