Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft
File:                     B325121E804B0FC95B1063C1102CA90077C97D97.mft (raw, json)
Hash identifier:          Ke4JvLL4XsysSnDeeCA7gAfKujPg2mDe4V++njW7exg=
Subject key identifier:   9A:14:3B:FB:23:7B:FA:25:B6:E8:9C:FA:77:18:78:9B:87:4D:58:85
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Certificate issuer:       /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial:       25B156EDA7CAD4B74FF95EC79470A42040B61C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft
Manifest number:          1A
Signing time:             Wed 19 Feb 2025 16:44:28 +0000
Manifest this update:     Wed 19 Feb 2025 16:39:28 +0000
Manifest next update:     Thu 20 Feb 2025 19:29:28 +0000
Files and hashes:         1: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: +7OsYGFLLE34axyXqZZtr1ynea15VxwjyS1k6vQ9Zsw=)
                          2: B325121E804B0FC95B1063C1102CA90077C97D97.crl (hash: +FmCnTD+sU08bKN1YU5Zx5q8y0Aqo/LFgEt3S0fIEqY=)
                          3: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: CUVCv0i8so3z7lXmBnj5IRT1LMGMDXwwdKfqGiZLD2w=)
                          4: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: 03p8gvM5UKaJfHaj2eD7vE8XDV1ekfGOrSf66IWuKfw=)
                          5: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: SBQ5/VrbfL6QosgKp8clS9dVWExayjm5xcOtmIBsMww=)
                          6: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: A6R95jAQFrIs3Urq2ONNpGOi2F+3/TsTu22kA4hqSZs=)
                          7: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: 318uYl7F/PkBfdlg/qDoj1xyEGjr5hqZ8ItqLZczUF0=)
                          8: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: FRL5W0RE974/ES2frg5dqWaOt6RjPReRP5bpphtkMOM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl
                          rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 19:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b1:56:ed:a7:ca:d4:b7:4f:f9:5e:c7:94:70:a4:20:40:b6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
        Validity
            Not Before: Feb 19 16:39:28 2025 GMT
            Not After : Feb 20 19:29:28 2025 GMT
        Subject: CN=9A143BFB237BFA25B6E89CFA7718789B874D5885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:16:7f:c9:d9:89:d5:43:af:d9:1b:33:b3:
                    44:30:fd:7f:e0:2f:d3:3c:30:96:92:44:ef:31:06:
                    86:5c:59:b7:7a:0e:f2:42:3d:83:40:e1:08:b7:6d:
                    f6:42:0b:3c:af:e9:10:ba:6c:6c:a8:13:2f:13:f4:
                    cf:58:a1:52:7e:cf:d7:b0:38:2b:71:86:00:e4:36:
                    1c:c4:54:8e:31:d7:53:77:31:86:e4:9d:9c:0f:bc:
                    a9:61:3a:c2:bc:68:91:b8:c2:8a:22:ac:37:7d:a5:
                    d1:23:35:f4:8a:03:03:b0:6c:8b:fb:d5:58:45:a6:
                    e1:e1:2d:1a:c7:09:03:0f:51:5c:eb:e4:4a:e2:26:
                    ef:2b:dd:27:93:2f:a3:03:c5:5a:67:69:78:ce:26:
                    09:68:1e:2a:b6:9b:94:ce:a0:52:1c:ca:bc:8b:5b:
                    38:b0:ce:63:ec:c5:c7:df:f2:13:49:f1:13:4b:4b:
                    15:70:44:36:ea:12:ca:f4:1a:58:e5:9c:f8:f6:79:
                    11:53:a9:74:67:81:c1:7f:b9:02:05:e4:79:b3:0a:
                    02:cb:6e:b5:a2:2e:cb:88:65:0e:79:14:33:05:be:
                    60:7e:c9:f0:d4:b1:e8:26:54:96:f3:79:e6:d2:2a:
                    0f:f6:12:5d:40:98:bc:af:70:42:92:fe:b3:80:c4:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:14:3B:FB:23:7B:FA:25:B6:E8:9C:FA:77:18:78:9B:87:4D:58:85
            X509v3 Authority Key Identifier:
                keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3b:c2:ed:bc:10:e9:34:54:d8:df:8d:d5:96:6c:cc:d8:79:
         df:16:d2:a3:89:c3:01:8e:58:9c:55:2e:70:2d:19:02:16:02:
         5d:8f:a9:b7:99:9d:89:4a:e7:81:bb:33:0d:e8:8f:5b:79:de:
         1d:46:aa:46:97:df:ef:88:11:38:77:3e:6b:16:bb:a0:36:a6:
         8f:10:3d:6e:28:b7:af:e2:be:63:20:cb:d0:5d:d1:10:3e:58:
         4a:f7:b7:ad:ba:26:c0:c8:29:18:8c:08:67:56:d9:40:8b:e1:
         ad:ad:a4:85:fa:ec:ab:59:30:37:1c:24:18:bf:9b:5c:86:92:
         58:db:89:3d:ce:04:a3:17:e1:75:c6:f9:3d:9f:be:39:60:da:
         57:78:d0:cc:70:2e:14:7c:46:12:1f:9f:0b:88:5f:2a:50:01:
         73:6f:a5:42:05:5b:d7:0a:8e:8d:b8:22:06:cd:35:cc:32:54:
         d4:9e:29:ea:1a:4f:0b:a2:22:dc:54:ce:a7:d2:a7:09:a8:e1:
         32:bd:41:03:99:0c:07:13:9f:c3:0d:bb:e2:70:d2:c6:ba:42:
         28:4e:c5:cb:a5:6a:86:cb:b1:2b:fb:d3:5c:28:f1:71:fa:fc:
         0c:3d:34:10:f8:1c:39:77:6c:74:34:db:06:33:0f:93:6a:40:
         25:52:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:35 2025 by rpki-client