Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
File:                     98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json)
Hash identifier:          n95rAcf6UH0Y+PUiJ/c242Jv8BAojPF2TAMDrqLmfFo=
Subject key identifier:   16:C0:74:56:5A:81:7A:CC:85:F9:F7:93:63:ED:1B:B2:C6:1D:EC:24
Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C
Certificate issuer:       /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
Certificate serial:       5B73C83DE20D73200CEAA5A27A0228F5B0FEBF7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
Manifest number:          01AF
Signing time:             Wed 19 Feb 2025 15:05:08 +0000
Manifest this update:     Wed 19 Feb 2025 15:00:08 +0000
Manifest next update:     Thu 20 Feb 2025 18:32:08 +0000
Files and hashes:         1: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: 4rZ0XOXHF5gXRRcr77Tibpq2thD4laVYb5TKi43lMvc=)
                          2: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: YwZ+4UMZ6VUcXW4gP7A3faEUddSt52D7PoIRLh9/F4w=)
                          3: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: sz/6L9+NE4MD69YOu4d2VkQGIFxA9f2cV6XtMvuLg5g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:73:c8:3d:e2:0d:73:20:0c:ea:a5:a2:7a:02:28:f5:b0:fe:bf:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C
        Validity
            Not Before: Feb 19 15:00:08 2025 GMT
            Not After : Feb 20 18:32:08 2025 GMT
        Subject: CN=16C074565A817ACC85F9F79363ED1BB2C61DEC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:52:cf:4b:82:19:88:72:18:bc:59:a5:39:
                    30:44:53:2d:fb:08:81:31:40:f5:2b:2b:3e:77:07:
                    d7:bb:57:69:6f:2a:c5:30:1d:60:b2:98:7a:5c:38:
                    ff:d9:53:68:16:7d:99:ba:96:f5:a2:48:a3:ae:09:
                    ce:7b:91:c8:28:a4:da:68:4c:4d:21:4f:55:1f:1c:
                    a2:9e:dd:91:a3:ba:88:bf:dd:82:23:5c:e7:6d:c4:
                    22:85:fb:c7:4a:ef:0c:41:a9:69:b1:0f:b6:50:82:
                    9d:4e:5a:d2:e4:86:c8:b8:12:93:15:30:d0:b6:8a:
                    7c:c6:6b:9a:17:8f:8a:10:4f:33:a2:c0:f8:2a:8f:
                    27:50:ca:5b:89:30:4b:ef:be:40:c0:d4:5d:90:9a:
                    13:ab:9a:65:f8:30:b2:ae:98:1c:c8:22:57:cb:a5:
                    f2:0f:15:9f:7d:fb:71:ff:f2:62:f0:6c:e7:f6:6a:
                    8e:92:59:2d:51:8a:94:f5:95:25:94:e4:33:95:0e:
                    57:12:33:79:a1:0d:1b:41:e5:a9:9b:7e:a1:c6:c5:
                    de:18:3b:6a:65:59:e1:62:ec:7a:a4:55:e0:4e:31:
                    b0:46:d2:df:93:cc:53:df:be:93:c9:13:59:c3:64:
                    81:3e:28:4f:35:09:2c:c0:3b:b0:17:82:f6:22:05:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:74:56:5A:81:7A:CC:85:F9:F7:93:63:ED:1B:B2:C6:1D:EC:24
            X509v3 Authority Key Identifier:
                keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:05:7b:3f:5f:31:b0:a9:b3:13:4c:7d:ef:73:7e:ad:74:6c:
         69:9d:cf:9a:7d:01:05:5f:dd:6b:7c:f3:c2:9f:26:0c:65:e9:
         75:e6:4f:5f:be:2d:e7:d8:d0:64:cf:25:36:b6:2c:8e:78:14:
         12:54:a5:c4:e2:83:9c:c1:84:d0:0d:53:1e:70:90:91:5c:9e:
         45:e8:4c:2a:fe:43:3a:ca:7c:8a:12:d4:ef:f0:ba:4f:b7:e6:
         ff:fb:99:51:5e:4e:fb:d2:ca:fd:d0:10:53:29:da:33:61:20:
         cb:e2:83:06:73:c5:c0:e1:80:de:15:c6:78:aa:fe:b1:05:cf:
         34:fe:e8:5d:eb:00:41:c1:77:23:65:66:42:d0:bb:d0:ea:60:
         14:9c:64:e0:a7:cb:f0:b6:55:53:21:80:a8:6a:9b:94:b5:4c:
         ba:f4:31:2c:bc:4c:fc:8a:f3:bb:d4:3d:28:eb:6c:18:a3:71:
         74:be:29:34:d7:90:80:64:eb:3d:a4:5d:9c:3c:b5:6d:d5:73:
         8a:5c:3c:2f:4c:ae:4e:24:c5:e2:bb:9c:7a:36:a3:81:15:fa:
         b5:ae:46:85:e8:96:db:95:a4:01:cf:6a:ec:a8:d3:f6:94:eb:
         11:fd:a6:f2:f4:6c:21:28:7b:37:c8:60:16:1b:8a:df:75:cd:
         80:a3:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:04 2025 by rpki-client