Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft
File:                     49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft (raw, json)
Hash identifier:          DZAzQ36ZRe1kT2DRTgwdYDJyw0uUUS5ev3zZN7jCpc4=
Subject key identifier:   7E:D2:EC:29:18:E4:08:95:30:71:38:EE:F1:95:9B:6D:6B:A3:9D:EA
Authority key identifier: 49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5
Certificate issuer:       /CN=49172F1453C1D7F097787278D48BCC2D5FD3A3D5
Certificate serial:       2B4855EB9E7935375FCA7BF77A470EA17E1E7025
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft
Manifest number:          3A
Signing time:             Tue 08 Apr 2025 11:09:49 +0000
Manifest this update:     Tue 08 Apr 2025 11:04:49 +0000
Manifest next update:     Wed 09 Apr 2025 14:10:49 +0000
Files and hashes:         1: 49172F1453C1D7F097787278D48BCC2D5FD3A3D5.crl (hash: PZQNWNlqJHyVpGcIejG5+fKOeqfVurS01ENdMjkyJ98=)
                          2: 3230302e3130372e3131362e302f32322d3332203d3e20323730323438.roa (hash: z8fBrUqHK6eW16OfDfPi2Fhk9WgKD/IRSGOhinub0QU=)
                          3: 323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (hash: LAv45qhTZtAbZJOaJm6RkmiDHOHhL7Ee8GkzwHZFEgw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.crl
                          rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:55:eb:9e:79:35:37:5f:ca:7b:f7:7a:47:0e:a1:7e:1e:70:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49172F1453C1D7F097787278D48BCC2D5FD3A3D5
        Validity
            Not Before: Apr  8 11:04:49 2025 GMT
            Not After : Apr  9 14:10:49 2025 GMT
        Subject: CN=7ED2EC2918E40895307138EEF1959B6D6BA39DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:66:64:b2:bf:40:4d:6f:9e:2a:39:0a:8c:
                    de:0a:d1:75:76:95:46:ac:94:5e:bc:75:fd:3f:e1:
                    af:a0:66:cd:e4:fb:6a:6e:c0:0c:e3:72:af:a6:45:
                    ae:8a:c3:18:cf:61:c2:8d:ca:d9:1b:ed:ba:67:a3:
                    c9:9c:11:ae:1b:28:e5:54:1a:26:2a:c5:42:a8:c4:
                    a2:08:4c:18:b9:68:b9:dc:75:9c:4c:08:91:c2:03:
                    d7:0a:65:66:c4:a9:9a:39:0e:0d:14:2a:85:5e:ef:
                    f3:7c:ba:50:f4:8e:42:d8:c8:6a:ad:cd:11:b6:9b:
                    49:e0:36:e7:09:13:dd:5b:17:1a:22:23:2d:6c:c8:
                    91:4f:9b:e8:e4:a7:20:a2:80:fc:99:7f:b5:0f:2e:
                    bc:22:09:cf:1f:76:31:41:30:96:13:e8:80:5a:47:
                    54:a8:94:19:d4:28:3c:c7:19:f7:ac:0f:65:d2:f8:
                    ac:b3:6b:cf:87:4b:6b:bf:41:2d:f2:51:76:3c:93:
                    29:bf:c7:b8:4d:f4:52:70:68:d6:96:a7:1e:7d:51:
                    89:35:6f:02:b4:ac:34:3d:35:83:37:d6:bc:d7:34:
                    82:1b:b1:7c:0c:91:1d:bf:39:45:a0:1f:7b:52:23:
                    38:b0:40:3e:7e:e0:35:d0:d1:36:d5:81:f2:7c:6a:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D2:EC:29:18:E4:08:95:30:71:38:EE:F1:95:9B:6D:6B:A3:9D:EA
            X509v3 Authority Key Identifier:
                keyid:49:17:2F:14:53:C1:D7:F0:97:78:72:78:D4:8B:CC:2D:5F:D3:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/49172F1453C1D7F097787278D48BCC2D5FD3A3D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:97:1b:c2:38:91:12:36:1d:0a:8c:16:23:bf:50:b3:e4:75:
         d5:a4:4c:90:b8:2d:c5:a2:db:d6:eb:96:c2:71:a8:ba:a4:59:
         38:61:a0:f4:13:5d:a4:c8:05:7d:f3:97:b2:1a:d0:66:46:86:
         d4:43:64:a4:76:04:ba:e6:ed:d8:44:cf:0b:5a:85:bb:a1:8b:
         fa:de:09:91:b4:e1:75:24:2f:12:84:c4:3f:8b:54:b8:dd:6c:
         73:a1:8a:82:57:f7:c3:29:38:8e:07:62:f3:b1:a3:30:96:e8:
         2c:01:ff:b0:2b:25:be:03:1e:6f:84:85:8e:e5:54:b1:1c:c6:
         43:8c:a7:2b:99:fc:70:b4:63:73:e9:9b:26:a3:1e:f6:cd:3d:
         68:a8:cd:2d:23:a5:12:88:7d:0a:5f:3b:bb:65:52:46:d9:8e:
         3e:e1:9e:e5:fb:9e:86:ce:64:ea:1c:5e:50:b1:d0:55:43:08:
         92:c2:1d:a8:62:9c:09:d0:af:b3:bc:97:02:ae:1d:cf:ad:75:
         01:7e:a3:f5:c9:89:67:2f:6a:a9:91:fc:9e:78:d7:9a:7e:c9:
         bb:76:42:d0:b6:8b:3b:29:18:84:4a:5a:57:4a:a2:4d:7f:1c:
         13:15:61:85:ae:c2:41:70:1b:ba:68:82:81:87:af:e7:76:ca:
         a5:86:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:01 2025 by rpki-client