Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
File:                     13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft (raw, json)
Hash identifier:          b2Ew7vGrHSbNlgQmiDx4D1pcAf1DWbIA2oXtSD5SgXg=
Subject key identifier:   42:EF:9C:22:85:E8:3C:C4:89:CD:29:53:9D:B1:8F:2A:01:42:35:FC
Authority key identifier: 13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Certificate issuer:       /CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Certificate serial:       0204C0D2011E2C9F35969C0361555B8AF99C0CDE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
Manifest number:          1A
Signing time:             Sat 12 Apr 2025 01:54:27 +0000
Manifest this update:     Sat 12 Apr 2025 01:49:27 +0000
Manifest next update:     Sun 13 Apr 2025 05:40:27 +0000
Files and hashes:         1: 3133382e302e3136342e302f32322d3332203d3e20323634353537.roa (hash: Yg6HGLVtjxD1888eBaBZaiIaVV0BrJxd1z+2+sTFGIo=)
                          2: 323830343a323137633a3a2f33322d313238203d3e20323634353537.roa (hash: DHvwr+q5WZpSkFmc4nf6sGUpieChp+NImbSpeB8SgKU=)
                          3: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl (hash: a2vmdvhO9TzoeZ2c5aSXCNG+aBp/EzH1tMnx/7S9rtA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
                          rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 05:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:04:c0:d2:01:1e:2c:9f:35:96:9c:03:61:55:5b:8a:f9:9c:0c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
        Validity
            Not Before: Apr 12 01:49:27 2025 GMT
            Not After : Apr 13 05:40:27 2025 GMT
        Subject: CN=42EF9C2285E83CC489CD29539DB18F2A014235FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:d7:c0:5c:3b:49:5b:1c:d2:55:87:6e:79:
                    d6:61:c6:da:7a:61:29:a0:4b:27:13:75:ea:8a:70:
                    c6:5b:f4:54:7a:cc:cd:05:b8:e0:6d:94:05:18:ad:
                    0b:b6:4b:de:80:31:73:02:de:78:6e:f0:3f:bb:a4:
                    95:7e:ad:d0:1b:85:a1:2b:61:3c:6e:16:f9:8e:56:
                    b0:98:d5:a9:67:8e:67:92:24:bc:8e:2c:63:a0:6c:
                    bd:c1:25:06:5c:af:7e:89:a3:ae:fb:00:07:83:e0:
                    7f:9f:7d:20:ed:93:a3:7b:fe:31:67:e0:11:bd:43:
                    3d:a0:ca:a7:24:1e:ec:34:a9:5d:e8:c3:73:cc:87:
                    e6:e8:c2:1b:4e:ef:20:ed:75:8b:31:33:83:63:3b:
                    61:30:b5:86:ae:f3:52:9e:c4:43:52:85:7f:a3:6d:
                    e6:56:b5:f9:ff:44:c9:4e:ed:2f:f2:0f:ae:7d:1d:
                    06:5e:97:ac:ec:36:b4:fd:2b:f1:ab:30:76:1b:d9:
                    40:f8:d9:eb:b8:a7:94:08:3d:e2:fd:ad:8b:16:81:
                    a1:9e:e2:4d:e5:16:ca:67:8d:c3:d4:58:78:82:84:
                    3a:ef:e3:77:a8:c4:22:5b:eb:9c:01:26:0c:98:cc:
                    4a:31:d6:e8:3b:b9:9c:9e:da:02:9c:ae:30:d5:8f:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:9C:22:85:E8:3C:C4:89:CD:29:53:9D:B1:8F:2A:01:42:35:FC
            X509v3 Authority Key Identifier:
                keyid:13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:ac:63:0b:77:05:43:8f:83:b2:f2:74:c1:92:10:1c:6e:
         a0:27:16:30:2a:2e:f8:20:d3:c3:f3:75:d4:dc:19:4b:4c:43:
         3c:25:93:5e:04:62:4d:03:11:e6:a7:8e:0f:d3:9f:32:c0:e0:
         f0:e5:c6:11:92:5c:d0:4f:fd:e1:18:bc:f1:96:9f:f4:93:9b:
         34:cc:ea:03:83:bd:13:66:3e:18:f1:11:21:b3:39:8d:e3:96:
         3b:e4:ac:1d:42:87:91:46:ce:f4:cf:59:23:a8:05:89:da:83:
         e2:db:48:32:d5:50:0b:64:e5:d5:a7:d8:f1:e8:ae:ac:1f:08:
         8e:18:1a:4a:16:c9:b4:03:62:87:f9:8f:0f:76:53:fd:72:84:
         2d:8f:42:25:55:50:34:4f:c9:a1:dd:e4:8f:c9:7d:85:39:9f:
         96:a0:66:38:8d:0d:ec:06:6c:2a:3b:99:ea:a6:6c:e9:13:50:
         aa:5b:63:a1:a9:f1:32:b4:e7:ee:25:e9:8a:72:01:44:ec:28:
         eb:d4:3a:b0:6f:5a:2f:a1:33:8f:f4:e2:01:3f:79:3c:2f:19:
         99:bc:bd:c2:66:2c:25:6f:cb:29:63:d9:8b:fc:c1:b8:3c:e0:
         e9:6a:e0:4d:42:c7:03:dc:b2:22:3f:25:31:1b:2c:3e:55:85:
         61:e2:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:26:59 2025 by rpki-client