Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
File:                     0D544ED42C6259C03F729BAE35330B8BC76BC251.mft (raw, json)
Hash identifier:          fO2UjHcKDP27vUfDcccJM5SjuWrIplxd4OKLinvpKRo=
Subject key identifier:   BA:FB:D8:20:0E:30:2A:09:98:16:8E:4B:1C:1E:38:B2:7E:8F:47:08
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       3899605EA979442774A80721FF9C8BF0CD5B4721
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
Manifest number:          CA
Signing time:             Sat 05 Apr 2025 03:46:32 +0000
Manifest this update:     Sat 05 Apr 2025 03:41:32 +0000
Manifest next update:     Sun 06 Apr 2025 06:47:32 +0000
Files and hashes:         1: 0D544ED42C6259C03F729BAE35330B8BC76BC251.crl (hash: ZCXxhIaiACWVmcZGT08nV4N9+oq1Ca+L0oU3GtgQyZk=)
                          2: 3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (hash: 2dSYpLYj9Mflx61uTSpV65NnL7a/axLr9CKw9Y65WKI=)
                          3: 3137372e3132392e36362e302f32332d3234203d3e20323632333839.roa (hash: YGWYRLXvPbJzdz3kczKSlvd2VxATHHwmN+1PRF0Sufk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:60:5e:a9:79:44:27:74:a8:07:21:ff:9c:8b:f0:cd:5b:47:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Apr  5 03:41:32 2025 GMT
            Not After : Apr  6 06:47:32 2025 GMT
        Subject: CN=BAFBD8200E302A0998168E4B1C1E38B27E8F4708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:15:2b:b2:75:d2:cf:02:f1:b8:5f:f7:24:
                    5f:d5:be:e8:6f:32:34:6f:fa:8e:a9:45:c4:50:1c:
                    73:15:29:a0:fd:17:f7:bf:26:2a:53:fe:07:52:c7:
                    72:99:78:c2:a5:08:6f:af:5e:ef:6c:e5:95:36:c8:
                    cb:a3:bd:c6:23:cc:49:bc:b1:ac:9a:d6:cf:60:ae:
                    94:69:2f:52:97:6f:ed:41:97:e1:98:17:5a:d6:69:
                    b0:31:90:2e:9f:ac:00:a8:60:12:f8:03:46:52:66:
                    0f:b5:59:28:de:f7:b2:6b:29:b6:33:0a:30:67:1c:
                    ca:50:25:16:d2:fc:5d:07:28:d0:c8:d9:f9:e2:39:
                    00:63:fa:b9:6e:66:f4:d4:a3:6e:45:c9:66:26:14:
                    e4:1e:84:d0:ea:97:29:84:51:ae:65:47:5d:f6:47:
                    5f:66:8e:73:24:dc:2d:f3:df:93:33:dd:8e:91:7e:
                    45:d9:6b:dd:06:01:7d:a2:00:50:8b:7c:c6:00:01:
                    4a:f5:25:86:6a:ba:41:db:dc:9d:04:d2:94:8e:74:
                    84:9e:e7:c4:2a:14:54:64:78:a1:dc:0d:ad:84:c8:
                    fb:c5:80:81:70:64:a0:ca:65:fe:95:0b:c7:86:4f:
                    d3:2e:49:83:fc:f7:d5:99:d0:c4:b0:68:40:01:3e:
                    a9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:D8:20:0E:30:2A:09:98:16:8E:4B:1C:1E:38:B2:7E:8F:47:08
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:39:21:d4:71:e0:f2:93:9e:47:7b:7a:cb:e7:41:a4:da:
         79:a1:34:23:3c:1f:89:18:24:f1:96:0f:5a:22:f2:1a:fd:e9:
         b0:ef:9f:78:8c:7a:f6:b3:2d:f6:c9:c9:2a:6f:dc:45:c0:9b:
         57:cc:7b:71:7f:13:65:58:ed:df:cb:d0:61:ad:87:c6:20:a0:
         8d:ea:ec:20:1b:bd:7d:af:11:9a:38:87:4f:56:8e:91:2c:ef:
         df:74:95:0b:d8:0a:01:0b:a8:30:83:2e:f3:e6:b4:7f:79:1e:
         20:f6:41:93:17:f7:20:b8:e2:9f:ca:0b:f0:41:d2:53:38:7d:
         34:83:da:5d:b9:be:2e:1c:66:c9:b4:17:3a:56:6a:aa:37:59:
         7a:a6:01:8b:df:fa:fa:2f:1c:c5:7f:45:5d:c4:af:17:8b:8d:
         97:2b:42:3c:6c:9b:b2:d1:38:ad:0c:2d:37:ab:b1:24:33:ef:
         c4:06:d4:49:45:0b:66:47:9e:74:8d:80:f0:53:5f:b4:80:a5:
         89:e6:c7:70:44:d2:ce:64:31:e3:4f:05:29:0a:95:87:25:36:
         af:19:c4:4e:f6:50:6f:fe:cc:0b:5a:80:83:fe:26:d0:62:d4:
         a0:ca:2a:d7:b0:b9:3f:da:19:da:13:30:ae:a6:06:81:52:98:
         1e:52:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:26 2025 by rpki-client