Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
File:                     0B7D5851E99113F3832ED12CBE5DB4437990968F.mft (raw, json)
Hash identifier:          +uc+G9opb3NJ1D9FuL6sn/88ccWDnUUHa+KncrnofTY=
Subject key identifier:   85:CF:53:05:61:64:A4:AC:B0:1F:B2:E1:6E:9A:BE:DD:49:DC:18:76
Authority key identifier: 0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
Certificate issuer:       /CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
Certificate serial:       24E4A7F0F8FFFA64F4C1A2183B1D0F74E7FD7604
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
Manifest number:          01F4
Signing time:             Tue 15 Apr 2025 22:40:28 +0000
Manifest this update:     Tue 15 Apr 2025 22:35:28 +0000
Manifest next update:     Thu 17 Apr 2025 01:02:28 +0000
Files and hashes:         1: 3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa (hash: 5DfaTZm29CZxJPaPoRJa+eGEm1wFt8blQ4oQe/EMifI=)
                          2: 323830343a376531303a3a2f33322d313238203d3e20323731363030.roa (hash: R5lacV3c9Fu0cSZGjAwdwdHaQiykOQiL4L2j/LKmgRE=)
                          3: 0B7D5851E99113F3832ED12CBE5DB4437990968F.crl (hash: lRx1QtY/x/UB2JtuwW67cZkXfNjLLvmzvOoDhHiNHe8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.crl
                          rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e4:a7:f0:f8:ff:fa:64:f4:c1:a2:18:3b:1d:0f:74:e7:fd:76:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
        Validity
            Not Before: Apr 15 22:35:28 2025 GMT
            Not After : Apr 17 01:02:28 2025 GMT
        Subject: CN=85CF53056164A4ACB01FB2E16E9ABEDD49DC1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:7c:b6:2b:77:51:6d:5e:79:a9:21:71:7f:
                    81:62:e3:5d:1b:c0:5b:ca:34:10:2a:a4:fa:71:b5:
                    b3:c3:93:38:b2:ca:3a:bd:f3:3e:c4:ea:f5:2f:78:
                    c7:24:24:ac:e1:35:89:3e:ab:a4:cf:fe:22:46:19:
                    43:81:7c:61:92:88:c5:77:1b:33:1b:59:7b:d6:ce:
                    90:1e:9b:c0:c0:46:e9:3d:b7:cc:3f:7d:b3:57:ec:
                    6f:9a:e5:e0:67:b3:eb:b4:a5:57:81:1b:e4:6c:6f:
                    25:d3:ae:b6:46:f0:ea:27:7f:f8:fd:ea:9f:db:38:
                    50:88:8a:ce:95:01:e5:9b:01:54:2c:af:1a:a4:34:
                    f9:c6:36:eb:cc:63:34:64:fc:ae:ab:14:a7:e9:d3:
                    b8:f7:0e:71:0d:06:18:fa:54:c3:96:93:8c:7f:27:
                    9f:d0:15:db:aa:47:0d:a0:29:c3:e0:14:72:30:eb:
                    b4:16:c1:7b:e9:33:93:4f:e0:38:67:bc:2c:52:f1:
                    37:d5:5c:9a:8b:6c:55:67:cd:fa:9e:55:f4:d5:f1:
                    ed:01:da:f4:6c:ad:3b:d9:a6:5f:cf:12:83:d4:27:
                    c1:9b:b4:8f:ef:99:a3:2d:59:17:2f:b0:94:a7:f2:
                    1d:52:51:81:ec:1e:7a:7c:6b:0e:bf:02:5d:f7:c4:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CF:53:05:61:64:A4:AC:B0:1F:B2:E1:6E:9A:BE:DD:49:DC:18:76
            X509v3 Authority Key Identifier:
                keyid:0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:dd:c0:27:44:06:14:4c:a9:c0:a6:2f:dd:d7:77:b2:b3:
         87:8c:96:44:33:f9:18:30:2b:b3:d1:e1:61:7b:97:ad:ae:37:
         ca:12:c2:89:93:d1:fe:88:b0:14:53:86:0c:b9:a3:38:3e:26:
         d6:84:0c:80:e1:c8:73:af:87:8e:b0:11:bc:25:94:2c:25:8a:
         81:59:1d:8c:05:01:97:74:59:17:88:b1:29:d2:e0:dc:19:6b:
         dc:af:35:ff:7c:83:a8:07:e4:61:ab:10:c5:62:fe:93:87:aa:
         93:40:30:36:a9:e6:05:0e:b1:4d:14:e6:74:fe:4a:4c:75:1b:
         ed:7d:fa:80:67:d0:36:8e:60:81:ac:c9:0d:88:22:44:0e:52:
         df:34:e5:c0:c5:35:fe:77:cc:a5:4e:5c:46:ba:ff:ac:71:58:
         1d:76:6c:9f:9f:ec:78:e2:ba:50:6f:96:47:63:5a:6c:12:20:
         52:da:8f:4d:a5:a3:10:c2:b9:65:dc:93:07:aa:5e:33:e1:67:
         41:38:54:b7:a3:bc:36:1d:4f:17:93:70:57:54:3f:a1:dd:94:
         60:a7:87:d2:fa:c4:b3:61:a7:9a:f5:bc:e0:4e:aa:b4:3b:00:
         61:1d:6c:9b:96:2a:1f:1a:60:0d:4d:c5:16:58:a3:db:53:0e:
         07:44:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:42:35 2025 by rpki-client