Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          UTlZPNOxTcwdUf5HPS869Vicl4y3g4cKypFjVsZL3Z0=
Subject key identifier:   3E:E7:04:38:78:3D:84:A0:E8:C3:84:FC:7A:E4:D4:81:4E:46:5B:7C
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       73C284D5D4725F3F3C1A2D2720F9EAFD76FEE7C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          01EF
Signing time:             Sun 06 Apr 2025 15:57:33 +0000
Manifest this update:     Sun 06 Apr 2025 15:52:33 +0000
Manifest next update:     Mon 07 Apr 2025 19:45:33 +0000
Files and hashes:         1: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: tjn49XjPl4WWs2iUp2gWGmln6QrQPitQ7bO4mjfC+30=)
                          2: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: 5cj96KlJbzJ1TR2L9M79QbupXCkYrhc/qdbHoSfuhP0=)
                          3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: 4KZYxgu/Z/9GgrN8i5YNIsWBd+7nRwF/eann8S1YVGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:84:d5:d4:72:5f:3f:3c:1a:2d:27:20:f9:ea:fd:76:fe:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Apr  6 15:52:33 2025 GMT
            Not After : Apr  7 19:45:33 2025 GMT
        Subject: CN=3EE70438783D84A0E8C384FC7AE4D4814E465B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:e8:98:a9:bb:a5:18:b9:1d:c0:06:48:d6:
                    61:19:16:74:7f:36:ec:16:3b:7f:2f:f8:28:f7:9f:
                    50:fa:ab:38:82:7a:47:ba:07:b9:af:1e:60:1c:c6:
                    16:c7:ca:1c:60:0b:3f:18:86:e5:95:24:f9:3d:03:
                    26:81:05:eb:86:97:31:d2:b5:21:00:45:d0:ee:0c:
                    58:5c:e5:61:9a:90:4a:33:6c:49:08:2a:68:8c:84:
                    77:c6:03:75:aa:94:01:1c:0d:c8:e8:56:75:9c:58:
                    86:c4:1d:c0:c6:18:72:28:9a:26:8c:d4:fb:1f:da:
                    c8:8c:37:29:2d:07:cf:cf:c7:92:d4:c8:22:d7:07:
                    06:bd:25:97:67:83:97:77:18:64:1e:72:b1:b8:cb:
                    d5:2c:ea:ef:24:40:36:d3:60:d2:8f:ac:3b:41:d8:
                    c9:f2:b1:b3:12:d3:a9:ca:3c:02:a2:1a:4b:ef:da:
                    2a:89:7a:81:15:3d:66:35:af:04:dc:d8:5f:d3:22:
                    8b:c0:99:eb:e9:04:1e:07:36:15:5a:56:f7:5d:b1:
                    d0:a5:50:9f:9a:14:8b:35:05:2a:fb:4b:9d:9b:3f:
                    c8:9a:41:11:fd:25:d9:68:4f:70:05:bd:8d:65:ee:
                    bc:34:50:67:7d:41:be:d6:ad:dd:47:a8:c4:9a:5b:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:04:38:78:3D:84:A0:E8:C3:84:FC:7A:E4:D4:81:4E:46:5B:7C
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:22:6b:26:7e:0b:21:4f:10:91:96:5d:db:cb:45:e8:6f:
         db:60:81:db:a5:3e:45:4d:08:81:54:08:0b:52:37:8e:62:ba:
         64:f6:40:61:29:74:dd:43:5e:be:9f:15:4e:ce:92:42:02:55:
         16:5b:9e:d4:a7:b3:5b:b8:f8:b1:a8:5f:36:ef:1e:e4:56:99:
         ba:dd:46:29:97:d4:89:d0:b4:e3:6d:4c:16:5e:e1:64:32:ca:
         6d:87:db:41:a4:d4:60:e8:96:59:e6:8f:c6:29:bb:01:4a:9e:
         ea:72:0f:70:e2:c1:ab:d4:b2:9d:8e:47:82:88:de:16:7f:f5:
         4f:97:5b:af:a0:3a:e2:e7:d5:d3:5d:e4:5e:6a:47:b6:0e:eb:
         49:b5:c5:68:4d:52:1b:55:1a:f1:3e:b0:5e:2e:e7:f6:e1:4f:
         ea:99:da:7c:36:4a:fe:f1:46:bc:9c:e0:d2:db:6b:39:8f:f0:
         ba:32:f6:f4:ff:cb:4b:9f:7d:29:c8:72:d4:68:f1:20:f8:c7:
         4e:99:12:77:38:27:f7:55:84:8e:9e:16:0c:c0:24:6f:df:7f:
         78:5f:61:b2:33:21:fb:8e:31:0b:3b:ab:f9:f0:ba:3f:1c:8a:
         89:28:ac:e3:8b:90:a7:61:f2:14:11:0f:13:c9:ed:3a:e1:6b:
         a3:0a:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:02 2025 by rpki-client