Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
File:                     83C90E15FAD82473867D38C030D3F41E1192F5A2.mft (raw, json)
Hash identifier:          xLsF2SyQ1xUCyq7z1GJ7E30HxhUv6qW7v5VKezXPEy8=
Subject key identifier:   BE:5D:AF:90:2E:BC:AF:7F:19:88:F2:D8:86:19:41:55:B4:9F:F7:A9
Authority key identifier: 83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2
Certificate issuer:       /CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
Certificate serial:       029EC0DA208800CC0BCD91978E3449D0A2123593
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
Manifest number:          01A9
Signing time:             Sat 05 Apr 2025 08:24:58 +0000
Manifest this update:     Sat 05 Apr 2025 08:19:58 +0000
Manifest next update:     Sun 06 Apr 2025 11:28:58 +0000
Files and hashes:         1: 3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa (hash: FKM2bOWA7I2F1Lz9YN5/eHcYVC2TifakumnvJiDvvk0=)
                          2: 323830343a343136343a3a2f33322d313238203d3e20323637343330.roa (hash: GOeatHBXoNPWYj7oi8r1kbVV04IlJ4dkMChBVB3LsxA=)
                          3: 83C90E15FAD82473867D38C030D3F41E1192F5A2.crl (hash: 46msNikiI4G5IM3o5qkjS8eyfvozroQgnmqpo/HKPsg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl
                          rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9e:c0:da:20:88:00:cc:0b:cd:91:97:8e:34:49:d0:a2:12:35:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C90E15FAD82473867D38C030D3F41E1192F5A2
        Validity
            Not Before: Apr  5 08:19:58 2025 GMT
            Not After : Apr  6 11:28:58 2025 GMT
        Subject: CN=BE5DAF902EBCAF7F1988F2D886194155B49FF7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:d7:97:73:ad:5c:f8:d9:e6:57:13:ca:18:
                    9a:a9:3d:60:88:0f:db:5a:73:a8:f8:f3:bd:22:6c:
                    0a:c2:d5:01:78:87:f0:66:48:b3:ed:11:68:32:95:
                    09:65:29:8e:8a:59:54:ac:12:79:6f:5b:b1:31:f3:
                    87:2a:e7:dc:84:c3:4d:4f:9a:3f:d3:13:43:b4:58:
                    5f:a4:bb:18:40:34:d3:f5:6d:9e:4d:a7:8e:18:f9:
                    71:0b:b5:11:1e:27:17:f1:03:95:43:b2:e2:b0:4c:
                    21:a0:3b:59:70:9f:a3:6b:01:1f:43:7e:61:7c:78:
                    c8:dd:21:34:f3:03:f7:dc:d2:43:3e:3a:a7:1c:4f:
                    e1:45:22:51:46:78:34:b4:6a:59:d0:92:b0:3a:2a:
                    b6:f2:44:3b:c0:51:96:77:31:d3:84:e7:5a:95:de:
                    4b:16:ef:ca:92:8f:a5:85:db:e1:0c:da:c6:5a:63:
                    db:81:04:04:9e:36:c7:61:1a:c1:a7:10:2c:b9:ff:
                    23:b5:7e:67:d5:25:21:49:54:b4:35:24:ea:27:b5:
                    04:dd:02:93:36:94:10:5b:10:21:83:d0:7b:a0:c2:
                    e3:89:d9:52:bf:e0:4a:c3:c0:25:60:73:f7:30:d3:
                    ef:e0:d4:3d:6f:63:c0:1a:d4:e3:25:6b:4a:8e:a4:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5D:AF:90:2E:BC:AF:7F:19:88:F2:D8:86:19:41:55:B4:9F:F7:A9
            X509v3 Authority Key Identifier:
                keyid:83:C9:0E:15:FA:D8:24:73:86:7D:38:C0:30:D3:F4:1E:11:92:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C90E15FAD82473867D38C030D3F41E1192F5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/2/83C90E15FAD82473867D38C030D3F41E1192F5A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:04:fc:51:87:95:e5:2d:f1:9a:8e:85:c8:68:9b:fd:6f:
         f0:b5:32:6c:72:49:34:b8:a0:a6:44:c6:03:f2:1e:38:62:b4:
         bd:bd:86:39:7c:45:c5:78:19:cc:d2:42:25:62:5f:25:4f:2e:
         cd:12:ec:c6:ba:78:ab:38:1d:79:b9:db:07:80:4b:ff:70:87:
         2e:0c:9e:f5:86:e6:fe:5b:23:6d:b7:1b:90:44:b3:1b:a2:f7:
         d3:ce:2e:b6:66:5b:de:cc:e6:92:ca:36:c5:a4:84:29:c4:c5:
         c1:12:92:ce:a6:cc:b2:e8:e7:df:6d:fe:ad:37:a2:4c:bd:8c:
         48:e6:f2:5a:f3:88:90:79:d3:fc:c2:66:1a:a4:55:f9:f3:bb:
         07:18:88:ac:5d:18:6b:cf:72:ae:a6:00:d7:29:8e:dc:b4:9d:
         17:62:c5:84:84:41:19:15:8e:17:bd:1e:30:c0:77:4b:0e:eb:
         fc:e4:0d:4c:d5:e2:ce:a3:54:8c:83:c4:58:27:51:a1:25:e5:
         cf:91:e7:53:9b:11:33:22:74:95:1b:15:6a:1b:fe:3d:5a:d1:
         2c:76:c6:53:c5:69:aa:b8:06:d4:d7:3d:6a:ea:96:52:99:48:
         8f:36:61:b3:9d:af:5d:2e:d8:88:3b:ac:01:7f:4e:83:85:b7:
         a8:40:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:16 2025 by rpki-client