Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File:                     5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier:          nY8ywxQuyDv/cYdC/zk9XERGGaXxwteGa6xT/FVYbag=
Subject key identifier:   50:BB:79:26:B1:CF:79:81:42:A2:1F:51:A8:47:40:3E:60:9B:A4:2D
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       34F3953D163C1B0F8515D2B89F1932B51C34AC3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number:          0299
Signing time:             Mon 09 Jun 2025 07:33:52 +0000
Manifest this update:     Mon 09 Jun 2025 07:28:52 +0000
Manifest next update:     Tue 10 Jun 2025 08:05:52 +0000
Files and hashes:         1: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
                          2: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
                          3: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: sMs2wgftlazesrbwTQDlqaYdK3o7Dj2gHbCxXCTI/AQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f3:95:3d:16:3c:1b:0f:85:15:d2:b8:9f:19:32:b5:1c:34:ac:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Jun  9 07:28:52 2025 GMT
            Not After : Jun 10 08:05:52 2025 GMT
        Subject: CN=50BB7926B1CF798142A21F51A847403E609BA42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:3f:ae:63:fa:5e:1e:56:7b:10:db:f4:e6:
                    29:ae:b8:df:ae:65:6f:92:8a:ce:4a:4c:5a:90:7d:
                    2c:f8:8e:3e:ea:1b:5e:3d:67:fc:7f:b0:a8:52:b7:
                    18:4e:86:0f:af:37:d5:49:52:34:49:16:dc:2c:cd:
                    97:a7:ef:a0:98:d3:98:8d:53:15:0c:38:26:67:c9:
                    5e:2d:d8:d7:88:59:a2:b3:a3:6c:3e:16:a2:5c:26:
                    be:c9:4d:2c:e8:83:83:ff:88:09:74:4b:3a:a1:ae:
                    ef:7a:49:56:54:46:62:e8:c2:99:3c:4d:b5:fa:13:
                    09:9d:98:f4:f3:e5:ec:58:cf:d8:96:d6:bd:f4:2b:
                    bd:f7:62:17:80:2c:1f:9e:d0:7d:c6:73:58:8f:c1:
                    ed:d3:5c:e3:22:b6:84:a0:0a:94:32:e2:3b:2d:0a:
                    d0:45:d4:61:9a:09:ff:99:47:e5:6b:50:e7:14:c8:
                    89:23:a4:58:4d:24:22:e9:8c:11:dc:58:f3:90:6e:
                    f8:01:3b:47:98:d7:3b:98:c6:68:cf:dc:63:ca:d6:
                    6a:c1:c1:7a:9c:47:bf:b7:73:cd:d4:5d:0b:79:e6:
                    e3:d3:4e:1a:82:38:ad:8c:bc:8d:1a:86:54:30:d8:
                    10:b9:b0:21:63:9d:e1:e1:94:7d:dc:ce:29:ac:b0:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:79:26:B1:CF:79:81:42:A2:1F:51:A8:47:40:3E:60:9B:A4:2D
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:1a:00:a6:06:e3:cb:f2:89:ab:1a:9a:e8:29:a5:be:14:
         ce:21:8a:f1:46:68:2f:9a:81:e6:19:98:3d:35:c3:aa:cc:5b:
         7d:d2:bd:13:c9:55:2a:be:9a:f8:81:22:63:e9:06:ee:de:c1:
         b2:c7:d9:20:9e:76:02:27:49:f1:9c:a9:99:a1:b4:ee:19:c7:
         a1:eb:70:59:32:81:f8:92:05:d3:4f:f8:be:be:b4:ce:d6:72:
         7c:77:df:15:82:07:84:c2:2d:e3:69:08:e6:ac:5b:29:be:7c:
         87:a9:ca:63:21:f2:99:69:b6:c3:43:cd:43:3b:64:cd:b0:35:
         22:d5:a6:f2:a0:5b:61:57:b5:7d:8a:2a:92:07:d5:5d:c5:93:
         68:24:8e:87:95:ff:da:a6:95:9d:58:a4:b2:e8:7f:21:3e:8f:
         0e:3c:93:f5:5b:a3:99:7a:e6:e5:f8:5c:fa:f4:6e:8f:3a:ad:
         f8:9d:0b:28:fd:ff:e9:a9:9f:42:4d:7a:b7:54:c5:36:42:7f:
         45:ab:a2:74:69:8e:d2:0a:bd:a6:cc:89:07:0b:fb:fe:9e:79:
         b8:4c:fd:8d:18:1e:91:3d:f6:7d:f3:b7:b2:15:2e:6d:2c:b8:
         3e:a3:ce:bf:e3:d0:b0:b1:3c:a6:7b:62:dc:be:aa:d7:a8:93:
         9d:dd:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:39:38 2025 by rpki-client