Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
File:                     D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json)
Hash identifier:          cDGO4MsGrn5AU3suOAl4yh2yAoIl4Cc7jVWmQyV16hg=
Subject key identifier:   B9:1E:16:C6:EC:F4:97:C8:A2:BF:69:69:5B:11:C7:C5:30:F4:1B:3D
Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0
Certificate issuer:       /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
Certificate serial:       5C3D6A637E08816C296B06D3A3F851DF4F793D18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
Manifest number:          0174
Signing time:             Sat 12 Apr 2025 06:53:48 +0000
Manifest this update:     Sat 12 Apr 2025 06:48:48 +0000
Manifest next update:     Sun 13 Apr 2025 10:14:48 +0000
Files and hashes:         1: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: KpOmHNyf+qk8mZG+75EeGAxo+/Mu9xpKUyBHcWeY2Yc=)
                          2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: bkc7PD/eoMEAwVgn7rQvXWlY3Vh94NdNwzo2VtWfGSs=)
                          3: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: 8Gm/eDZOVZPx6WsRWRnHPg/E8Ocn9PWhhW32bxWiu8U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl
                          rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3d:6a:63:7e:08:81:6c:29:6b:06:d3:a3:f8:51:df:4f:79:3d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0
        Validity
            Not Before: Apr 12 06:48:48 2025 GMT
            Not After : Apr 13 10:14:48 2025 GMT
        Subject: CN=B91E16C6ECF497C8A2BF69695B11C7C530F41B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:00:ec:bd:79:fe:39:66:14:b5:ad:a3:06:
                    d4:7f:a1:2a:3c:2a:91:c6:20:89:7d:67:ba:43:cf:
                    66:44:82:89:b2:c2:b7:5e:ef:19:72:55:f0:12:d0:
                    83:30:6d:fa:6f:cc:da:90:34:30:1c:76:07:f7:04:
                    6e:d2:cf:34:a8:ad:01:87:6c:09:90:98:fd:ee:6f:
                    0b:69:37:71:10:89:2f:3d:53:5b:39:f3:ec:c6:06:
                    36:c8:d1:32:70:79:fc:65:e1:ab:49:24:c9:41:e5:
                    7a:15:e4:43:12:03:47:69:33:ba:dd:db:33:36:85:
                    11:b6:b2:58:b6:05:0f:6e:bc:1d:b1:cd:28:d5:ab:
                    7d:73:93:44:2e:a3:1d:cc:11:f8:02:cb:2c:f6:0b:
                    2e:e9:a8:5c:7e:8d:c4:29:a1:f3:26:a3:27:92:4d:
                    69:72:27:f1:07:fc:38:b2:82:8e:ab:95:ef:5e:37:
                    63:e3:c5:4c:e5:d5:8d:9f:8f:6f:7f:ae:e4:8d:5e:
                    8c:06:3f:1e:76:33:f4:b6:a2:7e:c8:88:44:d5:b9:
                    9c:bf:6b:38:7d:2b:46:9b:14:e9:53:29:93:cc:e2:
                    ca:09:6b:79:2a:99:2c:bd:f8:08:48:4e:45:38:94:
                    a4:9c:4a:da:7b:91:49:49:97:6a:60:17:22:5f:91:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:16:C6:EC:F4:97:C8:A2:BF:69:69:5B:11:C7:C5:30:F4:1B:3D
            X509v3 Authority Key Identifier:
                keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:a9:12:e7:fd:b6:ab:f9:66:91:36:fe:af:48:b0:94:29:
         8f:0a:68:48:47:3c:c8:6d:9b:3c:4e:86:29:db:78:46:3d:c7:
         39:08:90:e2:26:91:92:8d:d5:8e:0a:bf:82:e0:e6:94:62:55:
         30:b8:48:1f:d7:dd:32:a9:91:90:f9:79:02:5f:e0:78:71:56:
         01:4b:9c:1d:ec:1c:05:bd:26:c2:2c:53:e1:1a:62:ee:e7:bc:
         82:ab:1e:6a:19:a8:cc:44:3e:75:0f:32:bc:cc:ed:63:ae:46:
         b4:1b:2c:2a:b0:8f:ee:14:1a:fd:06:0a:2f:f4:7a:3f:e0:42:
         c4:45:07:1b:3b:8b:c3:7e:ea:4c:d3:f5:d6:8f:1b:04:10:31:
         8c:d3:17:34:17:37:0a:e1:62:d1:ed:41:53:88:05:de:eb:67:
         88:5d:82:c0:d2:ed:3c:1b:5f:1c:d0:0a:fc:11:3a:cb:66:a1:
         12:0b:7d:5f:7a:bd:fa:b0:1e:44:21:cc:4c:da:cd:85:a3:47:
         67:0a:e4:da:f0:0d:f2:23:09:a9:1e:fe:a5:1d:37:2a:5b:a0:
         94:fd:58:eb:4e:70:be:e7:44:e5:f2:67:02:13:a0:53:4f:79:
         d9:4e:d1:bc:20:45:e5:09:25:4f:7b:b4:1f:32:92:d1:cd:f4:
         32:3e:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:57:54 2025 by rpki-client