Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
File:                     130DA06C9537B1DF6544F6290A638F863755DA73.mft (raw, json)
Hash identifier:          Wc2ioem4vchlrtQv733vbJHmVq8YGiMtAepnpcPCM1I=
Subject key identifier:   40:80:94:57:12:88:F9:5D:C7:AC:12:4A:1E:C7:0F:5F:B9:6B:AA:E1
Authority key identifier: 13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73
Certificate issuer:       /CN=130DA06C9537B1DF6544F6290A638F863755DA73
Certificate serial:       70162CBB015D85F822A09E204FFB5F5057DE32D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
Manifest number:          01EA
Signing time:             Sat 05 Apr 2025 14:35:17 +0000
Manifest this update:     Sat 05 Apr 2025 14:30:17 +0000
Manifest next update:     Sun 06 Apr 2025 16:03:17 +0000
Files and hashes:         1: 130DA06C9537B1DF6544F6290A638F863755DA73.crl (hash: iPGOa8MTtBYoqjI29V8hDwhMrg3NFD+mbN84qRixqBo=)
                          2: 323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (hash: IEUG8tpm8hk0t2b0PVgy9JJ26yNgISfPczlj5pIw9vg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl
                          rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:16:2c:bb:01:5d:85:f8:22:a0:9e:20:4f:fb:5f:50:57:de:32:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130DA06C9537B1DF6544F6290A638F863755DA73
        Validity
            Not Before: Apr  5 14:30:17 2025 GMT
            Not After : Apr  6 16:03:17 2025 GMT
        Subject: CN=408094571288F95DC7AC124A1EC70F5FB96BAAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:39:08:57:29:47:2a:2a:5a:33:b2:8a:f9:
                    51:d4:c4:3d:e8:51:66:dd:6f:68:2a:99:c6:57:6a:
                    82:1f:25:37:cf:28:9c:94:28:11:c5:d1:0c:7b:da:
                    87:29:2d:4a:0b:e2:73:6f:19:34:7e:28:2c:b2:e0:
                    90:c9:ff:87:8f:3f:44:02:71:3a:be:9b:3d:89:45:
                    ff:ca:36:91:51:9d:ca:03:f0:12:72:44:77:16:a0:
                    c2:1e:12:e2:08:0d:9d:5d:de:fc:d3:a4:da:54:29:
                    f8:93:e0:e8:6a:e1:c9:06:3d:3d:39:30:32:12:ee:
                    d0:df:b7:ed:57:0e:b8:61:a3:8e:59:a2:43:06:95:
                    87:c0:df:da:45:0b:34:8c:96:b4:29:9c:7c:9f:1c:
                    5e:40:08:8c:bd:2f:84:b3:25:ea:cd:83:7f:04:83:
                    31:0c:62:a0:06:e0:0b:8b:ab:8d:8c:52:03:25:49:
                    2c:de:4a:67:61:86:c9:dd:d7:a8:e0:9c:0d:0f:3e:
                    ca:8d:92:d1:7f:05:37:84:9b:50:46:aa:1a:ac:fa:
                    5c:92:57:9b:bc:63:31:ea:e4:02:2d:c9:08:ff:fa:
                    15:f8:28:d3:2d:fc:0a:b6:cc:cf:27:f3:6b:67:68:
                    82:c0:40:f0:e1:03:c2:af:96:d1:dd:22:93:b5:58:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:94:57:12:88:F9:5D:C7:AC:12:4A:1E:C7:0F:5F:B9:6B:AA:E1
            X509v3 Authority Key Identifier:
                keyid:13:0D:A0:6C:95:37:B1:DF:65:44:F6:29:0A:63:8F:86:37:55:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130DA06C9537B1DF6544F6290A638F863755DA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/1/130DA06C9537B1DF6544F6290A638F863755DA73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:02:fb:43:00:a6:36:c3:26:62:a8:fa:4d:a9:ec:56:3d:
         3b:50:0a:b2:8d:5f:a2:61:36:cd:49:63:6d:16:3d:4f:69:f6:
         51:73:5b:35:70:af:f1:19:99:9e:72:b1:2b:97:a2:d6:b6:6d:
         b3:01:af:6f:55:01:69:7b:d8:74:3c:3f:09:cf:33:92:62:cf:
         34:69:63:5e:1e:d0:ef:54:c5:b5:24:88:2c:6a:3b:50:77:1f:
         52:23:6f:6f:a0:b2:26:66:9d:18:69:0f:6f:a6:c6:23:7b:41:
         3a:d1:bf:08:0f:03:7c:22:5c:16:52:ce:7f:f2:54:e6:0e:5c:
         47:35:ca:51:4b:a5:05:6c:96:db:29:43:69:d8:ae:54:6d:3d:
         6b:b7:02:0d:50:f2:25:86:91:03:a6:60:d8:27:4b:9c:58:2e:
         a0:18:ea:6e:db:f5:92:98:5d:bc:6e:d7:3a:00:ab:a7:eb:00:
         21:cc:b2:dd:ff:ce:c5:da:c2:a6:c5:07:ca:70:ea:68:c1:db:
         fb:83:f3:5c:68:35:04:5b:56:2e:26:60:1c:e0:8a:4d:ff:44:
         bb:7b:73:b8:ad:f9:e2:aa:f0:44:c9:c6:bf:97:11:cf:98:12:
         22:48:a3:62:c3:f9:92:7f:50:0e:a7:b2:19:68:9c:75:d2:61:
         c4:2f:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:15 2025 by rpki-client